last executing test programs: 16.528179421s ago: executing program 3 (id=2830): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1ff, 0xf4cc}, 0x1, 0x98e, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a}]}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18}, 0x4800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) r6 = getpid() perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x12, 0x6, 0x5, 0x0, 0x7, 0x1092a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x11, 0x1, @perf_config_ext={0x8001, 0x3}, 0x4000, 0x5, 0xf6, 0x4, 0xffffffffffffff45, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4}, r6, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x10, 0x400000002, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES16=0x0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000004000000000000017f00000018150000a8258e4abf34008000003dc702000000ec12", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001500000085000000230000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) close(r9) 12.781627484s ago: executing program 0 (id=2847): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000014100000", @ANYRES32, @ANYBLOB="04000900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={r0, &(0x7f0000000880)="b5bea66c049adfb152bce5f9e2dcaf37b4191167eebccc921155cdfc24304ffcda306d1420e9050899eb64d96ebf488a4d3c94b9098399bcaf794ab50fecee215ec3e617eb8197d902e3f0802889c47be2428bd4000a6e5e97d5cccc69d3aa8f4a5356c6ca99fc4186d7d8ce3e18689849cb4811536fb17cd5ecf8", &(0x7f0000000900)=""/128}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x4000}, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)="1887d08318e102c0dccac7110c3dc50c04c7bed727d5ddac2b780ca62dc6517d075f1076ef372f259a6dbaeef669f15d49c2bb51bafa92f30ed388f492a26a139f6b06a8a55dbd5bd63d50200e4296c835a77022ca7ca6ffd433fc962841f0e63ea25f8d3e89f7c6ba2ec5301d50ddba4cd2695422010b7b5bc9488482c3691d7d9324ad7971efe4ced0334c9ab26f67cb865eb87221aaa404b2719444166cee654b7cd1f6b5af5d3d3213c933d6d115a6b38893a558ca5b9712ef566e015540a6693d6479c1da42a0b07b95e2", 0xcd}, {&(0x7f00000003c0)="96bd02958779eee118220d37007434905b00b5742f080aed03e717c49a3e32725489218d0c5a72b05952388f934c518ccaa2a0e1b1273c51468811ba29cf7beddd0b79a71ad091abca5539f818d92c3f9a6221fa1e659256b106433a341b65b4739feb5ca372d6e4875615155589", 0x6e}, {&(0x7f0000000540)="b09cb57fae8749157cdf09ad3ad5e265124e416b8636ebfda2aca65026943a76596f72fc0fe264a229bf6de5723322522e283f29e7c886b3563c103118bab07c1cb9dce7dd8c38eff50d899677ce6e42b04f4e99325b1613fc29bf038c3d52f08ab5eb49b4c8d73080a512c49f617379b271f64dcf01e9995046ca5ec198cb3adc201ee1b7817267ad5b4765c9fa9af1144a29b3078e448a1ea42288d0c2fb90097e4c42d724acf5e2dff9d9294809cf3a74e5357c54194341ddb36ed4625cc3cbd543873cf2112d6d168e342d26c1bfacdfe115", 0xd4}, {&(0x7f0000000640)="8e77501481be2999d1ec1e46e02345d4b360cf673df81056971d441904056666c60554e1d4fcd81926f256c16a39793f71492330a232b94de010ea53786d5fe4f3dfb5e1d7ce07ed69359566226d4612b5c4b3b8e41533990235319747dabc0eddafd0ec3336f03a8263a51776580d63f46e44327923760472376e73d779d19b0b78e99f2c018a6eda4858f4ab578d3154631d37029a5573fa60", 0x9a}, {&(0x7f0000000700)="efb49c0a2c16ce53b4859f16d83fb0804595bb175e80641a3c7be49da3314220ed33dd3baf31dd0acee7772e15c2c39aa3ec5d15bd6a3fd4f8388e82eec1f16dec7c295f6776230f4517ad554b0b6a9ae5da924b560b118a3fea080f4c5e7a9c51988a241cc385", 0x67}], 0x5, &(0x7f0000000800)=[{0x20, 0x101, 0x0, "3252c62dc057d382a5c0ce04"}], 0x20}, 0x24008811) bpf$PROG_LOAD(0x5, 0x0, 0x57) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r4) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r7 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 12.447216652s ago: executing program 0 (id=2852): socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 9.511458027s ago: executing program 1 (id=2854): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 9.439157329s ago: executing program 0 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xc03e, 0x0}, 0x4000) 9.378368431s ago: executing program 1 (id=2858): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000070060000000000000900000073112f000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x8386}, 0x0, 0x1, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa0}, 0x100) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 9.319305022s ago: executing program 0 (id=2859): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 9.246631843s ago: executing program 1 (id=2862): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 8.675924776s ago: executing program 2 (id=2864): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 8.655464107s ago: executing program 0 (id=2865): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x40000004, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1f, &(0x7f0000000100), 0x120) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x80, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffe50e, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x81, 0x6a}, 0x1000, 0x100, 0x6, 0x8, 0x7, 0x53d, 0x4, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x24, 0x68, 0x2, 0x3, 0x0, 0x100, 0x8000c, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x5}, 0x108850, 0x8f, 0x421, 0x0, 0x6, 0x8, 0x7fff, 0x0, 0xfffffffa, 0x0, 0x10001}, r1, 0xd, r5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300188b698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x56dc7ed54a753814) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x1010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffe6a}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r7, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) 7.769225366s ago: executing program 2 (id=2867): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 5.598958135s ago: executing program 1 (id=2868): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x8, [@struct={0xb, 0x5, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x1, 0x7f}, {0x3, 0x5, 0x8}, {0x9, 0x4, 0x6}, {0x8, 0x3, 0x10001}, {0xb, 0x3}]}, @enum64={0xe, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x1, 0x81}, {0xb, 0x4, 0x800}, {0x3, 0x4, 0x7}, {0x7ff, 0x3, 0x8}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @volatile={0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/137, 0xc8, 0x89, 0x0, 0x7}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x16, 0xfffffd93, 0x0, 0x7, 0xd910, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xb0, &(0x7f00000002c0)=""/176, 0x41000, 0x9, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xc, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r4], &(0x7f00000008c0)=[{0x1, 0x1, 0x1, 0xb}, {0x2, 0x1}], 0x10, 0x80}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a00000000000002030000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x190}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071"], 0xfe33) (fail_nth: 1) 5.500034427s ago: executing program 4 (id=2869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket$kcm(0x2, 0x3, 0x2) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004000000020000000000000089349885b22059c430dca414a5debf3c0812c2555506d6a3e15a28d770a5e4f27aa14d7cda9dbbd67a56a00e9d993eeef8ead0a3cae197d966a43042d4cd5e51b6841050d30b156e292ed4cf22f5e7a4a7c2bcbb6c86f55c379c8b0e3bf1c6aebf8656e071b3166d64f8d9f200dd724baf95e02a18d0518c51139df85c02d5a7ff4ade64c3939c144843b8c14df254f67db84af7921abe411771d201151e20a7eb2c7bf4a1a8aba7fbe819d72d60823d59119002e4fa56c76a67b15c92d955658317158aa789b6cd57ae3c218e72bcc47488a1142090cf7524f8b5755b6200565e2c99a2208a96d41377eefb8b5ffe1aaa3046ae00000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async) socket$kcm(0x2, 0x3, 0x2) (async) socketpair(0x18, 0x80000, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) (async) 5.485234997s ago: executing program 0 (id=2870): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.483340897s ago: executing program 2 (id=2871): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xf0ff, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) 5.104901856s ago: executing program 2 (id=2872): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000038a0271edd4600000304a9aae500"/29, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x99) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x3d, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r4}) perf_event_open(0x0, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000040000000060000000800ea0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r6}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r7}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x12, 0x0, 0x57) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0xe) r10 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.104051536s ago: executing program 4 (id=2873): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x18, r0}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x5, [@union={0xf, 0x3, 0x0, 0x5, 0x1, 0x9, [{0xf, 0x1, 0xdcb}, {0x9, 0x2, 0x9}, {0x4, 0x0, 0xb}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @volatile={0x1}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x2}}]}, {0x0, [0x30, 0x2e, 0x0]}}, &(0x7f00000005c0)=""/123, 0x99, 0x7b, 0x0, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x0, 0x4, 0x3, 0x100, 0x1}, @generic={0x4, 0x8, 0x7, 0x1, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x3, 0xb, 0x2, 0xffffffffffffffe0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0xac, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) (async) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x71, &(0x7f0000000000)=r7, 0x8) (async) openat$cgroup_procs(r7, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x0) 5.061579257s ago: executing program 4 (id=2874): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042409, r0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c", @ANYRES32=0x0], 0x48) 5.036071137s ago: executing program 3 (id=2835): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f00000000c0), &(0x7f0000000640)=""/219}, 0x20) recvmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) 4.593700557s ago: executing program 3 (id=2876): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.153743287s ago: executing program 4 (id=2877): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'hsr0\x00', 0x1}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa", 0x6}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfd, 0x0, 0x0, 0x9, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x1e, &(0x7f0000000500), 0x4) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 4.03353088s ago: executing program 3 (id=2878): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x8, [@struct={0xb, 0x5, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x1, 0x7f}, {0x3, 0x5, 0x8}, {0x9, 0x4, 0x6}, {0x8, 0x3, 0x10001}, {0xb, 0x3}]}, @enum64={0xe, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x7, 0x1, 0x81}, {0xb, 0x4, 0x800}, {0x3, 0x4, 0x7}, {0x7ff, 0x3, 0x8}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @volatile={0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/137, 0xc8, 0x89, 0x0, 0x7}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x16, 0xfffffd93, 0x0, 0x7, 0xd910, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xb0, &(0x7f00000002c0)=""/176, 0x41000, 0x9, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0xc, 0x10001, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r5], &(0x7f00000008c0)=[{0x1, 0x1, 0x1, 0xb}, {0x2, 0x1}], 0x10, 0x80}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a00000000000002030000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883", 0x190}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071"], 0xfe33) 3.921869692s ago: executing program 4 (id=2879): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0100000005000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3}, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r5, 0x0, &(0x7f0000001540)=""/155}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc00800190009000000060019c00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 3.763066096s ago: executing program 3 (id=2880): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 3.626372899s ago: executing program 3 (id=2881): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x40000004, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x1f, &(0x7f0000000100), 0x120) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r3}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x80, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffe50e, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x81, 0x6a}, 0x1000, 0x100, 0x6, 0x8, 0x7, 0x53d, 0x4, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x24, 0x68, 0x2, 0x3, 0x0, 0x100, 0x8000c, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x5}, 0x108850, 0x8f, 0x421, 0x0, 0x6, 0x8, 0x7fff, 0x0, 0xfffffffa, 0x0, 0x10001}, r1, 0xd, r5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300188b698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x56dc7ed54a753814) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0, 0x3fa56c612a3ddd28}, 0x0, 0x0, 0x2, 0x0, 0x43cd, 0x4, 0x101, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x1010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffe6a}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r7, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) 3.258376307s ago: executing program 1 (id=2882): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x97, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x40000004, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x8cb7}, 0x2000, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x80, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffe50e, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x81, 0x6a}, 0x1000, 0x100, 0x6, 0x8, 0x7, 0x53d, 0x4, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xf, r0, 0x8) perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x80, 0x24, 0x68, 0x2, 0x3, 0x0, 0x100, 0x8000c, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x5}, 0x108850, 0x8f, 0x421, 0x0, 0x6, 0x8, 0x7fff, 0x0, 0xfffffffa, 0x0, 0x10001}, r2, 0xd, r5, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300188b698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x56dc7ed54a753814) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x1010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x7, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xfffffffffffffe6a}, 0x0, 0x0, 0x7, 0x9, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) 232.371424ms ago: executing program 4 (id=2883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000001821c274e7a927b10000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7a3441, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047452, &(0x7f0000001200)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240400c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90f9, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x1, 0xffffffff, 0x73}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0001ff8d00"}) r10 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r8) 134.693946ms ago: executing program 2 (id=2884): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @multicast2, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}], 0x2}, 0x8400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r1}, 0xc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0x0) 120.299267ms ago: executing program 1 (id=2885): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socket$kcm(0xa, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0xffffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=2886): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1882000000e868bb40ca435b19df0bd92580bf2c1206bc89e7c63f259a3aa2d1a27be69a1179feede0f75b25b75b43c6b2e981e3007caece74046e6807dd94ac8954abb1583463a66dee3ca6f9e17ef1b8f26cd608fb306eda74b3d5bf854ad5920c07268e2e1932660252e1caa5cf4c6851a71d0200000066ec5c622ee59da65ef6f25d0f3bbf291964919883dc2a7d471a84c554c8901d51249e6d1986e536f7ca36f616a6674af5059ffeaed29c79c19b91809b3dc341fc39ff7fa7124a9245e25437334efb08344168b07edd0a8730d12860cb29b0292e233b10fb84f9cd5b86f42b99974b74608bab8304c9ab4ad133d69cd80b00f08effdd6d47e78968fb23c97127906671c41f0304417f6f96dff373867947164121a5e64249a62f3f3870a40539d3f77e096a7023a18e8a2c31f7d285c3fc1e3b88"], 0x0, 0x5}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) kernel console output (not intermixed with test programs): netlink: 80 bytes leftover after parsing attributes in process `syz.2.1240'. [ 184.600406][ T7541] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1242'. [ 184.854066][ T7543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1243'. [ 185.189029][ T7568] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1250'. [ 185.310387][ T7575] device sit0 left promiscuous mode [ 185.557074][ T7582] device sit0 entered promiscuous mode [ 185.662287][ T7590] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1257'. [ 185.892501][ T4193] Bluetooth: hci1: command 0x0406 tx timeout [ 185.898946][ T4193] Bluetooth: hci4: command 0x0406 tx timeout [ 185.902667][ T6368] Bluetooth: hci2: command 0x0406 tx timeout [ 185.907419][ T4193] Bluetooth: hci3: command 0x0406 tx timeout [ 185.911536][ T6368] Bluetooth: hci0: command 0x0406 tx