last executing test programs: 8.441791538s ago: executing program 0 (id=2124): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 7.593237278s ago: executing program 2 (id=2127): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 6.118403663s ago: executing program 0 (id=2129): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdc, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000001"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4102, 0x1006}], 0x1}, 0x2002) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a603f00ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809", 0xa1}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000", @ANYRESHEX=r2], 0x0}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xfe33) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x10\x04/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0}, 0x4040090) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.473165269s ago: executing program 2 (id=2132): socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x2, 0x3ff78000}, 0x0, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xf, 0x0, &(0x7f0000001340)='syzkaller\x00', 0xffffffbd, 0x19, &(0x7f0000001380)=""/25, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) 5.224604184s ago: executing program 3 (id=2133): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 5.092141928s ago: executing program 1 (id=2134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc203}, 0x48) 4.751673726s ago: executing program 2 (id=2135): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000001a80), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x12, &(0x7f0000000780)=@raw=[@jmp={0x5, 0x1, 0x9, 0x4, 0x5, 0x18, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x5, 0x1, 0x5, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x2, 0x3, 0x4, 0x5, 0x3, 0xe, 0x8}, @jmp={0x5, 0x1, 0x3, 0xb, 0x3, 0x1, 0x10}, @alu={0x7, 0x1, 0x6, 0xb, 0x0, 0x6, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], &(0x7f0000000840)='syzkaller\x00', 0x9, 0x4c, &(0x7f0000000880)=""/76, 0x41000, 0x8, '\x00', r1, 0x0, r3, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0xc, 0xd, 0x12ea}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000980)=[{0x0, 0x1, 0x7, 0x5}], 0x10, 0x1ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000540), &(0x7f0000000a80)=r4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000480)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x7fffffff, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0, r0, r0, r0], &(0x7f0000000640)=[{0x5, 0x2, 0x5, 0x1}, {0x4, 0x4, 0x4, 0x9}, {0x5, 0x1, 0xe, 0xc}, {0x3, 0x2, 0xa, 0x12}, {0x4, 0x2, 0x3, 0x9}, {0x3, 0x4, 0x6, 0x1}, {0x0, 0x4, 0xe, 0x1}, {0x3, 0x4, 0x10, 0x7}], 0x10, 0x10001}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="010000000000e882cec773139d2c7cbb86f706f225af9b6508b056e06fa642ef6ece5ed30d141a0c52dae45fbd84733c2b32562f849fbefefe7b147d50713e844f9a6ffca469ac61e764b4d64b07f70b1df6f068f9d388a67a6ce1e02b8f3459bd42835737d1ccc986d70a17afa879ab6858f52c7a1f919d70b15667a3a8cc6a83c63bd7f1ac952a43d8230fde6b50efd30ed455d8db38d32bf984f5e538961a6e3a2475a5658cc0bd3c4c42c2f6de14769297ce62719c419ed5d89d4f65a273a9fc2d2135aa781b7dcca463b3ac765e516f31db41de5bfd8919b9adb6570f671e3c87342a5e1d37d6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) 3.728490661s ago: executing program 0 (id=2136): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x2100, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r2, 0x4000, r3}, 0x18) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000800000000ba05000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.714033641s ago: executing program 1 (id=2137): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x3, 0x106) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0xffd8, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}], 0x18, 0xf5}, 0xfc00) 3.32202324s ago: executing program 3 (id=2138): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b0800000000000000f934a3c92b", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbb9, 0x0, 0x0, 0x0, 0xf3b}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x41, 0x0, 0x3, 0x0, 0x0, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x4}, 0x88, 0x0, 0xffffffff, 0x0, 0x4, 0x1, 0x3, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x41, r7, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="000000dc000010007b000000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000001000000000000000300000004000000030000000000000000000002"], 0x0, 0x5e, 0x0, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2162) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 3.124059075s ago: executing program 1 (id=2139): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000005000061147c000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8004, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) r2 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x16, 0x0, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={&(0x7f0000000000)="b4246730520e375631fd83a975bdc01051df0bba4f772502908fc54319bd3cf1d1d9809a1edcc0e3a6c388a26ccb", &(0x7f0000000040)=""/210, &(0x7f0000000400)="f0f4c568c2f75582e66ce92ed25e479fc1642bd31942b158603f9cf4d46fd2ea6a14d0e7c5ae5c6a369b4e13fdcfcde9e04c631c5b9fee51d2aae15a4c18621b379651156a6dd743a307d1e1c23712f3223d9d70bbcca970aba2ec861b0a070032898af8fef7503e86fa58e9c530e1068438510e0d4ffb83119c750e2615d8cd63d450766827d5aa9260c14fe48f8050916d40703bb663b52ff52764", &(0x7f0000000380)="5942a7a15ae231e908000000000000000adedb490b784a9fc354bc9f6e51fb639f51b9388f71916d1641a5366886d22ef067fa03c31386821f1001cbbcfd2ec7fc5127f64fc06d3500"/88, 0x2b91, r1, 0x4}, 0x38) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="180000003e000511d25a80698c6394090124fc602f6e3540", 0x18}], 0x1, 0x0, 0x0, 0x39c}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x891c, &(0x7f0000000040)={'pim6reg0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1a0000006800000000000000d6e6de5804000000", @ANYRES32, @ANYBLOB="0c00000000000000000000480000000000010000", @ANYRES32, @ANYRES32, @ANYBLOB="01000000030000000400"], 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) 3.083698066s ago: executing program 2 (id=2140): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000a40), &(0x7f0000000a80)='%pK \x00'}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000078010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) sendmsg$kcm(r0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) 2.808149122s ago: executing program 3 (id=2141): socket$kcm(0xa, 0x3, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x2, 0x3ff78000}, 0x0, 0x6, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xf, 0x0, &(0x7f0000001340)='syzkaller\x00', 0xffffffbd, 0x19, &(0x7f0000001380)=""/25, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) 2.664011336s ago: executing program 0 (id=2142): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4008, 0x0, 0xffffffff, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000001000000600000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 