last executing test programs: 4.142261638s ago: executing program 2 (id=2045): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd1f, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0xf100, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.665877645s ago: executing program 2 (id=2051): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x7, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x459, 0x0, 0x280000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd6b}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000400000000dfffff191812001bb0010130f2", @ANYRES32=r3, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbbde8dc48be5c21b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000c000000ffff000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f0000000d80)}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2005, 0x0, 0x51, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x600300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="165609001100230085100000feffffff02e6000204000000186500000e000000000000003a9fffff183600000300"/56], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xdc, &(0x7f0000000580)=""/220, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x1, 0x7, 0xd21}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[r3, r5, r5, 0xffffffffffffffff], &(0x7f0000000700)=[{0x1, 0x3, 0x0, 0xa}, {0x1, 0x5, 0x0, 0x1}, {0x1, 0x3, 0x6, 0xc}, {0x4, 0x2, 0x2, 0xb}], 0x10, 0xfffffff8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x10, 0x2, 0x180000, 0x0, 0x8, 0x0, 0x600, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.870636042s ago: executing program 1 (id=2061): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000440)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000340)=""/69, 0x45}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000540)=""/197, 0xc5}, {&(0x7f0000000640)=""/90, 0x5a}], 0x4, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x20}, 0x40022122) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x31) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYRES64, @ANYRESDEC=r1, @ANYRESOCT=r6, @ANYRESHEX=r6, @ANYRES16=r2, @ANYRES16=r5, @ANYRES64=r2], 0x1458}, 0x48800) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000400000000000049f0bd613fc3a9aa000500"/33, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000559a418e31aedb50c355c35c31daf27696b88f45e4bbb7f578ff682b49a6827491945658c633d3a4b3ed66af", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 2.664301584s ago: executing program 3 (id=2062): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.504318363s ago: executing program 3 (id=2065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x7aa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff4305000f1100630377fbac141414e000000162079f4b4d2f87e56dca6aab84d013f288a81a3901050b038da1880b25181aa59d943be3f4d50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72d64996ae17dffcc483fc474b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4003d0000000000000000", 0x0, 0xfe, 0x60000000}, 0x50) 2.38839669s ago: executing program 2 (id=2066): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="18200000", @ANYRES32, @ANYBLOB="000000000600000018000000bc060000000000000100008018180000", @ANYRES32, @ANYBLOB="00000000000000f1e54e50b2c510"], 0x0, 0xc, 0xc4, &(0x7f0000000880)=""/196, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x3, 0x2d98}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000580)=r2) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000007c000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r3}) 2.336628683s ago: executing program 0 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 2.158110953s ago: executing program 0 (id=2068): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca", 0xcb}], 0x1}, 0x0) 1.970961264s ago: executing program 4 (id=2070): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'netdevsim0\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) close(0x3) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="a0005bf8", 0x4}, {&(0x7f00000000c0)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) socketpair(0x18, 0x0, 0x2, 0x0) 1.87390261s ago: executing program 3 (id=2071): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1.71668516s ago: executing program 3 (id=2072): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x28) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r2, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.614400765s ago: executing program 0 (id=2073): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.460029904s ago: executing program 4 (id=2074): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000003, 0x300) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x100af1d, 0x4, @perf_config_ext={0xff, 0x4}, 0x100410, 0x1fc, 0x2, 0x1, 0x9, 0x30ff, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7a6) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x2a, 0x2, 0x9, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000500)=r5, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x20040080) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(r2) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.384798799s ago: executing program 1 (id=2075): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.36542646s ago: executing program 0 (id=2076): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800150008000000000000000b6b6e601b8533d7c19ee033b8307980199289aa7b1d8ee9bcf2938d0eb9d333", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x46, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) socket$kcm(0x10, 0x7, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x27, &(0x7f0000000040), 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$ITER_CREATE(0xb, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRESHEX=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000c9193f420000000000a6020000f8ffffffb7030000eee70000b7040000005a268c27e400040085000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000080), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000680)) 1.240094217s ago: executing program 2 (id=2077): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth0_to_team\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8913, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xf6, 0x5c, 0xfa, 0x4, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe4a, 0x0, @perf_config_ext={0x5, 0x75}, 0x100000, 0x100000000, 0x5, 0x5, 0xd7bf406, 0x105471e0, 0x1, 0x0, 0x3ff, 0x0, 0xffff}, 0xffffffffffffffff, 0xb, r1, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x5}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[@ANYBLOB="364000001a0091"], 0x82d7) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) 1.104783845s ago: executing program 1 (id=2078): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(0xffffffffffffffff) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r1, 0x10) 1.02476251s ago: executing program 4 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 1.007462391s ago: executing program 0 (id=2080): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f855f2ff00000000000000008500000036000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x20, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x4, @perf_bp={&(0x7f0000000080), 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x28020, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) 912.748106ms ago: executing program 1 (id=2081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0x0, 0x0, 0x7aa6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 796.769493ms ago: executing program 4 (id=2082): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 608.485644ms ago: executing program 3 (id=2083): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4", 0xd2}], 0x1}, 0x0) 608.003224ms ago: executing program 2 (id=2084): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'xfrm0\x00', 0x200}) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x900, 0x0, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(0x0, 0x0, 0x10, r3, 0x1) sendmsg$inet(r1, 0x0, 0x20044000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'vlan0\x00', 0x400}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000c1a78606a300"/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r8}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x840e}, 0x4000, 0x0, 0x0, 0x1, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) 494.625291ms ago: executing program 4 (id=2085): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2, 0x0, 0x0, 0x3000000}, 0x0) 372.695608ms ago: executing program 1 (id=2086): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000011000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 253.703765ms ago: executing program 0 (id=2087): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="18200000", @ANYRES32, @ANYBLOB="000000000600000018000000bc060000000000000100008018180000", @ANYRES32, @ANYBLOB="00000000000000f1e54e50b2c510"], 0x0, 0xc, 0xc4, &(0x7f0000000880)=""/196, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0xb, 0x3, 0x2d98}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000580)=r2) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000007c000010000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000080)={r3}) 252.784625ms ago: executing program 3 (id=2088): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x47, &(0x7f0000003fc0)}, 0xe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffe72, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b0100000000000000010000050000000000000000020000000000f40300000000da"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000500)={r5, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f00000000c0)=@ringbuf, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 136.773992ms ago: executing program 4 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x129000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000940)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1, 0x40000000}, 0x50) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x1f) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 106.467753ms ago: executing program 1 (id=2090): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18080000080000000002000000000000850000000100000095000000000000000067541a9aed52a372f92e516ff2610ad506f3bd76458fb614ef6fc2ae81adcb9e445db433dae465a3c39c98b50f287f86cabcaf97937f828ea5c07aec56b40734de430d09b13cdb123255d4e2ee3836c5f0d3a1f8fcf2a6040cd338113b8b6b8467ac04bfcfb3461a433db21c872e7514a3ec59c822e04a9519f369"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xe, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x0, 0x8, 0x0, 0x6, 0x0, 0x6, 0x4cc41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5d7, 0x2, @perf_bp={&(0x7f0000000040)}, 0x880c, 0x10001, 0xffffff3d, 0x0, 0xab70, 0x23b1, 0x7, 0x0, 0x10000, 0x0, 0x1}, r4, 0x0, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080c571000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x21) 0s ago: executing program 2 (id=2091): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(0xffffffffffffffff) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r1, 0x10) kernel console output (not intermixed with test programs): [ 226.869465][ T6867] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 226.887267][ T6867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 227.710985][ T6886] netlink: 'syz.2.822': attribute type 21 has an invalid length. [ 227.783778][ T6889] netlink: 'syz.0.821': attribute type 21 has an invalid length. [ 227.875732][ T6889] netlink: 128 bytes leftover after parsing attributes in process `syz.0.821'. [ 228.361663][ T6901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.825'. [ 229.431208][ T6922] netlink: 168 bytes leftover after parsing attributes in process `syz.2.833'. [ 229.518384][ T6919] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 [ 229.805190][ T6935] netlink: 'syz.0.836': attribute type 21 has an invalid length. [ 230.488313][ T6950] netlink: 'syz.4.841': attribute type 21 has an invalid length. [ 230.525204][ T6950] netlink: 128 bytes leftover after parsing attributes in process `syz.4.841'. [ 230.906204][ T6961] device syzkaller0 entered promiscuous mode [ 230.947417][ T6961] netlink: 188 bytes leftover after parsing attributes in process `syz.3.845'. [ 232.386825][ T6980] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 232.999968][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.009419][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.055085][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.121785][ T6998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.229000][ T7001] netlink: 'syz.2.859': attribute type 13 has an invalid length. [ 233.242533][ T7001] netlink: 152 bytes leftover after parsing attributes in process `syz.2.859'. [ 233.252368][ T7001] erspan0: refused to change device tx_queue_len [ 233.272908][ T7001] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 233.334267][ T7004] netlink: 'syz.4.860': attribute type 10 has an invalid length. [ 233.377647][ T7004] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 233.417008][ T7004] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 233.515493][ T7004] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 233.587240][ T7004] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 234.356365][ T7028] netlink: 'syz.1.868': attribute type 21 has an invalid length. [ 234.631479][ T7041] IPv6: Can't replace route, no match found [ 235.057229][ T7049] FAULT_INJECTION: forcing a failure. [ 235.057229][ T7049] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.109035][ T7049] CPU: 0 PID: 7049 Comm: syz.4.874 Not tainted syzkaller #0 [ 235.116414][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.126514][ T7049] Call Trace: [ 235.129833][ T7049] [ 235.132808][ T7049] dump_stack_lvl+0x188/0x24e [ 235.137542][ T7049] ? show_regs_print_info+0x12/0x12 [ 235.142798][ T7049] ? load_image+0x400/0x400 [ 235.147348][ T7049] ? __lock_acquire+0x7d10/0x7d10 [ 235.152413][ T7049] ? verify_lock_unused+0x140/0x140 [ 235.157656][ T7049] should_fail_ex+0x399/0x4d0 [ 235.162400][ T7049] prepare_alloc_pages+0x1e2/0x5f0 [ 235.167591][ T7049] __alloc_pages+0x130/0x4f0 [ 235.172265][ T7049] ? zone_statistics+0x170/0x170 [ 235.177268][ T7049] ? verify_lock_unused+0x140/0x140 [ 235.182533][ T7049] __folio_alloc+0xe/0x30 [ 235.186948][ T7049] vma_alloc_folio+0x4a3/0x900 [ 235.191767][ T7049] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 235.197630][ T7049] shmem_alloc_and_acct_folio+0x463/0xbc0 [ 235.203407][ T7049] ? shmem_replace_folio+0xee0/0xee0 [ 235.208867][ T7049] ? xas_load+0x127/0x140 [ 235.213258][ T7049] ? __filemap_get_folio+0x10f/0xdb0 [ 235.218611][ T7049] ? __filemap_get_folio+0xb24/0xdb0 [ 235.223949][ T7049] ? __filemap_get_folio+0x10f/0xdb0 [ 235.229282][ T7049] ? page_cache_prev_miss+0x380/0x380 [ 235.234713][ T7049] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.240755][ T7049] ? do_user_addr_fault+0x7a0/0xb10 [ 235.246005][ T7049] ? lock_chain_count+0x20/0x20 [ 235.250908][ T7049] shmem_get_folio_gfp+0x1361/0x3400 [ 235.256278][ T7049] shmem_write_begin+0xee/0x3f0 [ 235.261210][ T7049] generic_perform_write+0x2fa/0x5c0 [ 235.266571][ T7049] ? generic_file_direct_write+0x330/0x330 [ 235.272425][ T7049] ? __file_remove_privs+0x5f0/0x5f0 [ 235.277746][ T7049] ? rwsem_write_trylock+0x135/0x1c0 [ 235.283074][ T7049] ? clear_nonspinnable+0x60/0x60 [ 235.288145][ T7049] ? generic_write_checks_count+0x3d9/0x4c0 [ 235.294102][ T7049] __generic_file_write_iter+0x148/0x2a0 [ 235.299792][ T7049] generic_file_write_iter+0xab/0x2e0 [ 235.305228][ T7049] vfs_write+0x4b1/0xa30 [ 235.309525][ T7049] ? file_end_write+0x250/0x250 [ 235.314431][ T7049] ? __fget_files+0x43d/0x4b0 [ 235.319184][ T7049] ? __fdget_pos+0x2ae/0x360 [ 235.323818][ T7049] ? ksys_write+0x71/0x250 [ 235.328282][ T7049] ksys_write+0x14c/0x250 [ 235.332668][ T7049] ? __ia32_sys_read+0x80/0x80 [ 235.337488][ T7049] do_syscall_64+0x4c/0xa0 [ 235.341944][ T7049] ? clear_bhb_loop+0x60/0xb0 [ 235.346655][ T7049] ? clear_bhb_loop+0x60/0xb0 [ 235.351460][ T7049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.357392][ T7049] RIP: 0033:0x7f8c03f9acb9 [ 235.361844][ T7049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.381494][ T7049] RSP: 