timeout [ 188.668890][ T7603] validate_nla: 6 callbacks suppressed [ 188.668906][ T7603] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 188.699482][ T7603] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 188.713064][ T7603] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 189.195967][ T7620] netlink: 'syz.2.1267': attribute type 3 has an invalid length. [ 189.204578][ T7620] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1267'. [ 189.407156][ T7627] device sit0 left promiscuous mode [ 189.524862][ T7631] device sit0 entered promiscuous mode [ 189.611981][ T7636] netlink: 'syz.1.1274': attribute type 29 has an invalid length. [ 189.655996][ T7636] netlink: 'syz.1.1274': attribute type 29 has an invalid length. [ 189.678661][ T7636] netlink: 'syz.1.1274': attribute type 29 has an invalid length. [ 189.691560][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1276'. [ 190.216562][ T7654] netlink: 'syz.4.1281': attribute type 3 has an invalid length. [ 190.250911][ T7654] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1281'. [ 190.279382][ T7658] netlink: 'syz.0.1283': attribute type 4 has an invalid length. [ 190.309533][ T7658] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.1283'. [ 190.487750][ T7672] netlink: 'syz.1.1287': attribute type 29 has an invalid length. [ 190.746060][ T7682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.831219][ T7689] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1295'. [ 191.077163][ T7699] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1298'. [ 191.234158][ T7705] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1301'. [ 191.730521][ T7730] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.1311'. [ 191.803078][ T7736] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1315'. [ 191.849792][ T7740] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1316'. [ 193.468557][ T7808] device sit0 left promiscuous mode [ 193.591802][ T7804] device sit0 entered promiscuous mode [ 193.878595][ T7821] validate_nla: 20 callbacks suppressed [ 193.878644][ T7821] netlink: 'syz.2.1345': attribute type 4 has an invalid length. [ 193.921369][ T7818] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 193.971017][ T7829] netlink: 'syz.2.1350': attribute type 3 has an invalid length. [ 194.048594][ T7836] device sit0 left promiscuous mode [ 194.065101][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.065188][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.220960][ T7841] device sit0 entered promiscuous mode [ 196.816413][ T7867] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 196.853233][ T7867] __nla_validate_parse: 6 callbacks suppressed [ 196.853293][ T7867] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.1361'. [ 196.879140][ T7872] device sit0 left promiscuous mode [ 197.039130][ T7880] device sit0 entered promiscuous mode [ 197.190206][ T7892] netlink: 'syz.0.1371': attribute type 3 has an invalid length. [ 197.222565][ T7892] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1371'. [ 197.448808][ T7897] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1373'. [ 197.507642][ T7897] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 197.834355][ T7919] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1381'. [ 197.845591][ T7921] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1382'. [ 200.986264][ T7930] device sit0 left promiscuous mode [ 201.057421][ T7937] netlink: 'syz.1.1387': attribute type 3 has an invalid length. [ 201.102881][ T7937] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1387'. [ 201.154962][ T7929] device sit0 entered promiscuous mode [ 201.776708][ T7965] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1397'. [ 201.794657][ T7965] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 201.920676][ T7976] device sit0 left promiscuous mode [ 202.073499][ T7981] device sit0 left promiscuous mode [ 202.120606][ T7982] device sit0 entered promiscuous mode [ 202.236012][ T7984] netlink: 'syz.1.1404': attribute type 3 has an invalid length. [ 202.244265][ T7984] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1404'. [ 202.719552][ T8007] device sit0 left promiscuous mode [ 203.080268][ T8013] device sit0 left promiscuous mode [ 203.217689][ T8023] netlink: 'syz.1.1418': attribute type 3 has an invalid length. [ 203.231285][ T8023] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1418'. [ 203.312686][ T8007] device sit0 entered promiscuous mode [ 203.680214][ T8032] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1421'. [ 203.690789][ T8032] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 203.987035][ T8058] netlink: 'syz.0.1433': attribute type 3 has an invalid length. [ 203.995218][ T8058] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1433'. [ 205.113890][ T8110] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1450'. [ 205.150081][ T8112] device sit0 left promiscuous mode [ 205.464439][ T8117] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1454'. [ 205.988714][ T8122] netlink: 'syz.4.1456': attribute type 4 has an invalid length. [ 206.019042][ T8122] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.1456'. [ 208.086357][ T8154] netlink: 'syz.1.1468': attribute type 4 has an invalid length. [ 208.102754][ T8154] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1468'. [ 208.349246][ T8171] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1472'. [ 208.387232][ T8170] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1474'. [ 208.437428][ T8171] netlink: 'syz.1.1472': attribute type 25 has an invalid length. [ 208.502985][ T8171] netlink: 'syz.1.1472': attribute type 25 has an invalid length. [ 211.751186][ T8196] netlink: 'syz.2.1483': attribute type 4 has an invalid length. [ 211.768329][ T8203] netlink: 'syz.1.1497': attribute type 3 has an invalid length. [ 211.772928][ T8196] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.1483'. [ 211.793033][ T8203] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1497'. [ 212.223115][ T8223] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1492'. [ 212.284026][ T8221] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1488'. [ 212.318127][ T8221] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 214.627514][ T8248] netlink: 'syz.4.1503': attribute type 3 has an invalid length. [ 214.641267][ T8247] netlink: 'syz.0.1502': attribute type 3 has an invalid length. [ 214.649469][ T8248] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1503'. [ 214.651777][ T8247] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1502'. [ 214.885046][ T8257] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1506'. [ 215.018399][ T8257] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 215.429689][ T8267] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1509'. [ 217.270999][ T8276] device sit0 left promiscuous mode [ 217.425819][ T8290] netlink: 'syz.4.1516': attribute type 3 has an invalid length. [ 217.445648][ T8290] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1516'. [ 217.513123][ T8287] device sit0 entered promiscuous mode [ 217.698091][ T8300] netlink: 'syz.4.1519': attribute type 3 has an invalid length. [ 217.716763][ T8300] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1519'. [ 217.917671][ T8306] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1521'. [ 217.948985][ T8306] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 219.189278][ T8319] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1524'. [ 220.369034][ T8331] netlink: 'syz.1.1529': attribute type 3 has an invalid length. [ 220.397993][ T8331] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1529'. [ 220.564204][ T8342] device sit0 entered promiscuous mode [ 221.410020][ T8355] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1536'. [ 221.440389][ T8355] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 223.508233][ T8372] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1542'. [ 223.538691][ T8374] netlink: 'syz.4.1544': attribute type 3 has an invalid length. [ 223.564726][ T8374] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1544'. [ 224.140203][ T8393] device sit0 entered promiscuous mode [ 224.152173][ T8395] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1551'. [ 224.167953][ T8395] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 224.970920][ T8420] netlink: 'syz.4.1559': attribute type 3 has an invalid length. [ 224.979162][ T8420] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1559'. [ 226.736577][ T8434] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1563'. [ 227.381627][ T8458] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1572'. [ 227.394706][ T8458] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 228.175208][ T8472] netlink: 'syz.2.1576': attribute type 3 has an invalid length. [ 228.299352][ T8472] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1576'. [ 228.644299][ T8482] device sit0 left promiscuous mode [ 228.980905][ T8487] device sit0 entered promiscuous mode [ 229.425510][ T8511] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1589'. [ 229.454270][ T8505] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1588'. [ 229.473686][ T8505] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 231.414875][ T8525] netlink: 'syz.2.1591': attribute type 3 has an invalid length. [ 231.423565][ T8522] device sit0 left promiscuous mode [ 231.457590][ T8525] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1591'. [ 231.781774][ T8535] device sit0 entered promiscuous mode [ 232.297525][ T8558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1603'. [ 232.313468][ T8561] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1604'. [ 232.317828][ T8558] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1603'. [ 232.335615][ T8558] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 234.321303][ T8574] device sit0 left promiscuous mode [ 234.429494][ T8577] device sit0 left promiscuous mode [ 234.520573][ T8574] device sit0 entered promiscuous mode [ 234.622214][ T8583] device sit0 entered promiscuous mode [ 234.684784][ T8585] netlink: 'syz.0.1611': attribute type 3 has an invalid length. [ 234.697782][ T8585] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1611'. [ 235.193266][ T8602] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1619'. [ 235.277354][ T8605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1618'. [ 235.395742][ T8607] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1618'. [ 235.449926][ T8607] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 238.179839][ T8616] device sit0 left promiscuous mode [ 238.471563][ T8628] device sit0 entered promiscuous mode [ 238.734568][ T8637] netlink: 'syz.4.1629': attribute type 3 has an invalid length. [ 238.781782][ T8637] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1629'. [ 239.096610][ T8654] device sit0 left promiscuous mode [ 239.177924][ T8651] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1636'. [ 239.193425][ T8651] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 239.211914][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1636'. [ 239.247026][ T8659] device sit0 entered promiscuous mode [ 239.337267][ T8662] device sit0 left promiscuous mode [ 239.521973][ T8666] device sit0 entered promiscuous mode [ 240.898177][ T8680] netlink: 'syz.4.1644': attribute type 4 has an invalid length. [ 240.916420][ T8680] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.1644'. [ 241.817895][ T8695] device sit0 left promiscuous mode [ 241.880918][ T8691] device sit0 entered promiscuous mode [ 242.077036][ T8703] device sit0 left promiscuous mode [ 242.201260][ T8701] device sit0 left promiscuous mode [ 242.264834][ T8703] device sit0 entered promiscuous mode [ 242.368458][ T8711] device sit0 entered promiscuous mode [ 242.529190][ T8719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 242.542801][ T8719] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1657'. [ 242.552652][ T8719] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 243.020246][ T8727] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 243.030369][ T8727] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.1660'. [ 244.651946][ T8736] netlink: 'syz.0.1668': attribute type 3 has an invalid length. [ 244.660313][ T8736] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1668'. [ 244.695087][ T8738] device sit0 left promiscuous mode [ 244.911618][ T8746] device sit0 entered promiscuous mode [ 245.389299][ T8764] netlink: 'syz.1.1674': attribute type 4 has an invalid length. [ 245.446350][ T8764] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1674'. [ 245.757309][ T8775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1678'. [ 245.837974][ T8775] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1678'. [ 245.917937][ T8775] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 247.714282][ T8780] device sit0 left promiscuous mode [ 248.150189][ T8789] netlink: 'syz.2.1682': attribute type 3 has an invalid length. [ 248.168541][ T8789] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1682'. [ 248.251661][ T8798] netlink: 'syz.1.1688': attribute type 4 has an invalid length. [ 248.260166][ T8798] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.1688'. [ 248.483686][ T8804] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 248.501265][ T8804] netlink: 'syz.1.1700': attribute type 29 has an invalid length. [ 248.552651][ T8809] device sit0 left promiscuous mode [ 248.710109][ T8819] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1692'. [ 248.738847][ T8813] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1692'. [ 248.778084][ T8817] device sit0 entered promiscuous mode [ 248.799882][ T8819] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 249.257362][ T8833] device sit0 entered promiscuous mode [ 251.001991][ T8838] netlink: 'syz.3.1702': attribute type 3 has an invalid length. [ 251.064732][ T8838] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1702'. [ 251.119183][ T8842] netlink: 'syz.1.1703': attribute type 29 has an invalid length. [ 251.194823][ T8842] netlink: 'syz.1.1703': attribute type 29 has an invalid length. [ 251.456981][ T8858] device sit0 left promiscuous mode [ 252.432819][ T8878] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1713'. [ 252.445164][ T8878] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 252.772860][ T8869] device sit0 left promiscuous mode [ 252.872230][ T8870] device sit0 entered promiscuous mode [ 252.899090][ T8876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1713'. [ 253.827311][ T8888] netlink: 'syz.2.1716': attribute type 29 has an invalid length. [ 253.828716][ T8890] netlink: 'syz.1.1718': attribute type 3 has an invalid length. [ 253.853409][ T8888] netlink: 'syz.2.1716': attribute type 29 has an invalid length. [ 253.865632][ T8890] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1718'. [ 254.144421][ T8906] device sit0 left promiscuous mode [ 254.273864][ T8914] device sit0 left promiscuous mode [ 254.340455][ T8917] device sit0 entered promiscuous mode [ 254.381883][ T8921] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1728'. [ 254.423939][ T8921] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 254.433969][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1728'. [ 254.751266][ T8938] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1735'. [ 254.761680][ T8937] netlink: 'syz.3.1736': attribute type 3 has an invalid length. [ 254.772699][ T8937] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1736'. [ 255.048753][ T8947] device sit0 entered promiscuous mode [ 255.510106][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.516535][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.326186][ T8981] netlink: 'syz.0.1754': attribute type 3 has an invalid length. [ 257.375750][ T8981] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1754'. [ 257.376949][ T8983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1755'. [ 257.443428][ T8988] device sit0 entered promiscuous mode [ 257.482943][ T8983] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1755'. [ 257.500496][ T8983] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 258.117354][ T9022] netlink: 'syz.3.1772': attribute type 3 has an invalid length. [ 258.127311][ T9022] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1772'. [ 258.584092][ T9048] device sit0 left promiscuous mode [ 258.689245][ T9055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1785'. [ 258.710293][ T9051] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1785'. [ 258.722914][ T9051] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 258.745183][ T9048] device sit0 entered promiscuous mode [ 258.946599][ T9062] netlink: 'syz.4.1788': attribute type 3 has an invalid length. [ 258.964176][ T9062] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1788'. [ 259.185805][ T9069] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1789'. [ 259.199482][ T9069] netlink: 'syz.4.1789': attribute type 25 has an invalid length. [ 259.212438][ T9069] netlink: 'syz.4.1789': attribute type 25 has an invalid length. [ 259.633588][ T9088] device sit0 left promiscuous mode [ 259.752724][ T9088] device sit0 