2.579916388s ago: executing program 2 (id=2143): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x8}, 0x0, 0x35, 0x43a1bd76, 0x1, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x81, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0xfff}]}) ioctl$TUNGETVNETLE(r3, 0x40107447, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r6, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r5, 0x107, 0x18, &(0x7f0000000b80), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000009c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000100)="27030200590200000100002f1eafaef706e1050000004305000f110186cee84400000008000000001900000000000200", 0x30}, {&(0x7f0000000c40)="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", 0xf2a}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001500)={r8, &(0x7f0000002800), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 2.171061308s ago: executing program 1 (id=2144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200002f000000000000000100000085100000010000009500000000000000180100002020732100000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000008000000b703000000000028850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120019007f00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001500)={r0, &(0x7f0000000140)="f0929ebacb28682d9df7df1ed97f712b81c18dd2716e8343dc7a59f5", 0x0}, 0x20) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0), 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f0000000680)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) 2.0921777s ago: executing program 3 (id=2145): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0xcdd, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000003c0)=@qipcrtr, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000440)=""/103, 0x67}, {0x0}, {&(0x7f0000001080)=""/247, 0xf7}, {0x0}, {&(0x7f0000000c80)=""/116, 0x74}], 0x5, &(0x7f0000002980)=""/4096, 0x1000}, 0x100) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x11) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000", 0x51}, {&(0x7f0000000580)="78d54d7a156f56733f8dbf3d180006b6c78469f2c794f38a828acceb763c87f72ead81fc36e204ce0ef58434e4ca54b929976b07e55b35e1d3640ebb33028a991a20283d", 0x44}, {&(0x7f0000000880)="f652c8290b7b390075c920da69ff7faf890e5d042e076400f9831edb83f60a3acfbd9626cc9997d8747a5525ff3ad66f3205c76b35f230b9fd9f80a0e61fdde411d7093542feccc9a238be676c5453adf77d7322d6360f7d8c47b320ce10a7cea4a2e1fc4f2bc9aca6dde8d7fa34222f75b83b54e1bc7bf0b9e24d163cc0528d9215d47508b5faaaef5a603f490229827becdd49750939be073ea586bc23545af91e8570dffec4da43949710758589", 0xaf}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x6, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c020000000000"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000009e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.6678798s ago: executing program 3 (id=2146): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x8, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 1.639667281s ago: executing program 1 (id=2147): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1c8}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0, 0x0, 0x5e00}, 0x38) 1.274657149s ago: executing program 0 (id=2148): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="df", 0x1}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1, 0x0, 0x0, 0x3f2}, 0x80d1) 555.974016ms ago: executing program 1 (id=2149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b0800000000000000f934a3c92b", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbb9, 0x0, 0x0, 0x0, 0xf3b}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x3, 0x25, &(0x7f0000000440)=""/37, 0x41100, 0x23, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000004c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x41, 0x0, 0x3, 0x0, 0x0, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x4}, 0x88, 0x0, 0xffffffff, 0x0, 0x4, 0x1, 0x3, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x41, r7, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="000000dc000010007b000000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000001000000000000000300000004000000030000000000000000000002"], 0x0, 0x5e, 0x0, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2162) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 430.64791ms ago: executing program 3 (id=2150): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="68800500000034317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="004d10cfbe19e0a2747deff0ac6cd916ea746ac509e2cfdbea2127fa834d3cca89b8cc5618800988fe14812c626848ad4d4e747b5d3528407678af3b6642ee1c816ece86cc9033b3ac80f4f046cd64a35ecc08ac0706fe0386a24c3d4787e8d37f46fe088974c53a5b57a54b210f7f80", 0x70}, {&(0x7f0000000480)="8421a9caa8a779de7712c2af7e493bb3a31959824a045a7115e117ef41cf7790f2641df73f64003c0bc28f50442ef63efe58fe3167732843bf984c8613224750590c2254f05829fbafd0bdfa7596298c38d06ca53e700cfe798002250d5a7a887184a32c1ec13ec274f81016e22d1f16bbdd92b54c81b6d959ad1001d2b3c5c112385a612ae8f58f52dacb327bc74bd4c2ba74911f917edfbbd9b49bc5d2052bb9a29c8d2f91e5", 0xa7}, {&(0x7f0000000580)="8e10", 0x2}, {&(0x7f00000005c0)="cfb949996b48cb37ede5846647aa27cf60c8d667945ac1c3a566e32a913c03febeb85672c27f0a4d529d83a866ec1b3a39b547edef1e51b5dea4b560e9f5b88effbbdda9d2abf4962b0320201707b09a362edddfc7fe857bc870e21e9f65d2354800a403f7cc8dbcc6b53cd50fdaf02a67ed99b182c477c6938b471dce0d7f1c1debbaa9834137b0ef86", 0x8a}, {&(0x7f0000000740)="55e47722fc5ea229056b96d42a4790d86b1f4bb20566094510d25494476c296252f4fe650197fb0dff4188242be83c6bca6c4fba2bdb849452a224e56fedba03ffaedb0af3241e6be3e30a7bf2e974fe5da6907376489fbb7c906e105d8989744750006604ac9af5ee7df3544b4be769eee8db3ead31a4b3be40b2b725ae9c1aa913f42b090c12495aca3c48b96d61922e9b612607ab6427b1", 0x99}, {&(0x7f0000000e00)="160d7ab9a4e544dc2196b39945fbb87e1b07761866392c0af7cf2790649b41a68b118e76d36a2253089eac85bccd1c90ae515deaa0c07cf04fafe668c51206a72bd82bcbedb446b0a536cd436d443df72cf82af29049beb1347dcc642e456bb6da59acc02dda87c925f1b9ad0ae484ee370d22ba199ce280ab7124dc845c10e2f539c610e026c6cfd4af30b1ed8ab1cba7091ca7ab8ea8a17f5b1946115ab39d0542d87d3b42fd421f48d2c3f952de2fa7ff3efe31f5edda62f15586de0b27c9143f6f8820a5f6ea7f989c8f14a58b1ee11a83fe0b70dd38377151d865", 0xdd}, {&(0x7f0000000f00)="d54e70f4c469714dc2515dc375fc0226b035c47f48c929b0089cc25ecb11a496f5ca6e3345f35d735f620c8e0fa69c1fb7e23ff581efba06969627d32bc3da7458cfa33ceb6c65e6ad935d56224962b8a81922517c5d39dc9da209f451f3ba021515980812702045c6b6434129", 0x6d}, {&(0x7f0000000f80)="8a556967ceeb73ff0717f94c4ebb96db7bd55e170ecb8274f8226debb6e423106c3a42a179bbda43a6cfc364a2a00f870f57252a6ab3d2105e8b382261002580c414d92ce2156fc774d8a6fd3fa95066077c18f798d6f6953b30dddebdd7ed3fe52311e6fd575fe8fcc8cc14fb", 0x6d}], 0x8, 0x0, 0x0, 0x4}, 0x340080c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) 386.86694ms ago: executing program 2 (id=2151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYBLOB="e8de4e4204e58eece598c9531f0d5e83d90b5bedca7090b4673507d035673803813d6badbbd38081ec5232e11d8a68dc9f3a418fecf9d1275e0e3bb9caa9f5347096a50f92e17365bc538180e7ad8e9d8287b729b58c3a1fb55641b46f8337a25ea9f4d2b2f73b50e4253a0e625a9be14dd97569f97a495026a26ed736cf904d55f578773ff71ba248f9c23ebea6fc8eed33308372889fd83b9a5f75e41fb24426909f3575048976e45ae9b29bda966ba7f9622bdb2a8c884f9d", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x0, 0x13, 0x0, 0x0, 0x4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 0s ago: executing program 0 (id=2152): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): nk: 'syz.0.1260': attribute type 28 has an invalid length. [ 393.223904][ T9960] netlink: 'syz.0.1260': attribute type 29 has an invalid length. [ 393.264165][ T9959] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1259'. [ 393.280217][ T9960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1260'. [ 393.716408][ T9974] netlink: 'syz.1.1266': attribute type 12 has an invalid length. [ 393.727965][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1266'. [ 397.777209][T10006] netlink: 'syz.3.1277': attribute type 39 has an invalid length. [ 397.841337][T10011] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1279'. [ 397.946340][T10013] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1277'. [ 397.986050][T10013] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1277'. [ 398.018100][T10006] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1277'. [ 398.088464][T10018] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1277'. [ 398.867448][T10031] FAULT_INJECTION: forcing a failure. [ 398.867448][T10031] name failslab, interval 1, probability 0, space 0, times 0 [ 398.904478][T10031] CPU: 0 PID: 10031 Comm: syz.0.1285 Not tainted syzkaller #0 [ 398.912156][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.922420][T10031] Call Trace: [ 398.925934][T10031] [ 398.928941][T10031] dump_stack_lvl+0x18c/0x250 [ 398.933859][T10031] ? sctp_sendmsg+0x1519/0x27b0 [ 398.939128][T10031] ? ___sys_sendmsg+0x2a6/0x360 [ 398.944133][T10031] ? show_regs_print_info+0x20/0x20 [ 398.949529][T10031] ? load_image+0x420/0x420 [ 398.954216][T10031] should_fail_ex+0x394/0x4c0 [ 398.959411][T10031] should_failslab+0x9/0x20 [ 398.964406][T10031] slab_pre_alloc_hook+0x59/0x300 [ 398.969580][T10031] ? sctp_add_bind_addr+0x8c/0x360 [ 398.974739][T10031] __kmem_cache_alloc_node+0x53/0x250 [ 398.980338][T10031] ? sctp_add_bind_addr+0x8c/0x360 [ 398.985671][T10031] kmalloc_trace+0x2a/0xe0 [ 398.990483][T10031] sctp_add_bind_addr+0x8c/0x360 [ 398.995490][T10031] sctp_copy_local_addr_list+0x31b/0x4e0 [ 399.001162][T10031] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 399.007268][T10031] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 399.013728][T10031] ? sctp_v4_is_any+0x35/0x60 [ 399.018898][T10031] ? sctp_copy_one_addr+0x8c/0x350 [ 399.024431][T10031] sctp_bind_addr_copy+0xb3/0x3c0 [ 399.029583][T10031] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 399.036397][T10031] sctp_connect_new_asoc+0x2f9/0x6a0 [ 399.042070][T10031] ? __sctp_connect+0xd80/0xd80 [ 399.046965][T10031] ? __local_bh_enable_ip+0x13a/0x1c0 [ 399.052464][T10031] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 399.058850][T10031] ? security_sctp_bind_connect+0x89/0xb0 [ 399.064984][T10031] sctp_sendmsg+0x1519/0x27b0 [ 399.070533][T10031] ? sctp_getsockopt+0xb60/0xb60 [ 399.075646][T10031] ? aa_af_perm+0x330/0x330 [ 399.080292][T10031] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 399.087200][T10031] ? sock_rps_record_flow+0x19/0x3f0 [ 399.093019][T10031] ? inet_sendmsg+0xce/0x2a0 [ 399.097747][T10031] ? inet_send_prepare+0x250/0x250 [ 399.102915][T10031] ____sys_sendmsg+0x61b/0x980 [ 399.107943][T10031] ? __asan_memset+0x22/0x40 [ 399.112932][T10031] ? __sys_sendmsg_sock+0x30/0x30 [ 399.118019][T10031] ? __import_iovec+0x5f2/0x850 [ 399.123377][T10031] ? import_iovec+0x73/0xa0 [ 399.128111][T10031] ___sys_sendmsg+0x2a6/0x360 [ 399.132861][T10031] ? __sys_sendmsg+0x2b0/0x2b0 [ 399.138049][T10031] ? trace_call_bpf+0xc3/0x6c0 [ 399.142973][T10031] __se_sys_sendmsg+0x1d0/0x2c0 [ 399.148400][T10031] ? __x64_sys_sendmsg+0x80/0x80 [ 399.153574][T10031] ? lockdep_hardirqs_on+0x98/0x150 [ 399.159006][T10031] do_syscall_64+0x55/0xb0 [ 399.163731][T10031] ? clear_bhb_loop+0x40/0x90 [ 399.168541][T10031] ? clear_bhb_loop+0x40/0x90 [ 399.173464][T10031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.180013][T10031] RIP: 0033:0x7f9297b9e019 [ 399.185168][T10031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.205728][T10031] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.215364][T10031] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 399.224111][T10031] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000005 [ 399.233412][T10031] RBP: 00007f9298ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 399.242729][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.251386][T10031] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 399.259861][T10031] [ 400.315197][T10047] netlink: 'syz.1.1291': attribute type 39 has an invalid length. [ 400.688489][T10052] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1291'. [ 400.778274][T10052] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1291'. [ 400.855282][T10047] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1291'. [ 400.958094][T10059] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1291'. [ 401.361582][T10067] netlink: 'syz.0.1299': attribute type 12 has an invalid length. [ 401.387053][T10067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1299'. [ 401.920568][T10078] netlink: 'syz.2.1303': attribute type 39 has an invalid length. [ 402.108234][T10083] netlink: 'syz.1.1306': attribute type 39 has an invalid length. [ 402.155691][T10084] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 402.170626][T10084] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 402.184208][T10084] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 402.200010][T10078] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 402.299193][T10086] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1306'. [ 402.424732][T10091] IPv6: Can't replace route, no match found [ 402.504616][T10096] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 402.632010][T10096] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 403.436320][T10116] netlink: 'syz.1.1317': attribute type 39 has an invalid length. [ 403.456653][T10118] netlink: 'syz.2.1318': attribute type 39 has an invalid length. [ 405.453560][T10140] sctp: [Deprecated]: syz.1.1325 (pid 10140) Use of int in maxseg socket option. [ 405.453560][T10140] Use struct sctp_assoc_value instead [ 405.660776][T10147] netlink: 'syz.3.1328': attribute type 39 has an invalid length. [ 405.673110][T10149] netlink: 'syz.1.1329': attribute type 12 has an invalid length. [ 405.718050][T10149] __nla_validate_parse: 16 callbacks suppressed [ 405.718071][T10149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1329'. [ 405.806182][T10155] FAULT_INJECTION: forcing a failure. [ 405.806182][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.822074][T10155] CPU: 1 PID: 10155 Comm: syz.0.1330 Not tainted