002b:00007f8c04e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.389955][ T7049] RAX: ffffffffffffffda RBX: 00007f8c04215fa0 RCX: 00007f8c03f9acb9 [ 235.397964][ T7049] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000006 [ 235.405971][ T7049] RBP: 00007f8c04e81090 R08: 0000000000000000 R09: 0000000000000000 [ 235.413971][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.422067][ T7049] R13: 00007f8c04216038 R14: 00007f8c04215fa0 R15: 00007fff6f6754d8 [ 235.430109][ T7049] [ 235.787639][ T7041] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 236.361388][ T7066] netlink: 'syz.0.879': attribute type 2 has an invalid length. [ 236.370191][ T7066] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.879'. [ 236.497093][ T7066] netlink: 15011 bytes leftover after parsing attributes in process `syz.0.879'. [ 236.847114][ T7077] netlink: 'syz.0.883': attribute type 21 has an invalid length. [ 237.047451][ T7083] netlink: 'syz.3.885': attribute type 3 has an invalid length. [ 237.058255][ T7083] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 237.090002][ T7083] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.885'. [ 237.365806][ T7097] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.889'. [ 237.386294][ T7093] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.889'. [ 237.851925][ T46] wlan1: Trigger new scan to find an IBSS to join [ 237.980391][ T7107] netlink: 'syz.0.893': attribute type 13 has an invalid length. [ 237.998686][ T7107] netlink: 152 bytes leftover after parsing attributes in process `syz.0.893'. [ 238.149528][ T7107] erspan0: refused to change device tx_queue_len [ 238.176796][ T7107] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 238.757468][ T7129] netlink: 'syz.4.901': attribute type 3 has an invalid length. [ 238.800810][ T7129] netlink: 'syz.4.901': attribute type 1 has an invalid length. [ 238.830321][ T7129] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.901'. [ 239.052424][ T7136] netlink: 'syz.0.903': attribute type 21 has an invalid length. [ 239.369741][ T7139] IPv6: Can't replace route, no match found [ 239.430280][ T7139] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.684374][ T7185] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 241.826644][ T7189] netlink: 'syz.3.920': attribute type 21 has an invalid length. [ 241.854514][ T7183] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 241.863517][ T4364] wlan1: Trigger new scan to find an IBSS to join [ 241.879187][ T7190] netlink: 'syz.1.919': attribute type 3 has an invalid length. [ 241.888162][ T7190] netlink: 'syz.1.919': attribute type 1 has an invalid length. [ 241.907724][ T7190] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.919'. [ 242.903654][ T7227] netlink: 'syz.4.931': attribute type 21 has an invalid length. [ 243.849543][ T4395] wlan1: Creating new IBSS network, BSSID 8e:6b:b3:26:e5:b6 [ 244.500328][ T7265] FAULT_INJECTION: forcing a failure. [ 244.500328][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.516542][ T7265] CPU: 1 PID: 7265 Comm: syz.3.943 Not tainted syzkaller #0 [ 244.523891][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.533991][ T7265] Call Trace: [ 244.537312][ T7265] [ 244.540274][ T7265] dump_stack_lvl+0x188/0x24e [ 244.545021][ T7265] ? show_regs_print_info+0x12/0x12 [ 244.550268][ T7265] ? load_image+0x400/0x400 [ 244.554828][ T7265] ? __lock_acquire+0x7d10/0x7d10 [ 244.559943][ T7265] should_fail_ex+0x399/0x4d0 [ 244.564679][ T7265] _copy_to_user+0x2c/0x130 [ 244.569236][ T7265] copy_siginfo_to_user+0x1f/0x140 [ 244.574393][ T7265] arch_do_signal_or_restart+0xde5/0x1350 [ 244.580194][ T7265] ? get_sigframe_size+0x10/0x10 [ 244.585176][ T7265] ? __sys_bpf+0x5b8/0x780 [ 244.589628][ T7265] ? bpf_link_show_fdinfo+0x380/0x380 [ 244.595050][ T7265] ? exit_to_user_mode_loop+0x3b/0x110 [ 244.600541][ T7265] exit_to_user_mode_loop+0x70/0x110 [ 244.605850][ T7265] exit_to_user_mode_prepare+0xee/0x180 [ 244.611417][ T7265] syscall_exit_to_user_mode+0x16/0x40 [ 244.616986][ T7265] do_syscall_64+0x58/0xa0 [ 244.621424][ T7265] ? clear_bhb_loop+0x60/0xb0 [ 244.626117][ T7265] ? clear_bhb_loop+0x60/0xb0 [ 244.630819][ T7265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.636820][ T7265] RIP: 0033:0x7f2ca319acb9 [ 244.641263][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.660884][ T7265] RSP: 002b:00007f2ca40dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.669316][ T7265] RAX: fffffffffffffff2 RBX: 00007f2ca3415fa0 RCX: 00007f2ca319acb9 [ 244.677315][ T7265] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 244.685394][ T7265] RBP: 00007f2ca40dc090 R08: 0000000000000000 R09: 0000000000000000 [ 244.693387][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.701371][ T7265] R13: 00007f2ca3416038 R14: 00007f2ca3415fa0 R15: 00007fffcd6d65b8 [ 244.709392][ T7265] [ 245.305481][ T7277] netlink: 'syz.0.948': attribute type 10 has an invalid length. [ 245.354156][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.948'. [ 245.395085][ T7277] device team0 entered promiscuous mode [ 245.400958][ T7277] device team_slave_1 entered promiscuous mode [ 245.447266][ T7277] bridge0: port 3(team0) entered blocking state [ 245.455254][ T7277] bridge0: port 3(team0) entered disabled state [ 245.489985][ T7277] bridge0: port 3(team0) entered blocking state [ 245.496458][ T7277] bridge0: port 3(team0) entered forwarding state [ 245.590512][ T7268] syz.4.944 (7268) used greatest stack depth: 15512 bytes left [ 246.046380][ T7300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.957'. [ 246.491786][ T7310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'. [ 246.514958][ T7310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'. [ 246.525494][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.1.959'. [ 246.912595][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.964'. [ 247.281316][ T7329] netlink: 'syz.3.967': attribute type 10 has an invalid length. [ 247.289711][ T7329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.967'. [ 247.303438][ T7329] device team0 entered promiscuous mode [ 247.309487][ T7329] device team_slave_1 entered promiscuous mode [ 247.317796][ T7329] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.841336][ T7336] IPv6: Can't replace route, no match found [ 247.861648][ T7337] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.966508][ T7370] FAULT_INJECTION: forcing a failure. [ 248.966508][ T7370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.003833][ T7370] CPU: 1 PID: 7370 Comm: syz.4.979 Not tainted syzkaller #0 [ 249.011186][ T7370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.021273][ T7370] Call Trace: [ 249.024579][ T7370] [ 249.027578][ T7370] dump_stack_lvl+0x188/0x24e [ 249.032289][ T7370] ? show_regs_print_info+0x12/0x12 [ 249.037510][ T7370] ? load_image+0x400/0x400 [ 249.042044][ T7370] ? __might_fault+0xa6/0x120 [ 249.046744][ T7370] should_fail_ex+0x399/0x4d0 [ 249.051468][ T7370] copyin+0x1b/0x120 [ 249.055408][ T7370] _copy_from_iter+0x447/0x1130 [ 249.060312][ T7370] ? copyout_mc+0x110/0x110 [ 249.064874][ T7370] ? copyout_mc+0x110/0x110 [ 249.069428][ T7370] ? __virt_addr_valid+0x188/0x540 [ 249.074584][ T7370] ? page_copy_sane+0x194/0x390 [ 249.079467][ T7370] copy_page_from_iter+0x77/0x100 [ 249.084541][ T7370] skb_copy_datagram_from_iter+0x2b3/0x690 [ 249.090386][ T7370] unix_stream_sendmsg+0x4d5/0xa70 [ 249.095539][ T7370] ? unix_show_fdinfo+0x2c0/0x2c0 [ 249.100588][ T7370] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 249.107050][ T7370] ? aa_sock_msg_perm+0x94/0x150 [ 249.112021][ T7370] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 249.117330][ T7370] ? security_socket_sendmsg+0x7c/0xa0 [ 249.122823][ T7370] ? unix_show_fdinfo+0x2c0/0x2c0 [ 249.127877][ T7370] ____sys_sendmsg+0x5be/0x970 [ 249.132681][ T7370] ? __sys_sendmsg_sock+0x30/0x30 [ 249.137732][ T7370] ? __import_iovec+0x315/0x500 [ 249.142620][ T7370] ? import_iovec+0x6f/0xa0 [ 249.147154][ T7370] ___sys_sendmsg+0x2a2/0x360 [ 249.151859][ T7370] ? __sys_sendmsg+0x290/0x290 [ 249.156680][ T7370] ? __lock_acquire+0x7d10/0x7d10 [ 249.161763][ T7370] __se_sys_sendmsg+0x1bb/0x2a0 [ 249.166648][ T7370] ? ct_nmi_exit+0x145/0x1c0 [ 249.171257][ T7370] ? __x64_sys_sendmsg+0x80/0x80 [ 249.176233][ T7370] ? lockdep_hardirqs_on+0x94/0x140 [ 249.181468][ T7370] do_syscall_64+0x4c/0xa0 [ 249.185916][ T7370] ? clear_bhb_loop+0x60/0xb0 [ 249.190633][ T7370] ? clear_bhb_loop+0x60/0xb0 [ 249.195363][ T7370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.201280][ T7370] RIP: 0033:0x7f8c03f9acb9 [ 249.205719][ T7370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.225353][ T7370] RSP: 002b:00007f8c04e81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.233791][ T7370] RAX: ffffffffffffffda RBX: 00007f8c04215fa0 RCX: 00007f8c03f9acb9 [ 249.241789][ T7370] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 249.249918][ T7370] RBP: 00007f8c04e81090 R08: 0000000000000000 R09: 0000000000000000 [ 249.257925][ T7370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.265932][ T7370] R13: 00007f8c04216038 R14: 00007f8c04215fa0 R15: 00007fff6f6754d8 [ 249.273949][ T7370] [ 249.806231][ T7383] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 249.841348][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 250.775512][ T7403] netlink: 'syz.3.989': attribute type 6 has an invalid length. [ 250.802042][ T7403] netlink: 168 bytes leftover after parsing attributes in process `syz.3.989'. [ 251.178179][ T7416] FAULT_INJECTION: forcing a failure. [ 251.178179][ T7416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.241829][ T7416] CPU: 1 PID: 7416 Comm: syz.4.995 Not tainted syzkaller #0 [ 251.249206][ T7416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.259306][ T7416] Call Trace: [ 251.262626][ T7416] [ 251.265588][ T7416] dump_stack_lvl+0x188/0x24e [ 251.270404][ T7416] ? show_regs_print_info+0x12/0x12 [ 251.275665][ T7416] ? load_image+0x400/0x400 [ 251.280216][ T7416] ? __lock_acquire+0x7d10/0x7d10 [ 251.285294][ T7416] should_fail_ex+0x399/0x4d0 [ 251.290051][ T7416] _copy_from_user+0x2c/0x170 [ 251.294778][ T7416] ___sys_sendmsg+0x1c3/0x360 [ 251.299529][ T7416] ? __sys_sendmsg+0x290/0x290 [ 251.304366][ T7416] ? __lock_acquire+0x7d10/0x7d10 [ 251.309468][ T7416] __se_sys_sendmsg+0x1bb/0x2a0 [ 251.314379][ T7416] ? ct_nmi_exit+0x145/0x1c0 [ 251.319014][ T7416] ? __x64_sys_sendmsg+0x80/0x80 [ 251.324026][ T7416] ? lockdep_hardirqs_on+0x94/0x140 [ 251.329289][ T7416] do_syscall_64+0x4c/0xa0 [ 251.333746][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 251.338459][ T7416] ? clear_bhb_loop+0x60/0xb0 [ 251.343186][ T7416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.349145][ T7416] RIP: 0033:0x7f8c03f9acb9 [ 251.353603][ T7416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.373247][ T7416] RSP: 002b:00007f8c04e81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.381718][ T7416] RAX: ffffffffffffffda RBX: 00007f8c04215fa0 RCX: 00007f8c03f9acb9 [ 251.389740][ T7416] RDX: 0000000000008000 RSI: 0000200000001140 RDI: 0000000000000006 [ 251.397745][ T7416] RBP: 00007f8c04e81090 R08: 0000000000000000 R09: 0000000000000000 [ 251.405750][ T7416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.413762][ T7416] R13: 00007f8c04216038 R14: 00007f8c04215fa0 R15: 00007fff6f6754d8 [ 251.421784][ T7416] [ 252.035665][ T7420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.577096][ T7456] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1005'. [ 253.843561][ T7467] FAULT_INJECTION: forcing a failure. [ 253.843561][ T7467] name failslab, interval 1, probability 0, space 0, times 0 [ 253.874814][ T7471] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1011'. [ 253.884015][ T7467] CPU: 0 PID: 7467 Comm: syz.3.1010 Not tainted syzkaller #0 [ 253.894220][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.904325][ T7467] Call Trace: [ 253.907646][ T7467] [ 253.910619][ T7467] dump_stack_lvl+0x188/0x24e [ 253.915376][ T7467] ? show_regs_print_info+0x12/0x12 [ 253.920631][ T7467] ? load_image+0x400/0x400 [ 253.925188][ T7467] ? __might_sleep+0xd0/0xd0 [ 253.929825][ T7467] ? __lock_acquire+0x7d10/0x7d10 [ 253.934918][ T7467] should_fail_ex+0x399/0x4d0 [ 253.939655][ T7467] should_failslab+0x5/0x20 [ 253.944214][ T7467] slab_pre_alloc_hook+0x59/0x310 [ 253.949283][ T7467] kmem_cache_alloc_node+0x5a/0x320 [ 253.954502][ T7467] ? __alloc_skb+0xfc/0x7e0 [ 253.959035][ T7467] __alloc_skb+0xfc/0x7e0 [ 253.963402][ T7467] tcp_stream_alloc_skb+0x3e/0x330 [ 253.968529][ T7467] tcp_sendmsg_locked+0xd2a/0x3f50 [ 253.973654][ T7467] ? verify_lock_unused+0x140/0x140 [ 253.978893][ T7467] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 253.984656][ T7467] ? mark_lock+0x94/0x320 [ 253.989028][ T7467] ? tcp_set_state+0x520/0x520 [ 253.993828][ T7467] tcp_sendmsg+0x2b/0x40 [ 253.998103][ T7467] ? inet_send_prepare+0x260/0x260 [ 254.003246][ T7467] ____sys_sendmsg+0x5be/0x970 [ 254.008053][ T7467] ? __sys_sendmsg_sock+0x30/0x30 [ 254.013111][ T7467] ? __import_iovec+0x315/0x500 [ 254.017983][ T7467] ? import_iovec+0x6f/0xa0 [ 254.022508][ T7467] ___sys_sendmsg+0x2a2/0x360 [ 254.027220][ T7467] ? __sys_sendmsg+0x290/0x290 [ 254.032049][ T7467] ? __lock_acquire+0x7d10/0x7d10 [ 254.037135][ T7467] __se_sys_sendmsg+0x1bb/0x2a0 [ 254.042023][ T7467] ? __x64_sys_sendmsg+0x80/0x80 [ 254.047017][ T7467] ? lockdep_hardirqs_on+0x94/0x140 [ 254.052254][ T7467] do_syscall_64+0x4c/0xa0 [ 254.056702][ T7467] ? clear_bhb_loop+0x60/0xb0 [ 254.061403][ T7467] ? clear_bhb_loop+0x60/0xb0 [ 254.066120][ T7467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.072036][ T7467] RIP: 0033:0x7f2ca319acb9 [ 254.076479][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.096113][ T7467] RSP: 002b:00007f2ca40dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.104549][ T7467] RAX: ffffffffffffffda RBX: 00007f2ca3415fa0 RCX: 00007f2ca319acb9 [ 254.112554][ T7467] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000010 [ 254.120548][ T7467] RBP: 00007f2ca40dc090 R08: 0000000000000000 R09: 0000000000000000 [ 254.128546][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.136559][ T7467] R13: 00007f2ca3416038 R14: 00007f2ca3415fa0 R15: 00007fffcd6d65b8 [ 254.144584][ T7467] [ 254.191593][ T7474] device aaaaaaaaaaaaaaa entered promiscuous mode [ 254.710993][ T7487] netlink: 'syz.4.1018': attribute type 21 has an invalid length. [ 254.751564][ T7489] FAULT_INJECTION: forcing a failure. [ 254.751564][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 254.799890][ T7489] CPU: 1 PID: 7489 Comm: syz.3.1019 Not tainted syzkaller #0 [ 254.807347][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.817451][ T7489] Call Trace: [ 254.820777][ T7489] [ 254.823749][ T7489] dump_stack_lvl+0x188/0x24e [ 254.828483][ T7489] ? show_regs_print_info+0x12/0x12 [ 254.833732][ T7489] ? load_image+0x400/0x400 [ 254.838299][ T7489] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 254.844344][ T7489] should_fail_ex+0x399/0x4d0 [ 254.849095][ T7489] should_failslab+0x5/0x20 [ 254.853656][ T7489] slab_pre_alloc_hook+0x59/0x310 [ 254.855987][ T4275] Bluetooth: hci4: unknown advertising packet type: 0xff [ 254.858715][ T7489] kmem_cache_alloc+0x56/0x2f0 [ 254.858896][ T4275] Bluetooth: hci4: Malformed LE Event: 0x02 [ 254.865907][ T7489] ? skb_clone+0x1e7/0x370 [ 254.865945][ T7489] skb_clone+0x1e7/0x370 [ 254.865977][ T7489] __netlink_deliver_tap+0x3ed/0x800 [ 254.866027][ T7489] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.866060][ T7489] netlink_deliver_tap+0x19c/0x1b0 [ 254.901170][ T7489] netlink_unicast+0x728/0x8d0 [ 254.906014][ T7489] netlink_sendmsg+0x8ad/0xbd0 [ 254.910834][ T7489] ? netlink_getsockopt+0x550/0x550 [ 254.916088][ T7489] ? aa_sock_msg_perm+0x94/0x150 [ 254.921073][ T7489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.926430][ T7489] ? security_socket_sendmsg+0x7c/0xa0 [ 254.931941][ T7489] ? netlink_getsockopt+0x550/0x550 [ 254.937193][ T7489] ____sys_sendmsg+0x5be/0x970 [ 254.942047][ T7489] ? __sys_sendmsg_sock+0x30/0x30 [ 254.947151][ T7489] ? __import_iovec+0x315/0x500 [ 254.952051][ T7489] ? import_iovec+0x6f/0xa0 [ 254.956594][ T7489] ___sys_sendmsg+0x2a2/0x360 [ 254.961325][ T7489] ? __sys_sendmsg+0x290/0x290 [ 254.966168][ T7489] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 254.971962][ T7489] __se_sys_sendmsg+0x1bb/0x2a0 [ 254.976877][ T7489] ? __x64_sys_sendmsg+0x80/0x80 [ 254.981882][ T7489] ? syscall_enter_from_user_mode+0x2a/0x80 [ 254.987817][ T7489] do_syscall_64+0x4c/0xa0 [ 254.992274][ T7489] ? clear_bhb_loop+0x60/0xb0 [ 254.997082][ T7489] ? clear_bhb_loop+0x60/0xb0 [ 255.001808][ T7489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.007744][ T7489] RIP: 0033:0x7f2ca319acb9 [ 255.012203][ T7489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.031942][ T7489] RSP: 002b:00007f2ca40dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.040441][ T7489] RAX: ffffffffffffffda RBX: 00007f2ca3415fa0 RCX: 00007f2ca319acb9 [ 255.048453][ T7489] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 255.056475][ T7489] RBP: 00007f2ca40dc090 R08: 0000000000000000 R09: 0000000000000000 [ 255.064496][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.072508][ T7489] R13: 00007f2ca3416038 R14: 00007f2ca3415fa0 R15: 00007fffcd6d65b8 [ 255.080536][ T7489] [ 255.112379][ T7489] netlink: 'syz.3.1019': attribute type 2 has an invalid length. [ 255.123839][ T7489] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1019'. [ 255.697328][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.703691][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.399928][ T7537] netlink: 'syz.1.1037': attribute type 21 has an invalid length. [ 256.408139][ T7537] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1037'. [ 256.431850][ T7537] netlink: 'syz.1.1037': attribute type 5 has an invalid length. [ 256.441560][ T7537] netlink: 'syz.1.1037': attribute type 6 has an invalid length. [ 256.457551][ T7537] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1037'. [ 256.500234][ T7539] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 256.624640][ T7542] netlink: 'syz.4.1038': attribute type 29 has an invalid length. [ 259.045604][ T7601] netlink: 'syz.2.1059': attribute type 21 has an invalid length. [ 259.105046][ T7601] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1059'. [ 259.365462][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 259.841391][ T7621] sock: sock_set_timeout: `syz.4.1068' (pid 7621) tries to set negative timeout [ 263.092129][ T7655] netlink: 'syz.3.1079': attribute type 17 has an invalid length. [ 263.106966][ T7655] netlink: 'syz.3.1079': attribute type 16 has an invalid length. [ 263.121003][ T7655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1079'. [ 263.137797][ T7659] netlink: 'syz.0.1081': attribute type 21 has an invalid length. [ 263.279239][ T7658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1080'. [ 263.303584][ T7658] netlink: 'syz.4.1080': attribute type 39 has an invalid length. [ 263.374731][ T7658] device veth0_macvtap left promiscuous mode [ 263.390136][ T4275] Bluetooth: hci0: unknown advertising packet type: 0xff [ 263.390209][ T4275] Bluetooth: hci0: Malformed LE Event: 0x02 [ 263.623161][ T7660] netlink: 'syz.4.1080': attribute type 2 has an invalid length. [ 263.635218][ T7660] netlink: 'syz.4.1080': attribute type 8 has an invalid length. [ 263.643325][ T7660] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1080'. [ 263.664015][ T7664] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1082'. [ 265.064407][ T7700] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 265.093257][ T7700] team0: Device hsr0 is up. Set it down before adding it as a team port [ 265.805860][ T7723] netlink: 'syz.2.1102': attribute type 21 has an invalid length. [ 265.867598][ T7725] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1103'. [ 265.897894][ T7725] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 266.368605][ T7735] netlink: 'syz.0.1106': attribute type 21 has an invalid length. [ 266.400093][ T7735] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1106'. [ 266.557021][ T7743] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1108'. [ 266.857467][ T7753] FAULT_INJECTION: forcing a failure. [ 266.857467][ T7753] name failslab, interval 1, probability 0, space 0, times 0 [ 266.873807][ T7753] CPU: 0 PID: 7753 Comm: syz.2.1112 Not tainted syzkaller #0 [ 266.881260][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.891455][ T7753] Call Trace: [ 266.894768][ T7753] [ 266.897736][ T7753] dump_stack_lvl+0x188/0x24e [ 266.902479][ T7753] ? show_regs_print_info+0x12/0x12 [ 266.907733][ T7753] ? load_image+0x400/0x400 [ 266.912290][ T7753] ? __might_sleep+0xd0/0xd0 [ 266.916928][ T7753] ? __lock_acquire+0x7d10/0x7d10 [ 266.921997][ T7753] ? aa_file_perm+0x3ea/0xf00 [ 266.926729][ T7753] should_fail_ex+0x399/0x4d0 [ 266.931486][ T7753] should_failslab+0x5/0x20 [ 266.936056][ T7753] slab_pre_alloc_hook+0x59/0x310 [ 266.941125][ T7753] ? kernfs_fop_write_iter+0x155/0x520 [ 266.946631][ T7753] __kmem_cache_alloc_node+0x4f/0x260 [ 266.952058][ T7753] ? kernfs_fop_write_iter+0x155/0x520 [ 266.957570][ T7753] __kmalloc+0xa0/0x240 [ 266.961782][ T7753] kernfs_fop_write_iter+0x155/0x520 [ 266.967139][ T7753] vfs_write+0x4b1/0xa30 [ 266.971456][ T7753] ? file_end_write+0x250/0x250 [ 266.976368][ T7753] ? __fget_files+0x43d/0x4b0 [ 266.981120][ T7753] ? __fdget_pos+0x2ae/0x360 [ 266.985786][ T7753] ? ksys_write+0x71/0x250 [ 266.990258][ T7753] ksys_write+0x14c/0x250 [ 266.994658][ T7753] ? __ia32_sys_read+0x80/0x80 [ 266.999492][ T7753] ? lockdep_hardirqs_on+0x94/0x140 [ 267.004758][ T7753] do_syscall_64+0x4c/0xa0 [ 267.009232][ T7753] ? clear_bhb_loop+0x60/0xb0 [ 267.013958][ T7753] ? clear_bhb_loop+0x60/0xb0 [ 267.018681][ T7753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.024620][ T7753] RIP: 0033:0x7ff8c7b9acb9 [ 267.029079][ T7753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.048733][ T7753] RSP: 002b:00007ff8c8a9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.057197][ T7753] RAX: ffffffffffffffda RBX: 00007ff8c7e16090 RCX: 00007ff8c7b9acb9 [ 267.065234][ T7753] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000006 [ 267.073247][ T7753] RBP: 00007ff8c8a9b090 R08: 0000000000000000 R09: 0000000000000000 [ 267.081280][ T7753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.089292][ T7753] R13: 00007ff8c7e16128 R14: 00007ff8c7e16090 R15: 00007ffed402add8 [ 267.097321][ T7753] [ 267.506465][ T7763] netlink: 'syz.0.1115': attribute type 10 has an invalid length. [ 267.567468][ T7763] bridge0: port 3(team0) entered disabled state [ 267.645829][ T7763] device team0 left promiscuous mode [ 267.651217][ T7763] device team_slave_1 left promiscuous mode [ 267.665568][ T7763] bridge0: port 3(team0) entered disabled state [ 267.698851][ T7763] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.716976][ T7763] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.743526][ T7768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 267.794796][ T7766] device veth0_macvtap left promiscuous mode [ 268.019116][ T7779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 268.216958][ T7784] validate_nla: 3 callbacks suppressed [ 268.216976][ T7784] netlink: 'syz.1.1122': attribute type 21 has an invalid length. [ 268.513089][ T7794] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1126'. [ 268.645514][ T7794] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 269.731755][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 269.900122][ T7822] netlink: 'syz.3.1136': attribute type 39 has an invalid length. [ 269.930168][ T7822] device veth0_macvtap left promiscuous mode [ 270.333773][ T7825] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 270.356073][ T7825] netlink: 'syz.3.1136': attribute type 8 has an invalid length. [ 270.379609][ T7825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 270.762359][ T7844] netlink: 'syz.4.1145': attribute type 21 has an invalid length. [ 273.825100][ T7873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1156'. [ 273.836092][ T7874] netlink: 'syz.1.1156': attribute type 39 has an invalid length. [ 273.848535][ T7874] device veth0_macvtap left promiscuous mode [ 274.042652][ T7876] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 274.067840][ T7876] device team0 left promiscuous mode [ 274.081915][ T7876] device team_slave_1 left promiscuous mode [ 274.403389][ T7876] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.509468][ T7876] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.525696][ T7879] netlink: 'syz.4.1158': attribute type 21 has an invalid length. [ 274.548996][ T7879] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1158'. [ 275.227203][ T7914] netlink: 'syz.0.1168': attribute type 21 has an invalid length. [ 275.622053][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'. [ 275.660646][ T7920] netlink: 'syz.2.1171': attribute type 39 has an invalid length. [ 276.099635][ T7934] netlink: 'syz.4.1177': attribute type 21 has an invalid length. [ 276.124948][ T7934] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1177'. [ 276.398509][ T7942] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 276.449126][ T7942] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1180'. [ 276.600767][ T7942] netlink: 'syz.2.1180': attribute type 21 has an invalid length. [ 276.632852][ T7942] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1180'. [ 277.578275][ T7973] netlink: 'syz.3.1189': attribute type 21 has an invalid length. [ 277.597536][ T7971] netlink: 'syz.0.1191': attribute type 21 has an invalid length. [ 277.608864][ T7971] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1191'. [ 277.979455][ T4275] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 277.979896][ T4275] Bluetooth: hci3: hardware error 0x40 [ 279.436323][ T8000] validate_nla: 1 callbacks suppressed [ 279.436344][ T8000] netlink: 'syz.0.1200': attribute type 39 has an invalid length. [ 279.767525][ T8008] netlink: 'syz.4.1204': attribute type 21 has an invalid length. [ 279.806951][ T8008] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1204'. [ 279.969098][ T8013] netlink: 'syz.1.1203': attribute type 21 has an invalid length. [ 280.016559][ T8013] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1203'. [ 280.165574][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 280.374367][ T8019] netlink: 'syz.3.1207': attribute type 21 has an invalid length. [ 280.666656][ T8024] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 280.993038][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.062165][ T8024] bond0: (slave team0): Enslaving as an active interface with an up link [ 282.123959][ T8052] netlink: 'syz.3.1220': attribute type 21 has an invalid length. [ 282.145110][ T8052] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1220'. [ 282.992096][ T8082] netlink: 'syz.1.1225': attribute type 10 has an invalid length. [ 283.382064][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.408870][ T8082] bond0: (slave team0): Enslaving as an active interface with an up link [ 283.426989][ T8079] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 284.218329][ T8106] netlink: 'syz.3.1234': attribute type 21 has an invalid length. [ 284.238129][ T8106] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1234'. [ 284.447813][ T8112] tipc: Started in network mode [ 284.476562][ T8112] tipc: Node identity 9215a268, cluster identity 4711 [ 284.504825][ T8112] tipc: Node number set to 2450891368 [ 285.281710][ T8139] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1244'. [ 285.496384][ T8152] netlink: 'syz.2.1249': attribute type 21 has an invalid length. [ 285.521552][ T8152] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1249'. [ 285.540154][ T8151] netlink: 'syz.0.1250': attribute type 21 has an invalid length. [ 285.555020][ T8151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1250'. [ 285.812212][ T8163] FAULT_INJECTION: forcing a failure. [ 285.812212][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 285.825604][ T8163] CPU: 1 PID: 8163 Comm: syz.0.1255 Not tainted syzkaller #0 [ 285.833018][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.843118][ T8163] Call Trace: [ 285.846437][ T8163] [ 285.849409][ T8163] dump_stack_lvl+0x188/0x24e [ 285.854163][ T8163] ? show_regs_print_info+0x12/0x12 [ 285.859417][ T8163] ? load_image+0x400/0x400 [ 285.863993][ T8163] should_fail_ex+0x399/0x4d0 [ 285.868725][ T8163] should_failslab+0x5/0x20 [ 285.873277][ T8163] slab_pre_alloc_hook+0x59/0x310 [ 285.878347][ T8163] kmem_cache_alloc_node+0x5a/0x320 [ 285.883593][ T8163] ? lockdep_hardirqs_on+0x94/0x140 [ 285.888844][ T8163] ? __alloc_skb+0xfc/0x7e0 [ 285.893434][ T8163] __alloc_skb+0xfc/0x7e0 [ 285.897819][ T8163] ? tipc_net+0x45/0x270 [ 285.902115][ T8163] tipc_buf_acquire+0x27/0xd0 [ 285.906833][ T8163] tipc_named_withdraw+0x1d7/0x760 [ 285.911986][ T8163] tipc_nametbl_withdraw+0xc8/0x280 [ 285.917249][ T8163] ? tipc_group_self+0x22/0x1c0 [ 285.922149][ T8163] tipc_sk_leave+0x44f/0x4d0 [ 285.926787][ T8163] ? __tipc_shutdown+0x1530/0x1530 [ 285.932032][ T8163] ? _local_bh_enable+0xa0/0xa0 [ 285.936935][ T8163] tipc_release+0x34d/0x2270 [ 285.941613][ T8163] ? tipc_sock_destruct+0x170/0x170 [ 285.946886][ T8163] ? lock_chain_count+0x20/0x20 [ 285.951793][ T8163] ? rcu_is_watching+0x11/0xa0 [ 285.956633][ T8163] sock_close+0xd5/0x240 [ 285.960970][ T8163] ? sock_mmap+0x90/0x90 [ 285.965267][ T8163] __fput+0x22c/0x920 [ 285.969320][ T8163] task_work_run+0x1d0/0x260 [ 285.973967][ T8163] ? task_work_cancel+0x220/0x220 [ 285.979055][ T8163] ? exit_to_user_mode_loop+0x3b/0x110 [ 285.984586][ T8163] exit_to_user_mode_loop+0xe6/0x110 [ 285.989937][ T8163] exit_to_user_mode_prepare+0xee/0x180 [ 285.995559][ T8163] syscall_exit_to_user_mode+0x16/0x40 [ 286.001072][ T8163] do_syscall_64+0x58/0xa0 [ 286.005544][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 286.010285][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 286.015016][ T8163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.020992][ T8163] RIP: 0033:0x7f644d79acb9 [ 286.025459][ T8163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.045133][ T8163] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 286.053595][ T8163] RAX: 0000000000000000 RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 286.061621][ T8163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 286.069645][ T8163] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 286.077668][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.085687][ T8163] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 286.093722][ T8163] [ 286.096899][ T8163] tipc: Withdrawal distribution failure [ 286.648838][ T8186] netlink: 'syz.3.1264': attribute type 21 has an invalid length. [ 286.668616][ T8186] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1264'. [ 286.925931][ T8192] netlink: 'syz.0.1262': attribute type 10 has an invalid length. [ 286.975216][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1262'. [ 287.035472][ T8192] device ipvlan1 entered promiscuous mode [ 287.137901][ T8192] bridge0: port 3(ipvlan1) entered blocking state [ 287.157092][ T8192] bridge0: port 3(ipvlan1) entered disabled state [ 287.263820][ T8192] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 287.413886][ T8197] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 288.569074][ T8197] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 289.767968][ T8247] FAULT_INJECTION: forcing a failure. [ 289.767968][ T8247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.830104][ T8247] CPU: 1 PID: 8247 Comm: syz.0.1284 Not tainted syzkaller #0 [ 289.837576][ T8247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.847764][ T8247] Call Trace: [ 289.851084][ T8247] [ 289.854060][ T8247] dump_stack_lvl+0x188/0x24e [ 289.858811][ T8247] ? show_regs_print_info+0x12/0x12 [ 289.864068][ T8247] ? load_image+0x400/0x400 [ 289.868635][ T8247] ? __lock_acquire+0x7d10/0x7d10 [ 289.873731][ T8247] should_fail_ex+0x399/0x4d0 [ 289.878484][ T8247] _copy_from_user+0x2c/0x170 [ 289.883227][ T8247] __sys_bpf+0x2ea/0x780 [ 289.887542][ T8247] ? bpf_link_show_fdinfo+0x380/0x380 [ 289.893010][ T8247] ? lock_chain_count+0x20/0x20 [ 289.897961][ T8247] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 289.904026][ T8247] __x64_sys_bpf+0x78/0x90 [ 289.908532][ T8247] do_syscall_64+0x4c/0xa0 [ 289.913007][ T8247] ? clear_bhb_loop+0x60/0xb0 [ 289.917759][ T8247] ? clear_bhb_loop+0x60/0xb0 [ 289.922495][ T8247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.928442][ T8247] RIP: 0033:0x7f644d79acb9 [ 289.932905][ T8247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.952566][ T8247] RSP: 002b:00007f644e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.961078][ T8247] RAX: ffffffffffffffda RBX: 00007f644da16090 RCX: 00007f644d79acb9 [ 289.969112][ T8247] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 289.977226][ T8247] RBP: 00007f644e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.980502][ T8242] netlink: 'syz.3.1282': attribute type 21 has an invalid length. [ 289.985228][ T8247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.985259][ T8247] R13: 00007f644da16128 R14: 00007f644da16090 R15: 00007ffea0751708 [ 289.985292][ T8247] [ 290.017761][ T8242] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1282'. [ 290.056952][ T8250] netlink: 'syz.4.1286': attribute type 10 has an invalid length. [ 290.074881][ T8250] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1286'. [ 291.297528][ T8284] netlink: 'syz.4.1298': attribute type 21 has an invalid length. [ 291.337024][ T8284] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1298'. [ 291.402643][ T8293] FAULT_INJECTION: forcing a failure. [ 291.402643][ T8293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.475391][ T8293] CPU: 1 PID: 8293 Comm: syz.0.1300 Not tainted syzkaller #0 [ 291.482871][ T8293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.492972][ T8293] Call Trace: [ 291.496300][ T8293] [ 291.499268][ T8293] dump_stack_lvl+0x188/0x24e [ 291.504014][ T8293] ? show_regs_print_info+0x12/0x12 [ 291.509303][ T8293] ? load_image+0x400/0x400 [ 291.513867][ T8293] ? __lock_acquire+0x7d10/0x7d10 [ 291.519038][ T8293] should_fail_ex+0x399/0x4d0 [ 291.524129][ T8293] _copy_from_user+0x2c/0x170 [ 291.528897][ T8293] ___sys_sendmsg+0x1c3/0x360 [ 291.533748][ T8293] ? __sys_sendmsg+0x290/0x290 [ 291.538590][ T8293] ? __lock_acquire+0x7d10/0x7d10 [ 291.543696][ T8293] __se_sys_sendmsg+0x1bb/0x2a0 [ 291.548605][ T8293] ? __x64_sys_sendmsg+0x80/0x80 [ 291.553629][ T8293] ? lockdep_hardirqs_on+0x94/0x140 [ 291.558901][ T8293] do_syscall_64+0x4c/0xa0 [ 291.563376][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 291.568100][ T8293] ? clear_bhb_loop+0x60/0xb0 [ 291.572834][ T8293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.578775][ T8293] RIP: 0033:0x7f644d79acb9 [ 291.583231][ T8293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.602981][ T8293] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.611449][ T8293] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 291.619559][ T8293] RDX: 0000000004000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 291.627585][ T8293] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 291.635600][ T8293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.643607][ T8293] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 291.651645][ T8293] [ 292.572582][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1314'. [ 292.632300][ T8329] netlink: 'syz.4.1314': attribute type 39 has an invalid length. [ 292.666207][ T8332] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 292.719493][ T8332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1315'. [ 292.760084][ T8329] netlink: 'syz.4.1314': attribute type 2 has an invalid length. [ 292.778974][ T8329] netlink: 'syz.4.1314': attribute type 8 has an invalid length. [ 292.791561][ T8329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1314'. [ 292.898382][ T8336] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1317'. [ 293.366794][ T8359] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 293.653429][ T8370] netlink: 'syz.0.1330': attribute type 21 has an invalid length. [ 293.714546][ T8370] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1330'. [ 293.964084][ T8383] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1334'. [ 293.992171][ T8390] FAULT_INJECTION: forcing a failure. [ 293.992171][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 293.997586][ T8383] netlink: 'syz.4.1334': attribute type 39 has an invalid length. [ 294.024618][ T8390] CPU: 1 PID: 8390 Comm: syz.0.1337 Not tainted syzkaller #0 [ 294.032101][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.042215][ T8390] Call Trace: [ 294.045551][ T8390] [ 294.048527][ T8390] dump_stack_lvl+0x188/0x24e [ 294.053270][ T8390] ? show_regs_print_info+0x12/0x12 [ 294.058531][ T8390] ? load_image+0x400/0x400 [ 294.063081][ T8390] ? __might_sleep+0xd0/0xd0 [ 294.067749][ T8390] ? __lock_acquire+0x7d10/0x7d10 [ 294.072833][ T8390] should_fail_ex+0x399/0x4d0 [ 294.077570][ T8390] should_failslab+0x5/0x20 [ 294.082128][ T8390] slab_pre_alloc_hook+0x59/0x310 [ 294.087213][ T8390] ? __get_vm_area_node+0x122/0x330 [ 294.092455][ T8390] __kmem_cache_alloc_node+0x4f/0x260 [ 294.097867][ T8390] ? __get_vm_area_node+0x122/0x330 [ 294.103099][ T8390] kmalloc_node_trace+0x22/0xe0 [ 294.107997][ T8390] __get_vm_area_node+0x122/0x330 [ 294.113061][ T8390] ? __local_bh_enable_ip+0x136/0x1c0 [ 294.118469][ T8390] __vmalloc_node_range+0x357/0x13b0 [ 294.123891][ T8390] ? netlink_sendmsg+0x5ec/0xbd0 [ 294.128876][ T8390] ? netlink_insert+0x1034/0x13c0 [ 294.133967][ T8390] ? free_vm_area+0x50/0x50 [ 294.138521][ T8390] ? netlink_sendmsg+0x5ec/0xbd0 [ 294.143497][ T8390] vmalloc+0x75/0x80 [ 294.147431][ T8390] ? netlink_sendmsg+0x5ec/0xbd0 [ 294.152408][ T8390] netlink_sendmsg+0x5ec/0xbd0 [ 294.157228][ T8390] ? netlink_getsockopt+0x550/0x550 [ 294.162466][ T8390] ? aa_file_perm+0x3ea/0xf00 [ 294.167178][ T8390] ? aa_file_perm+0x112/0xf00 [ 294.171879][ T8390] ? aa_sock_msg_perm+0x94/0x150 [ 294.176859][ T8390] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.182177][ T8390] ? security_socket_sendmsg+0x7c/0xa0 [ 294.187691][ T8390] sock_write_iter+0x2d9/0x3e0 [ 294.192507][ T8390] ? sock_read_iter+0x3a0/0x3a0 [ 294.197448][ T8390] ? common_file_perm+0x171/0x1c0 [ 294.202554][ T8390] vfs_write+0x4b1/0xa30 [ 294.206888][ T8390] ? file_end_write+0x250/0x250 [ 294.211801][ T8390] ? __fget_files+0x43d/0x4b0 [ 294.216530][ T8390] ? __fdget_pos+0x1d4/0x360 [ 294.221255][ T8390] ? ksys_write+0x71/0x250 [ 294.225725][ T8390] ksys_write+0x14c/0x250 [ 294.230162][ T8390] ? __ia32_sys_read+0x80/0x80 [ 294.234972][ T8390] ? lockdep_hardirqs_on+0x94/0x140 [ 294.240227][ T8390] do_syscall_64+0x4c/0xa0 [ 294.244683][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 294.249400][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 294.254122][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.260052][ T8390] RIP: 0033:0x7f644d79acb9 [ 294.264516][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.284162][ T8390] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.292618][ T8390] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 294.300619][ T8390] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005 [ 294.308737][ T8390] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 294.316818][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.324833][ T8390] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 294.332876][ T8390] [ 294.341580][ T8388] netlink: 'syz.1.1336': attribute type 21 has an invalid length. [ 294.361062][ T8388] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1336'. [ 294.401155][ T8390] syz.0.1337: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 294.417721][ T8390] CPU: 0 PID: 8390 Comm: syz.0.1337 Not tainted syzkaller #0 [ 294.425200][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.435317][ T8390] Call Trace: [ 294.438659][ T8390] [ 294.441651][ T8390] dump_stack_lvl+0x188/0x24e [ 294.446403][ T8390] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 294.452892][ T8390] ? show_regs_print_info+0x12/0x12 [ 294.458166][ T8390] ? load_image+0x400/0x400 [ 294.462736][ T8390] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 294.469220][ T8390] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 294.475805][ T8390] warn_alloc+0x242/0x330 [ 294.480213][ T8390] ? __get_vm_area_node+0x122/0x330 [ 294.485586][ T8390] ? zone_watermark_ok_safe+0x270/0x270 [ 294.491204][ T8390] ? rcu_is_watching+0x11/0xa0 [ 294.496074][ T8390] ? __get_vm_area_node+0x318/0x330 [ 294.501353][ T8390] ? __local_bh_enable_ip+0x136/0x1c0 [ 294.506810][ T8390] __vmalloc_node_range+0x37c/0x13b0 [ 294.512169][ T8390] ? netlink_insert+0x1034/0x13c0 [ 294.517295][ T8390] ? free_vm_area+0x50/0x50 [ 294.521871][ T8390] ? netlink_sendmsg+0x5ec/0xbd0 [ 294.526871][ T8390] vmalloc+0x75/0x80 [ 294.530829][ T8390] ? netlink_sendmsg+0x5ec/0xbd0 [ 294.535828][ T8390] netlink_sendmsg+0x5ec/0xbd0 [ 294.540673][ T8390] ? netlink_getsockopt+0x550/0x550 [ 294.546025][ T8390] ? aa_file_perm+0x3ea/0xf00 [ 294.550756][ T8390] ? aa_file_perm+0x112/0xf00 [ 294.555485][ T8390] ? aa_sock_msg_perm+0x94/0x150 [ 294.560485][ T8390] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 294.565834][ T8390] ? security_socket_sendmsg+0x7c/0xa0 [ 294.571378][ T8390] sock_write_iter+0x2d9/0x3e0 [ 294.576241][ T8390] ? sock_read_iter+0x3a0/0x3a0 [ 294.581191][ T8390] ? common_file_perm+0x171/0x1c0 [ 294.586294][ T8390] vfs_write+0x4b1/0xa30 [ 294.590623][ T8390] ? file_end_write+0x250/0x250 [ 294.595605][ T8390] ? __fget_files+0x43d/0x4b0 [ 294.600372][ T8390] ? __fdget_pos+0x1d4/0x360 [ 294.605031][ T8390] ? ksys_write+0x71/0x250 [ 294.609523][ T8390] ksys_write+0x14c/0x250 [ 294.613930][ T8390] ? __ia32_sys_read+0x80/0x80 [ 294.618774][ T8390] ? lockdep_hardirqs_on+0x94/0x140 [ 294.624065][ T8390] do_syscall_64+0x4c/0xa0 [ 294.628554][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 294.633330][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 294.638082][ T8390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.644042][ T8390] RIP: 0033:0x7f644d79acb9 [ 294.648538][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.668210][ T8390] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.676707][ T8390] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 294.684739][ T8390] RDX: 000000000000fe33 RSI: 0000200000000580 RDI: 0000000000000005 [ 294.692775][ T8390] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 294.700818][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.708859][ T8390] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 294.716924][ T8390] [ 294.739473][ T8395] netlink: 'syz.4.1334': attribute type 2 has an invalid length. [ 294.756156][ T8390] Mem-Info: [ 294.759358][ T8390] active_anon:5873 inactive_anon:0 isolated_anon:0 [ 294.759358][ T8390] active_file:20635 inactive_file:40011 isolated_file:0 [ 294.759358][ T8390] unevictable:768 dirty:217 writeback:0 [ 294.759358][ T8390] slab_reclaimable:21094 slab_unreclaimable:98405 [ 294.759358][ T8390] mapped:30716 shmem:1361 pagetables:628 [ 294.759358][ T8390] sec_pagetables:0 bounce:0 [ 294.759358][ T8390] kernel_misc_reclaimable:0 [ 294.759358][ T8390] free:1308237 free_pcp:10587 free_cma:0 [ 294.777738][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1334'. [ 294.818221][ T8390] Node 0 active_anon:23452kB inactive_anon:0kB active_file:82540kB inactive_file:159836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122880kB dirty:876kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11588kB pagetables:2524kB sec_pagetables:0kB all_unreclaimable? no [ 294.962081][ T8390] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 295.001255][ T8390] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.032448][ T8403] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1340'. [ 295.058005][ T8390] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 295.063983][ T8390] Node 0 DMA32 free:1318712kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23396kB inactive_anon:0kB active_file:82540kB inactive_file:159836kB unevictable:1536kB writepending:876kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:24796kB local_pcp:5120kB free_cma:0kB [ 295.111807][ T8390] lowmem_reserve[]: 0 0 1 1 1 [ 295.118860][ T8390] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.150398][ T8390] lowmem_reserve[]: 0 0 0 0 0 [ 295.155393][ T8390] Node 1 Normal free:3898876kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:6944kB free_cma:0kB [ 295.199034][ T8390] lowmem_reserve[]: 0 0 0 0 0 [ 295.209033][ T8390] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.234626][ T8390] Node 0 DMA32: 1429*4kB (UME) 2099*8kB (UME) 1223*16kB (UME) 565*32kB (UM) 225*64kB (UM) 114*128kB (UME) 52*256kB (UME) 23*512kB (UM) 14*1024kB (UM) 5*2048kB (UM) 288*4096kB (UM) = 1318460kB [ 295.259960][ T8390] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 295.271819][ T8390] Node 1 Normal: 211*4kB (UME) 48*8kB (UME) 35*16kB (UME) 44*32kB (UE) 26*64kB (UME) 10*128kB (UM) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898876kB [ 295.319077][ T8390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.344965][ T8390] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.369404][ T8390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.405444][ T8390] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.435106][ T8390] 62507 total pagecache pages [ 295.460265][ T8390] 0 pages in swap cache [ 295.464488][ T8390] Free swap = 124996kB [ 295.486479][ T8390] Total swap = 124996kB [ 295.499801][ T8390] 2097051 pages RAM [ 295.509933][ T8390] 0 pages HighMem/MovableOnly [ 295.538100][ T8390] 415205 pages reserved [ 295.558198][ T8390] 0 pages cma reserved [ 298.158915][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1374'. [ 298.268667][ T8483] validate_nla: 1 callbacks suppressed [ 298.268805][ T8483] netlink: 'syz.4.1374': attribute type 39 has an invalid length. [ 298.312454][ T8488] netlink: 'syz.4.1374': attribute type 2 has an invalid length. [ 298.394413][ T8488] netlink: 'syz.4.1374': attribute type 8 has an invalid length. [ 298.421581][ T8488] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1374'. [ 298.471603][ T8489] netlink: 'syz.2.1371': attribute type 3 has an invalid length. [ 298.501298][ T8489] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1371'. [ 298.670554][ T8490] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1371'. [ 301.117134][ T8490] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 304.058484][ T8542] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1392'. [ 304.120383][ T8539] netlink: 'syz.1.1392': attribute type 21 has an invalid length. [ 304.138774][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 304.180677][ T8547] netlink: 'syz.2.1394': attribute type 13 has an invalid length. [ 304.239276][ T8547] netlink: 'syz.2.1394': attribute type 58 has an invalid length. [ 304.274885][ T8547] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1394'. [ 304.375255][ T8550] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1395'. [ 304.399059][ T8550] netlink: 'syz.4.1395': attribute type 21 has an invalid length. [ 304.460496][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'. [ 304.610200][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1397'. [ 304.648960][ T8559] netlink: 'syz.1.1397': attribute type 39 has an invalid length. [ 304.685801][ T8557] netlink: 'syz.3.1398': attribute type 21 has an invalid length. [ 304.694022][ T8557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1398'. [ 304.723639][ T8561] FAULT_INJECTION: forcing a failure. [ 304.723639][ T8561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.776744][ T8561] CPU: 1 PID: 8561 Comm: syz.4.1399 Not tainted syzkaller #0 [ 304.784210][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.794322][ T8561] Call Trace: [ 304.797642][ T8561] [ 304.800608][ T8561] dump_stack_lvl+0x188/0x24e [ 304.805348][ T8561] ? show_regs_print_info+0x12/0x12 [ 304.810609][ T8561] ? load_image+0x400/0x400 [ 304.815164][ T8561] ? __lock_acquire+0x7d10/0x7d10 [ 304.820250][ T8561] ? lockdep_hardirqs_on+0x94/0x140 [ 304.825597][ T8561] should_fail_ex+0x399/0x4d0 [ 304.830795][ T8561] strncpy_from_user+0x32/0x350 [ 304.835774][ T8561] bpf_prog_load+0x1f3/0x1560 [ 304.840532][ T8561] ? map_freeze+0x390/0x390 [ 304.845090][ T8561] ? __might_fault+0xa6/0x120 [ 304.849875][ T8561] ? __might_fault+0xa6/0x120 [ 304.854607][ T8561] ? __might_fault+0xc2/0x120 [ 304.859344][ T8561] ? __might_fault+0xa6/0x120 [ 304.864071][ T8561] ? bpf_lsm_bpf+0x5/0x10 [ 304.868450][ T8561] ? security_bpf+0x7a/0xa0 [ 304.873009][ T8561] __sys_bpf+0x5b8/0x780 [ 304.877322][ T8561] ? bpf_link_show_fdinfo+0x380/0x380 [ 304.882762][ T8561] ? lock_chain_count+0x20/0x20 [ 304.887647][ T8561] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 304.893665][ T8561] __x64_sys_bpf+0x78/0x90 [ 304.898122][ T8561] do_syscall_64+0x4c/0xa0 [ 304.902569][ T8561] ? clear_bhb_loop+0x60/0xb0 [ 304.907280][ T8561] ? clear_bhb_loop+0x60/0xb0 [ 304.912022][ T8561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.917986][ T8561] RIP: 0033:0x7f8c03f9acb9 [ 304.922435][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.942065][ T8561] RSP: 002b:00007f8c04e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.950502][ T8561] RAX: ffffffffffffffda RBX: 00007f8c04215fa0 RCX: 00007f8c03f9acb9 [ 304.958503][ T8561] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 304.966501][ T8561] RBP: 00007f8c04e81090 R08: 0000000000000000 R09: 0000000000000000 [ 304.974503][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.982496][ T8561] R13: 00007f8c04216038 R14: 00007f8c04215fa0 R15: 00007fff6f6754d8 [ 304.990509][ T8561] [ 305.202316][ T8570] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1403'. [ 305.267051][ T8570] tc_dump_action: action bad kind [ 305.443360][ T8578] netlink: 'syz.1.1407': attribute type 21 has an invalid length. [ 305.559153][ T8583] netlink: 'syz.2.1409': attribute type 11 has an invalid length. [ 305.582923][ T8583] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1409'. [ 305.621016][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.147187][ T8593] netlink: 'syz.0.1412': attribute type 21 has an invalid length. [ 306.192309][ T8593] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1412'. [ 306.616764][ T8605] netlink: 'syz.4.1414': attribute type 39 has an invalid length. [ 309.089563][ T8608] __nla_validate_parse: 1 callbacks suppressed [ 309.089583][ T8608] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1415'. [ 309.123623][ T8608] netlink: 'syz.1.1415': attribute type 3 has an invalid length. [ 309.132434][ T8608] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1415'. [ 309.484507][ T8611] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 309.558700][ T8621] netlink: 'syz.4.1420': attribute type 21 has an invalid length. [ 309.591029][ T8621] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1420'. [ 310.263684][ T8634] ref_ctr_offset mismatch. inode: 0x5c4 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 310.282106][ T8636] netlink: 'syz.1.1427': attribute type 21 has an invalid length. [ 310.326364][ T8636] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1427'. [ 310.477654][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1428'. [ 310.518738][ T8638] netlink: 'syz.0.1428': attribute type 39 has an invalid length. [ 310.545836][ T8640] FAULT_INJECTION: forcing a failure. [ 310.545836][ T8640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.575201][ T8640] CPU: 0 PID: 8640 Comm: syz.2.1429 Not tainted syzkaller #0 [ 310.582760][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 310.592873][ T8640] Call Trace: [ 310.596209][ T8640] [ 310.599168][ T8640] dump_stack_lvl+0x188/0x24e [ 310.604060][ T8640] ? show_regs_print_info+0x12/0x12 [ 310.609292][ T8640] ? load_image+0x400/0x400 [ 310.613829][ T8640] ? __lock_acquire+0x7d10/0x7d10 [ 310.618892][ T8640] ? __fget_files+0x28/0x4b0 [ 310.623603][ T8640] should_fail_ex+0x399/0x4d0 [ 310.628327][ T8640] _copy_from_user+0x2c/0x170 [ 310.633031][ T8640] generic_map_update_batch+0x4a1/0x810 [ 310.638614][ T8640] ? rcu_read_unlock+0xa0/0xa0 [ 310.643418][ T8640] ? __fdget+0x17c/0x200 [ 310.647695][ T8640] ? rcu_read_unlock+0xa0/0xa0 [ 310.652494][ T8640] bpf_map_do_batch+0x466/0x600 [ 310.657381][ T8640] __sys_bpf+0x6f7/0x780 [ 310.661654][ T8640] ? bpf_link_show_fdinfo+0x380/0x380 [ 310.667165][ T8640] ? lock_chain_count+0x20/0x20 [ 310.672056][ T8640] __x64_sys_bpf+0x78/0x90 [ 310.676504][ T8640] do_syscall_64+0x4c/0xa0 [ 310.680951][ T8640] ? clear_bhb_loop+0x60/0xb0 [ 310.685685][ T8640] ? clear_bhb_loop+0x60/0xb0 [ 310.690431][ T8640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.696363][ T8640] RIP: 0033:0x7ff8c7b9acb9 [ 310.700806][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.720453][ T8640] RSP: 002b:00007ff8c8abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.728898][ T8640] RAX: ffffffffffffffda RBX: 00007ff8c7e15fa0 RCX: 00007ff8c7b9acb9 [ 310.736904][ T8640] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 310.744903][ T8640] RBP: 00007ff8c8abc090 R08: 0000000000000000 R09: 0000000000000000 [ 310.752899][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.760894][ T8640] R13: 00007ff8c7e16038 R14: 00007ff8c7e15fa0 R15: 00007ffed402add8 [ 310.768991][ T8640] [ 311.153799][ T8660] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1435'. [ 311.494417][ T8670] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 311.525811][ T8670] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1441'. [ 311.736542][ T8675] netlink: 'syz.2.1442': attribute type 21 has an invalid length. [ 311.806579][ T8675] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1442'. [ 311.884926][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1444'. [ 311.996503][ T8684] netlink: 'syz.3.1444': attribute type 39 has an invalid length. [ 312.413342][ T8688] netlink: 'syz.3.1447': attribute type 10 has an invalid length. [ 312.438611][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1447'. [ 312.466559][ T8688] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 312.697722][ T8699] netlink: 'syz.4.1453': attribute type 21 has an invalid length. [ 312.780511][ T4275] Bluetooth: hci4: unknown advertising packet type: 0x14 [ 312.780546][ T4275] Bluetooth: hci4: unknown advertising packet type: 0xff [ 312.787770][ T4275] Bluetooth: hci4: Malformed LE Event: 0x02 [ 312.881252][ T8705] netlink: 'syz.3.1454': attribute type 21 has an invalid length. [ 314.161183][ T8734] __nla_validate_parse: 3 callbacks suppressed [ 314.161204][ T8734] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1464'. [ 314.830112][ T8748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1472'. [ 314.853225][ T8752] validate_nla: 5 callbacks suppressed [ 314.853246][ T8752] netlink: 'syz.3.1473': attribute type 21 has an invalid length. [ 314.881825][ T8748] netlink: 'syz.1.1472': attribute type 39 has an invalid length. [ 314.915427][ T8753] netlink: 'syz.1.1472': attribute type 2 has an invalid length. [ 314.923554][ T8753] netlink: 'syz.1.1472': attribute type 8 has an invalid length. [ 314.936769][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1472'. [ 314.980346][ T4275] Bluetooth: hci1: unknown advertising packet type: 0x14 [ 314.980418][ T4275] Bluetooth: hci1: unknown advertising packet type: 0xff [ 314.988090][ T4275] Bluetooth: hci1: Malformed LE Event: 0x02 [ 315.427766][ T8761] netlink: 'syz.0.1476': attribute type 21 has an invalid length. [ 315.502472][ T8761] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1476'. [ 316.372567][ T8785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1486'. [ 316.397361][ T8785] netlink: 'syz.1.1486': attribute type 39 has an invalid length. [ 316.493544][ T8785] netlink: 'syz.1.1486': attribute type 2 has an invalid length. [ 316.515301][ T8785] netlink: 'syz.1.1486': attribute type 8 has an invalid length. [ 316.529150][ T8785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1486'. [ 317.183500][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.189987][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239335][ T8801] netlink: 'syz.1.1492': attribute type 21 has an invalid length. [ 317.726999][ T8813] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 317.758984][ T8813] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1496'. [ 318.492154][ T8826] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.1499'. [ 318.595155][ T8830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1500'. [ 318.727057][ T8830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1500'. [ 320.509406][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1516'. [ 320.548039][ T8873] validate_nla: 4 callbacks suppressed [ 320.548056][ T8873] netlink: 'syz.4.1516': attribute type 39 has an invalid length. [ 320.628486][ T8873] netlink: 'syz.4.1516': attribute type 2 has an invalid length. [ 320.636868][ T8873] netlink: 'syz.4.1516': attribute type 8 has an invalid length. [ 320.644763][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1516'. [ 320.893412][ T8886] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1521'. [ 322.510016][ T8904] netlink: 'syz.4.1528': attribute type 39 has an invalid length. [ 323.157380][ T8918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1532'. [ 323.179312][ T8917] netlink: 'syz.1.1532': attribute type 39 has an invalid length. [ 323.196754][ T8916] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 323.252676][ T8916] netlink: 'syz.1.1532': attribute type 8 has an invalid length. [ 323.268673][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1532'. [ 324.292397][ T8936] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 324.362561][ T8936] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1540'. [ 324.399685][ T8940] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1542'. [ 324.551911][ T8942] netlink: 'syz.3.1543': attribute type 21 has an invalid length. [ 324.564937][ T8942] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1543'. [ 324.674148][ T8949] netlink: 'syz.2.1545': attribute type 21 has an invalid length. [ 325.472752][ T8972] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1554'. [ 326.437659][ T8980] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1557'. [ 326.553598][ T8984] validate_nla: 1 callbacks suppressed [ 326.553615][ T8984] netlink: 'syz.0.1559': attribute type 21 has an invalid length. [ 326.585471][ T8984] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1559'. [ 326.604234][ T8985] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1558'. [ 326.988736][ T9001] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 327.127922][ T9001] bond0: (slave team0): Releasing backup interface [ 327.180931][ T9001] team0 (unregistering): Port device team_slave_1 removed [ 327.214760][ T9004] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1566'. [ 327.230035][ T9008] netlink: 'syz.1.1569': attribute type 21 has an invalid length. [ 327.242141][ T9008] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1569'. [ 328.073984][ T9022] netlink: 'syz.4.1574': attribute type 21 has an invalid length. [ 328.112454][ T9022] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1574'. [ 329.667814][ T9045] netlink: 'syz.1.1582': attribute type 21 has an invalid length. [ 329.685120][ T9045] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1582'. [ 331.890226][ T9054] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1587'. [ 333.426903][ T9087] FAULT_INJECTION: forcing a failure. [ 333.426903][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.465129][ T9087] CPU: 1 PID: 9087 Comm: syz.1.1596 Not tainted syzkaller #0 [ 333.472589][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.482723][ T9087] Call Trace: [ 333.486047][ T9087] [ 333.489015][ T9087] dump_stack_lvl+0x188/0x24e [ 333.493749][ T9087] ? show_regs_print_info+0x12/0x12 [ 333.499004][ T9087] ? load_image+0x400/0x400 [ 333.503583][ T9087] ? __might_fault+0xa6/0x120 [ 333.508332][ T9087] should_fail_ex+0x399/0x4d0 [ 333.513083][ T9087] copyin+0x1b/0x120 [ 333.517048][ T9087] _copy_from_iter+0x447/0x1130 [ 333.521970][ T9087] ? copyout_mc+0x110/0x110 [ 333.526532][ T9087] ? __virt_addr_valid+0x188/0x540 [ 333.531701][ T9087] ? __virt_addr_valid+0x188/0x540 [ 333.536874][ T9087] ? __virt_addr_valid+0x465/0x540 [ 333.542055][ T9087] ? __check_object_size+0x500/0xa40 [ 333.547403][ T9087] pfkey_sendmsg+0x1ff/0x1090 [ 333.552146][ T9087] ? __might_sleep+0xd0/0xd0 [ 333.556787][ T9087] ? pfkey_release+0x310/0x310 [ 333.561595][ T9087] ? aa_sk_perm+0x81f/0x950 [ 333.566139][ T9087] ? __might_fault+0xa6/0x120 [ 333.570843][ T9087] ? aa_af_perm+0x340/0x340 [ 333.575376][ T9087] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 333.581839][ T9087] ? aa_sock_msg_perm+0x94/0x150 [ 333.586807][ T9087] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.592119][ T9087] ? security_socket_sendmsg+0x7c/0xa0 [ 333.597613][ T9087] ? pfkey_release+0x310/0x310 [ 333.602402][ T9087] ____sys_sendmsg+0x5be/0x970 [ 333.607211][ T9087] ? __sys_sendmsg_sock+0x30/0x30 [ 333.612274][ T9087] ? __import_iovec+0x315/0x500 [ 333.617164][ T9087] ? import_iovec+0x6f/0xa0 [ 333.621711][ T9087] ___sys_sendmsg+0x2a2/0x360 [ 333.626435][ T9087] ? __sys_sendmsg+0x290/0x290 [ 333.631240][ T9087] ? __lock_acquire+0x7d10/0x7d10 [ 333.636348][ T9087] __se_sys_sendmsg+0x1bb/0x2a0 [ 333.641244][ T9087] ? __x64_sys_sendmsg+0x80/0x80 [ 333.646227][ T9087] ? lockdep_hardirqs_on+0x94/0x140 [ 333.651472][ T9087] do_syscall_64+0x4c/0xa0 [ 333.655914][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 333.660616][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 333.665318][ T9087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.671243][ T9087] RIP: 0033:0x7fad5299acb9 [ 333.675699][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.695337][ T9087] RSP: 002b:00007fad53944028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.703780][ T9087] RAX: ffffffffffffffda RBX: 00007fad52c15fa0 RCX: 00007fad5299acb9 [ 333.711776][ T9087] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 333.719772][ T9087] RBP: 00007fad53944090 R08: 0000000000000000 R09: 0000000000000000 [ 333.727781][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.735790][ T9087] R13: 00007fad52c16038 R14: 00007fad52c15fa0 R15: 00007ffe13f37b18 [ 333.743798][ T9087] [ 333.858851][ T9095] netlink: 'syz.0.1599': attribute type 21 has an invalid length. [ 333.914650][ T9095] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1599'. [ 333.942795][ T9088] IPv6: Can't replace route, no match found [ 334.261966][ T9102] netlink: 'syz.0.1602': attribute type 21 has an invalid length. [ 334.318315][ T4275] Bluetooth: hci0: unknown advertising packet type: 0x14 [ 334.318364][ T4275] Bluetooth: hci0: unknown advertising packet type: 0xff [ 334.326453][ T4275] Bluetooth: hci0: Malformed LE Event: 0x02 [ 335.181151][ T9122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1609'. [ 335.206538][ T9122] netlink: 'syz.3.1609': attribute type 39 has an invalid length. [ 335.246407][ T9126] FAULT_INJECTION: forcing a failure. [ 335.246407][ T9126] name failslab, interval 1, probability 0, space 0, times 0 [ 335.248902][ T9122] netlink: 'syz.3.1609': attribute type 2 has an invalid length. [ 335.297065][ T9122] netlink: 'syz.3.1609': attribute type 8 has an invalid length. [ 335.314572][ T9122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1609'. [ 335.317936][ T9126] CPU: 0 PID: 9126 Comm: syz.4.1610 Not tainted syzkaller #0 [ 335.317964][ T9126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.317978][ T9126] Call Trace: [ 335.317985][ T9126] [ 335.317995][ T9126] dump_stack_lvl+0x188/0x24e [ 335.318034][ T9126] ? show_regs_print_info+0x12/0x12 [ 335.318065][ T9126] ? load_image+0x400/0x400 [ 335.318093][ T9126] ? __might_sleep+0xd0/0xd0 [ 335.318116][ T9126] ? __lock_acquire+0x7d10/0x7d10 [ 335.318153][ T9126] should_fail_ex+0x399/0x4d0 [ 335.318196][ T9126] should_failslab+0x5/0x20 [ 335.318229][ T9126] slab_pre_alloc_hook+0x59/0x310 [ 335.318253][ T9126] ? __local_bh_enable_ip+0x136/0x1c0 [ 335.318282][ T9126] kmem_cache_alloc+0x56/0x2f0 [ 335.318304][ T9126] ? kcm_ioctl+0x9d5/0x1090 [ 335.318342][ T9126] kcm_ioctl+0x9d5/0x1090 [ 335.318378][ T9126] ? tomoyo_path_number_perm+0x205/0x650 [ 335.318408][ T9126] ? kcm_release+0x5b0/0x5b0 [ 335.318436][ T9126] ? tomoyo_path_number_perm+0x5a4/0x650 [ 335.318470][ T9126] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 335.318518][ T9126] sock_do_ioctl+0xfb/0x320 [ 335.318557][ T9126] ? sock_show_fdinfo+0xb0/0xb0 [ 335.318613][ T9126] sock_ioctl+0x4d2/0x710 [ 335.318654][ T9126] ? sock_poll+0x410/0x410 [ 335.318702][ T9126] ? bpf_lsm_file_ioctl+0x5/0x10 [ 335.318733][ T9126] ? security_file_ioctl+0x7c/0xa0 [ 335.318762][ T9126] ? sock_poll+0x410/0x410 [ 335.463318][ T9126] __se_sys_ioctl+0xfa/0x170 [ 335.467984][ T9126] do_syscall_64+0x4c/0xa0 [ 335.472463][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 335.477194][ T9126] ? clear_bhb_loop+0x60/0xb0 [ 335.481932][ T9126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.487871][ T9126] RIP: 0033:0x7f8c03f9acb9 [ 335.492335][ T9126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.512111][ T9126] RSP: 002b:00007f8c04e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.520581][ T9126] RAX: ffffffffffffffda RBX: 00007f8c04216090 RCX: 00007f8c03f9acb9 [ 335.528610][ T9126] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000003 [ 335.536629][ T9126] RBP: 00007f8c04e60090 R08: 0000000000000000 R09: 0000000000000000 [ 335.544659][ T9126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.552705][ T9126] R13: 00007f8c04216128 R14: 00007f8c04216090 R15: 00007fff6f6754d8 [ 335.560838][ T9126] [ 335.631561][ T9134] netlink: 'syz.2.1612': attribute type 21 has an invalid length. [ 335.639770][ T9134] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1612'. [ 335.807349][ T9137] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1614'. [ 335.949917][ T9144] netlink: 'syz.1.1617': attribute type 21 has an invalid length. [ 337.475424][ T9169] netlink: 'syz.0.1623': attribute type 10 has an invalid length. [ 337.879128][ T9174] netlink: 'syz.3.1626': attribute type 21 has an invalid length. [ 337.909096][ T9174] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1626'. [ 338.547285][ T9182] netlink: 'syz.0.1630': attribute type 21 has an invalid length. [ 338.576510][ T4275] Bluetooth: hci0: unknown advertising packet type: 0x14 [ 338.576557][ T4275] Bluetooth: hci0: unknown advertising packet type: 0xff [ 338.583671][ T4275] Bluetooth: hci0: Malformed LE Event: 0x02 [ 338.816854][ T9188] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1631'. [ 339.670102][ T9209] netlink: 'syz.1.1639': attribute type 21 has an invalid length. [ 339.758428][ T9209] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1639'. [ 341.846014][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1652'. [ 341.870066][ T9241] netlink: 'syz.2.1653': attribute type 21 has an invalid length. [ 341.889915][ T9241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1653'. [ 341.918398][ T9239] netlink: 'syz.0.1652': attribute type 39 has an invalid length. [ 342.050594][ T9239] netlink: 'syz.0.1652': attribute type 2 has an invalid length. [ 342.083046][ T9239] netlink: 'syz.0.1652': attribute type 8 has an invalid length. [ 342.104989][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1652'. [ 343.084160][ T9258] netlink: 'syz.0.1659': attribute type 21 has an invalid length. [ 343.144899][ T4275] Bluetooth: hci0: unknown advertising packet type: 0xff [ 343.144938][ T4275] Bluetooth: hci0: Malformed LE Event: 0x02 [ 343.603538][ T9269] netlink: 'syz.2.1665': attribute type 21 has an invalid length. [ 343.627096][ T9269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1665'. [ 343.688956][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1664'. [ 343.719722][ T9270] netlink: 'syz.3.1664': attribute type 39 has an invalid length. [ 343.771077][ T9267] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 343.795044][ T9267] netlink: 'syz.3.1664': attribute type 8 has an invalid length. [ 343.802934][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1664'. [ 344.699277][ T9293] netlink: 'syz.2.1673': attribute type 21 has an invalid length. [ 344.786094][ T4275] Bluetooth: hci2: unknown advertising packet type: 0xff [ 344.786173][ T4275] Bluetooth: hci2: Malformed LE Event: 0x02 [ 345.172810][ T9306] netlink: 'syz.2.1678': attribute type 21 has an invalid length. [ 345.201522][ T9306] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1678'. [ 346.346161][ T9335] netlink: 'syz.1.1689': attribute type 21 has an invalid length. [ 346.470264][ T9339] netlink: 'syz.2.1690': attribute type 3 has an invalid length. [ 346.555950][ T9339] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1690'. [ 346.654996][ T9343] netlink: 'syz.3.1691': attribute type 21 has an invalid length. [ 346.696286][ T9343] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1691'. [ 346.875425][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1693'. [ 346.936574][ T9346] netlink: 'syz.2.1693': attribute type 39 has an invalid length. [ 347.032976][ T9346] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 347.105188][ T9346] netlink: 'syz.2.1693': attribute type 8 has an invalid length. [ 347.113185][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1693'. [ 348.050894][ T9368] netlink: 'syz.2.1702': attribute type 21 has an invalid length. [ 348.081212][ T4275] Bluetooth: hci2: unknown advertising packet type: 0xff [ 348.081254][ T4275] Bluetooth: hci2: Malformed LE Event: 0x02 [ 348.993107][ T9389] netlink: 'syz.1.1712': attribute type 29 has an invalid length. [ 349.692418][ T9396] delete_channel: no stack [ 349.781597][ T9398] validate_nla: 1 callbacks suppressed [ 349.781617][ T9398] netlink: 'syz.3.1715': attribute type 39 has an invalid length. [ 350.223030][ T9408] netlink: 'syz.4.1716': attribute type 21 has an invalid length. [ 350.279425][ T4275] Bluetooth: hci4: unknown advertising packet type: 0xff [ 350.279466][ T4275] Bluetooth: hci4: Malformed LE Event: 0x02 [ 350.481995][ T9419] netlink: 'syz.0.1722': attribute type 20 has an invalid length. [ 351.820707][ T9445] netlink: 'syz.1.1735': attribute type 21 has an invalid length. [ 352.431527][ T9455] netlink: 'syz.3.1736': attribute type 21 has an invalid length. [ 352.525757][ T9455] netlink: 'syz.3.1736': attribute type 1 has an invalid length. [ 352.742374][ T9455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1736'. [ 353.566020][ T28] tipc: Subscription rejected, illegal request [ 355.273623][ T9486] FAULT_INJECTION: forcing a failure. [ 355.273623][ T9486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.321565][ T9486] CPU: 1 PID: 9486 Comm: syz.2.1750 Not tainted syzkaller #0 [ 355.329023][ T9486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.339120][ T9486] Call Trace: [ 355.342453][ T9486] [ 355.345475][ T9486] dump_stack_lvl+0x188/0x24e [ 355.350215][ T9486] ? show_regs_print_info+0x12/0x12 [ 355.355463][ T9486] ? load_image+0x400/0x400 [ 355.360057][ T9486] ? __lock_acquire+0x7d10/0x7d10 [ 355.365124][ T9486] ? __fget_files+0x28/0x4b0 [ 355.369767][ T9486] should_fail_ex+0x399/0x4d0 [ 355.374487][ T9486] _copy_from_user+0x2c/0x170 [ 355.379212][ T9486] generic_map_update_batch+0x4a1/0x810 [ 355.384801][ T9486] ? rcu_read_unlock+0xa0/0xa0 [ 355.389610][ T9486] ? __fdget+0x17c/0x200 [ 355.393886][ T9486] ? rcu_read_unlock+0xa0/0xa0 [ 355.398719][ T9486] bpf_map_do_batch+0x466/0x600 [ 355.403603][ T9486] __sys_bpf+0x6f7/0x780 [ 355.407881][ T9486] ? bpf_link_show_fdinfo+0x380/0x380 [ 355.413296][ T9486] ? lock_chain_count+0x20/0x20 [ 355.418185][ T9486] __x64_sys_bpf+0x78/0x90 [ 355.422636][ T9486] do_syscall_64+0x4c/0xa0 [ 355.427087][ T9486] ? clear_bhb_loop+0x60/0xb0 [ 355.431786][ T9486] ? clear_bhb_loop+0x60/0xb0 [ 355.436498][ T9486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.442420][ T9486] RIP: 0033:0x7ff8c7b9acb9 [ 355.446862][ T9486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.466554][ T9486] RSP: 002b:00007ff8c8abc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.475006][ T9486] RAX: ffffffffffffffda RBX: 00007ff8c7e15fa0 RCX: 00007ff8c7b9acb9 [ 355.482996][ T9486] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 355.490979][ T9486] RBP: 00007ff8c8abc090 R08: 0000000000000000 R09: 0000000000000000 [ 355.498966][ T9486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.506952][ T9486] R13: 00007ff8c7e16038 R14: 00007ff8c7e15fa0 R15: 00007ffed402add8 [ 355.514949][ T9486] [ 355.617032][ T9493] netlink: 'syz.4.1749': attribute type 21 has an invalid length. [ 355.631772][ T4275] Bluetooth: hci4: unknown advertising packet type: 0xff [ 355.631826][ T4275] Bluetooth: hci4: Malformed LE Event: 0x02 [ 355.650716][ T9492] netlink: 'syz.0.1752': attribute type 4 has an invalid length. [ 356.244351][ T9502] netlink: 'syz.0.1756': attribute type 21 has an invalid length. [ 356.261736][ T9502] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1756'. [ 356.684368][ T9515] netlink: 'syz.2.1760': attribute type 21 has an invalid length. [ 356.725474][ T9515] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 356.733563][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1760'. [ 357.343097][ T9526] FAULT_INJECTION: forcing a failure. [ 357.343097][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.468427][ T9526] CPU: 0 PID: 9526 Comm: syz.4.1764 Not tainted syzkaller #0 [ 357.475869][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.485962][ T9526] Call Trace: [ 357.489278][ T9526] [ 357.492253][ T9526] dump_stack_lvl+0x188/0x24e [ 357.496986][ T9526] ? show_regs_print_info+0x12/0x12 [ 357.502232][ T9526] ? load_image+0x400/0x400 [ 357.506781][ T9526] ? __lock_acquire+0x7d10/0x7d10 [ 357.511866][ T9526] should_fail_ex+0x399/0x4d0 [ 357.516608][ T9526] _copy_from_user+0x2c/0x170 [ 357.521342][ T9526] generic_map_update_batch+0x4a1/0x810 [ 357.526936][ T9526] ? lock_chain_count+0x20/0x20 [ 357.531851][ T9526] ? rcu_read_unlock+0xa0/0xa0 [ 357.536682][ T9526] ? bpf_map_do_batch+0x37f/0x600 [ 357.541767][ T9526] ? rcu_read_unlock+0xa0/0xa0 [ 357.546578][ T9526] bpf_map_do_batch+0x466/0x600 [ 357.551488][ T9526] __sys_bpf+0x6f7/0x780 [ 357.555788][ T9526] ? bpf_link_show_fdinfo+0x380/0x380 [ 357.561225][ T9526] ? lock_chain_count+0x20/0x20 [ 357.566133][ T9526] __x64_sys_bpf+0x78/0x90 [ 357.570611][ T9526] do_syscall_64+0x4c/0xa0 [ 357.575075][ T9526] ? clear_bhb_loop+0x60/0xb0 [ 357.579817][ T9526] ? clear_bhb_loop+0x60/0xb0 [ 357.584552][ T9526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.590488][ T9526] RIP: 0033:0x7f8c03f9acb9 [ 357.594941][ T9526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.614600][ T9526] RSP: 002b:00007f8c04e60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.623071][ T9526] RAX: ffffffffffffffda RBX: 00007f8c04216090 RCX: 00007f8c03f9acb9 [ 357.631078][ T9526] RDX: 0000000000000038 RSI: 0000200000000780 RDI: 000000000000001a [ 357.639079][ T9526] RBP: 00007f8c04e60090 R08: 0000000000000000 R09: 0000000000000000 [ 357.647098][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.655109][ T9526] R13: 00007f8c04216128 R14: 00007f8c04216090 R15: 00007fff6f6754d8 [ 357.663128][ T9526] [ 358.420130][ T9544] FAULT_INJECTION: forcing a failure. [ 358.420130][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 358.465060][ T9544] CPU: 1 PID: 9544 Comm: syz.0.1770 Not tainted syzkaller #0 [ 358.472510][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.482594][ T9544] Call Trace: [ 358.485899][ T9544] [ 358.488852][ T9544] dump_stack_lvl+0x188/0x24e [ 358.493567][ T9544] ? show_regs_print_info+0x12/0x12 [ 358.498798][ T9544] ? load_image+0x400/0x400 [ 358.503332][ T9544] ? __might_sleep+0xd0/0xd0 [ 358.507979][ T9544] ? __lock_acquire+0x7d10/0x7d10 [ 358.513043][ T9544] should_fail_ex+0x399/0x4d0 [ 358.517763][ T9544] should_failslab+0x5/0x20 [ 358.522300][ T9544] slab_pre_alloc_hook+0x59/0x310 [ 358.527348][ T9544] ? __local_bh_enable_ip+0x136/0x1c0 [ 358.532742][ T9544] kmem_cache_alloc+0x56/0x2f0 [ 358.537532][ T9544] ? kcm_ioctl+0x9d5/0x1090 [ 358.542067][ T9544] kcm_ioctl+0x9d5/0x1090 [ 358.546437][ T9544] ? tomoyo_path_number_perm+0x205/0x650 [ 358.552120][ T9544] ? kcm_release+0x5b0/0x5b0 [ 358.556788][ T9544] ? tomoyo_path_number_perm+0x5a4/0x650 [ 358.562470][ T9544] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 358.567979][ T9544] sock_do_ioctl+0xfb/0x320 [ 358.572526][ T9544] ? sock_show_fdinfo+0xb0/0xb0 [ 358.577449][ T9544] sock_ioctl+0x4d2/0x710 [ 358.581815][ T9544] ? sock_poll+0x410/0x410 [ 358.586329][ T9544] ? bpf_lsm_file_ioctl+0x5/0x10 [ 358.591476][ T9544] ? security_file_ioctl+0x7c/0xa0 [ 358.596629][ T9544] ? sock_poll+0x410/0x410 [ 358.601075][ T9544] __se_sys_ioctl+0xfa/0x170 [ 358.605701][ T9544] do_syscall_64+0x4c/0xa0 [ 358.610154][ T9544] ? clear_bhb_loop+0x60/0xb0 [ 358.614869][ T9544] ? clear_bhb_loop+0x60/0xb0 [ 358.619591][ T9544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.625508][ T9544] RIP: 0033:0x7f644d79acb9 [ 358.629956][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.649593][ T9544] RSP: 002b:00007f644e61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.658052][ T9544] RAX: ffffffffffffffda RBX: 00007f644da16090 RCX: 00007f644d79acb9 [ 358.666048][ T9544] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000004 [ 358.674128][ T9544] RBP: 00007f644e61f090 R08: 0000000000000000 R09: 0000000000000000 [ 358.682227][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.690255][ T9544] R13: 00007f644da16128 R14: 00007f644da16090 R15: 00007ffea0751708 [ 358.698277][ T9544] [ 359.236180][ T9561] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 360.084471][ T4283] Bluetooth: hci4: unknown advertising packet type: 0xff [ 360.084513][ T4283] Bluetooth: hci4: Malformed LE Event: 0x02 [ 362.995532][ T9606] netlink: 'syz.2.1790': attribute type 3 has an invalid length. [ 363.040018][ T9606] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1790'. [ 363.645698][ T9591] netlink: 'syz.4.1786': attribute type 21 has an invalid length. [ 363.653691][ T9591] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 363.669426][ T9591] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1786'. [ 364.124475][ T4283] Bluetooth: hci0: unknown advertising packet type: 0xff [ 364.124515][ T4283] Bluetooth: hci0: Malformed LE Event: 0x02 [ 364.746595][ T9645] netlink: 'syz.0.1806': attribute type 28 has an invalid length. [ 365.139629][ T9651] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 365.167323][ T9651] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1808'. [ 365.541223][ T9668] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1816'. [ 366.458926][ T9702] netlink: 'syz.4.1825': attribute type 3 has an invalid length. [ 366.469565][ T9702] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1825'. [ 366.703639][ T4283] Bluetooth: hci1: unknown advertising packet type: 0xff [ 366.703681][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 366.784603][ T9711] netlink: 'syz.0.1828': attribute type 21 has an invalid length. [ 366.796478][ T9711] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1828'. [ 366.912204][ T9714] netlink: 'syz.4.1830': attribute type 21 has an invalid length. [ 366.944440][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1830'. [ 367.012901][ T9714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1830'. [ 367.063878][ T9714] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1830'. [ 367.420800][ T9727] netlink: 'syz.3.1837': attribute type 4 has an invalid length. [ 367.475119][ T9727] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1837'. [ 367.725919][ T9733] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 367.902892][ T4283] Bluetooth: hci4: unknown advertising packet type: 0xff [ 367.902930][ T4283] Bluetooth: hci4: Malformed LE Event: 0x02 [ 368.105845][ T9743] netlink: 'syz.0.1841': attribute type 3 has an invalid length. [ 368.132819][ T9743] __nla_validate_parse: 2 callbacks suppressed [ 368.132860][ T9743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1841'. [ 368.247919][ T9752] netlink: 'syz.1.1846': attribute type 5 has an invalid length. [ 369.867107][ T9782] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 369.956286][ T9790] netlink: 'syz.1.1867': attribute type 29 has an invalid length. [ 370.032841][ T9790] netlink: 'syz.1.1867': attribute type 29 has an invalid length. [ 371.146960][ T9830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1875'. [ 371.179207][ T9830] netlink: 'syz.3.1875': attribute type 39 has an invalid length. [ 371.250334][ T9837] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1877'. [ 371.262147][ T9830] netlink: 'syz.3.1875': attribute type 2 has an invalid length. [ 371.281066][ T9830] netlink: 'syz.3.1875': attribute type 8 has an invalid length. [ 371.310157][ T9830] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1875'. [ 371.786628][ T9856] netlink: 