entered promiscuous mode [ 260.197135][ T9108] netlink: 'syz.3.1807': attribute type 3 has an invalid length. [ 260.208952][ T9108] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1807'. [ 260.209169][ T9106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1805'. [ 260.295936][ T9103] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 262.571744][ T9140] netlink: 'syz.3.1816': attribute type 29 has an invalid length. [ 262.616000][ T9140] netlink: 'syz.3.1816': attribute type 29 has an invalid length. [ 262.674797][ T9150] __nla_validate_parse: 1 callbacks suppressed [ 262.674815][ T9150] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1820'. [ 262.747287][ T9150] netlink: 'syz.4.1820': attribute type 25 has an invalid length. [ 262.766937][ T9150] netlink: 'syz.4.1820': attribute type 25 has an invalid length. [ 262.811607][ T9156] netlink: 'syz.3.1821': attribute type 3 has an invalid length. [ 262.819775][ T9156] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1821'. [ 263.095562][ T9167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1828'. [ 263.122125][ T9167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1828'. [ 263.134626][ T9167] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 265.054398][ T9178] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 265.066549][ T9178] netlink: 'syz.0.1832': attribute type 29 has an invalid length. [ 265.218834][ T9187] netlink: 'syz.0.1837': attribute type 3 has an invalid length. [ 265.237913][ T9187] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1837'. [ 266.285595][ T9215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1845'. [ 266.330680][ T9214] netlink: 'syz.4.1847': attribute type 29 has an invalid length. [ 266.341274][ T9218] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1846'. [ 266.365050][ T9214] netlink: 'syz.4.1847': attribute type 29 has an invalid length. [ 266.388716][ T9215] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1845'. [ 266.404110][ T9215] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 268.215263][ T9235] netlink: 'syz.2.1854': attribute type 3 has an invalid length. [ 268.227248][ T9235] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1854'. [ 268.398832][ T9248] netlink: 'syz.1.1859': attribute type 29 has an invalid length. [ 268.411365][ T9248] netlink: 'syz.1.1859': attribute type 29 has an invalid length. [ 268.527596][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1862'. [ 268.544393][ T9256] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1862'. [ 268.554437][ T9256] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 269.234342][ T9263] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1864'. [ 269.270614][ T9263] netlink: 'syz.4.1864': attribute type 25 has an invalid length. [ 269.300202][ T9263] netlink: 'syz.4.1864': attribute type 25 has an invalid length. [ 269.537687][ T9278] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1870'. [ 269.705002][ T9287] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1875'. [ 270.593378][ T9297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1879'. [ 270.640865][ T9297] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1879'. [ 270.659707][ T9297] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 270.798456][ T9307] validate_nla: 4 callbacks suppressed [ 270.798490][ T9307] netlink: 'syz.2.1883': attribute type 29 has an invalid length. [ 270.819718][ T9307] netlink: 'syz.2.1883': attribute type 29 has an invalid length. [ 270.840129][ T9309] netlink: 'syz.0.1885': attribute type 3 has an invalid length. [ 270.858353][ T9309] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1885'. [ 270.876671][ T9311] device sit0 entered promiscuous mode [ 270.975308][ T9316] netlink: 'syz.2.1887': attribute type 3 has an invalid length. [ 270.984892][ T9316] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1887'. [ 271.090237][ T9318] netlink: 'syz.3.1888': attribute type 3 has an invalid length. [ 273.161756][ T9342] netlink: 'syz.1.1898': attribute type 3 has an invalid length. [ 273.276350][ T9349] __nla_validate_parse: 2 callbacks suppressed [ 273.276384][ T9349] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1900'. [ 273.726313][ T9372] netlink: 'syz.4.1907': attribute type 3 has an invalid length. [ 273.735418][ T9372] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1907'. [ 273.923858][ T9378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1909'. [ 273.939194][ T9378] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1909'. [ 273.948987][ T9378] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 274.139322][ T9389] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1913'. [ 274.627025][ T9400] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1917'. [ 274.678542][ T9402] netlink: 'syz.2.1918': attribute type 3 has an invalid length. [ 274.689579][ T9402] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1918'. [ 275.408591][ T9438] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1933'. [ 275.441732][ T9440] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1934'. [ 276.375148][ T9449] netlink: 'syz.2.1937': attribute type 3 has an invalid length. [ 276.382955][ T9449] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1937'. [ 278.761847][ T9467] device sit0 left promiscuous mode [ 278.866414][ T9463] device sit0 entered promiscuous mode [ 279.107983][ T9477] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1944'. [ 279.256981][ T9481] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1947'. [ 279.325896][ T9483] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1946'. [ 282.389879][ T9518] device sit0 left promiscuous mode [ 282.688829][ T9529] device sit0 entered promiscuous mode [ 284.809128][ T9541] netlink: 'syz.1.1965': attribute type 3 has an invalid length. [ 284.826223][ T9541] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1965'. [ 284.904809][ T9548] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1968'. [ 284.919426][ T9548] netlink: 'syz.4.1968': attribute type 25 has an invalid length. [ 284.929362][ T9548] netlink: 'syz.4.1968': attribute type 25 has an invalid length. [ 285.077070][ T9559] device sit0 left promiscuous mode [ 285.316394][ T9568] device sit0 entered promiscuous mode [ 285.777783][ T9572] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1978'. [ 288.648693][ T9573] ODEBUG: Out of memory. ODEBUG disabled [ 289.021029][ T9592] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1985'. [ 289.063524][ T9594] device sit0 left promiscuous mode [ 289.199013][ T9607] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1990'. [ 289.426453][ T9612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1992'. [ 290.781625][ T9630] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1997'. [ 293.182237][ T9649] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2009'. [ 293.202637][ T9647] device sit0 left promiscuous mode [ 293.310749][ T9656] netlink: 'syz.3.2006': attribute type 29 has an invalid length. [ 293.320941][ T9656] netlink: 'syz.3.2006': attribute type 29 has an invalid length. [ 293.669674][ T9668] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2012'. [ 294.068332][ T9681] device sit0 left promiscuous mode [ 294.120410][ T9689] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 294.211782][ T9689] netlink: 'syz.0.2021': attribute type 29 has an invalid length. [ 294.220989][ T9690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2020'. [ 294.266454][ T9690] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2020'. [ 294.306766][ T9690] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 294.485853][ T9710] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2028'. [ 294.521456][ T9711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2026'. [ 294.549655][ T9714] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2029'. [ 297.644250][ T9730] netlink: 'syz.0.2033': attribute type 29 has an invalid length. [ 297.682962][ T9730] netlink: 'syz.0.2033': attribute type 29 has an invalid length. [ 297.730861][ T9735] device sit0 entered promiscuous mode [ 298.052056][ T9756] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2044'. [ 298.129467][ T9762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2045'. [ 298.165856][ T9758] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2045'. [ 298.175227][ T9764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2046'. [ 298.175821][ T9758] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 301.202064][ T9774] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 301.252842][ T9774] netlink: 'syz.3.2049': attribute type 29 has an invalid length. [ 301.271020][ T9778] device sit0 left promiscuous mode [ 301.467789][ T9787] device sit0 entered promiscuous mode [ 301.749798][ T9806] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2060'. [ 301.785354][ T9810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2063'. [ 301.841166][ T9812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2062'. [ 301.895233][ T9808] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2062'. [ 301.904819][ T9808] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 302.458090][ T9818] netlink: 'syz.4.2065': attribute type 29 has an invalid length. [ 302.471091][ T9818] netlink: 'syz.4.2065': attribute type 29 has an invalid length. [ 304.946922][ T9830] device sit0 left promiscuous mode [ 305.029370][ T9824] device sit0 entered promiscuous mode [ 305.347352][ T9848] netlink: 'syz.3.2076': attribute type 29 has an invalid length. [ 305.358928][ T9848] netlink: 'syz.3.2076': attribute type 29 has an invalid length. [ 305.451699][ T9860] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2080'. [ 305.524046][ T9858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2081'. [ 305.542803][ T9858] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2081'. [ 305.570444][ T9858] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 305.737658][ T9868] device sit0 entered promiscuous mode [ 305.768745][ T9870] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2086'. [ 308.742873][ T9876] device sit0 left promiscuous mode [ 308.772122][ T9878] device sit0 entered promiscuous mode [ 309.060688][ T9891] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 309.075747][ T9891] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 309.299659][ T9907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2099'. [ 309.351972][ T9914] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2101'. [ 309.384065][ T9914] netlink: 'syz.4.2101': attribute type 25 has an invalid length. [ 309.402266][ T9914] netlink: 'syz.4.2101': attribute type 25 has an invalid length. [ 309.418840][ T9915] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2102'. [ 309.451960][ T9913] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2102'. [ 309.463809][ T9913] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 310.116023][ T9920] device sit0 entered promiscuous mode [ 312.508559][ T9931] netlink: 'syz.4.2109': attribute type 29 has an invalid length. [ 312.532928][ T9931] netlink: 'syz.4.2109': attribute type 29 has an invalid length. [ 312.827475][ T9960] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2119'. [ 312.892622][ T9964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2121'. [ 312.910065][ T9964] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2121'. [ 312.919664][ T9964] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 312.954910][ T9968] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2124'. [ 313.686261][ T9976] netlink: 'syz.4.2126': attribute type 29 has an invalid length. [ 313.695983][ T9976] netlink: 'syz.4.2126': attribute type 29 has an invalid length. [ 316.475222][T10005] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2139'. [ 316.541463][T10007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2141'. [ 316.562043][T10007] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2141'. [ 316.575637][T10007] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 316.641137][T10017] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2142'. [ 316.876283][T10028] netlink: 'syz.4.2158': attribute type 29 has an invalid length. [ 316.884772][T10028] netlink: 'syz.4.2158': attribute type 29 has an invalid length. [ 316.933909][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.940246][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.321022][T10044] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2155'. [ 317.810757][T10059] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2163'. [ 318.241853][T10077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2169'. [ 318.270790][T10082] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2167'. [ 318.286465][T10082] netlink: 'syz.1.2167': attribute type 25 has an invalid length. [ 318.309213][T10082] netlink: 'syz.1.2167': attribute type 25 has an invalid length. [ 319.328321][T10111] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2182'. [ 323.358282][T10171] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2204'. [ 323.654520][T10177] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2206'. [ 324.674597][T10214] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2219'. [ 328.138312][T10235] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2227'. [ 328.998918][T10259] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2237'. [ 329.008770][T10259] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 329.145954][T10270] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2241'. [ 332.453466][T10305] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2247'. [ 332.543736][T10312] netlink: 'syz.0.2256': attribute type 3 has an invalid length. [ 332.552348][T10312] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2256'. [ 332.659612][T10317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2258'. [ 332.686011][T10319] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2259'. [ 333.625442][T10328] netlink: 'syz.0.2262': attribute type 3 has an invalid length. [ 333.633473][T10328] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2262'. [ 335.966671][T10342] device sit0 left promiscuous mode [ 336.179640][T10349] device sit0 entered promiscuous mode [ 336.338591][T10358] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2272'. [ 336.351484][T10362] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2276'. [ 336.405779][T10363] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2274'. [ 339.339050][T10368] device sit0 left promiscuous mode [ 339.444529][T10375] netlink: 'syz.2.2279': attribute type 3 has an invalid length. [ 339.475788][T10375] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2279'. [ 339.796075][T10395] device sit0 left promiscuous mode [ 339.891820][T10401] device sit0 entered promiscuous mode [ 340.142165][T10417] device sit0 left promiscuous mode [ 340.197410][T10418] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2291'. [ 340.278275][T10413] device sit0 entered promiscuous mode [ 341.014776][T10429] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2296'. [ 343.217395][T10445] device sit0 left promiscuous mode [ 343.248900][T10441] netlink: 'syz.1.2298': attribute type 3 has an invalid length. [ 343.279045][T10441] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2298'. [ 343.304492][T10438] device sit0 entered promiscuous mode [ 344.035201][T10470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2310'. [ 344.642959][T10480] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2312'. [ 344.660127][T10480] netlink: 'syz.4.2312': attribute type 25 has an invalid length. [ 344.670204][T10480] netlink: 'syz.4.2312': attribute type 25 has an invalid length. [ 347.223805][T10493] device sit0 entered promiscuous mode [ 347.264342][T10495] netlink: 'syz.0.2319': attribute type 3 has an invalid length. [ 347.323735][T10495] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2319'. [ 347.398451][T10492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2316'. [ 350.378461][T10522] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2324'. [ 350.902678][T10534] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2326'. [ 350.954726][T10535] netlink: 'syz.1.2326': attribute type 25 has an invalid length. [ 351.000602][T10535] netlink: 'syz.1.2326': attribute type 25 has an invalid length. [ 353.565838][T10552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2331'. [ 353.589359][T10557] netlink: 'syz.2.2332': attribute type 3 has an invalid length. [ 353.597519][T10557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2332'. [ 353.633668][T10551] device sit0 left promiscuous mode [ 353.829623][T10561] device sit0 entered promiscuous mode [ 353.990356][T10567] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2336'. [ 354.496593][T10580] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2340'. [ 357.097998][T10599] netlink: 'syz.2.2347': attribute type 3 has an invalid length. [ 357.105916][T10602] device sit0 left promiscuous mode [ 357.148586][T10599] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2347'. [ 357.205919][T10598] device sit0 entered promiscuous mode [ 357.447057][T10611] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2350'. [ 