syzkaller #0 [ 405.830249][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 405.841170][T10155] Call Trace: [ 405.844745][T10155] [ 405.847734][T10155] dump_stack_lvl+0x18c/0x250 [ 405.852568][T10155] ? show_regs_print_info+0x20/0x20 [ 405.858096][T10155] ? load_image+0x420/0x420 [ 405.863235][T10155] ? __might_fault+0xaa/0x120 [ 405.868067][T10155] ? __lock_acquire+0x7d80/0x7d80 [ 405.873288][T10155] ? __virt_addr_valid+0x10c/0x380 [ 405.878610][T10155] should_fail_ex+0x394/0x4c0 [ 405.883508][T10155] _copy_to_user+0x2f/0xa0 [ 405.888784][T10155] __htab_map_lookup_and_delete_batch+0x1061/0x1400 [ 405.896012][T10155] ? __fget_files+0x28/0x460 [ 405.901161][T10155] ? jhash+0x740/0x740 [ 405.905675][T10155] ? __fdget+0x180/0x210 [ 405.910097][T10155] ? htab_map_lookup_and_delete_elem+0x40/0x40 [ 405.917033][T10155] bpf_map_do_batch+0x48c/0x600 [ 405.922666][T10155] ? bpf_lsm_key_alloc+0x10/0x10 [ 405.927904][T10155] __sys_bpf+0x78c/0x890 [ 405.932320][T10155] ? bpf_link_show_fdinfo+0x390/0x390 [ 405.938079][T10155] ? lock_chain_count+0x20/0x20 [ 405.943282][T10155] __x64_sys_bpf+0x7c/0x90 [ 405.947998][T10155] do_syscall_64+0x55/0xb0 [ 405.952671][T10155] ? clear_bhb_loop+0x40/0x90 [ 405.957417][T10155] ? clear_bhb_loop+0x40/0x90 [ 405.962505][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.968577][T10155] RIP: 0033:0x7f9297b9e019 [ 405.973167][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.994226][T10155] RSP: 002b:00007f9298aa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.002787][T10155] RAX: ffffffffffffffda RBX: 00007f9297e26090 RCX: 00007f9297b9e019 [ 406.011435][T10155] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 406.019990][T10155] RBP: 00007f9298aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 406.028123][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.036684][T10155] R13: 00007f9297e26128 R14: 00007f9297e26090 R15: 00007ffcebb41718 [ 406.045185][T10155] [ 406.066264][T10147] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1328'. [ 406.115466][T10147] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1328'. [ 406.168074][T10151] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1328'. [ 406.223029][T10157] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1328'. [ 407.411201][T10181] netlink: 'syz.3.1340': attribute type 39 has an invalid length. [ 407.594954][T10190] netlink: 'syz.1.1343': attribute type 12 has an invalid length. [ 407.624620][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1343'. [ 407.644228][T10187] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1340'. [ 407.673077][T10187] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1340'. [ 407.720341][T10181] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1340'. [ 407.737783][T10191] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1340'. [ 408.514055][T10207] IPv6: Can't replace route, no match found [ 408.883684][T10218] netlink: 'syz.2.1353': attribute type 39 has an invalid length. [ 409.258820][T10231] netlink: 'syz.0.1358': attribute type 12 has an invalid length. [ 409.353660][T10233] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 409.370245][T10233] netlink: 'syz.2.1359': attribute type 4 has an invalid length. [ 409.690299][T10240] netlink: 'syz.1.1361': attribute type 3 has an invalid length. [ 410.124721][T10252] netlink: 'syz.3.1365': attribute type 39 has an invalid length. [ 410.289391][T10256] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 410.316167][T10256] netlink: 'syz.2.1368': attribute type 29 has an invalid length. [ 410.456204][T10262] netlink: 'syz.0.1369': attribute type 4 has an invalid length. [ 410.727817][T10270] netlink: 'syz.1.1373': attribute type 9 has an invalid length. [ 410.767025][T10274] __nla_validate_parse: 11 callbacks suppressed [ 410.767047][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1375'. [ 410.782346][T10270] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 410.855728][T10277] FAULT_INJECTION: forcing a failure. [ 410.855728][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.882780][T10277] CPU: 1 PID: 10277 Comm: syz.2.1376 Not tainted syzkaller #0 [ 410.890795][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.901530][T10277] Call Trace: [ 410.904862][T10277] [ 410.908159][T10277] dump_stack_lvl+0x18c/0x250 [ 410.913093][T10277] ? show_regs_print_info+0x20/0x20 [ 410.918343][T10277] ? load_image+0x420/0x420 [ 410.923294][T10277] ? __might_fault+0xaa/0x120 [ 410.928034][T10277] should_fail_ex+0x394/0x4c0 [ 410.932943][T10277] copyin+0x1a/0x90 [ 410.936893][T10277] _copy_from_iter+0x532/0x1290 [ 410.941890][T10277] ? copyout_mc+0x70/0x70 [ 410.946385][T10277] ? __virt_addr_valid+0x10c/0x380 [ 410.951816][T10277] ? __virt_addr_valid+0x10c/0x380 [ 410.957427][T10277] ? __virt_addr_valid+0x10c/0x380 [ 410.963040][T10277] ? __check_object_size+0x4fc/0xa40 [ 410.968551][T10277] netlink_sendmsg+0x76b/0xbf0 [ 410.973548][T10277] ? netlink_getsockopt+0x590/0x590 [ 410.978910][T10277] ? apparmor_socket_sendmsg+0x8e/0x330 [ 410.984532][T10277] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 410.990247][T10277] ? security_socket_sendmsg+0x80/0xa0 [ 410.996094][T10277] ? netlink_getsockopt+0x590/0x590 [ 411.001601][T10277] ____sys_sendmsg+0x61b/0x980 [ 411.006621][T10277] ? __asan_memset+0x22/0x40 [ 411.011443][T10277] ? __sys_sendmsg_sock+0x30/0x30 [ 411.016773][T10277] ? __import_iovec+0x3fa/0x850 [ 411.021792][T10277] ? import_iovec+0x73/0xa0 [ 411.026522][T10277] ___sys_sendmsg+0x2a6/0x360 [ 411.031677][T10277] ? __sys_sendmsg+0x2b0/0x2b0 [ 411.036623][T10277] ? ktime_get+0x7f/0x280 [ 411.041107][T10277] __se_sys_sendmsg+0x1d0/0x2c0 [ 411.045997][T10277] ? __x64_sys_sendmsg+0x80/0x80 [ 411.050979][T10277] ? syscall_enter_from_user_mode+0x2e/0x80 [ 411.057187][T10277] do_syscall_64+0x55/0xb0 [ 411.061727][T10277] ? clear_bhb_loop+0x40/0x90 [ 411.066611][T10277] ? clear_bhb_loop+0x40/0x90 [ 411.071608][T10277] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.078058][T10277] RIP: 0033:0x7f0d2c39e019 [ 411.082678][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.103023][T10277] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.111845][T10277] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 411.119948][T10277] RDX: 0000000000084884 RSI: 0000200000000940 RDI: 0000000000000005 [ 411.128072][T10277] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 411.136359][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.144735][T10277] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 411.153046][T10277] [ 411.564387][T10275] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 411.926569][T10291] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1381'. [ 411.976308][T10291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.077326][T10295] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1380'. [ 412.090463][T10295] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1380'. [ 412.125533][T10293] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1380'. [ 