'syz.3.1882': attribute type 29 has an invalid length. [ 371.831386][ T9856] netlink: 'syz.3.1882': attribute type 29 has an invalid length. [ 372.342809][ T4395] tipc: Subscription rejected, illegal request [ 372.694406][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1892'. [ 372.803301][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1892'. [ 373.355577][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 373.406707][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 373.430737][ T9886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1895'. [ 374.102154][ T9897] FAULT_INJECTION: forcing a failure. [ 374.102154][ T9897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.385667][ T9897] CPU: 0 PID: 9897 Comm: syz.3.1898 Not tainted syzkaller #0 [ 374.393143][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.403262][ T9897] Call Trace: [ 374.406578][ T9897] [ 374.409533][ T9897] dump_stack_lvl+0x188/0x24e [ 374.414242][ T9897] ? show_regs_print_info+0x12/0x12 [ 374.419582][ T9897] ? load_image+0x400/0x400 [ 374.424119][ T9897] ? __might_fault+0xa6/0x120 [ 374.428836][ T9897] should_fail_ex+0x399/0x4d0 [ 374.433575][ T9897] copyin+0x1b/0x120 [ 374.437504][ T9897] _copy_from_iter+0x447/0x1130 [ 374.442402][ T9897] ? copyout_mc+0x110/0x110 [ 374.446966][ T9897] ? __virt_addr_valid+0x188/0x540 [ 374.452112][ T9897] ? __virt_addr_valid+0x188/0x540 [ 374.457259][ T9897] ? __virt_addr_valid+0x465/0x540 [ 374.462494][ T9897] ? __check_object_size+0x500/0xa40 [ 374.467810][ T9897] netlink_sendmsg+0x755/0xbd0 [ 374.472619][ T9897] ? netlink_getsockopt+0x550/0x550 [ 374.477856][ T9897] ? aa_sock_msg_perm+0x94/0x150 [ 374.482836][ T9897] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 374.488156][ T9897] ? security_socket_sendmsg+0x7c/0xa0 [ 374.493658][ T9897] ? netlink_getsockopt+0x550/0x550 [ 374.498892][ T9897] ____sys_sendmsg+0x5be/0x970 [ 374.503696][ T9897] ? __sys_sendmsg_sock+0x30/0x30 [ 374.508747][ T9897] ? __import_iovec+0x315/0x500 [ 374.513639][ T9897] ? import_iovec+0x6f/0xa0 [ 374.518165][ T9897] ___sys_sendmsg+0x2a2/0x360 [ 374.522902][ T9897] ? __sys_sendmsg+0x290/0x290 [ 374.527717][ T9897] ? __lock_acquire+0x7d10/0x7d10 [ 374.532800][ T9897] __se_sys_sendmsg+0x1bb/0x2a0 [ 374.537696][ T9897] ? __x64_sys_sendmsg+0x80/0x80 [ 374.542679][ T9897] ? lockdep_hardirqs_on+0x94/0x140 [ 374.547930][ T9897] do_syscall_64+0x4c/0xa0 [ 374.552394][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 374.557125][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 374.561849][ T9897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.567780][ T9897] RIP: 0033:0x7f2ca319acb9 [ 374.572226][ T9897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.592001][ T9897] RSP: 002b:00007f2ca40bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.600490][ T9897] RAX: ffffffffffffffda RBX: 00007f2ca3416090 RCX: 00007f2ca319acb9 [ 374.608518][ T9897] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 374.616547][ T9897] RBP: 00007f2ca40bb090 R08: 0000000000000000 R09: 0000000000000000 [ 374.624572][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.632585][ T9897] R13: 00007f2ca3416128 R14: 00007f2ca3416090 R15: 00007fffcd6d65b8 [ 374.640599][ T9897] [ 374.960313][ T4395] tipc: Subscription rejected, illegal request [ 375.459750][ T9916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1907'. [ 375.529373][ T9916] validate_nla: 4 callbacks suppressed [ 375.529451][ T9916] netlink: 'syz.4.1907': attribute type 39 has an invalid length. [ 375.583987][ T9922] netlink: 'syz.1.1906': attribute type 4 has an invalid length. [ 375.632315][ T9922] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1906'. [ 375.653497][ T9918] netlink: 'syz.1.1906': attribute type 21 has an invalid length. [ 375.707753][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1906'. [ 375.742356][ T9920] netlink: 'syz.4.1907': attribute type 2 has an invalid length. [ 375.762180][ T9920] netlink: 'syz.4.1907': attribute type 8 has an invalid length. [ 375.774490][ T4283] Bluetooth: hci1: unknown advertising packet type: 0xff [ 375.774528][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 375.790871][ T9920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1907'. [ 376.440553][ T9946] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1915'. [ 376.842561][ T9955] netlink: 'syz.2.1922': attribute type 4 has an invalid length. [ 376.879871][ T4283] Bluetooth: hci1: unknown advertising packet type: 0xff [ 376.879910][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 376.887498][ T9955] netlink: 'syz.2.1922': attribute type 3 has an invalid length. [ 376.887548][ T9955] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1922'. [ 377.284758][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1925'. [ 377.345220][ T9976] netlink: 'syz.4.1925': attribute type 39 has an invalid length. [ 377.437662][ T9973] netlink: 'syz.4.1925': attribute type 2 has an invalid length. [ 377.475047][ T9973] netlink: 'syz.4.1925': attribute type 8 has an invalid length. [ 378.168431][T10004] delete_channel: no stack [ 378.188455][T10004] delete_channel: no stack [ 378.567270][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573679][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.881463][T10022] FAULT_INJECTION: forcing a failure. [ 378.881463][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.925845][T10022] CPU: 1 PID: 10022 Comm: syz.3.1946 Not tainted syzkaller #0 [ 378.933399][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.943866][T10022] Call Trace: [ 378.947198][T10022] [ 378.950170][T10022] dump_stack_lvl+0x188/0x24e [ 378.954903][T10022] ? show_regs_print_info+0x12/0x12 [ 378.960149][T10022] ? load_image+0x400/0x400 [ 378.964699][T10022] ? __lock_acquire+0x7d10/0x7d10 [ 378.969773][T10022] should_fail_ex+0x399/0x4d0 [ 378.974504][T10022] _copy_from_user+0x2c/0x170 [ 378.979234][T10022] get_user_ifreq+0x67/0x170 [ 378.983871][T10022] sock_ioctl+0x637/0x710 [ 378.988262][T10022] ? sock_poll+0x410/0x410 [ 378.992746][T10022] ? bpf_lsm_file_ioctl+0x5/0x10 [ 378.997733][T10022] ? security_file_ioctl+0x7c/0xa0 [ 379.002877][T10022] ? sock_poll+0x410/0x410 [ 379.007344][T10022] __se_sys_ioctl+0xfa/0x170 [ 379.011976][T10022] do_syscall_64+0x4c/0xa0 [ 379.016429][T10022] ? clear_bhb_loop+0x60/0xb0 [ 379.021141][T10022] ? clear_bhb_loop+0x60/0xb0 [ 379.025868][T10022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.031807][T10022] RIP: 0033:0x7f2ca319acb9 [ 379.036262][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.055931][T10022] RSP: 002b:00007f2ca40dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.064385][T10022] RAX: ffffffffffffffda RBX: 00007f2ca3415fa0 RCX: 00007f2ca319acb9 [ 379.072398][T10022] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000005 [ 379.080406][T10022] RBP: 00007f2ca40dc090 R08: 0000000000000000 R09: 0000000000000000 [ 379.088418][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.096441][T10022] R13: 00007f2ca3416038 R14: 00007f2ca3415fa0 R15: 00007fffcd6d65b8 [ 379.104463][T10022] [ 379.325007][T10023] __nla_validate_parse: 2 callbacks suppressed [ 379.325053][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1945'. [ 379.452618][ T4283] Bluetooth: hci2: Malformed LE Event: 0x02 [ 380.363091][T10037] FAULT_INJECTION: forcing a failure. [ 380.363091][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 380.379103][T10037] CPU: 1 PID: 10037 Comm: syz.0.1952 Not tainted syzkaller #0 [ 380.386642][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.396752][T10037] Call Trace: [ 380.400080][T10037] [ 380.403053][T10037] dump_stack_lvl+0x188/0x24e [ 380.407781][T10037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.414002][T10037] ? show_regs_print_info+0x12/0x12 [ 380.419253][T10037] ? load_image+0x400/0x400 [ 380.423814][T10037] should_fail_ex+0x399/0x4d0 [ 380.428560][T10037] should_failslab+0x5/0x20 [ 380.433153][T10037] slab_pre_alloc_hook+0x59/0x310 [ 380.438232][T10037] ? genl_start+0x14f/0x4a0 [ 380.442781][T10037] __kmem_cache_alloc_node+0x4f/0x260 [ 380.448182][T10037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.454376][T10037] ? genl_start+0x14f/0x4a0 [ 380.458933][T10037] kmalloc_trace+0x26/0xe0 [ 380.463395][T10037] genl_start+0x14f/0x4a0 [ 380.467755][T10037] __netlink_dump_start+0x3f9/0x6f0 [ 380.472984][T10037] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 380.478740][T10037] ? genl_rcv_msg+0x790/0x790 [ 380.483458][T10037] ? genl_family_rcv_msg_doit+0x330/0x330 [ 380.489237][T10037] ? genl_start+0x4a0/0x4a0 [ 380.493772][T10037] ? genl_lock_dumpit+0x90/0x90 [ 380.498661][T10037] ? lockdep_hardirqs_on+0x94/0x140 [ 380.503892][T10037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.510082][T10037] genl_rcv_msg+0x5cb/0x790 [ 380.514617][T10037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.520805][T10037] ? genl_bind+0x360/0x360 [ 380.525271][T10037] ? batadv_dat_free+0x380/0x380 [ 380.530257][T10037] ? lock_acquire+0x225/0x4a0 [ 380.534981][T10037] netlink_rcv_skb+0x1fb/0x450 [ 380.539775][T10037] ? genl_bind+0x360/0x360 [ 380.544223][T10037] ? netlink_ack+0x1170/0x1170 [ 380.549022][T10037] ? down_read+0x1a8/0x2d0 [ 380.553471][T10037] genl_rcv+0x24/0x40 [ 380.557489][T10037] netlink_unicast+0x74d/0x8d0 [ 380.562288][T10037] netlink_sendmsg+0x8ad/0xbd0 [ 380.567104][T10037] ? netlink_getsockopt+0x550/0x550 [ 380.572355][T10037] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 380.578380][T10037] ? aa_sock_msg_perm+0x94/0x150 [ 380.583355][T10037] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 380.588670][T10037] ? security_socket_sendmsg+0x7c/0xa0 [ 380.594168][T10037] ? netlink_getsockopt+0x550/0x550 [ 380.599408][T10037] ____sys_sendmsg+0x5be/0x970 [ 380.604221][T10037] ? __sys_sendmsg_sock+0x30/0x30 [ 380.609277][T10037] ? __import_iovec+0x315/0x500 [ 380.614154][T10037] ? import_iovec+0x6f/0xa0 [ 380.618690][T10037] ___sys_sendmsg+0x2a2/0x360 [ 380.623416][T10037] ? __sys_sendmsg+0x290/0x290 [ 380.628222][T10037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 380.634435][T10037] __se_sys_sendmsg+0x1bb/0x2a0 [ 380.639412][T10037] ? __x64_sys_sendmsg+0x80/0x80 [ 380.644401][T10037] ? syscall_enter_from_user_mode+0x2a/0x80 [ 380.650351][T10037] do_syscall_64+0x4c/0xa0 [ 380.654889][T10037] ? clear_bhb_loop+0x60/0xb0 [ 380.659607][T10037] ? clear_bhb_loop+0x60/0xb0 [ 380.664311][T10037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.670235][T10037] RIP: 0033:0x7f644d79acb9 [ 380.674678][T10037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.694324][T10037] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.702763][T10037] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 380.710761][T10037] RDX: 0000000020004040 RSI: 0000200000000180 RDI: 0000000000000007 [ 380.718754][T10037] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 380.726834][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.734857][T10037] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 380.742885][T10037] [ 380.785008][T10040] validate_nla: 3 callbacks suppressed [ 380.785028][T10040] netlink: 'syz.3.1953': attribute type 2 has an invalid length. [ 380.876564][T10040] device 0 entered promiscuous mode [ 381.624086][ T4283] Bluetooth: hci1: Malformed LE Event: 0x02 [ 381.921781][T10069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1964'. [ 381.960555][T10069] netlink: 'syz.2.1964': attribute type 39 has an invalid length. [ 382.086019][T10067] netlink: 'syz.2.1964': attribute type 2 has an invalid length. [ 382.099141][T10067] netlink: 'syz.2.1964': attribute type 8 has an invalid length. [ 382.109485][T10067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1964'. [ 383.012200][ T4283] Bluetooth: hci2: Malformed LE Event: 0x02 [ 383.326529][T10112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1979'. [ 383.412042][T10113] netlink: 'syz.3.1979': attribute type 2 has an invalid length. [ 383.435311][T10113] netlink: 'syz.3.1979': attribute type 8 has an invalid length. [ 383.445624][T10113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1979'. [ 383.707895][T10122] FAULT_INJECTION: forcing a failure. [ 383.707895][T10122] name failslab, interval 1, probability 0, space 0, times 0 [ 383.744941][T10122] CPU: 0 PID: 10122 Comm: syz.0.1985 Not tainted syzkaller #0 [ 383.752569][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.762668][T10122] Call Trace: [ 383.765975][T10122] [ 383.768928][T10122] dump_stack_lvl+0x188/0x24e [ 383.773638][T10122] ? show_regs_print_info+0x12/0x12 [ 383.778870][T10122] ? load_image+0x400/0x400 [ 383.783415][T10122] ? __might_sleep+0xd0/0xd0 [ 383.788073][T10122] ? __lock_acquire+0x7d10/0x7d10 [ 383.793128][T10122] ? unwind_next_frame+0x1880/0x20b0 [ 383.798474][T10122] should_fail_ex+0x399/0x4d0 [ 383.803202][T10122] should_failslab+0x5/0x20 [ 383.807766][T10122] slab_pre_alloc_hook+0x59/0x310 [ 383.812818][T10122] ? is_bpf_text_address+0x28b/0x2a0 [ 383.818163][T10122] ? __get_vm_area_node+0x122/0x330 [ 383.823387][T10122] __kmem_cache_alloc_node+0x4f/0x260 [ 383.828797][T10122] ? __get_vm_area_node+0x122/0x330 [ 383.834041][T10122] kmalloc_node_trace+0x22/0xe0 [ 383.838924][T10122] __get_vm_area_node+0x122/0x330 [ 383.843981][T10122] ? perf_trace_lock+0xf8/0x390 [ 383.848861][T10122] __vmalloc_node_range+0x357/0x13b0 [ 383.854176][T10122] ? ethtool_get_strings+0x38f/0x740 [ 383.859522][T10122] ? free_vm_area+0x50/0x50 [ 383.864107][T10122] ? trace_contention_end+0x5f/0x170 [ 383.869462][T10122] ? __might_fault+0xa6/0x120 [ 383.874167][T10122] ? __might_fault+0xc2/0x120 [ 383.878868][T10122] ? __might_fault+0xa6/0x120 [ 383.883587][T10122] ? ethtool_get_strings+0x38f/0x740 [ 383.888906][T10122] vzalloc+0x75/0x80 [ 383.892856][T10122] ? ethtool_get_strings+0x38f/0x740 [ 383.898176][T10122] ethtool_get_strings+0x38f/0x740 [ 383.903405][T10122] ? mutex_lock_nested+0x10/0x10 [ 383.908378][T10122] ? ethtool_self_test+0x390/0x390 [ 383.913553][T10122] dev_ethtool+0x7d2/0x12f0 [ 383.918088][T10122] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 383.924448][T10122] ? __lock_acquire+0x7d10/0x7d10 [ 383.929503][T10122] ? __kmem_cache_free+0xb6/0x1f0 [ 383.934554][T10122] ? full_name_hash+0x8e/0xe0 [ 383.939271][T10122] ? dev_load+0x1d/0x1e0 [ 383.943543][T10122] ? dev_load+0x1d/0x1e0 [ 383.947806][T10122] dev_ioctl+0x474/0xe80 [ 383.952073][T10122] sock_do_ioctl+0x245/0x320 [ 383.956697][T10122] ? sock_show_fdinfo+0xb0/0xb0 [ 383.961585][T10122] sock_ioctl+0x4d2/0x710 [ 383.965949][T10122] ? sock_poll+0x410/0x410 [ 383.970413][T10122] ? bpf_lsm_file_ioctl+0x5/0x10 [ 383.975383][T10122] ? security_file_ioctl+0x7c/0xa0 [ 383.980522][T10122] ? sock_poll+0x410/0x410 [ 383.984988][T10122] __se_sys_ioctl+0xfa/0x170 [ 383.989611][T10122] do_syscall_64+0x4c/0xa0 [ 383.994055][T10122] ? clear_bhb_loop+0x60/0xb0 [ 383.998758][T10122] ? clear_bhb_loop+0x60/0xb0 [ 384.003467][T10122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.009394][T10122] RIP: 0033:0x7f644d79acb9 [ 384.013836][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.033467][T10122] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.041904][T10122] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 384.049897][T10122] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 384.057903][T10122] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 384.065898][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.073898][T10122] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 384.081908][T10122] [ 384.103079][T10122] syz.0.1985: vmalloc error: size 128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 384.121289][T10122] CPU: 1 PID: 10122 Comm: syz.0.1985 Not tainted syzkaller #0 [ 384.128805][T10122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 384.138897][T10122] Call Trace: [ 384.142214][T10122] [ 384.145179][T10122] dump_stack_lvl+0x188/0x24e [ 384.149910][T10122] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 384.156398][T10122] ? show_regs_print_info+0x12/0x12 [ 384.161670][T10122] ? load_image+0x400/0x400 [ 384.166222][T10122] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 384.172678][T10122] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 384.179234][T10122] warn_alloc+0x242/0x330 [ 384.183628][T10122] ? __get_vm_area_node+0x122/0x330 [ 