358.019295][T10635] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2359'. [ 358.426572][T10643] device sit0 left promiscuous mode [ 358.528836][T10645] device sit0 entered promiscuous mode [ 358.769091][T10656] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2367'. [ 359.288982][T10678] device sit0 left promiscuous mode [ 359.342852][T10678] device sit0 entered promiscuous mode [ 359.956153][T10698] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2382'. [ 360.386621][T10710] device sit0 left promiscuous mode [ 360.446064][T10710] device sit0 entered promiscuous mode [ 360.575168][T10717] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2389'. [ 363.653618][T10735] netlink: 'syz.2.2397': attribute type 29 has an invalid length. [ 363.676037][T10735] netlink: 'syz.2.2397': attribute type 29 has an invalid length. [ 363.869431][T10747] device sit0 left promiscuous mode [ 364.020299][T10749] device sit0 entered promiscuous mode [ 364.166436][T10755] device sit0 left promiscuous mode [ 364.280905][T10762] device sit0 entered promiscuous mode [ 364.493356][T10772] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2408'. [ 364.554883][T10775] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2411'. [ 364.989389][T10778] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2412'. [ 366.418386][T10795] netlink: 'syz.3.2417': attribute type 29 has an invalid length. [ 367.974106][T10788] device sit0 left promiscuous mode [ 368.010729][T10795] netlink: 'syz.3.2417': attribute type 29 has an invalid length. [ 368.268944][T10806] device sit0 entered promiscuous mode [ 368.538393][T10816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2426'. [ 368.585890][T10818] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2427'. [ 368.841271][T10827] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2429'. [ 370.393683][T10844] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2433'. [ 371.776429][T10863] netlink: 'syz.3.2441': attribute type 3 has an invalid length. [ 371.777999][T10856] device sit0 left promiscuous mode [ 371.800128][T10863] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2441'. [ 371.803022][T10861] netlink: 'syz.4.2439': attribute type 29 has an invalid length. [ 371.896300][T10864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2440'. [ 371.930468][T10865] device sit0 entered promiscuous mode [ 372.006438][T10861] netlink: 'syz.4.2439': attribute type 29 has an invalid length. [ 372.139038][T10877] device sit0 left promiscuous mode [ 372.256804][T10881] device sit0 entered promiscuous mode [ 372.594187][T10894] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2448'. [ 372.647558][T10894] netlink: 'syz.1.2448': attribute type 25 has an invalid length. [ 372.655603][T10894] netlink: 'syz.1.2448': attribute type 25 has an invalid length. [ 372.739748][T10899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2451'. [ 373.077002][T10910] netlink: 'syz.0.2453': attribute type 3 has an invalid length. [ 373.084955][T10910] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2453'. [ 373.176706][T10914] device sit0 left promiscuous mode [ 373.239339][T10916] device sit0 left promiscuous mode [ 373.312151][T10918] device sit0 entered promiscuous mode [ 373.368210][T10919] device sit0 entered promiscuous mode [ 373.605726][T10923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2462'. [ 373.901142][T10942] netlink: 'syz.2.2468': attribute type 3 has an invalid length. [ 373.909455][T10942] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2468'. [ 374.020200][T10946] netlink: 'syz.3.2470': attribute type 3 has an invalid length. [ 374.037113][T10946] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2470'. [ 374.094508][T10948] device sit0 left promiscuous mode [ 374.154123][T10952] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2472'. [ 374.200183][T10951] device sit0 entered promiscuous mode [ 374.258763][T10952] netlink: 'syz.4.2472': attribute type 25 has an invalid length. [ 374.295140][T10952] netlink: 'syz.4.2472': attribute type 25 has an invalid length. [ 377.361255][T10967] device sit0 left promiscuous mode [ 377.459146][T10964] device sit0 entered promiscuous mode [ 377.564814][T10974] __nla_validate_parse: 1 callbacks suppressed [ 377.564880][T10974] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2480'. [ 377.890806][T10985] netlink: 'syz.4.2484': attribute type 3 has an invalid length. [ 377.900560][T10985] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2484'. [ 377.920293][T10989] device sit0 left promiscuous mode [ 378.082870][T10990] device sit0 entered promiscuous mode [ 378.251706][T10999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2487'. [ 378.366339][T11004] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2493'. [ 378.380819][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.380869][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.558655][T11012] netlink: 'syz.0.2496': attribute type 3 has an invalid length. [ 378.569580][T11012] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2496'. [ 378.743238][T11017] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2497'. [ 378.786236][T11016] device sit0 left promiscuous mode [ 378.841401][T11018] device sit0 entered promiscuous mode [ 378.919242][T11021] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2499'. [ 379.188264][T11026] netlink: 'syz.1.2501': attribute type 3 has an invalid length. [ 379.197231][T11026] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2501'. [ 379.392123][T11041] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2507'. [ 379.470611][T11044] netlink: 'syz.4.2508': attribute type 3 has an invalid length. [ 379.479258][T11044] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2508'. [ 379.567446][T11048] device sit0 left promiscuous mode [ 380.056888][T11069] netlink: 'syz.4.2517': attribute type 3 has an invalid length. [ 380.470140][T11085] device sit0 left promiscuous mode [ 380.965266][T11104] netlink: 'syz.2.2530': attribute type 3 has an invalid length. [ 382.148951][T11136] netlink: 'syz.2.2543': attribute type 3 has an invalid length. [ 382.296614][T11146] netlink: 'syz.1.2545': attribute type 25 has an invalid length. [ 382.325645][T11146] netlink: 'syz.1.2545': attribute type 25 has an invalid length. [ 383.058265][T11161] FAULT_INJECTION: forcing a failure. [ 383.058265][T11161] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 383.072460][T11161] CPU: 1 PID: 11161 Comm: syz.3.2554 Not tainted syzkaller #0 [ 383.080158][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.090237][T11161] Call Trace: [ 383.093522][T11161] [ 383.096454][T11161] dump_stack_lvl+0x188/0x250 [ 383.101277][T11161] ? show_regs_print_info+0x20/0x20 [ 383.106477][T11161] ? load_image+0x410/0x410 [ 383.111070][T11161] ? __lock_acquire+0x7b50/0x7b50 [ 383.116190][T11161] ? __lock_acquire+0x13dc/0x7b50 [ 383.121237][T11161] should_fail+0x383/0x4b0 [ 383.125718][T11161] prepare_alloc_pages+0x1e3/0x5b0 [ 383.130895][T11161] __alloc_pages+0x11b/0x480 [ 383.135497][T11161] ? zone_statistics+0x170/0x170 [ 383.140466][T11161] alloc_pages_vma+0x2bc/0x790 [ 383.145305][T11161] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 383.151113][T11161] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 383.156820][T11161] ? shmem_swapin_page+0x22f0/0x22f0 [ 383.162120][T11161] ? __lock_acquire+0x7b50/0x7b50 [ 383.167157][T11161] ? xas_descend+0x210/0x3b0 [ 383.171767][T11161] ? xas_load+0x127/0x140 [ 383.176102][T11161] ? pagecache_get_page+0xc32/0xf20 [ 383.181360][T11161] ? page_cache_prev_miss+0x380/0x380 [ 383.186723][T11161] ? mark_lock+0x94/0x320 [ 383.191047][T11161] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 383.197035][T11161] ? lock_chain_count+0x20/0x20 [ 383.201878][T11161] ? do_user_addr_fault+0x69f/0xc90 [ 383.207156][T11161] shmem_getpage_gfp+0x14be/0x2c10 [ 383.212295][T11161] shmem_write_begin+0xcd/0x1a0 [ 383.217147][T11161] generic_perform_write+0x2b6/0x550 [ 383.222430][T11161] ? atime_needs_update+0x770/0x770 [ 383.227657][T11161] ? grab_cache_page_write_begin+0xa0/0xa0 [ 383.233458][T11161] ? file_remove_privs+0x5d0/0x5d0 [ 383.238569][T11161] ? rwsem_write_trylock+0x135/0x1c0 [ 383.243848][T11161] ? clear_nonspinnable+0x60/0x60 [ 383.248873][T11161] __generic_file_write_iter+0x261/0x4e0 [ 383.254504][T11161] ? generic_write_checks+0x3be/0x460 [ 383.259956][T11161] generic_file_write_iter+0xa6/0x1b0 [ 383.265330][T11161] vfs_write+0x748/0xd70 [ 383.269577][T11161] ? file_end_write+0x250/0x250 [ 383.274433][T11161] ? mutex_lock_nested+0x17/0x20 [ 383.279449][T11161] ? __fdget_pos+0x2bf/0x370 [ 383.284117][T11161] ? ksys_write+0x70/0x260 [ 383.288527][T11161] ksys_write+0x153/0x260 [ 383.292854][T11161] ? __ia32_sys_read+0x80/0x80 [ 383.297614][T11161] ? lockdep_hardirqs_on+0x94/0x140 [ 383.302920][T11161] do_syscall_64+0x4c/0xa0 [ 383.307327][T11161] ? clear_bhb_loop+0x30/0x80 [ 383.312003][T11161] ? clear_bhb_loop+0x30/0x80 [ 383.316673][T11161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 383.322583][T11161] RIP: 0033:0x7f115c8040d9 [ 383.327005][T11161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.346611][T11161] RSP: 002b:00007f115aa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 383.355102][T11161] RAX: ffffffffffffffda RBX: 00007f115ca8bfa0 RCX: 00007f115c8040d9 [ 383.363080][T11161] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 383.371047][T11161] RBP: 00007f115aa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.379014][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.386981][T11161] R13: 00007f115ca8c038 R14: 00007f115ca8bfa0 R15: 00007fff57680f08 [ 383.394976][T11161] [ 383.611014][T11168] __nla_validate_parse: 9 callbacks suppressed [ 383.611033][T11168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2558'. [ 383.681791][T11173] netlink: 'syz.3.2560': attribute type 3 has an invalid length. [ 383.718776][T11173] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2560'. [ 383.948873][T11192] FAULT_INJECTION: forcing a failure. [ 383.948873][T11192] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 383.964934][T11192] CPU: 1 PID: 11192 Comm: syz.4.2566 Not tainted syzkaller #0 [ 383.967155][T11193] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2565'. [ 383.972414][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.972451][T11192] Call Trace: [ 383.972458][T11192] [ 383.972466][T11192] dump_stack_lvl+0x188/0x250 [ 383.972496][T11192] ? show_regs_print_info+0x20/0x20 [ 383.972518][T11192] ? load_image+0x410/0x410 [ 383.972551][T11192] ? __lock_acquire+0x7b50/0x7b50 [ 383.972579][T11192] should_fail+0x383/0x4b0 [ 383.986380][T11193] netlink: 'syz.1.2565': attribute type 25 has an invalid length. [ 383.991910][T11192] _copy_from_user+0x2e/0x170 [ 383.995353][T11193] netlink: 'syz.1.2565': attribute type 25 has an invalid length. [ 383.998137][T11192] kstrtouint_from_user+0xd3/0x220 [ 383.998167][T11192] ? kstrtol_from_user+0x2a0/0x2a0 [ 383.998201][T11192] proc_fail_nth_write+0x8b/0x200 [ 384.057484][T11192] ? proc_fail_nth_read+0x220/0x220 [ 384.062679][T11192] ? common_file_perm+0x171/0x1c0 [ 384.067790][T11192] ? proc_fail_nth_read+0x220/0x220 [ 384.072973][T11192] vfs_write+0x304/0xd70 [ 384.077215][T11192] ? file_end_write+0x250/0x250 [ 384.082105][T11192] ? mutex_lock_nested+0x17/0x20 [ 384.087033][T11192] ? __fdget_pos+0x2bf/0x370 [ 384.091608][T11192] ? ksys_write+0x70/0x260 [ 384.096010][T11192] ksys_write+0x153/0x260 [ 384.100329][T11192] ? __ia32_sys_read+0x80/0x80 [ 384.105078][T11192] ? lockdep_hardirqs_on+0x94/0x140 [ 384.110261][T11192] do_syscall_64+0x4c/0xa0 [ 384.114662][T11192] ? clear_bhb_loop+0x30/0x80 [ 384.119324][T11192] ? clear_bhb_loop+0x30/0x80 [ 384.123988][T11192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.129871][T11192] RIP: 0033:0x7f64112d090e [ 384.134282][T11192] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 384.153890][T11192] RSP: 002b:00007f640f567fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.162301][T11192] RAX: ffffffffffffffda RBX: 00007f640f5686c0 RCX: 00007f64112d090e [ 384.170281][T11192] RDX: 0000000000000001 RSI: 00007f640f5680a0 RDI: 0000000000000004 [ 384.178334][T11192] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 384.186299][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.194264][T11192] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 384.202260][T11192] [ 384.707168][T11206] netlink: 'syz.3.2571': attribute type 3 has an invalid length. [ 384.716375][T11206] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2571'. [ 384.821010][T11210] netlink: 'syz.3.2573': attribute type 3 has an invalid length. [ 384.830674][T11210] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2573'. [ 385.251353][T11226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2579'. [ 385.426111][T11237] netlink: 'syz.3.2583': attribute type 3 has an invalid length. [ 385.435078][T11237] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2583'. [ 385.456198][T11238] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2582'. [ 385.610604][T11244] netlink: 'syz.4.2585': attribute type 3 has an invalid length. [ 385.619187][T11244] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2585'. [ 385.974851][T11256] device sit0 left promiscuous mode [ 386.053405][T11260] device sit0 entered promiscuous mode [ 386.066262][T11259] netlink: 'syz.1.2592': attribute type 9 has an invalid length. [ 386.086166][T11259] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2592'. [ 386.198352][T11261] netlink: 'syz.1.2592': attribute type 9 has an invalid length. [ 386.317133][T11267] device sit0 left promiscuous mode [ 386.416914][T11272] netlink: 'syz.0.2598': attribute type 3 has an invalid length. [ 386.493879][T11273] device sit0 entered promiscuous mode [ 389.640825][T11296] __nla_validate_parse: 2 callbacks suppressed [ 389.640846][T11296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2603'. [ 389.801136][T11308] FAULT_INJECTION: forcing a failure. [ 389.801136][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.811247][T11309] netlink: 'syz.4.2606': attribute type 10 has an invalid length. [ 389.823151][T11308] CPU: 1 PID: 11308 Comm: syz.0.2607 Not tainted syzkaller #0 [ 389.823180][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.823192][T11308] Call Trace: [ 389.823199][T11308] [ 389.823208][T11308] dump_stack_lvl+0x188/0x250 [ 389.823241][T11308] ? show_regs_print_info+0x20/0x20 [ 389.823264][T11308] ? load_image+0x410/0x410 [ 389.823294][T11308] ? __lock_acquire+0x7b50/0x7b50 [ 389.823322][T11308] should_fail+0x383/0x4b0 [ 389.823350][T11308] strncpy_from_user+0x32/0x350 [ 389.840932][T11309] team0: Device ipvlan1 failed to register rx_handler [ 389.844151][T11308] getname_flags+0xf2/0x4f0 [ 389.844186][T11308] __x64_sys_mkdirat+0x78/0x90 [ 389.844207][T11308] do_syscall_64+0x4c/0xa0 [ 389.844224][T11308] ? clear_bhb_loop+0x30/0x80 [ 389.844243][T11308] ? clear_bhb_loop+0x30/0x80 [ 389.844260][T11308] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 389.844279][T11308] RIP: 0033:0x7f5e1e8470d9 [ 389.844299][T11308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.844315][T11308] RSP: 002b:00007f5e1ca9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 389.844337][T11308] RAX: ffffffffffffffda RBX: 00007f5e1eacefa0 RCX: 00007f5e1e8470d9 [ 389.844352][T11308] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 000000000000000a [ 389.961181][T11308] RBP: 00007f5e1ca9f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.969151][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.977142][T11308] R13: 00007f5e1eacf038 R14: 00007f5e1eacefa0 R15: 00007ffcfd1b4b18 [ 389.985121][T11308] [ 389.995796][T11308] netlink: 'syz.0.2607': attribute type 9 has an invalid length. [ 390.003920][T11308] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2607'. [ 390.033324][T11309] syz.4.2606 (11309) used greatest stack depth: 19632 bytes left [ 390.099949][T11311] netlink: 'syz.0.2607': attribute type 9 has an invalid length. [ 390.107978][T11311] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2607'. [ 390.148935][T11316] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2608'. [ 390.160672][T11316] netlink: 'syz.4.2608': attribute type 25 has an invalid length. [ 390.168988][T11316] netlink: 'syz.4.2608': attribute type 25 has an invalid length. [ 393.510812][T11345] netlink: 'syz.0.2620': attribute type 10 has an invalid length. [ 393.555959][T11345] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 393.643040][T11348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2623'. [ 393.826482][T11367] FAULT_INJECTION: forcing a failure. [ 393.826482][T11367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.839757][T11367] CPU: 1 PID: 11367 Comm: syz.1.2628 Not tainted syzkaller #0 [ 393.847232][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.857449][T11367] Call Trace: [ 393.860811][T11367] [ 393.863824][T11367] dump_stack_lvl+0x188/0x250 [ 393.868520][T11367] ? show_regs_print_info+0x20/0x20 [ 393.873715][T11367] ? load_image+0x410/0x410 [ 393.878206][T11367] ? __lock_acquire+0x7b50/0x7b50 [ 393.883362][T11367] should_fail+0x383/0x4b0 [ 