412.175627][T10295] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1380'. [ 412.465749][T10310] team0: Device hsr_slave_0 failed to register rx_handler [ 413.355907][T10325] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1391'. [ 416.052077][T10333] validate_nla: 6 callbacks suppressed [ 416.052115][T10333] netlink: 'syz.2.1394': attribute type 2 has an invalid length. [ 416.117483][T10334] netlink: 'syz.1.1395': attribute type 39 has an invalid length. [ 416.134506][T10333] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 416.379414][T10342] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1395'. [ 416.421443][T10342] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1395'. [ 416.515398][T10334] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1395'. [ 416.587454][T10345] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1395'. [ 416.888270][T10355] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 417.225845][T10367] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 420.510454][T10380] netlink: 'syz.2.1405': attribute type 10 has an invalid length. [ 420.645703][T10383] netlink: 'syz.0.1406': attribute type 39 has an invalid length. [ 420.849128][T10393] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1406'. [ 420.864655][T10393] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1406'. [ 420.883736][T10390] netlink: 'syz.2.1407': attribute type 9 has an invalid length. [ 420.892903][T10390] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1407'. [ 420.908930][T10383] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1406'. [ 420.940886][T10393] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1406'. [ 421.489763][T10403] FAULT_INJECTION: forcing a failure. [ 421.489763][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 421.527730][T10394] netlink: 'syz.2.1407': attribute type 9 has an invalid length. [ 421.542173][T10403] CPU: 0 PID: 10403 Comm: syz.1.1413 Not tainted syzkaller #0 [ 421.550175][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 421.561076][T10403] Call Trace: [ 421.564624][T10403] [ 421.565066][T10394] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1407'. [ 421.567681][T10403] dump_stack_lvl+0x18c/0x250 [ 421.567720][T10403] ? show_regs_print_info+0x20/0x20 [ 421.587862][T10403] ? load_image+0x420/0x420 [ 421.592519][T10403] ? __might_sleep+0xe0/0xe0 [ 421.597288][T10403] ? __lock_acquire+0x7d80/0x7d80 [ 421.602571][T10403] should_fail_ex+0x394/0x4c0 [ 421.607542][T10403] should_failslab+0x9/0x20 [ 421.612640][T10403] slab_pre_alloc_hook+0x59/0x300 [ 421.618022][T10403] ? __lock_acquire+0x7d80/0x7d80 [ 421.623328][T10403] kmem_cache_alloc_node+0x5e/0x310 [ 421.628877][T10403] ? __alloc_skb+0x103/0x2c0 [ 421.633550][T10403] __alloc_skb+0x103/0x2c0 [ 421.638147][T10403] netlink_sendmsg+0x66a/0xbf0 [ 421.643332][T10403] ? netlink_getsockopt+0x590/0x590 [ 421.649139][T10403] ? apparmor_socket_sendmsg+0x8e/0x330 [ 421.655198][T10403] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 421.661022][T10403] ? security_socket_sendmsg+0x80/0xa0 [ 421.666548][T10403] ? netlink_getsockopt+0x590/0x590 [ 421.671912][T10403] ____sys_sendmsg+0x61b/0x980 [ 421.676849][T10403] ? __asan_memset+0x22/0x40 [ 421.681605][T10403] ? __sys_sendmsg_sock+0x30/0x30 [ 421.687045][T10403] ? __import_iovec+0x5f2/0x850 [ 421.692074][T10403] ? import_iovec+0x73/0xa0 [ 421.696830][T10403] ___sys_sendmsg+0x2a6/0x360 [ 421.701774][T10403] ? get_pid_task+0x20/0x1e0 [ 421.706550][T10403] ? __sys_sendmsg+0x2b0/0x2b0 [ 421.711599][T10403] ? __lock_acquire+0x7d80/0x7d80 [ 421.717252][T10403] __se_sys_sendmsg+0x1d0/0x2c0 [ 421.722263][T10403] ? __x64_sys_sendmsg+0x80/0x80 [ 421.727370][T10403] ? lockdep_hardirqs_on+0x98/0x150 [ 421.733082][T10403] do_syscall_64+0x55/0xb0 [ 421.737831][T10403] ? clear_bhb_loop+0x40/0x90 [ 421.743108][T10403] ? clear_bhb_loop+0x40/0x90 [ 421.747964][T10403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.754114][T10403] RIP: 0033:0x7f789059e019 [ 421.758770][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.779409][T10403] RSP: 002b:00007f789155a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.788443][T10403] RAX: ffffffffffffffda RBX: 00007f7890825fa0 RCX: 00007f789059e019 [ 421.796846][T10403] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000c [ 421.805073][T10403] RBP: 00007f789155a090 R08: 0000000000000000 R09: 0000000000000000 [ 421.813492][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.822056][T10403] R13: 00007f7890826038 R14: 00007f7890825fa0 R15: 00007ffce2bf3318 [ 421.830297][T10403] [ 421.947188][T10402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.200412][T10424] netlink: 'syz.2.1419': attribute type 39 has an invalid length. [ 422.375670][T10429] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1419'. [ 422.419357][T10429] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1419'. [ 422.459892][T10424] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1419'. [ 422.496011][T10431] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1419'. [ 422.768271][T10437] FAULT_INJECTION: forcing a failure. [ 422.768271][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 422.786954][T10437] CPU: 0 PID: 10437 Comm: syz.2.1422 Not tainted syzkaller #0 [ 422.794968][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.805787][T10437] Call Trace: [ 422.809136][T10437] [ 422.812201][T10437] dump_stack_lvl+0x18c/0x250 [ 422.817127][T10437] ? show_regs_print_info+0x20/0x20 [ 422.823012][T10437] ? load_image+0x420/0x420 [ 422.827840][T10437] ? __might_sleep+0xe0/0xe0 [ 422.832664][T10437] ? __lock_acquire+0x7d80/0x7d80 [ 422.838190][T10437] should_fail_ex+0x394/0x4c0 [ 422.843209][T10437] should_failslab+0x9/0x20 [ 422.848039][T10437] slab_pre_alloc_hook+0x59/0x300 [ 422.853393][T10437] ? d_instantiate+0x6f/0x90 [ 422.858215][T10437] kmem_cache_alloc+0x5a/0x2c0 [ 422.863215][T10437] ? alloc_empty_file+0x9e/0x1d0 [ 422.868566][T10437] alloc_empty_file+0x9e/0x1d0 [ 422.873478][T10437] alloc_file+0x5b/0x600 [ 422.875091][T10434] syzkaller0: entered promiscuous mode [ 422.877851][T10437] alloc_file_pseudo+0x184/0x210 [ 422.883331][T10434] syzkaller0: entered allmulticast mode [ 422.888536][T10437] ? fput+0x1a0/0x1a0 [ 422.888560][T10437] ? alloc_fd+0x590/0x640 [ 422.902669][T10437] anon_inode_getfd+0xca/0x1c0 [ 422.907604][T10437] map_create+0xf13/0x12f0 [ 422.912085][T10437] __sys_bpf+0x651/0x890 [ 422.916564][T10437] ? bpf_link_show_fdinfo+0x390/0x390 [ 422.922186][T10437] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 422.928424][T10437] __x64_sys_bpf+0x7c/0x90 [ 422.933069][T10437] do_syscall_64+0x55/0xb0 [ 422.937707][T10437] ? clear_bhb_loop+0x40/0x90 [ 422.942452][T10437] ? clear_bhb_loop+0x40/0x90 [ 422.947358][T10437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.953503][T10437] RIP: 0033:0x7f0d2c39e019 [ 422.958085][T10437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.977937][T10437] RSP: 002b:00007f0d2d26f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.986790][T10437] RAX: ffffffffffffffda RBX: 00007f0d2c626090 RCX: 