384.188878][T10122] ? zone_watermark_ok_safe+0x270/0x270 [ 384.194481][T10122] ? rcu_is_watching+0x11/0xa0 [ 384.199307][T10122] ? __get_vm_area_node+0x318/0x330 [ 384.204554][T10122] ? perf_trace_lock+0xf8/0x390 [ 384.209490][T10122] __vmalloc_node_range+0x37c/0x13b0 [ 384.214848][T10122] ? free_vm_area+0x50/0x50 [ 384.219407][T10122] ? trace_contention_end+0x5f/0x170 [ 384.224754][T10122] ? __might_fault+0xa6/0x120 [ 384.229486][T10122] ? __might_fault+0xc2/0x120 [ 384.234209][T10122] ? __might_fault+0xa6/0x120 [ 384.238935][T10122] ? ethtool_get_strings+0x38f/0x740 [ 384.244276][T10122] vzalloc+0x75/0x80 [ 384.248310][T10122] ? ethtool_get_strings+0x38f/0x740 [ 384.253652][T10122] ethtool_get_strings+0x38f/0x740 [ 384.258819][T10122] ? mutex_lock_nested+0x10/0x10 [ 384.263816][T10122] ? ethtool_self_test+0x390/0x390 [ 384.268992][T10122] dev_ethtool+0x7d2/0x12f0 [ 384.273567][T10122] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 384.279870][T10122] ? __lock_acquire+0x7d10/0x7d10 [ 384.284944][T10122] ? __kmem_cache_free+0xb6/0x1f0 [ 384.290018][T10122] ? full_name_hash+0x8e/0xe0 [ 384.294756][T10122] ? dev_load+0x1d/0x1e0 [ 384.299050][T10122] ? dev_load+0x1d/0x1e0 [ 384.303326][T10122] dev_ioctl+0x474/0xe80 [ 384.307596][T10122] sock_do_ioctl+0x245/0x320 [ 384.312224][T10122] ? sock_show_fdinfo+0xb0/0xb0 [ 384.317128][T10122] sock_ioctl+0x4d2/0x710 [ 384.321495][T10122] ? sock_poll+0x410/0x410 [ 384.325954][T10122] ? bpf_lsm_file_ioctl+0x5/0x10 [ 384.330926][T10122] ? security_file_ioctl+0x7c/0xa0 [ 384.336084][T10122] ? sock_poll+0x410/0x410 [ 384.340546][T10122] __se_sys_ioctl+0xfa/0x170 [ 384.345174][T10122] do_syscall_64+0x4c/0xa0 [ 384.349625][T10122] ? clear_bhb_loop+0x60/0xb0 [ 384.354331][T10122] ? clear_bhb_loop+0x60/0xb0 [ 384.359049][T10122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.364974][T10122] RIP: 0033:0x7f644d79acb9 [ 384.369434][T10122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.389074][T10122] RSP: 002b:00007f644e640028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.397529][T10122] RAX: ffffffffffffffda RBX: 00007f644da15fa0 RCX: 00007f644d79acb9 [ 384.405525][T10122] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 384.413519][T10122] RBP: 00007f644e640090 R08: 0000000000000000 R09: 0000000000000000 [ 384.421525][T10122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.429533][T10122] R13: 00007f644da16038 R14: 00007f644da15fa0 R15: 00007ffea0751708 [ 384.437554][T10122] [ 384.453080][T10122] Mem-Info: [ 384.462218][T10122] active_anon:5849 inactive_anon:0 isolated_anon:0 [ 384.462218][T10122] active_file:20770 inactive_file:40047 isolated_file:0 [ 384.462218][T10122] unevictable:768 dirty:240 writeback:0 [ 384.462218][T10122] slab_reclaimable:21074 slab_unreclaimable:97740 [ 384.462218][T10122] mapped:29819 shmem:1361 pagetables:618 [ 384.462218][T10122] sec_pagetables:0 bounce:0 [ 384.462218][T10122] kernel_misc_reclaimable:0 [ 384.462218][T10122] free:1312760 free_pcp:9998 free_cma:0 [ 384.606297][T10122] Node 0 active_anon:23296kB inactive_anon:0kB active_file:83080kB inactive_file:159980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119276kB dirty:960kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10908kB pagetables:2472kB sec_pagetables:0kB all_unreclaimable? no [ 384.709252][T10122] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 384.747682][T10122] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.748833][ T75] tipc: Subscription rejected, illegal request [ 384.786073][T10122] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 384.791932][T10122] Node 0 DMA32 free:1336804kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23396kB inactive_anon:0kB active_file:83080kB inactive_file:159980kB unevictable:1536kB writepending:960kB present:3129332kB managed:2592980kB mlocked:0kB bounce:0kB free_pcp:22384kB local_pcp:1500kB free_cma:0kB [ 384.823881][T10122] lowmem_reserve[]: 0 0 1 1 1 [ 384.828974][T10122] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 384.856555][T10122] lowmem_reserve[]: 0 0 0 0 0 [ 384.861462][T10122] Node 1 Normal free:3898624kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18104kB local_pcp:10880kB free_cma:0kB [ 384.895856][T10122] lowmem_reserve[]: 0 0 0 0 0 [ 384.900654][T10122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.914110][T10122] Node 0 DMA32: 737*4kB (UME) 2276*8kB (UME) 1738*16kB (UME) 895*32kB (UME) 287*64kB (UME) 162*128kB (UM) 104*256kB (UM) 51*512kB (UME) 26*1024kB (UME) 19*2048kB (UME) 269*4096kB (UM) = 1336804kB [ 384.975106][T10122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 385.015854][T10122] Node 1 Normal: 148*4kB (UME) 48*8kB (UME) 35*16kB (UME) 44*32kB (UE) 26*64kB (UME) 10*128kB (UM) 4*256kB (UME) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3898624kB [ 385.034040][T10122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.044323][T10122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.065246][T10122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 385.097999][T10122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 385.134102][T10122] 62178 total pagecache pages [ 385.143161][T10122] 0 pages in swap cache [ 385.147459][T10122] Free swap = 124996kB [ 385.151652][T10122] Total swap = 124996kB [ 385.169982][T10122] 2097051 pages RAM [ 385.174667][T10122] 0 pages HighMem/MovableOnly [ 385.179545][T10122] 415205 pages reserved [ 385.215027][T10122] 0 pages cma reserved [ 385.271915][T10148] netlink: 'syz.4.1993': attribute type 10 has an invalid length. [ 385.344960][T10148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1993'. [ 385.353993][T10148] FAULT_INJECTION: forcing a failure. [ 385.353993][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 385.505020][T10152] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'. [ 385.538503][T10148] CPU: 1 PID: 10148 Comm: syz.4.1993 Not tainted syzkaller #0 [ 385.546158][T10148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.556346][T10148] Call Trace: [ 385.559674][T10148] [ 385.562651][T10148] dump_stack_lvl+0x188/0x24e [ 385.567389][T10148] ? show_regs_print_info+0x12/0x12 [ 385.572641][T10148] ? load_image+0x400/0x400 [ 385.577208][T10148] ? __might_sleep+0xd0/0xd0 [ 385.581846][T10148] ? __lock_acquire+0x7d10/0x7d10 [ 385.586930][T10148] should_fail_ex+0x399/0x4d0 [ 385.591672][T10148] should_failslab+0x5/0x20 [ 385.596238][T10148] slab_pre_alloc_hook+0x59/0x310 [ 385.601303][T10148] kmem_cache_alloc_node+0x5a/0x320 [ 385.606545][T10148] ? __dev_queue_xmit+0x26b/0x37f0 [ 385.611698][T10148] ? __alloc_skb+0xfc/0x7e0 [ 385.616266][T10148] __alloc_skb+0xfc/0x7e0 [ 385.620659][T10148] netlink_ack+0x372/0x1170 [ 385.625224][T10148] ? ref_tracker_free+0x68c/0x840 [ 385.630302][T10148] ? __copy_skb_header+0x3ba/0x4f0 [ 385.635488][T10148] ? refcount_inc+0x70/0x70 [ 385.640219][T10148] ? memcpy+0x3c/0x60 [ 385.644240][T10148] ? netlink_dump+0xd00/0xd00 [ 385.648970][T10148] ? __copy_skb_header+0x3ba/0x4f0 [ 385.654161][T10148] ? __skb_clone+0x480/0x790 [ 385.658803][T10148] netlink_rcv_skb+0x280/0x450 [ 385.663616][T10148] ? rtnetlink_bind+0x80/0x80 [ 385.668351][T10148] ? netlink_ack+0x1170/0x1170 [ 385.673197][T10148] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.678449][T10148] netlink_unicast+0x74d/0x8d0 [ 385.683274][T10148] netlink_sendmsg+0x8ad/0xbd0 [ 385.688095][T10148] ? netlink_getsockopt+0x550/0x550 [ 385.693457][T10148] ? aa_sock_msg_perm+0x94/0x150 [ 385.698440][T10148] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 385.703805][T10148] ? security_socket_sendmsg+0x7c/0xa0 [ 385.709321][T10148] ? netlink_getsockopt+0x550/0x550 [ 385.714573][T10148] ____sys_sendmsg+0x5be/0x970 [ 385.719404][T10148] ? __sys_sendmsg_sock+0x30/0x30 [ 385.724561][T10148] ? __import_iovec+0x315/0x500 [ 385.729458][T10148] ? import_iovec+0x6f/0xa0 [ 385.734016][T10148] ___sys_sendmsg+0x2a2/0x360 [ 385.738764][T10148] ? __sys_sendmsg+0x290/0x290 [ 385.743604][T10148] ? __lock_acquire+0x7d10/0x7d10 [ 385.748707][T10148] __se_sys_sendmsg+0x1bb/0x2a0 [ 385.753615][T10148] ? ct_nmi_exit+0x145/0x1c0 [ 385.758246][T10148] ? __x64_sys_sendmsg+0x80/0x80 [ 385.763251][T10148] ? lockdep_hardirqs_on+0x94/0x140 [ 385.768518][T10148] do_syscall_64+0x4c/0xa0 [ 385.772996][T10148] ? clear_bhb_loop+0x60/0xb0 [ 385.777722][T10148] ? clear_bhb_loop+0x60/0xb0 [ 385.782456][T10148] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.788389][T10148] RIP: 0033:0x7f8c03f9acb9 [ 385.792847][T10148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.812508][T10148] RSP: 002b:00007f8c04e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.820983][T10148] RAX: ffffffffffffffda RBX: 00007f8c04216090 RCX: 00007f8c03f9acb9 [ 385.829014][T10148] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 385.837035][T10148] RBP: 00007f8c04e60090 R08: 0000000000000000 R09: 0000000000000000 [ 385.845052][T10148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.853062][T10148] R13: 00007f8c04216128 R14: 00007f8c04216090 R15: 00007fff6f6754d8 [ 385.861106][T10148] [ 385.871956][T10159] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 385.895006][T10159] netlink: 'syz.0.1994': attribute type 8 has an invalid length. [ 385.903238][T10159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'. [ 386.445001][ T4369] tipc: Subscription rejected, illegal request [ 387.094080][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2011'. [ 387.191590][T10195] netlink: 'syz.4.2011': attribute type 2 has an invalid length. [ 387.229612][T10195] netlink: 'syz.4.2011': attribute type 8 has an invalid length. [ 387.259997][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2011'. [ 387.487339][T10209] netlink: 'syz.0.2017': attribute type 29 has an invalid length. [ 387.521297][T10209] netlink: 'syz.0.2017': attribute type 29 has an invalid length. [ 387.725722][T10219] device ipvlan1 entered promiscuous mode [ 387.738491][ T4364] tipc: Subscription rejected, illegal request [ 388.133373][T10225] netlink: 'syz.1.2021': attribute type 21 has an invalid length. [ 388.161504][T10225] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2021'. [ 389.184226][ T4369] tipc: Subscription rejected, illegal request [ 390.614395][ T46] tipc: Subscription rejected, illegal request [ 390.639889][T10301] netlink: 'syz.2.2051': attribute type 39 has an invalid length. [ 391.837618][ T46] tipc: Subscription rejected, illegal request [ 393.178122][T10365] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2077'. [ 393.393510][ T4395] tipc: Subscription rejected, illegal request [ 393.718588][T10381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2084'. [ 393.730201][T10381] netlink: 'syz.2.2084': attribute type 39 has an invalid length. [ 393.744303][T10381] netlink: 'syz.2.2084': attribute type 2 has an invalid length. [ 393.778231][T10381] netlink: 'syz.2.2084': attribute type 8 has an invalid length. [ 393.825196][T10381] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2084'. [ 394.133911][T10395] tun0: tun_chr_ioctl cmd 1074025680 [ 394.154395][T10391] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 394.162282][T10391] #PF: supervisor instruction fetch in kernel mode [ 394.168821][T10391] #PF: error_code(0x0010) - not-present page [ 394.174895][T10391] PGD 76941067 P4D 76941067 PUD 0 [ 394.180066][T10391] Oops: 0010 [#1] PREEMPT SMP KASAN [ 394.185314][T10391] CPU: 1 PID: 10391 Comm: syz.4.2089 Not tainted syzkaller #0 [ 394.192818][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.202912][T10391] RIP: 0010:0x0 [ 394.206420][T10391] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 394.213826][T10391] RSP: 0018:ffffc90003207458 EFLAGS: 00010246 [ 394.219945][T10391] RAX: 1ffffffff162bb77 RBX: 1ffff92000640e9c RCX: 0000000000000001 [ 394.227964][T10391] RDX: ffffc90003207500 RSI: 0000000000000001 RDI: ffff888058830000 [ 394.235992][T10391] RBP: ffffc90003207570 R08: ffff88805883003f R09: 1ffff1100b106007 [ 394.244007][T10391] R10: dffffc0000000000 R11: ffffed100b106008 R12: ffffe8ffffd3cdb0 [ 394.252035][T10391] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff888058830000 [ 394.260077][T10391] FS: 00007f8c04e816c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 394.269057][T10391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.275721][T10391] CR2: ffffffffffffffd6 CR3: 0000000079576000 CR4: 00000000003506e0 [ 394.283747][T10391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.291881][T10391] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 394.299891][T10391] Call Trace: [ 394.303226][T10391] [ 394.306193][T10391] bond_xdp_xmit+0x31e/0x550 [ 394.310841][T10391] ? bond_xdp_xmit+0x94/0x550 [ 394.315589][T10391] ? bond_xdp+0x850/0x850 [ 394.320014][T10391] bq_xmit_all+0xd3f/0x11b0 [ 394.324577][T10391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 394.330784][T10391] ? zone_statistics+0x170/0x170 [ 394.335780][T10391] ? __dev_flush+0x1b0/0x1b0 [ 394.340436][T10391] ? __alloc_pages_bulk+0x49a/0x920 [ 394.345681][T10391] ? xdp_test_run_init_page+0x33b/0x440 [ 394.351283][T10391] ? memcpy+0x3c/0x60 [ 394.355311][T10391] ? rcu_is_watching+0x11/0xa0 [ 394.360142][T10391] ? bq_enqueue+0x2ee/0x3d0 [ 394.364695][T10391] ? rcu_is_watching+0x11/0xa0 [ 394.369514][T10391] ? trace_xdp_redirect+0xb3/0x2b0 [ 394.374687][T10391] __dev_flush+0xbf/0x1b0 [ 394.379089][T10391] xdp_do_flush+0xa/0x20 [ 394.383378][T10391] bpf_test_run_xdp_live+0x1545/0x1a90 [ 394.388892][T10391] ? 0xffffffffa00041c0 [ 394.393098][T10391] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 394.398699][T10391] ? xdp_convert_md_to_buff+0x330/0x330 [ 394.404310][T10391] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 394.410605][T10391] ? bpf_prog_test_run_xdp+0x6ac/0xf10 [ 394.416120][T10391] bpf_prog_test_run_xdp+0x736/0xf10 [ 394.421474][T10391] ? dev_put+0x80/0x80 [ 394.425606][T10391] ? dev_put+0x80/0x80 [ 394.429752][T10391] bpf_prog_test_run+0x31e/0x390 [ 394.434759][T10391] __sys_bpf+0x62b/0x780 [ 394.439056][T10391] ? bpf_link_show_fdinfo+0x380/0x380 [ 394.444494][T10391] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 394.450713][T10391] __x64_sys_bpf+0x78/0x90 [ 394.455206][T10391] do_syscall_64+0x4c/0xa0 [ 394.459678][T10391] ? clear_bhb_loop+0x60/0xb0 [ 394.464424][T10391] ? clear_bhb_loop+0x60/0xb0 [ 394.469189][T10391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.475138][T10391] RIP: 0033:0x7f8c03f9acb9 [ 394.479671][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.499327][T10391] RSP: 002b:00007f8c04e81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 394.507770][T10391] RAX: ffffffffffffffda RBX: 00007f8c04215fa0 RCX: 00007f8c03f9acb9 [ 394.515789][T10391] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 394.523807][T10391] RBP: 00007f8c04008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 394.531820][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.539828][T10391] R13: 00007f8c04216038 R14: 00007f8c04215fa0 R15: 00007fff6f6754d8 [ 394.547863][T10391] [ 394.550950][T10391] Modules linked in: [ 394.554890][T10391] CR2: 0000000000000000 [ 394.559085][T10391] ---[ end trace 0000000000000000 ]--- [ 394.564578][T10391] RIP: 0010:0x0 [ 394.568091][T10391] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 394.575490][T10391] RSP: 0018:ffffc90003207458 EFLAGS: 00010246 [ 394.581671][T10391] RAX: 1ffffffff162bb77 RBX: 1ffff92000640e9c RCX: 0000000000000001 [ 394.589697][T10391] RDX: ffffc90003207500 RSI: 0000000000000001 RDI: ffff888058830000 [ 394.597719][T10391] RBP: ffffc90003207570 R08: ffff88805883003f R09: 1ffff1100b106007 [ 394.605744][T10391] R10: dffffc0000000000 R11: ffffed100b106008 R12: ffffe8ffffd3cdb0 [ 394.613758][T10391] R13: ffffffff8b15dbb8 R14: 0000000000000000 R15: ffff888058830000 [ 394.621766][T10391] FS: 00007f8c04e816c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 394.630739][T10391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.637365][T10391] CR2: ffffffffffffffd6 CR3: 0000000079576000 CR4: 00000000003506e0 [ 394.645386][T10391] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 394.653431][T10391] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 394.661482][T10391] Kernel panic - not syncing: Fatal exception in interrupt [ 394.669303][T10391] Kernel Offset: disabled [ 394.673641][T10391] Rebooting in 86400 seconds..