393.887803][T11367] _copy_from_user+0x2e/0x170 [ 393.892493][T11367] __copy_msghdr_from_user+0xc9/0x630 [ 393.898069][T11367] ? verify_lock_unused+0x140/0x140 [ 393.903296][T11367] ? mark_lock+0x94/0x320 [ 393.907634][T11367] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 393.912919][T11367] ___sys_sendmsg+0x19a/0x2e0 [ 393.917593][T11367] ? __sys_sendmsg+0x290/0x290 [ 393.922358][T11367] ? trace_event_raw_event_lock+0x250/0x250 [ 393.928274][T11367] __se_sys_sendmsg+0x1b7/0x2a0 [ 393.933151][T11367] ? __x64_sys_sendmsg+0x80/0x80 [ 393.938081][T11367] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 393.944072][T11367] ? lockdep_hardirqs_on+0x94/0x140 [ 393.949318][T11367] do_syscall_64+0x4c/0xa0 [ 393.953735][T11367] ? clear_bhb_loop+0x30/0x80 [ 393.958427][T11367] ? clear_bhb_loop+0x30/0x80 [ 393.963101][T11367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.969008][T11367] RIP: 0033:0x7f55dac250d9 [ 393.973426][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.993041][T11367] RSP: 002b:00007f55d8e7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.001447][T11367] RAX: ffffffffffffffda RBX: 00007f55daeacfa0 RCX: 00007f55dac250d9 [ 394.009409][T11367] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 394.017383][T11367] RBP: 00007f55d8e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 394.025344][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.033303][T11367] R13: 00007f55daead038 R14: 00007f55daeacfa0 R15: 00007ffec7118698 [ 394.041373][T11367] [ 394.480961][T11378] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2632'. [ 394.560461][T11379] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2633'. [ 394.846578][T11392] FAULT_INJECTION: forcing a failure. [ 394.846578][T11392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.877538][T11391] netlink: 'syz.2.2636': attribute type 10 has an invalid length. [ 394.920322][T11392] CPU: 0 PID: 11392 Comm: syz.0.2646 Not tainted syzkaller #0 [ 394.927825][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.934717][T11391] team0: Device ipvlan1 failed to register rx_handler [ 394.937893][T11392] Call Trace: [ 394.937907][T11392] [ 394.937917][T11392] dump_stack_lvl+0x188/0x250 [ 394.937953][T11392] ? show_regs_print_info+0x20/0x20 [ 394.937979][T11392] ? load_image+0x410/0x410 [ 394.938008][T11392] ? __lock_acquire+0x7b50/0x7b50 [ 394.970331][T11392] should_fail+0x383/0x4b0 [ 394.974783][T11392] _copy_from_user+0x2e/0x170 [ 394.979490][T11392] __copy_msghdr_from_user+0xc9/0x630 [ 394.984881][T11392] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 394.990709][T11392] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 394.996050][T11392] ___sys_sendmsg+0x19a/0x2e0 [ 395.000768][T11392] ? __sys_sendmsg+0x290/0x290 [ 395.005578][T11392] ? trace_event_raw_event_lock+0x250/0x250 [ 395.011542][T11392] __se_sys_sendmsg+0x1b7/0x2a0 [ 395.016421][T11392] ? __x64_sys_sendmsg+0x80/0x80 [ 395.021378][T11392] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.027435][T11392] ? lockdep_hardirqs_on+0x94/0x140 [ 395.032661][T11392] do_syscall_64+0x4c/0xa0 [ 395.037095][T11392] ? clear_bhb_loop+0x30/0x80 [ 395.041786][T11392] ? clear_bhb_loop+0x30/0x80 [ 395.046481][T11392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.052390][T11392] RIP: 0033:0x7f5e1e8470d9 [ 395.056819][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.076440][T11392] RSP: 002b:00007f5e1ca9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.084878][T11392] RAX: ffffffffffffffda RBX: 00007f5e1eacefa0 RCX: 00007f5e1e8470d9 [ 395.092865][T11392] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 395.100854][T11392] RBP: 00007f5e1ca9f090 R08: 0000000000000000 R09: 0000000000000000 [ 395.108852][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.116843][T11392] R13: 00007f5e1eacf038 R14: 00007f5e1eacefa0 R15: 00007ffcfd1b4b18 [ 395.124882][T11392] [ 395.201421][T11398] sctp: [Deprecated]: syz.4.2639 (pid 11398) Use of struct sctp_assoc_value in delayed_ack socket option. [ 395.201421][T11398] Use struct sctp_sack_info instead [ 395.219768][T11391] syz.2.2636 (11391) used greatest stack depth: 18960 bytes left [ 395.251122][T11399] netlink: 'syz.1.2638': attribute type 21 has an invalid length. [ 395.270812][T11399] netlink: 'syz.1.2638': attribute type 10 has an invalid length. [ 395.293157][T11399] netlink: 'syz.1.2638': attribute type 4 has an invalid length. [ 395.302107][T11399] netlink: 'syz.1.2638': attribute type 6 has an invalid length. [ 395.322437][T11399] netlink: 'syz.1.2638': attribute type 10 has an invalid length. [ 395.350679][T11399] netlink: 'syz.1.2638': attribute type 11 has an invalid length. [ 395.378575][T11399] netlink: 'syz.1.2638': attribute type 12 has an invalid length. [ 395.410906][T11399] netlink: 'syz.1.2638': attribute type 13 has an invalid length. [ 395.455834][T11399] netlink: 'syz.1.2638': attribute type 14 has an invalid length. [ 395.465279][T11399] netlink: 10214 bytes leftover after parsing attributes in process `syz.1.2638'. [ 395.525476][T11407] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2641'. [ 395.719633][T11426] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2648'. [ 396.057859][T11431] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2650'. [ 396.385304][T11441] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2653'. [ 396.506282][T11448] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2655'. [ 396.541935][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2655'. [ 396.553715][T11448] device dummy0 entered promiscuous mode [ 396.581557][T11448] team0: Port device dummy0 removed [ 396.587759][T11448] bridge0: port 4(dummy0) entered blocking state [ 396.594815][T11448] bridge0: port 4(dummy0) entered disabled state [ 396.602819][T11450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2658'. [ 396.639563][T11454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2659'. [ 396.949562][T11463] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2662'. [ 397.235966][T11473] FAULT_INJECTION: forcing a failure. [ 397.235966][T11473] name failslab, interval 1, probability 0, space 0, times 1 [ 397.251112][T11473] CPU: 1 PID: 11473 Comm: syz.4.2666 Not tainted syzkaller #0 [ 397.258603][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.268657][T11473] Call Trace: [ 397.271935][T11473] [ 397.274863][T11473] dump_stack_lvl+0x188/0x250 [ 397.279562][T11473] ? show_regs_print_info+0x20/0x20 [ 397.284769][T11473] ? load_image+0x410/0x410 [ 397.289285][T11473] ? __lock_acquire+0x7b50/0x7b50 [ 397.294320][T11473] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 397.300314][T11473] should_fail+0x383/0x4b0 [ 397.304747][T11473] should_failslab+0x5/0x20 [ 397.309348][T11473] slab_pre_alloc_hook+0x51/0xc0 [ 397.314328][T11473] kmem_cache_alloc_trace+0x47/0x290 [ 397.319613][T11473] ? apparmor_sk_alloc_security+0x74/0x100 [ 397.325427][T11473] apparmor_sk_alloc_security+0x74/0x100 [ 397.331064][T11473] security_sk_alloc+0x6a/0xa0 [ 397.335904][T11473] sk_prot_alloc+0x101/0x210 [ 397.340496][T11473] ? sk_alloc+0x1d/0x310 [ 397.344746][T11473] sk_alloc+0x2f/0x310 [ 397.348818][T11473] bpf_prog_test_run_skb+0x23c/0x1190 [ 397.354289][T11473] ? __fget_files+0x402/0x470 [ 397.358990][T11473] ? cpu_online+0x60/0x60 [ 397.363318][T11473] bpf_prog_test_run+0x31c/0x390 [ 397.368323][T11473] __sys_bpf+0x5a5/0x6f0 [ 397.372569][T11473] ? bpf_link_show_fdinfo+0x380/0x380 [ 397.377965][T11473] __x64_sys_bpf+0x78/0x90 [ 397.382383][T11473] do_syscall_64+0x4c/0xa0 [ 397.386798][T11473] ? clear_bhb_loop+0x30/0x80 [ 397.391472][T11473] ? clear_bhb_loop+0x30/0x80 [ 397.396146][T11473] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 397.402038][T11473] RIP: 0033:0x7f64113100d9 [ 397.406451][T11473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.426065][T11473] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.434563][T11473] RAX: ffffffffffffffda RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 397.442541][T11473] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 397.450509][T11473] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 397.458487][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.466466][T11473] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 397.474458][T11473] [ 398.338579][T11522] FAULT_INJECTION: forcing a failure. [ 398.338579][T11522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.353651][T11522] CPU: 1 PID: 11522 Comm: syz.0.2683 Not tainted syzkaller #0 [ 398.361139][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.371205][T11522] Call Trace: [ 398.374492][T11522] [ 398.377424][T11522] dump_stack_lvl+0x188/0x250 [ 398.382119][T11522] ? show_regs_print_info+0x20/0x20 [ 398.387324][T11522] ? load_image+0x410/0x410 [ 398.391832][T11522] ? __lock_acquire+0x7b50/0x7b50 [ 398.396865][T11522] should_fail+0x383/0x4b0 [ 398.401293][T11522] _copy_from_user+0x2e/0x170 [ 398.405976][T11522] __copy_msghdr_from_user+0xc9/0x630 [ 398.411353][T11522] ? verify_lock_unused+0x140/0x140 [ 398.416563][T11522] ? mark_lock+0x94/0x320 [ 398.420902][T11522] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 398.426190][T11522] ? __lock_acquire+0x13dc/0x7b50 [ 398.431234][T11522] ___sys_sendmsg+0x19a/0x2e0 [ 398.435919][T11522] ? __sys_sendmsg+0x290/0x290 [ 398.440698][T11522] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 398.447041][T11522] __se_sys_sendmsg+0x1b7/0x2a0 [ 398.451896][T11522] ? __x64_sys_sendmsg+0x80/0x80 [ 398.456835][T11522] ? lockdep_hardirqs_on+0x94/0x140 [ 398.462056][T11522] do_syscall_64+0x4c/0xa0 [ 398.466471][T11522] ? clear_bhb_loop+0x30/0x80 [ 398.471147][T11522] ? clear_bhb_loop+0x30/0x80 [ 398.475829][T11522] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.481724][T11522] RIP: 0033:0x7f5e1e8470d9 [ 398.486141][T11522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.505834][T11522] RSP: 002b:00007f5e1ca9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.514428][T11522] RAX: ffffffffffffffda RBX: 00007f5e1eacefa0 RCX: 00007f5e1e8470d9 [ 398.522407][T11522] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 398.530379][T11522] RBP: 00007f5e1ca9f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.538356][T11522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.546353][T11522] R13: 00007f5e1eacf038 R14: 00007f5e1eacefa0 R15: 00007ffcfd1b4b18 [ 398.554343][T11522] [ 399.196632][T11544] team0: Device ipvlan1 failed to register rx_handler [ 402.191939][T11549] device syzkaller0 entered promiscuous mode [ 402.661843][T11575] __nla_validate_parse: 8 callbacks suppressed [ 402.661861][T11575] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2700'. [ 402.690144][T11575] validate_nla: 25 callbacks suppressed [ 402.690161][T11575] netlink: 'syz.4.2700': attribute type 25 has an invalid length. [ 402.704143][T11575] netlink: 'syz.4.2700': attribute type 25 has an invalid length. [ 402.903218][T11585] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2707'. [ 402.938258][T11583] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2705'. [ 403.030865][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.044169][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.056075][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.067245][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.078345][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.119381][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.143871][T11590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2708'. [ 403.605944][T11599] FAULT_INJECTION: forcing a failure. [ 403.605944][T11599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.621155][T11599] CPU: 0 PID: 11599 Comm: syz.0.2711 Not tainted syzkaller #0 [ 403.628644][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.638803][T11599] Call Trace: [ 403.642097][T11599] [ 403.645063][T11599] dump_stack_lvl+0x188/0x250 [ 403.649767][T11599] ? show_regs_print_info+0x20/0x20 [ 403.654980][T11599] ? load_image+0x410/0x410 [ 403.659571][T11599] ? __lock_acquire+0x7b50/0x7b50 [ 403.664616][T11599] should_fail+0x383/0x4b0 [ 403.669053][T11599] _copy_from_user+0x2e/0x170 [ 403.673757][T11599] __sys_bpf+0x26d/0x6f0 [ 403.678016][T11599] ? bpf_link_show_fdinfo+0x380/0x380 [ 403.683516][T11599] __x64_sys_bpf+0x78/0x90 [ 403.687945][T11599] do_syscall_64+0x4c/0xa0 [ 403.692366][T11599] ? clear_bhb_loop+0x30/0x80 [ 403.697058][T11599] ? clear_bhb_loop+0x30/0x80 [ 403.701747][T11599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.707648][T11599] RIP: 0033:0x7f5e1e8470d9 [ 403.712076][T11599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.731698][T11599] RSP: 002b:00007f5e1ca9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.740126][T11599] RAX: ffffffffffffffda RBX: 00007f5e1eacefa0 RCX: 00007f5e1e8470d9 [ 403.748112][T11599] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 403.756117][T11599] RBP: 00007f5e1ca9f090 R08: 0000000000000000 R09: 0000000000000000 [ 403.764271][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.772255][T11599] R13: 00007f5e1eacf038 R14: 00007f5e1eacefa0 R15: 00007ffcfd1b4b18 [ 403.780255][T11599] [ 406.076673][T11606] openvswitch: netlink: Tunnel attr 8240 out of range max 16 [ 406.243774][T11621] netlink: 'syz.3.2719': attribute type 3 has an invalid length. [ 406.513790][T11632] netlink: 'syz.1.2723': attribute type 29 has an invalid length. [ 406.529047][T11632] netlink: 'syz.1.2723': attribute type 29 has an invalid length. [ 406.606776][T11630] netlink: 'syz.0.2722': attribute type 10 has an invalid length. [ 406.615780][T11630] device dummy0 entered promiscuous mode [ 406.660707][T11630] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 406.714990][T11639] netlink: 'syz.1.2725': attribute type 25 has an invalid length. [ 406.725725][T11639] netlink: 'syz.1.2725': attribute type 25 has an invalid length. [ 407.020230][T11646] netlink: 'syz.4.2728': attribute type 11 has an invalid length. [ 407.037617][T11646] netlink: 'syz.4.2728': attribute type 2 has an invalid length. [ 407.387337][T11657] FAULT_INJECTION: forcing a failure. [ 407.387337][T11657] name failslab, interval 1, probability 0, space 0, times 0 [ 407.400063][T11657] CPU: 0 PID: 11657 Comm: syz.2.2731 Not tainted syzkaller #0 [ 407.407531][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.417621][T11657] Call Trace: [ 407.420906][T11657] [ 407.423845][T11657] dump_stack_lvl+0x188/0x250 [ 407.428547][T11657] ? show_regs_print_info+0x20/0x20 [ 407.433768][T11657] ? load_image+0x410/0x410 [ 407.438293][T11657] ? __might_sleep+0xf0/0xf0 [ 407.442968][T11657] ? __lock_acquire+0x7b50/0x7b50 [ 407.448013][T11657] should_fail+0x383/0x4b0 [ 407.452451][T11657] should_failslab+0x5/0x20 [ 407.456961][T11657] slab_pre_alloc_hook+0x51/0xc0 [ 407.461910][T11657] __kmalloc_node_track_caller+0x68/0x3a0 [ 407.467638][T11657] ? netlink_sendmsg+0x654/0xbe0 [ 407.472587][T11657] ? __alloc_skb+0xf4/0x750 [ 407.477181][T11657] ? netlink_sendmsg+0x654/0xbe0 [ 407.482137][T11657] __alloc_skb+0x22c/0x750 [ 407.486568][T11657] netlink_sendmsg+0x654/0xbe0 [ 407.491348][T11657] ? netlink_getsockopt+0x570/0x570 [ 407.496559][T11657] ? aa_sock_msg_perm+0x94/0x150 [ 407.501509][T11657] ? apparmor_socket_sendmsg+0x173/0x230 [ 407.507152][T11657] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 407.512515][T11657] ? security_socket_sendmsg+0x7c/0xa0 [ 407.517990][T11657] ? netlink_getsockopt+0x570/0x570 [ 407.523210][T11657] ____sys_sendmsg+0x5be/0x8f0 [ 407.527993][T11657] ? __sys_sendmsg_sock+0x30/0x30 [ 407.533048][T11657] ? import_iovec+0x6f/0xa0 [ 407.537567][T11657] ___sys_sendmsg+0x236/0x2e0 [ 407.542273][T11657] ? __sys_sendmsg+0x290/0x290 [ 407.547097][T11657] ? trace_event_raw_event_lock+0x250/0x250 [ 407.553035][T11657] __se_sys_sendmsg+0x1b7/0x2a0 [ 407.557905][T11657] ? __x64_sys_sendmsg+0x80/0x80 [ 407.562851][T11657] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 407.568892][T11657] ? lockdep_hardirqs_on+0x94/0x140 [ 407.574120][T11657] do_syscall_64+0x4c/0xa0 [ 407.578548][T11657] ? clear_bhb_loop+0x30/0x80 [ 407.583232][T11657] ? clear_bhb_loop+0x30/0x80 [ 407.587922][T11657] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.593829][T11657] RIP: 0033:0x7f3674a090d9 [ 407.598293][T11657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.618000][T11657] RSP: 002b:00007f3672c40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.626440][T11657] RAX: ffffffffffffffda RBX: 00007f3674c91090 RCX: 00007f3674a090d9 [ 407.634431][T11657] RDX: 0000000024040000 RSI: 0000200000000080 RDI: 0000000000000003 [ 407.642502][T11657] RBP: 00007f3672c40090 R08: 0000000000000000 R09: 0000000000000000 [ 407.650488][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.658473][T11657] R13: 00007f3674c91128 R14: 00007f3674c91090 R15: 00007ffc1b8f4ef8 [ 407.666475][T11657] [ 407.693620][T11659] FAULT_INJECTION: forcing a failure. [ 407.693620][T11659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.739779][T11659] CPU: 0 PID: 11659 Comm: syz.3.2732 Not tainted syzkaller #0 [ 407.747283][T11659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 407.757357][T11659] Call Trace: [ 407.760639][T11659] [ 407.763575][T11659] dump_stack_lvl+0x188/0x250 [ 407.768267][T11659] ? show_regs_print_info+0x20/0x20 [ 407.773478][T11659] ? load_image+0x410/0x410 [ 407.777995][T11659] ? __lock_acquire+0x7b50/0x7b50 [ 407.783046][T11659] should_fail+0x383/0x4b0 [ 407.787475][T11659] _copy_from_user+0x2e/0x170 [ 407.792162][T11659] kstrtouint_from_user+0xd3/0x220 [ 407.797280][T11659] ? kstrtol_from_user+0x2a0/0x2a0 [ 407.802414][T11659] proc_fail_nth_write+0x8b/0x200 [ 407.807445][T11659] ? proc_fail_nth_read+0x220/0x220 [ 407.812644][T11659] ? common_file_perm+0x171/0x1c0 [ 407.817681][T11659] ? proc_fail_nth_read+0x220/0x220 [ 407.822889][T11659] vfs_write+0x304/0xd70 [ 407.827164][T11659] ? file_end_write+0x250/0x250 [ 407.832041][T11659] ? mutex_lock_nested+0x17/0x20 [ 407.836981][T11659] ? __fdget_pos+0x2bf/0x370 [ 407.841668][T11659] ? ksys_write+0x70/0x260 [ 407.846092][T11659] ksys_write+0x153/0x260 [ 407.850428][T11659] ? __ia32_sys_read+0x80/0x80 [ 407.855199][T11659] ? lockdep_hardirqs_on+0x94/0x140 [ 407.860411][T11659] do_syscall_64+0x4c/0xa0 [ 407.864835][T11659] ? clear_bhb_loop+0x30/0x80 [ 407.869540][T11659] ? clear_bhb_loop+0x30/0x80 [ 407.874222][T11659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.880120][T11659] RIP: 0033:0x7f115c7c490e [ 407.884538][T11659] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.904152][T11659] RSP: 002b:00007f115aa5bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.912620][T11659] RAX: ffffffffffffffda RBX: 00007f115aa5c6c0 RCX: 00007f115c7c490e [ 407.920603][T11659] RDX: 0000000000000001 RSI: 00007f115aa5c0a0 RDI: 0000000000000004 [ 407.928589][T11659] RBP: 00007f115aa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 407.936566][T11659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.944542][T11659] R13: 00007f115ca8c038 R14: 00007f115ca8bfa0 R15: 00007fff57680f08 [ 407.952541][T11659] [ 408.224027][T11667] __nla_validate_parse: 67 callbacks suppressed [ 408.224045][T11667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2744'. [ 408.228749][T11670] netlink: 'syz.4.2736': attribute type 29 has an invalid length. [ 408.255309][T11670] netlink: 'syz.4.2736': attribute type 29 has an invalid length. [ 409.169123][T11690] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2745'. [ 409.275701][T11696] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2746'. [ 409.368833][T11700] FAULT_INJECTION: forcing a failure. [ 409.368833][T11700] name failslab, interval 1, probability 0, space 0, times 0 [ 409.384848][T11700] CPU: 1 PID: 11700 Comm: syz.1.2749 Not tainted syzkaller #0 [ 409.392432][T11700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.402503][T11700] Call Trace: [ 409.405795][T11700] [ 409.408729][T11700] dump_stack_lvl+0x188/0x250 [ 409.413428][T11700] ? show_regs_print_info+0x20/0x20 [ 409.418734][T11700] ? load_image+0x410/0x410 [ 409.423292][T11700] ? __might_sleep+0xf0/0xf0 [ 409.427903][T11700] ? __lock_acquire+0x7b50/0x7b50 [ 409.432977][T11700] should_fail+0x383/0x4b0 [ 409.437444][T11700] should_failslab+0x5/0x20 [ 409.442057][T11700] slab_pre_alloc_hook+0x51/0xc0 [ 409.447006][T11700] __kmalloc_node_track_caller+0x68/0x3a0 [ 409.452739][T11700] ? netlink_sendmsg+0x654/0xbe0 [ 409.457723][T11700] ? __alloc_skb+0xf4/0x750 [ 409.462249][T11700] ? netlink_sendmsg+0x654/0xbe0 [ 409.467198][T11700] __alloc_skb+0x22c/0x750 [ 409.471623][T11700] netlink_sendmsg+0x654/0xbe0 [ 409.476396][T11700] ? netlink_getsockopt+0x570/0x570 [ 409.481682][T11700] ? aa_sock_msg_perm+0x94/0x150 [ 409.486630][T11700] ? apparmor_socket_sendmsg+0x88/0x230 [ 409.492188][T11700] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 409.497482][T11700] ? security_socket_sendmsg+0x7c/0xa0 [ 409.502991][T11700] ? netlink_getsockopt+0x570/0x570 [ 409.508204][T11700] ____sys_sendmsg+0x5be/0x8f0 [ 409.513079][T11700] ? __sys_sendmsg_sock+0x30/0x30 [ 409.518118][T11700] ? import_iovec+0x6f/0xa0 [ 409.522626][T11700] ___sys_sendmsg+0x236/0x2e0 [ 409.527318][T11700] ? __sys_sendmsg+0x290/0x290 [ 409.532117][T11700] __se_sys_sendmsg+0x1b7/0x2a0 [ 409.536973][T11700] ? __x64_sys_sendmsg+0x80/0x80 [ 409.542005][T11700] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 409.547995][T11700] ? lockdep_hardirqs_on+0x94/0x140 [ 409.553197][T11700] do_syscall_64+0x4c/0xa0 [ 409.557610][T11700] ? clear_bhb_loop+0x30/0x80 [ 409.562697][T11700] ? clear_bhb_loop+0x30/0x80 [ 409.567400][T11700] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 409.573302][T11700] RIP: 0033:0x7f55dac250d9 [ 409.577720][T11700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.597323][T11700] RSP: 002b:00007f55d8e7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.606003][T11700] RAX: ffffffffffffffda RBX: 00007f55daeacfa0 RCX: 00007f55dac250d9 [ 409.613971][T11700] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 409.621941][T11700] RBP: 00007f55d8e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 409.629995][T11700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.637961][T11700] R13: 00007f55daead038 R14: 00007f55daeacfa0 R15: 00007ffec7118698 [ 409.645953][T11700] [ 409.769120][T11708] netlink: 'syz.3.2752': attribute type 29 has an invalid length. [ 409.785780][T11708] netlink: 'syz.3.2752': attribute type 29 has an invalid length. [ 410.098055][T11717] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2756'. [ 410.161560][T11717] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2756'. [ 410.200310][T11717] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 410.211916][T11730] netlink: 26 bytes leftover after parsing attributes in process `syz.2.2759'. [ 410.302522][ T1108] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 410.305739][T11735] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 410.360378][T11735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2761'. [ 410.370882][T11735] : renamed from caif0 [ 410.394505][T11735] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 410.494583][T11740] netlink: 'syz.1.2764': attribute type 3 has an invalid length. [ 410.502942][T11740] netlink: 'syz.1.2764': attribute type 304 has an invalid length. [ 411.054367][T11751] netlink: 'syz.2.2766': attribute type 29 has an invalid length. [ 411.068101][T11751] netlink: 'syz.2.2766': attribute type 29 has an invalid length. [ 411.079498][T11750] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2767'. [ 411.458456][T11766] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2772'. [ 411.469705][T11766] FAULT_INJECTION: forcing a failure. [ 411.469705][T11766] name failslab, interval 1, probability 0, space 0, times 0 [ 411.484643][T11766] CPU: 0 PID: 11766 Comm: syz.4.2772 Not tainted syzkaller #0 [ 411.492133][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.502203][T11766] Call Trace: [ 411.505529][T11766] [ 411.508468][T11766] dump_stack_lvl+0x188/0x250 [ 411.513252][T11766] ? show_regs_print_info+0x20/0x20 [ 411.518464][T11766] ? load_image+0x410/0x410 [ 411.522986][T11766] ? __might_sleep+0xf0/0xf0 [ 411.527585][T11766] ? __lock_acquire+0x7b50/0x7b50 [ 411.532618][T11766] ? netlink_insert+0xe90/0x11f0 [ 411.537571][T11766] should_fail+0x383/0x4b0 [ 411.542036][T11766] should_failslab+0x5/0x20 [ 411.546550][T11766] slab_pre_alloc_hook+0x51/0xc0 [ 411.551500][T11766] kmem_cache_alloc_node+0x47/0x2c0 [ 411.556705][T11766] ? __alloc_skb+0xf4/0x750 [ 411.561221][T11766] __alloc_skb+0xf4/0x750 [ 411.565568][T11766] netlink_sendmsg+0x654/0xbe0 [ 411.570353][T11766] ? netlink_getsockopt+0x570/0x570 [ 411.575558][T11766] ? aa_sock_msg_perm+0x94/0x150 [ 411.580509][T11766] ? apparmor_socket_sendmsg+0x88/0x230 [ 411.586094][T11766] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 411.591390][T11766] ? security_socket_sendmsg+0x7c/0xa0 [ 411.596858][T11766] ? netlink_getsockopt+0x570/0x570 [ 411.602069][T11766] ____sys_sendmsg+0x5be/0x8f0 [ 411.606849][T11766] ? __sys_sendmsg_sock+0x30/0x30 [ 411.611895][T11766] ? import_iovec+0x6f/0xa0 [ 411.616413][T11766] ___sys_sendmsg+0x236/0x2e0 [ 411.621117][T11766] ? __sys_sendmsg+0x290/0x290 [ 411.625908][T11766] ? trace_event_raw_event_lock+0x250/0x250 [ 411.631842][T11766] __se_sys_sendmsg+0x1b7/0x2a0 [ 411.636716][T11766] ? __x64_sys_sendmsg+0x80/0x80 [ 411.641668][T11766] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 411.647671][T11766] ? lockdep_hardirqs_on+0x94/0x140 [ 411.652887][T11766] do_syscall_64+0x4c/0xa0 [ 411.657309][T11766] ? clear_bhb_loop+0x30/0x80 [ 411.662003][T11766] ? clear_bhb_loop+0x30/0x80 [ 411.666776][T11766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.672706][T11766] RIP: 0033:0x7f64113100d9 [ 411.677139][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.696753][T11766] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.705182][T11766] RAX: ffffffffffffffda RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 411.713161][T11766] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000003 [ 411.721144][T11766] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 411.729121][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.737099][T11766] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 411.745104][T11766] [ 411.917168][T11770] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2775'. [ 411.980151][T11772] netlink: 'syz.1.2774': attribute type 3 has an invalid length. [ 412.040242][T11777] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 412.232217][T11791] bridge0: port 3(team0) entered disabled state [ 412.242821][T11791] device bridge_slave_0 left promiscuous mode [ 412.249056][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.453243][T11795] netlink: 'syz.1.2784': attribute type 3 has an invalid length. [ 413.089127][T11814] FAULT_INJECTION: forcing a failure. [ 413.089127][T11814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.132384][T11814] CPU: 0 PID: 11814 Comm: syz.3.2791 Not tainted syzkaller #0 [ 413.139883][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.149952][T11814] Call Trace: [ 413.153243][T11814] [ 413.156188][T11814] dump_stack_lvl+0x188/0x250 [ 413.161063][T11814] ? show_regs_print_info+0x20/0x20 [ 413.166281][T11814] ? load_image+0x410/0x410 [ 413.170805][T11814] ? __lock_acquire+0x7b50/0x7b50 [ 413.175845][T11814] should_fail+0x383/0x4b0 [ 413.180283][T11814] _copy_to_user+0x2e/0x130 [ 413.184825][T11814] simple_read_from_buffer+0xe3/0x150 [ 413.190287][T11814] proc_fail_nth_read+0x1a6/0x220 [ 413.195327][T11814] ? proc_fault_inject_write+0x310/0x310 [ 413.200982][T11814] ? fsnotify_perm+0x254/0x560 [ 413.205753][T11814] ? proc_fault_inject_write+0x310/0x310 [ 413.211402][T11814] vfs_read+0x2ff/0xd50 [ 413.215567][T11814] ? __lock_acquire+0x7b50/0x7b50 [ 413.220628][T11814] ? kernel_read+0x1e0/0x1e0 [ 413.225252][T11814] ? mutex_lock_nested+0x17/0x20 [ 413.230201][T11814] ? __fdget_pos+0x2bf/0x370 [ 413.234887][T11814] ? ksys_read+0x70/0x260 [ 413.239230][T11814] ksys_read+0x153/0x260 [ 413.243481][T11814] ? vfs_write+0xd70/0xd70 [ 413.247915][T11814] ? lockdep_hardirqs_on+0x94/0x140 [ 413.253162][T11814] do_syscall_64+0x4c/0xa0 [ 413.257586][T11814] ? clear_bhb_loop+0x30/0x80 [ 413.262271][T11814] ? clear_bhb_loop+0x30/0x80 [ 413.266958][T11814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 413.272863][T11814] RIP: 0033:0x7f115c7c490e [ 413.277285][T11814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.296899][T11814] RSP: 002b:00007f115aa5bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.305327][T11814] RAX: ffffffffffffffda RBX: 00007f115aa5c6c0 RCX: 00007f115c7c490e [ 413.313314][T11814] RDX: 000000000000000f RSI: 00007f115aa5c0a0 RDI: 0000000000000004 [ 413.321467][T11814] RBP: 00007f115aa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.329443][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.337444][T11814] R13: 00007f115ca8c038 R14: 00007f115ca8bfa0 R15: 00007fff57680f08 [ 413.345446][T11814] [ 413.494158][T11818] __nla_validate_parse: 7 callbacks suppressed [ 413.494183][T11818] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2793'. [ 413.742823][T11831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2796'. [ 413.805674][T11831] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2796'. [ 413.817302][T11835] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2798'. [ 413.837609][T11831] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 413.951324][T11842] FAULT_INJECTION: forcing a failure. [ 413.951324][T11842] name failslab, interval 1, probability 0, space 0, times 0 [ 413.978890][T11842] CPU: 0 PID: 11842 Comm: syz.4.2801 Not tainted syzkaller #0 [ 413.986472][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 413.996704][T11842] Call Trace: [ 413.999984][T11842] [ 414.002917][T11842] dump_stack_lvl+0x188/0x250 [ 414.007602][T11842] ? show_regs_print_info+0x20/0x20 [ 414.012802][T11842] ? load_image+0x410/0x410 [ 414.017318][T11842] ? __might_sleep+0xf0/0xf0 [ 414.021909][T11842] ? __lock_acquire+0x7b50/0x7b50 [ 414.026941][T11842] should_fail+0x383/0x4b0 [ 414.031418][T11842] should_failslab+0x5/0x20 [ 414.035925][T11842] slab_pre_alloc_hook+0x51/0xc0 [ 414.040956][T11842] __kmalloc+0x6b/0x340 [ 414.045110][T11842] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 414.050913][T11842] tomoyo_realpath_from_path+0xed/0x5e0 [ 414.056489][T11842] tomoyo_path_number_perm+0x251/0x6b0 [ 414.061965][T11842] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 414.067513][T11842] ? ksys_write+0x1d4/0x260 [ 414.072070][T11842] security_file_ioctl+0x6c/0xa0 [ 414.077044][T11842] __se_sys_ioctl+0x48/0x170 [ 414.081637][T11842] do_syscall_64+0x4c/0xa0 [ 414.086055][T11842] ? clear_bhb_loop+0x30/0x80 [ 414.090733][T11842] ? clear_bhb_loop+0x30/0x80 [ 414.095442][T11842] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 414.101339][T11842] RIP: 0033:0x7f64113100d9 [ 414.105760][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.125378][T11842] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.133806][T11842] RAX: ffffffffffffffda RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 414.141811][T11842] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 414.149800][T11842] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 414.157788][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.165774][T11842] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 414.173867][T11842] [ 414.184791][T11842] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.642648][T11847] device syzkaller0 entered promiscuous mode [ 415.022748][T11861] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2808'. [ 415.093814][T11866] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2811'. [ 415.124834][T11866] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 415.194119][T11870] FAULT_INJECTION: forcing a failure. [ 415.194119][T11870] name failslab, interval 1, probability 0, space 0, times 0 [ 415.223581][T11870] CPU: 0 PID: 11870 Comm: syz.3.2812 Not tainted syzkaller #0 [ 415.231079][T11870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.241157][T11870] Call Trace: [ 415.244454][T11870] [ 415.247391][T11870] dump_stack_lvl+0x188/0x250 [ 415.252081][T11870] ? show_regs_print_info+0x20/0x20 [ 415.257294][T11870] ? load_image+0x410/0x410 [ 415.261815][T11870] ? __might_sleep+0xf0/0xf0 [ 415.266413][T11870] ? __lock_acquire+0x7b50/0x7b50 [ 415.271458][T11870] should_fail+0x383/0x4b0 [ 415.275892][T11870] should_failslab+0x5/0x20 [ 415.280405][T11870] slab_pre_alloc_hook+0x51/0xc0 [ 415.285444][T11870] __kmalloc+0x6b/0x340 [ 415.289610][T11870] ? tomoyo_encode+0x28a/0x550 [ 415.294390][T11870] tomoyo_encode+0x28a/0x550 [ 415.298995][T11870] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 415.304649][T11870] tomoyo_path_number_perm+0x251/0x6b0 [ 415.310116][T11870] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 415.315580][T11870] ? ksys_write+0x1d4/0x260 [ 415.320246][T11870] security_file_ioctl+0x6c/0xa0 [ 415.325189][T11870] __se_sys_ioctl+0x48/0x170 [ 415.329789][T11870] do_syscall_64+0x4c/0xa0 [ 415.334235][T11870] ? clear_bhb_loop+0x30/0x80 [ 415.338913][T11870] ? clear_bhb_loop+0x30/0x80 [ 415.343627][T11870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 415.349527][T11870] RIP: 0033:0x7f115c8040d9 [ 415.353948][T11870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.373561][T11870] RSP: 002b:00007f115aa5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.381990][T11870] RAX: ffffffffffffffda RBX: 00007f115ca8bfa0 RCX: 00007f115c8040d9 [ 415.389999][T11870] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000003 [ 415.398069][T11870] RBP: 00007f115aa5c090 R08: 0000000000000000 R09: 0000000000000000 [ 415.406055][T11870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.414037][T11870] R13: 00007f115ca8c038 R14: 00007f115ca8bfa0 R15: 00007fff57680f08 [ 415.422042][T11870] [ 415.432205][T11870] ERROR: Out of memory at tomoyo_realpath_from_path. [ 415.526056][T11878] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2815'. [ 415.577370][T11879] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2816'. [ 418.716402][T11911] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2824'. [ 418.834091][T11919] FAULT_INJECTION: forcing a failure. [ 418.834091][T11919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.870251][T11919] CPU: 0 PID: 11919 Comm: syz.4.2826 Not tainted syzkaller #0 [ 