00007f0d2c39e019 [ 422.995007][T10437] RDX: 0000000000000048 RSI: 0000200000000640 RDI: 0000000000000000 [ 423.003024][T10437] RBP: 00007f0d2d26f090 R08: 0000000000000000 R09: 0000000000000000 [ 423.011067][T10437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.019731][T10437] R13: 00007f0d2c626128 R14: 00007f0d2c626090 R15: 00007fff7a93cce8 [ 423.028059][T10437] [ 428.261051][T10462] netlink: 'syz.3.1430': attribute type 39 has an invalid length. [ 428.548386][T10467] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1430'. [ 428.563257][T10467] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1430'. [ 428.593059][T10462] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1430'. [ 428.619880][T10467] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1430'. [ 428.951495][T10475] FAULT_INJECTION: forcing a failure. [ 428.951495][T10475] name failslab, interval 1, probability 0, space 0, times 0 [ 428.965883][T10475] CPU: 1 PID: 10475 Comm: syz.2.1435 Not tainted syzkaller #0 [ 428.973670][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.983787][T10475] Call Trace: [ 428.987301][T10475] [ 428.990328][T10475] dump_stack_lvl+0x18c/0x250 [ 428.995501][T10475] ? show_regs_print_info+0x20/0x20 [ 429.000865][T10475] ? load_image+0x420/0x420 [ 429.005446][T10475] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 429.011661][T10475] should_fail_ex+0x394/0x4c0 [ 429.016931][T10475] should_failslab+0x9/0x20 [ 429.021518][T10475] slab_pre_alloc_hook+0x59/0x300 [ 429.026627][T10475] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.032864][T10475] kmem_cache_alloc_node+0x5e/0x310 [ 429.038412][T10475] ? __alloc_skb+0x103/0x2c0 [ 429.043238][T10475] __alloc_skb+0x103/0x2c0 [ 429.048082][T10475] skb_segment+0xebd/0x4070 [ 429.052681][T10475] ? skb_segment+0x811/0x4070 [ 429.057727][T10475] inet_gso_segment+0x5d0/0x1440 [ 429.063182][T10475] ? inet_sk_state_store+0x90/0x90 [ 429.068722][T10475] skb_mac_gso_segment+0x320/0x640 [ 429.073895][T10475] ? skb_mac_gso_segment+0x185/0x640 [ 429.079785][T10475] ? skb_eth_gso_segment+0x270/0x270 [ 429.085512][T10475] ? passthru_features_check+0x20/0x20 [ 429.091305][T10475] __skb_gso_segment+0x2f9/0x4a0 [ 429.096510][T10475] validate_xmit_skb+0x549/0xf30 [ 429.101688][T10475] ? validate_xmit_skb_list+0x120/0x120 [ 429.107496][T10475] __dev_queue_xmit+0x13a9/0x3630 [ 429.112693][T10475] ? __dev_queue_xmit+0x275/0x3630 [ 429.117993][T10475] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 429.124296][T10475] ? virtio_net_hdr_to_skb+0x638/0x1470 [ 429.129970][T10475] ? netdev_core_pick_tx+0x370/0x370 [ 429.135324][T10475] ? virtio_net_hdr_to_skb+0xc5a/0x1470 [ 429.141102][T10475] ? packet_parse_headers+0x7dd/0xae0 [ 429.146733][T10475] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 429.153025][T10475] ? skb_copy_datagram_from_iter+0x602/0x6f0 [ 429.159245][T10475] ? packet_xmit+0x66/0x340 [ 429.163983][T10475] packet_sendmsg+0x3a7b/0x4c70 [ 429.169119][T10475] ? set_user_nice+0x620/0xb20 [ 429.174039][T10475] ? perf_trace_preemptirq_template+0x269/0x330 [ 429.180610][T10475] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 429.186764][T10475] ? aa_sk_perm+0x83c/0x970 [ 429.191855][T10475] ? packet_getsockopt+0xad0/0xad0 [ 429.197043][T10475] ? aa_sock_msg_perm+0x94/0x150 [ 429.202047][T10475] ? apparmor_socket_sendmsg+0x23d/0x330 [ 429.207914][T10475] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.213512][T10475] ? security_socket_sendmsg+0x80/0xa0 [ 429.219023][T10475] ? packet_getsockopt+0xad0/0xad0 [ 429.224550][T10475] ____sys_sendmsg+0x61b/0x980 [ 429.229776][T10475] ? __asan_memset+0x22/0x40 [ 429.234619][T10475] ? __sys_sendmsg_sock+0x30/0x30 [ 429.239996][T10475] ? __import_iovec+0x3fa/0x850 [ 429.245091][T10475] ? import_iovec+0x73/0xa0 [ 429.249670][T10475] ___sys_sendmsg+0x2a6/0x360 [ 429.254401][T10475] ? __sys_sendmsg+0x2b0/0x2b0 [ 429.259577][T10475] __se_sys_sendmsg+0x1d0/0x2c0 [ 429.264653][T10475] ? perf_trace_preemptirq_template+0x269/0x330 [ 429.271138][T10475] ? __x64_sys_sendmsg+0x80/0x80 [ 429.276524][T10475] ? lockdep_hardirqs_on+0x98/0x150 [ 429.282228][T10475] do_syscall_64+0x55/0xb0 [ 429.287048][T10475] ? clear_bhb_loop+0x40/0x90 [ 429.291786][T10475] ? clear_bhb_loop+0x40/0x90 [ 429.296712][T10475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.303001][T10475] RIP: 0033:0x7f0d2c39e019 [ 429.307745][T10475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.328721][T10475] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.337631][T10475] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 429.346564][T10475] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000007 [ 429.354683][T10475] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 429.362718][T10475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.371558][T10475] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 429.380245][T10475] [ 429.688107][T10484] netlink: 'syz.0.1438': attribute type 12 has an invalid length. [ 429.712681][T10484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1438'. [ 429.822605][T10486] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1439'. [ 430.092415][T10496] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1443'. [ 430.221501][T10498] netlink: 'syz.3.1444': attribute type 39 has an invalid length. [ 430.254043][T10500] netlink: 'syz.2.1445': attribute type 10 has an invalid length. [ 430.282963][T10500] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1445'. [ 430.531728][T10501] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1444'. [ 430.564038][T10501] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1444'. [ 431.681535][T10524] delete_channel: no stack [ 431.955781][T10530] netlink: 'syz.3.1454': attribute type 29 has an invalid length. [ 431.979202][T10530] netlink: 'syz.3.1454': attribute type 29 has an invalid length. [ 432.139940][T10530] syzkaller0: entered promiscuous mode [ 432.165677][T10536] netlink: 'syz.1.1456': attribute type 39 has an invalid length. [ 435.058989][T10542] __nla_validate_parse: 5 callbacks suppressed [ 435.059009][T10542] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1456'. [ 436.024617][T10577] netlink: 'syz.2.1468': attribute type 12 has an invalid length. [ 436.046063][T10577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1468'. [ 436.262551][T10584] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1470'. [ 436.460935][T10589] netlink: 'syz.3.1471': attribute type 39 has an invalid length. [ 436.499553][T10593] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1472'. [ 436.653910][T10594] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1471'. [ 436.698022][T10594] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1471'. [ 436.766749][T10589] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1471'. [ 436.838805][T10599] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1471'. [ 437.238402][T10606] netlink: set zone limit has 8 unknown bytes [ 439.020481][T10626] netlink: 'syz.1.1482': attribute type 8 has an invalid length. [ 