418.877753][T11919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.887829][T11919] Call Trace: [ 418.891114][T11919] [ 418.894049][T11919] dump_stack_lvl+0x188/0x250 [ 418.898742][T11919] ? show_regs_print_info+0x20/0x20 [ 418.903948][T11919] ? load_image+0x410/0x410 [ 418.908460][T11919] ? __lock_acquire+0x7b50/0x7b50 [ 418.913590][T11919] should_fail+0x383/0x4b0 [ 418.918194][T11919] _copy_from_user+0x2e/0x170 [ 418.922933][T11919] __copy_msghdr_from_user+0x48a/0x630 [ 418.928412][T11919] ? verify_lock_unused+0x140/0x140 [ 418.933625][T11919] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 418.938920][T11919] ? __lock_acquire+0x13dc/0x7b50 [ 418.943972][T11919] ___sys_sendmsg+0x19a/0x2e0 [ 418.948672][T11919] ? __sys_sendmsg+0x290/0x290 [ 418.953487][T11919] __se_sys_sendmsg+0x1b7/0x2a0 [ 418.958345][T11919] ? __x64_sys_sendmsg+0x80/0x80 [ 418.963286][T11919] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 418.969297][T11919] ? lockdep_hardirqs_on+0x94/0x140 [ 418.974514][T11919] do_syscall_64+0x4c/0xa0 [ 418.978941][T11919] ? clear_bhb_loop+0x30/0x80 [ 418.983631][T11919] ? clear_bhb_loop+0x30/0x80 [ 418.988323][T11919] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 418.994313][T11919] RIP: 0033:0x7f64113100d9 [ 418.998736][T11919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.018352][T11919] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.026783][T11919] RAX: ffffffffffffffda RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 419.034761][T11919] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 419.042739][T11919] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 419.050723][T11919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.058708][T11919] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 419.066709][T11919] [ 419.459022][T11936] netlink: 26 bytes leftover after parsing attributes in process `syz.4.2828'. [ 419.506069][T11929] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2830'. [ 419.521007][T11929] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2830'. [ 419.536766][T11929] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2830'. [ 419.551245][T11929] tc_dump_action: action bad kind [ 419.562123][T11935] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2832'. [ 419.735239][T11945] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2834'. [ 420.420717][T11946] chnl_net:caif_netlink_parms(): no params data found [ 420.534921][T11946] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.552396][T11946] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.563546][T11946] device bridge_slave_0 entered promiscuous mode [ 420.574504][T11946] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.591950][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.600934][T11946] device bridge_slave_1 entered promiscuous mode [ 420.642853][T11946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.668007][T11946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.731342][T11946] team0: Port device team_slave_0 added [ 420.751083][T11946] team0: Port device team_slave_1 added [ 420.809799][T11946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.828078][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.886110][T11946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.916705][T11946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.934112][T11946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.995784][T11946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.052423][T11052] Bluetooth: hci5: command 0x0409 tx timeout [ 422.425541][T11946] device hsr_slave_0 entered promiscuous mode [ 422.467728][T11946] device hsr_slave_1 entered promiscuous mode [ 422.524465][T11946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.586662][T11946] Cannot create hsr debugfs directory [ 422.657046][T11969] FAULT_INJECTION: forcing a failure. [ 422.657046][T11969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.767948][T11969] CPU: 0 PID: 11969 Comm: syz.0.2841 Not tainted syzkaller #0 [ 422.775531][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.786025][T11969] Call Trace: [ 422.789305][T11969] [ 422.792238][T11969] dump_stack_lvl+0x188/0x250 [ 422.796927][T11969] ? show_regs_print_info+0x20/0x20 [ 422.802142][T11969] ? load_image+0x410/0x410 [ 422.806659][T11969] ? __lock_acquire+0x7b50/0x7b50 [ 422.811764][T11969] ? __might_sleep+0xf0/0xf0 [ 422.816346][T11969] should_fail+0x383/0x4b0 [ 422.820753][T11969] _copy_from_user+0x2e/0x170 [ 422.825419][T11969] generic_map_delete_batch+0x2cf/0x660 [ 422.830964][T11969] ? bpf_map_inc_not_zero+0x100/0x100 [ 422.836332][T11969] ? __fdget+0x18b/0x210 [ 422.840559][T11969] ? bpf_map_inc_not_zero+0x100/0x100 [ 422.845918][T11969] bpf_map_do_batch+0x475/0x5f0 [ 422.850842][T11969] ? bpf_lsm_key_permission+0x10/0x10 [ 422.856206][T11969] __sys_bpf+0x671/0x6f0 [ 422.860459][T11969] ? bpf_link_show_fdinfo+0x380/0x380 [ 422.865817][T11969] ? rcu_nmi_exit+0x6f/0xf0 [ 422.870321][T11969] __x64_sys_bpf+0x78/0x90 [ 422.874811][T11969] do_syscall_64+0x4c/0xa0 [ 422.879239][T11969] ? clear_bhb_loop+0x30/0x80 [ 422.883900][T11969] ? clear_bhb_loop+0x30/0x80 [ 422.888575][T11969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 422.894455][T11969] RIP: 0033:0x7f5e1e8470d9 [ 422.898858][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.918536][T11969] RSP: 002b:00007f5e1ca7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.926942][T11969] RAX: ffffffffffffffda RBX: 00007f5e1eacf090 RCX: 00007f5e1e8470d9 [ 422.934902][T11969] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001b [ 422.942911][T11969] RBP: 00007f5e1ca7e090 R08: 0000000000000000 R09: 0000000000000000 [ 422.950886][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.958851][T11969] R13: 00007f5e1eacf128 R14: 00007f5e1eacf090 R15: 00007ffcfd1b4b18 [ 422.966831][T11969] [ 423.086711][T11946] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.159458][T11981] device syzkaller0 entered promiscuous mode [ 423.199039][T11946] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.324330][T11986] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2849'. [ 423.347417][T11946] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.525902][T11995] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2851'. [ 424.134530][T11052] Bluetooth: hci5: command 0x041b tx timeout [ 426.212447][ T9834] Bluetooth: hci5: command 0x040f tx timeout [ 426.289652][T11946] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.305932][T11994] validate_nla: 4 callbacks suppressed [ 426.305949][T11994] netlink: 'syz.0.2852': attribute type 10 has an invalid length. [ 426.364380][T11994] team0: Port device netdevsim0 added [ 426.370272][T11995] netlink: 'syz.4.2851': attribute type 25 has an invalid length. [ 426.388065][T11995] netlink: 'syz.4.2851': attribute type 25 has an invalid length. [ 426.496724][T12001] netlink: 'syz.2.2855': attribute type 3 has an invalid length. [ 426.629952][T12013] FAULT_INJECTION: forcing a failure. [ 426.629952][T12013] name failslab, interval 1, probability 0, space 0, times 0 [ 426.699371][T12013] CPU: 0 PID: 12013 Comm: syz.4.2861 Not tainted syzkaller #0 [ 426.706874][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.716943][T12013] Call Trace: [ 426.720236][T12013] [ 426.723193][T12013] dump_stack_lvl+0x188/0x250 [ 426.727885][T12013] ? show_regs_print_info+0x20/0x20 [ 426.733095][T12013] ? load_image+0x410/0x410 [ 426.737614][T12013] ? __might_sleep+0xf0/0xf0 [ 426.742216][T12013] ? __lock_acquire+0x7b50/0x7b50 [ 426.747254][T12013] should_fail+0x383/0x4b0 [ 426.751684][T12013] should_failslab+0x5/0x20 [ 426.756195][T12013] slab_pre_alloc_hook+0x51/0xc0 [ 426.761145][T12013] kmem_cache_alloc_trace+0x47/0x290 [ 426.766442][T12013] ? rtnl_newlink+0x17f/0x1920 [ 426.771306][T12013] ? mark_lock+0x94/0x320 [ 426.775651][T12013] rtnl_newlink+0x17f/0x1920 [ 426.780263][T12013] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 426.785974][T12013] ? perf_trace_buf_update+0xa8/0x230 [ 426.791425][T12013] ? rtnl_setlink+0x500/0x500 [ 426.796114][T12013] ? mark_lock+0x94/0x320 [ 426.800457][T12013] ? __lock_acquire+0x13dc/0x7b50 [ 426.805509][T12013] ? perf_trace_buf_alloc+0x300/0x300 [ 426.810890][T12013] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 426.816719][T12013] ? verify_lock_unused+0x140/0x140 [ 426.822021][T12013] ? mark_lock+0x94/0x320 [ 426.826355][T12013] ? __lock_acquire+0x1305/0x7b50 [ 426.831509][T12013] ? __mutex_trylock_common+0x15c/0x260 [ 426.837069][T12013] ? rcu_lock_release+0x20/0x20 [ 426.841933][T12013] ? rcu_nmi_exit+0x6f/0xf0 [ 426.846455][T12013] ? __mutex_lock_common+0x435/0x2400 [ 426.851850][T12013] ? rtnetlink_rcv_msg+0x79f/0xf10 [ 426.856964][T12013] ? mutex_lock_io_nested+0x60/0x60 [ 426.862343][T12013] ? rtnl_setlink+0x500/0x500 [ 426.867008][T12013] rtnetlink_rcv_msg+0x7f1/0xf10 [ 426.871935][T12013] ? rtnetlink_bind+0x80/0x80 [ 426.876610][T12013] ? mark_lock+0x94/0x320 [ 426.880931][T12013] ? __lock_acquire+0x1305/0x7b50 [ 426.885948][T12013] ? verify_lock_unused+0x140/0x140 [ 426.891138][T12013] ? verify_lock_unused+0x140/0x140 [ 426.896340][T12013] ? verify_lock_unused+0x140/0x140 [ 426.901530][T12013] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 426.907770][T12013] netlink_rcv_skb+0x1e9/0x430 [ 426.912618][T12013] ? rtnetlink_bind+0x80/0x80 [ 426.917284][T12013] ? netlink_ack+0xb10/0xb10 [ 426.921871][T12013] netlink_unicast+0x78f/0x940 [ 426.926719][T12013] netlink_sendmsg+0x8ba/0xbe0 [ 426.931483][T12013] ? netlink_getsockopt+0x570/0x570 [ 426.936664][T12013] ? aa_sock_msg_perm+0x94/0x150 [ 426.941585][T12013] ? apparmor_socket_sendmsg+0x88/0x230 [ 426.947116][T12013] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 426.952388][T12013] ? security_socket_sendmsg+0x7c/0xa0 [ 426.957836][T12013] ? netlink_getsockopt+0x570/0x570 [ 426.963019][T12013] ____sys_sendmsg+0x5be/0x8f0 [ 426.967776][T12013] ? __sys_sendmsg_sock+0x30/0x30 [ 426.972792][T12013] ? import_iovec+0x6f/0xa0 [ 426.977285][T12013] ___sys_sendmsg+0x236/0x2e0 [ 426.981969][T12013] ? __sys_sendmsg+0x290/0x290 [ 426.986747][T12013] __se_sys_sendmsg+0x1b7/0x2a0 [ 426.991585][T12013] ? __x64_sys_sendmsg+0x80/0x80 [ 426.996506][T12013] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 427.002752][T12013] ? lockdep_hardirqs_on+0x94/0x140 [ 427.007956][T12013] do_syscall_64+0x4c/0xa0 [ 427.012374][T12013] ? clear_bhb_loop+0x30/0x80 [ 427.017045][T12013] ? clear_bhb_loop+0x30/0x80 [ 427.021718][T12013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 427.027603][T12013] RIP: 0033:0x7f64113100d9 [ 427.032009][T12013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.051686][T12013] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.060087][T12013] RAX: ffffffffffffffda RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 427.068047][T12013] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 427.076007][T12013] RBP: 00007f640f568090 R08: 0000000000000000 R09: 0000000000000000 [ 427.083985][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.091946][T12013] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 427.100033][T12013] [ 427.141298][T11946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 427.157780][T11946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.170288][T11946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.183716][T11946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.278384][T12022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2865'. [ 427.403141][T11946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.444519][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.455484][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.476050][T11946] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.489810][T12027] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2866'. [ 427.517464][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.539180][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.570118][ T1272] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.577287][ T1272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.612626][T12027] netlink: 'syz.4.2866': attribute type 25 has an invalid length. [ 427.627331][T12027] netlink: 'syz.4.2866': attribute type 25 has an invalid length. [ 427.656550][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.674376][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.697248][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.720911][ T1272] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.728071][ T1272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.765085][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.805310][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.828266][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 427.858732][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 427.902609][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.923759][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 427.949669][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 427.978884][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.004228][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.026588][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.049693][ T1272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.104113][T11946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.292755][ T9834] Bluetooth: hci5: command 0x0419 tx timeout [ 428.540921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.555959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.586277][T11946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.648402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.665688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.717202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.734330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.761644][T11946] device veth0_vlan entered promiscuous mode [ 428.779572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.798576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.830175][T11946] device veth1_vlan entered promiscuous mode [ 428.898834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 428.914407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.937416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.960736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.993846][T11946] device veth0_macvtap entered promiscuous mode [ 429.017053][T11946] device veth1_macvtap entered promiscuous mode [ 429.067710][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.092478][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.126154][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.146175][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.180693][T11946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.212723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.221610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.245809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.274965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.310107][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.331717][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.366472][T11946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.386198][T11946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.417104][T11946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.441229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.455082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.489890][T11946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.501363][T11946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.530981][T11946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.553742][T11946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.360407][T12037] FAULT_INJECTION: forcing a failure. [ 430.360407][T12037] name failslab, interval 1, probability 0, space 0, times 0 [ 430.397766][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.442796][T12037] CPU: 0 PID: 12037 Comm: syz.1.2868 Not tainted syzkaller #0 [ 430.444886][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.450298][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.450311][T12037] Call Trace: [ 430.471021][T12037] [ 430.473962][T12037] dump_stack_lvl+0x188/0x250 [ 430.478662][T12037] ? show_regs_print_info+0x20/0x20 [ 430.483884][T12037] ? load_image+0x410/0x410 [ 430.488497][T12037] ? __might_sleep+0xf0/0xf0 [ 430.493104][T12037] ? __lock_acquire+0x7b50/0x7b50 [ 430.495257][T12040] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2871'. [ 430.498143][T12037] ? __local_bh_enable_ip+0x136/0x1c0 [ 430.511109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 430.512519][T12037] should_fail+0x383/0x4b0 [ 430.512549][T12037] should_failslab+0x5/0x20 [ 430.512566][T12037] slab_pre_alloc_hook+0x51/0xc0 [ 430.512585][T12037] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 430.512602][T12037] ? __get_vm_area_node+0x119/0x2d0 [ 430.512626][T12037] __get_vm_area_node+0x119/0x2d0 [ 430.512648][T12037] __vmalloc_node_range+0xef/0x8b0 [ 430.554664][T12037] ? netlink_sendmsg+0x5ec/0xbe0 [ 430.559709][T12037] ? netlink_data_ready+0x10/0x10 [ 430.564760][T12037] ? netlink_sendmsg+0x5ec/0xbe0 [ 430.569717][T12037] vmalloc+0x75/0x80 [ 430.573627][T12037] ? netlink_sendmsg+0x5ec/0xbe0 [ 430.578591][T12037] netlink_sendmsg+0x5ec/0xbe0 [ 430.583375][T12037] ? lockdep_hardirqs_on+0x94/0x140 [ 430.588599][T12037] ? netlink_getsockopt+0x570/0x570 [ 430.593813][T12037] ? aa_sock_msg_perm+0x94/0x150 [ 430.598765][T12037] ? apparmor_socket_sendmsg+0x88/0x230 [ 430.604328][T12037] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 430.606349][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.609633][T12037] ? security_socket_sendmsg+0x7c/0xa0 [ 430.609662][T12037] sock_write_iter+0x2a6/0x3a0 [ 430.627689][T12037] ? sock_read_iter+0x380/0x380 [ 430.632924][T12037] ? memset+0x1e/0x40 [ 430.634067][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.636912][T12037] ? iov_iter_init+0xb4/0x170 [ 430.648881][T12037] vfs_write+0x748/0xd70 [ 430.653156][T12037] ? file_end_write+0x250/0x250 [ 430.658026][T12037] ? __fget_files+0x402/0x470 [ 430.662721][T12037] ? __fdget_pos+0x1e2/0x370 [ 430.667323][T12037] ? ksys_write+0x70/0x260 [ 430.671843][T12037] ksys_write+0x153/0x260 [ 430.676210][T12037] ? __ia32_sys_read+0x80/0x80 [ 430.681170][T12037] ? syscall_enter_from_user_mode+0x2a/0x70 [ 430.687079][T12037] do_syscall_64+0x4c/0xa0 [ 430.691501][T12037] ? clear_bhb_loop+0x30/0x80 [ 430.696212][T12037] ? clear_bhb_loop+0x30/0x80 [ 430.700905][T12037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 430.707002][T12037] RIP: 0033:0x7f55dac250d9 [ 430.711445][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.731940][T12037] RSP: 002b:00007f55d8e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.740355][T12037] RAX: ffffffffffffffda RBX: 00007f55daeacfa0 RCX: 00007f55dac250d9 [ 430.748316][T12037] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000005 [ 430.756290][T12037] RBP: 00007f55d8e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 430.764264][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.772226][T12037] R13: 00007f55daead038 R14: 00007f55daeacfa0 R15: 00007ffec7118698 [ 430.780200][T12037] [ 430.785752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.903623][T12037] syz.1.2868: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 430.959569][T12037] CPU: 1 PID: 12037 Comm: syz.1.2868 Not tainted syzkaller #0 [ 430.967166][T12037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.977321][T12037] Call Trace: [ 430.980605][T12037] [ 430.983538][T12037] dump_stack_lvl+0x188/0x250 [ 430.988239][T12037] ? rcu_lock_release+0x5/0x20 [ 430.993110][T12037] ? show_regs_print_info+0x20/0x20 [ 430.998331][T12037] ? load_image+0x410/0x410 [ 431.002957][T12037] warn_alloc+0x245/0x320 [ 431.007318][T12037] ? zone_watermark_ok_safe+0x250/0x250 [ 431.012877][T12037] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 431.018866][T12037] ? __get_vm_area_node+0x119/0x2d0 [ 431.024085][T12037] __vmalloc_node_range+0x2b1/0x8b0 [ 431.029330][T12037] ? netlink_data_ready+0x10/0x10 [ 431.034384][T12037] ? netlink_sendmsg+0x5ec/0xbe0 [ 431.039428][T12037] vmalloc+0x75/0x80 [ 431.043339][T12037] ? netlink_sendmsg+0x5ec/0xbe0 [ 431.048293][T12037] netlink_sendmsg+0x5ec/0xbe0 [ 431.053081][T12037] ? lockdep_hardirqs_on+0x94/0x140 [ 431.058319][T12037] ? netlink_getsockopt+0x570/0x570 [ 431.063559][T12037] ? aa_sock_msg_perm+0x94/0x150 [ 431.068576][T12037] ? apparmor_socket_sendmsg+0x88/0x230 [ 431.074134][T12037] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 431.079448][T12037] ? security_socket_sendmsg+0x7c/0xa0 [ 431.085716][T12037] sock_write_iter+0x2a6/0x3a0 [ 431.090515][T12037] ? sock_read_iter+0x380/0x380 [ 431.095400][T12037] ? memset+0x1e/0x40 [ 431.099519][T12037] ? iov_iter_init+0xb4/0x170 [ 431.104434][T12037] vfs_write+0x748/0xd70 [ 431.108713][T12037] ? file_end_write+0x250/0x250 [ 431.113596][T12037] ? __fget_files+0x402/0x470 [ 431.118305][T12037] ? __fdget_pos+0x1e2/0x370 [ 431.122943][T12037] ? ksys_write+0x70/0x260 [ 431.127402][T12037] ksys_write+0x153/0x260 [ 431.131763][T12037] ? __ia32_sys_read+0x80/0x80 [ 431.136552][T12037] ? syscall_enter_from_user_mode+0x2a/0x70 [ 431.142460][T12037] do_syscall_64+0x4c/0xa0 [ 431.146912][T12037] ? clear_bhb_loop+0x30/0x80 [ 431.151596][T12037] ? clear_bhb_loop+0x30/0x80 [ 431.156280][T12037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 431.162189][T12037] RIP: 0033:0x7f55dac250d9 [ 431.166614][T12037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.186235][T12037] RSP: 002b:00007f55d8e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.194667][T12037] RAX: ffffffffffffffda RBX: 00007f55daeacfa0 RCX: 00007f55dac250d9 [ 431.202652][T12037] RDX: 000000000000fe33 RSI: 00002000000001c0 RDI: 0000000000000005 [ 431.210659][T12037] RBP: 00007f55d8e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 431.218642][T12037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.226715][T12037] R13: 00007f55daead038 R14: 00007f55daeacfa0 R15: 00007ffec7118698 [ 431.234719][T12037] [ 431.782560][T12037] Mem-Info: [ 431.785844][T12037] active_anon:276 inactive_anon:8849 isolated_anon:0 [ 431.785844][T12037] active_file:17045 inactive_file:38251 isolated_file:0 [ 431.785844][T12037] unevictable:768 dirty:130 writeback:0 [ 431.785844][T12037] slab_reclaimable:20611 slab_unreclaimable:97112 [ 431.785844][T12037] mapped:26511 shmem:1632 pagetables:570 bounce:0 [ 431.785844][T12037] kernel_misc_reclaimable:0 [ 431.785844][T12037] free:1371213 free_pcp:8843 free_cma:0 [ 431.923122][T12037] Node 0 active_anon:1072kB inactive_anon:34884kB active_file:67984kB inactive_file:153004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114444kB dirty:520kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10520kB pagetables:2280kB all_unreclaimable? no [ 431.992346][T12037] Node 1 active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 432.035020][T12037] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.062135][T12037] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 432.071899][T12037] Node 0 DMA32 free:1542920kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1072kB inactive_anon:34884kB active_file:67984kB inactive_file:153004kB unevictable:1536kB writepending:520kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:16836kB local_pcp:15388kB free_cma:0kB [ 432.103314][T12037] lowmem_reserve[]: 0 0 0 0 0 [ 432.108047][T12037] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 432.135073][T12037] lowmem_reserve[]: 0 0 0 0 0 [ 432.140028][T12037] Node 1 Normal free:3915808kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2688kB local_pcp:2688kB free_cma:0kB [ 432.172612][T12037] lowmem_reserve[]: 0 0 0 0 0 [ 432.179096][T12037] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 432.199773][T12037] Node 0 DMA32: 574*4kB (ME) 322*8kB (ME) 238*16kB (ME) 552*32kB (UME) 1085*64kB (UM) 631*128kB (UME) 379*256kB (UME) 135*512kB (UME) 50*1024kB (UME) 9*2048kB (UM) 273*4096kB (UM) = 1530536kB [ 432.214564][T12077] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2879'. [ 432.219958][T12037] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 432.240778][T12037] Node 1 Normal: 230*4kB (UME) 65*8kB (UME) 34*16kB (UME) 185*32kB (UME) 73*64kB (UME) 24*128kB (UE) 11*256kB (UME) 8*512kB (U) 0*1024kB 1*2048kB (M) 950*4096kB (M) = 3915808kB [ 432.285830][T12037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.288361][T12077] netlink: 'syz.4.2879': attribute type 25 has an invalid length. [ 432.305210][T12037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.319670][T12037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 432.325413][T12077] netlink: 'syz.4.2879': attribute type 25 has an invalid length. [ 432.329900][T12037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 432.347406][T12037] 56928 total pagecache pages [ 432.352219][T12037] 0 pages in swap cache [ 432.356767][T12037] Swap cache stats: add 0, delete 0, find 0/0 [ 432.363539][T12037] Free swap = 124996kB [ 432.367706][T12037] Total swap = 124996kB [ 432.376155][T12082] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2881'. [ 432.385504][T12037] 2097051 pages RAM [ 432.389321][T12037] 0 pages HighMem/MovableOnly [ 432.405708][T12037] 411499 pages reserved [ 432.467835][T12037] 0 pages cma reserved [ 434.052338][ T7632] Bluetooth: hci2: command 0x0409 tx timeout [ 435.729103][T12086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2882'. [ 435.909103][ C0] ------------[ cut here ]------------ [ 435.914609][ C0] WARNING: CPU: 0 PID: 12091 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 435.924015][ C0] Modules linked in: [ 435.927936][ C0] CPU: 0 PID: 12091 Comm: syz.4.2883 Not tainted syzkaller #0 [ 435.935407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.945483][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 435.951668][ C0] Code: 24 45 31 f6 31 ff 89 de e8 4d 97 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 93 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 435.971277][ C0] RSP: 0018:ffffc90000007918 EFLAGS: 00010006 [ 435.977366][ C0] RAX: ffffffff81a068e0 RBX: 0000000000000008 RCX: ffff88801abd1dc0 [ 435.985352][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.993319][ C0] RBP: 0000000000000000 R08: ffff88801abd1dc7 R09: 1ffff1100357a3b8 [ 436.001282][ C0] R10: dffffc0000000000 R11: ffffed100357a3b9 R12: ffff88801abd3548 [ 436.009247][ C0] R13: 00007ffffffff000 R14: ffffc90000007988 R15: 0000000000000005 [ 436.017207][ C0] FS: 00007f640f5686c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 436.026130][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 436.032712][ C0] CR2: 0000000100000000 CR3: 0000000033d04000 CR4: 00000000003506f0 [ 436.040678][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 436.048649][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 436.056613][ C0] Call Trace: [ 436.059900][ C0] [ 436.062761][ C0] bpf_probe_read_compat+0xdd/0x170 [ 436.068042][ C0] bpf_prog_35c2aeabad5a7bfe+0x45/0x5f0 [ 436.073587][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 436.078853][ C0] ? perf_event_switch_output+0x730/0x730 [ 436.084590][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 436.090834][ C0] __perf_event_overflow+0x35f/0x550 [ 436.096147][ C0] perf_swevent_hrtimer+0x3c2/0x550 [ 436.101342][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 436.107064][ C0] ? cpu_clock_event_read+0x50/0x50 [ 436.112334][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 436.117598][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.123504][ C0] ? _raw_spin_unlock+0x40/0x40 [ 436.128413][ C0] ? cpu_clock_event_read+0x50/0x50 [ 436.133719][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 436.139066][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 436.145100][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 436.150233][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 436.156324][ C0] hrtimer_interrupt+0x397/0x8b0 [ 436.161339][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 436.167385][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 436.173048][ C0] [ 436.175986][ C0] [ 436.178922][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 436.185247][ C0] RIP: 0010:do_syscall_64+0x50/0xa0 [ 436.190442][ C0] Code: c7 41 81 ff c0 01 00 00 77 33 44 89 ff 81 e7 ff 01 00 00 e8 02 72 40 f7 41 21 c7 4c 89 f7 44 89 fe e8 f4 6a 40 f7 49 89 46 50 <4c> 89 f7 e8 38 43 00 00 48 8d 65 e8 5b 41 5e 41 5f 5d c3 41 83 ff [ 436.210050][ C0] RSP: 0018:ffffc90002efff20 EFLAGS: 00000287 [ 436.216120][ C0] RAX: 0000000000000000 RBX: ffffc90002efff20 RCX: 0000000000080000 [ 436.224182][ C0] RDX: ffffc9000e87c000 RSI: 0000000000000846 RDI: 0000000000000847 [ 436.232150][ C0] RBP: ffffc90002efff48 R08: ffff8880274d4cff R09: 1ffff11004e9a99f [ 436.240119][ C0] R10: dffffc0000000000 R11: ffffed1004e9a9a0 R12: 0000000000000000 [ 436.248082][ C0] R13: 0000000000000000 R14: ffffc90002efff58 R15: 0000000000000010 [ 436.256100][ C0] ? clear_bhb_loop+0x30/0x80 [ 436.260798][ C0] ? clear_bhb_loop+0x30/0x80 [ 436.265473][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.271450][ C0] RIP: 0033:0x7f64113100d9 [ 436.275866][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.295727][ C0] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.304145][ C0] RAX: 0000000000000000 RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 436.312134][ C0] RDX: 000000000000000d RSI: 0000000040042408 RDI: 0000000000000011 [ 436.320111][ C0] RBP: 00007f64113a7024 R08: 0000000000000000 R09: 0000000000000000 [ 436.328072][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.336045][ C0] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 436.344068][ C0] [ 436.347096][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 436.354368][ C0] CPU: 0 PID: 12091 Comm: syz.4.2883 Not tainted syzkaller #0 [ 436.361828][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.371877][ C0] Call Trace: [ 436.375242][ C0] [ 436.378086][ C0] dump_stack_lvl+0x188/0x250 [ 436.382775][ C0] ? show_regs_print_info+0x20/0x20 [ 436.387971][ C0] ? load_image+0x410/0x410 [ 436.392507][ C0] panic+0x2f8/0x850 [ 436.396423][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 436.400951][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 436.406502][ C0] __warn+0x248/0x2b0 [ 436.410488][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 436.416041][ C0] report_bug+0x1b9/0x2e0 [ 436.420388][ C0] handle_bug+0x3a/0x70 [ 436.424561][ C0] exc_invalid_op+0x16/0x40 [ 436.429114][ C0] asm_exc_invalid_op+0x16/0x20 [ 436.433980][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 436.440142][ C0] Code: 24 45 31 f6 31 ff 89 de e8 4d 97 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 93 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 436.459738][ C0] RSP: 0018:ffffc90000007918 EFLAGS: 00010006 [ 436.465905][ C0] RAX: ffffffff81a068e0 RBX: 0000000000000008 RCX: ffff88801abd1dc0 [ 436.473892][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 436.481875][ C0] RBP: 0000000000000000 R08: ffff88801abd1dc7 R09: 1ffff1100357a3b8 [ 436.489847][ C0] R10: dffffc0000000000 R11: ffffed100357a3b9 R12: ffff88801abd3548 [ 436.497813][ C0] R13: 00007ffffffff000 R14: ffffc90000007988 R15: 0000000000000005 [ 436.505802][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 436.511363][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 436.516907][ C0] bpf_probe_read_compat+0xdd/0x170 [ 436.522118][ C0] bpf_prog_35c2aeabad5a7bfe+0x45/0x5f0 [ 436.527672][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 436.532884][ C0] ? perf_event_switch_output+0x730/0x730 [ 436.538622][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 436.544872][ C0] __perf_event_overflow+0x35f/0x550 [ 436.550176][ C0] perf_swevent_hrtimer+0x3c2/0x550 [ 436.555373][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 436.561104][ C0] ? cpu_clock_event_read+0x50/0x50 [ 436.566358][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 436.571564][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.577456][ C0] ? _raw_spin_unlock+0x40/0x40 [ 436.582319][ C0] ? cpu_clock_event_read+0x50/0x50 [ 436.587549][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 436.592747][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 436.598761][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 436.603870][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 436.609955][ C0] hrtimer_interrupt+0x397/0x8b0 [ 436.614938][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 436.620921][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 436.626561][ C0] [ 436.629484][ C0] [ 436.632410][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 436.638385][ C0] RIP: 0010:do_syscall_64+0x50/0xa0 [ 436.643574][ C0] Code: c7 41 81 ff c0 01 00 00 77 33 44 89 ff 81 e7 ff 01 00 00 e8 02 72 40 f7 41 21 c7 4c 89 f7 44 89 fe e8 f4 6a 40 f7 49 89 46 50 <4c> 89 f7 e8 38 43 00 00 48 8d 65 e8 5b 41 5e 41 5f 5d c3 41 83 ff [ 436.663182][ C0] RSP: 0018:ffffc90002efff20 EFLAGS: 00000287 [ 436.669271][ C0] RAX: 0000000000000000 RBX: ffffc90002efff20 RCX: 0000000000080000 [ 436.677238][ C0] RDX: ffffc9000e87c000 RSI: 0000000000000846 RDI: 0000000000000847 [ 436.685206][ C0] RBP: ffffc90002efff48 R08: ffff8880274d4cff R09: 1ffff11004e9a99f [ 436.693185][ C0] R10: dffffc0000000000 R11: ffffed1004e9a9a0 R12: 0000000000000000 [ 436.701146][ C0] R13: 0000000000000000 R14: ffffc90002efff58 R15: 0000000000000010 [ 436.709155][ C0] ? clear_bhb_loop+0x30/0x80 [ 436.713835][ C0] ? clear_bhb_loop+0x30/0x80 [ 436.718597][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.724491][ C0] RIP: 0033:0x7f64113100d9 [ 436.728908][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.748701][ C0] RSP: 002b:00007f640f568028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.757113][ C0] RAX: 0000000000000000 RBX: 00007f6411597fa0 RCX: 00007f64113100d9 [ 436.765113][ C0] RDX: 000000000000000d RSI: 0000000040042408 RDI: 0000000000000011 [ 436.773083][ C0] RBP: 00007f64113a7024 R08: 0000000000000000 R09: 0000000000000000 [ 436.781053][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.789110][ C0] R13: 00007f6411598038 R14: 00007f6411597fa0 R15: 00007ffcaa5dcc28 [ 436.797115][ C0] [ 436.800352][ C0] Kernel Offset: disabled [ 436.804761][ C0] Rebooting in 86400 seconds..