439.035030][T10626] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1482'. [ 439.237782][T10631] netlink: 'syz.1.1484': attribute type 39 has an invalid length. [ 439.433320][T10634] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1484'. [ 439.568910][T10641] bridge_slave_1: left allmulticast mode [ 439.592239][T10641] bridge_slave_1: left promiscuous mode [ 439.623524][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.709849][T10641] @0: left allmulticast mode [ 439.748872][T10641] @0: left promiscuous mode [ 439.765585][T10641] bridge0: port 1(c@0) entered disabled state [ 440.047342][T10654] bridge_slave_1: default FDB implementation only supports local addresses [ 440.648674][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.684626][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.171718][T10681] syzkaller0: entered promiscuous mode [ 441.178697][T10681] syzkaller0: entered allmulticast mode [ 445.597454][T10718] bridge_slave_1: left allmulticast mode [ 445.603720][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.682448][T10718] @0: left allmulticast mode [ 445.695210][T10718] @0: left promiscuous mode [ 445.700505][T10718] bridge0: port 1(c@0) entered disabled state [ 445.941179][T10721] __nla_validate_parse: 6 callbacks suppressed [ 445.941199][T10721] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1518'. [ 446.888158][T10754] FAULT_INJECTION: forcing a failure. [ 446.888158][T10754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.917718][T10754] CPU: 0 PID: 10754 Comm: syz.2.1529 Not tainted syzkaller #0 [ 446.925429][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.935570][T10754] Call Trace: [ 446.939120][T10754] [ 446.942122][T10754] dump_stack_lvl+0x18c/0x250 [ 446.947247][T10754] ? show_regs_print_info+0x20/0x20 [ 446.952633][T10754] ? load_image+0x420/0x420 [ 446.957322][T10754] ? __might_fault+0xaa/0x120 [ 446.962075][T10754] ? __lock_acquire+0x7d80/0x7d80 [ 446.967193][T10754] should_fail_ex+0x394/0x4c0 [ 446.972046][T10754] _copy_from_user+0x2f/0xe0 [ 446.976893][T10754] ___sys_sendmsg+0x1c7/0x360 [ 446.981820][T10754] ? __sys_sendmsg+0x2b0/0x2b0 [ 446.986956][T10754] ? __lock_acquire+0x7d80/0x7d80 [ 446.992373][T10754] __se_sys_sendmsg+0x1d0/0x2c0 [ 446.997470][T10754] ? __x64_sys_sendmsg+0x80/0x80 [ 447.002520][T10754] ? lockdep_hardirqs_on+0x98/0x150 [ 447.008140][T10754] do_syscall_64+0x55/0xb0 [ 447.012956][T10754] ? clear_bhb_loop+0x40/0x90 [ 447.017785][T10754] ? clear_bhb_loop+0x40/0x90 [ 447.022589][T10754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.028656][T10754] RIP: 0033:0x7f0d2c39e019 [ 447.033408][T10754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.054138][T10754] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.062709][T10754] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 447.071014][T10754] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 447.079136][T10754] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 447.087440][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.096076][T10754] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 447.104782][T10754] [ 448.366698][T10786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1541'. [ 448.430265][T10788] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1543'. [ 449.114130][T10804] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 449.174585][T10804] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1548'. [ 449.545707][T10814] netlink: 'syz.2.1552': attribute type 9 has an invalid length. [ 449.570382][T10814] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1552'. [ 449.677269][T10808] netlink: 'syz.1.1549': attribute type 2 has an invalid length. [ 449.726753][T10808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1549'. [ 449.893659][T10815] netlink: 'syz.2.1552': attribute type 9 has an invalid length. [ 449.958550][T10815] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1552'. [ 451.449664][T10834] netlink: 'syz.0.1559': attribute type 39 has an invalid length. [ 451.477468][T10836] netlink: 'syz.2.1560': attribute type 10 has an invalid length. [ 451.535162][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 451.639316][T10844] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1559'. [ 451.676231][T10844] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1559'. [ 451.700955][T10834] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1559'. [ 451.711963][T10844] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1559'. [ 452.262607][T10869] netlink: 'syz.0.1570': attribute type 9 has an invalid length. [ 452.270983][T10869] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 452.827539][T10870] netlink: 'syz.0.1570': attribute type 9 has an invalid length. [ 452.858556][T10870] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1570'. [ 453.373814][T10889] netlink: 'syz.2.1575': attribute type 10 has an invalid length. [ 453.416707][T10889] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1575'. [ 453.492473][T10889] veth0_vlan: left promiscuous mode [ 455.131534][T10921] FAULT_INJECTION: forcing a failure. [ 455.131534][T10921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.163410][T10921] CPU: 1 PID: 10921 Comm: syz.2.1585 Not tainted syzkaller #0 [ 455.171697][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.182651][T10921] Call Trace: [ 455.186265][T10921] [ 455.189426][T10921] dump_stack_lvl+0x18c/0x250 [ 455.194362][T10921] ? show_regs_print_info+0x20/0x20 [ 455.199829][T10921] ? load_image+0x420/0x420 [ 455.204588][T10921] ? __lock_acquire+0x7d80/0x7d80 [ 455.209793][T10921] should_fail_ex+0x394/0x4c0 [ 455.214855][T10921] prepare_alloc_pages+0x1e1/0x5b0 [ 455.220374][T10921] __alloc_pages+0x134/0x460 [ 455.225110][T10921] ? zone_statistics+0x170/0x170 [ 455.230834][T10921] ? alloc_pages+0x4e1/0x740 [ 455.235743][T10921] ? do_raw_spin_unlock+0x121/0x230 [ 455.241002][T10921] __get_free_pages+0xc/0x30 [ 455.245817][T10921] kasan_populate_vmalloc_pte+0x35/0x100 [ 455.252115][T10921] __apply_to_page_range+0x860/0xdd0 [ 455.257742][T10921] ? kasan_populate_vmalloc+0x70/0x70 [ 455.263345][T10921] ? apply_to_page_range+0x50/0x50 [ 455.268790][T10921] ? do_raw_spin_unlock+0x121/0x230 [ 455.274409][T10921] alloc_vmap_area+0x1d26/0x1e50 [ 455.279876][T10921] ? vm_map_ram+0xcf0/0xcf0 [ 455.285043][T10921] ? rcu_is_watching+0x15/0xb0 [ 455.290319][T10921] __get_vm_area_node+0x162/0x370 [ 455.295582][T10921] ? __x64_sys_bpf+0x7c/0x90 [ 455.300323][T10921] __vmalloc_node_range+0x36f/0x1320 [ 455.305838][T10921] ? dev_map_create_hash+0x21/0x1b0 [ 455.311697][T10921] ? free_vm_area+0x50/0x50 [ 455.316327][T10921] ? __kmem_cache_alloc_node+0x194/0x250 [ 455.322029][T10921] bpf_map_area_alloc+0xf1/0x110 [ 455.327025][T10921] ? dev_map_create_hash+0x21/0x1b0 [ 455.332351][T10921] dev_map_create_hash+0x21/0x1b0 [ 455.337443][T10921] dev_map_alloc+0x277/0x4c0 [ 455.342331][T10921] map_create+0x877/0x12f0 [ 455.346881][T10921] __sys_bpf+0x651/0x890 [ 455.351508][T10921] ? bpf_link_show_fdinfo+0x390/0x390 [ 455.356931][T10921] ? lock_chain_count+0x20/0x20 [ 455.362255][T10921] __x64_sys_bpf+0x7c/0x90 [ 455.366827][T10921] do_syscall_64+0x55/0xb0 [ 455.371625][T10921] ? clear_bhb_loop+0x40/0x90 [ 455.376430][T10921] ? clear_bhb_loop+0x40/0x90 [ 455.381849][T10921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.388232][T10921] RIP: 0033:0x7f0d2c39e019 [ 455.392952][T10921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.412742][T10921] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.421801][T10921] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 455.430257][T10921] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 455.438349][T10921] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 455.446535][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.454676][T10921] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 455.463223][T10921] [ 455.467266][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1586'. [ 455.495558][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1586'. [ 455.547831][T10923] netlink: 'syz.1.1592': attribute type 39 has an invalid length. [ 456.096964][T10938] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 456.152934][T10938] CPU: 1 PID: 10938 Comm: syz.0.1590 Not tainted syzkaller #0 [ 456.161004][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.171857][T10938] Call Trace: [ 456.175315][T10938] [ 456.178418][T10938] dump_stack_lvl+0x18c/0x250 [ 456.183480][T10938] ? show_regs_print_info+0x20/0x20 [ 456.189034][T10938] ? load_image+0x420/0x420 [ 456.193806][T10938] sysfs_warn_dup+0x8e/0xa0 [ 456.199017][T10938] sysfs_do_create_link_sd+0xc0/0x110 [ 456.204815][T10938] device_add_class_symlinks+0x1cf/0x240 [ 456.210819][T10938] device_add+0x4f9/0xc40 [ 456.215397][T10938] wiphy_register+0x1d99/0x2ac0 [ 456.220887][T10938] ? cfg80211_event_work+0x40/0x40 [ 456.226090][T10938] ? minstrel_ht_alloc+0x88a/0x990 [ 456.231811][T10938] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 456.238943][T10938] ieee80211_register_hw+0x2dd8/0x3b30 [ 456.244698][T10938] ? ieee80211_register_hw+0xed1/0x3b30 [ 456.250457][T10938] ? ieee80211_tasklet_handler+0x20/0x20 [ 456.256443][T10938] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 456.262823][T10938] ? __debug_object_init+0xec/0x450 [ 456.268557][T10938] ? __asan_memset+0x22/0x40 [ 456.273435][T10938] ? __hrtimer_init+0x189/0x270 [ 456.279246][T10938] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 456.285593][T10938] ? mac80211_hwsim_free+0x220/0x220 [ 456.291349][T10938] ? rcu_is_watching+0x15/0xb0 [ 456.296243][T10938] ? kstrndup+0xbd/0x140 [ 456.300929][T10938] hwsim_new_radio_nl+0xdad/0x1a70 [ 456.306353][T10938] ? __nla_validate+0x50/0x50 [ 456.311545][T10938] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 456.318309][T10938] ? __nla_parse+0x40/0x50 [ 456.323153][T10938] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 456.329718][T10938] genl_family_rcv_msg_doit+0x21a/0x310 [ 456.335669][T10938] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 456.342405][T10938] ? bpf_lsm_capable+0x9/0x10 [ 456.347764][T10938] ? security_capable+0x89/0xb0 [ 456.353003][T10938] genl_rcv_msg+0x611/0x7a0 [ 456.357644][T10938] ? genl_bind+0x360/0x360 [ 456.362415][T10938] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 456.368888][T10938] ? perf_trace_lock+0x303/0x3b0 [ 456.373978][T10938] netlink_rcv_skb+0x235/0x4c0 [ 456.378943][T10938] ? genl_bind+0x360/0x360 [ 456.383580][T10938] ? netlink_ack+0x1160/0x1160 [ 456.388675][T10938] ? __lock_acquire+0x7d80/0x7d80 [ 456.393929][T10938] ? down_read+0x1ac/0x2e0 [ 456.398497][T10938] genl_rcv+0x28/0x40 [ 456.402612][T10938] netlink_unicast+0x7b1/0x930 [ 456.407842][T10938] netlink_sendmsg+0x8d0/0xbf0 [ 456.413100][T10938] ? netlink_getsockopt+0x590/0x590 [ 456.418615][T10938] ? apparmor_socket_sendmsg+0x8e/0x330 [ 456.424353][T10938] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 456.429745][T10938] ? security_socket_sendmsg+0x80/0xa0 [ 456.435510][T10938] ? netlink_getsockopt+0x590/0x590 [ 456.441341][T10938] ____sys_sendmsg+0x61b/0x980 [ 456.446505][T10938] ? __asan_memset+0x22/0x40 [ 456.451579][T10938] ? __sys_sendmsg_sock+0x30/0x30 [ 456.456799][T10938] ? __import_iovec+0x5f2/0x850 [ 456.462069][T10938] ? import_iovec+0x73/0xa0 [ 456.467155][T10938] ___sys_sendmsg+0x2a6/0x360 [ 456.472365][T10938] ? __sys_sendmsg+0x2b0/0x2b0 [ 456.477583][T10938] __se_sys_sendmsg+0x1d0/0x2c0 [ 456.483094][T10938] ? __x64_sys_sendmsg+0x80/0x80 [ 456.488567][T10938] ? lockdep_hardirqs_on+0x98/0x150 [ 456.494503][T10938] do_syscall_64+0x55/0xb0 [ 456.499635][T10938] ? clear_bhb_loop+0x40/0x90 [ 456.504870][T10938] ? clear_bhb_loop+0x40/0x90 [ 456.510010][T10938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.516178][T10938] RIP: 0033:0x7f9297b9e019 [ 456.520872][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.541362][T10938] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.550108][T10938] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 456.558623][T10938] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 456.567148][T10938] RBP: 00007f9297c3500c R08: 0000000000000000 R09: 0000000000000000 [ 456.575564][T10938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.584043][T10938] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 456.592394][T10938] [ 456.645085][T10939] netlink: 'syz.0.1590': attribute type 9 has an invalid length. [ 456.653435][T10939] __nla_validate_parse: 12 callbacks suppressed [ 456.653454][T10939] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1590'. [ 456.956276][T10944] netlink: 'syz.1.1591': attribute type 10 has an invalid length. [ 456.985243][T10944] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1591'. [ 459.144603][T10981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1606'. [ 460.350303][T11002] netlink: 'syz.2.1614': attribute type 39 has an invalid length. [ 460.455684][T11006] netlink: 'syz.3.1615': attribute type 4 has an invalid length. [ 460.475603][T11006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1615'. [ 460.598019][T11002] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'. [ 460.720154][T11006] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 460.741710][T11002] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'. [ 460.757435][T11004] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'. [ 460.784434][T11013] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1614'. [ 460.946707][T11016] FAULT_INJECTION: forcing a failure. [ 460.946707][T11016] name failslab, interval 1, probability 0, space 0, times 0 [ 460.961537][T11016] CPU: 1 PID: 11016 Comm: syz.3.1617 Not tainted syzkaller #0 [ 460.969161][T11016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.979536][T11016] Call Trace: [ 460.983040][T11016] [ 460.986022][T11016] dump_stack_lvl+0x18c/0x250 [ 460.990950][T11016] ? show_regs_print_info+0x20/0x20 [ 460.996395][T11016] ? load_image+0x420/0x420 [ 461.001064][T11016] ? __might_sleep+0xe0/0xe0 [ 461.005893][T11016] ? __lock_acquire+0x7d80/0x7d80 [ 461.011086][T11016] should_fail_ex+0x394/0x4c0 [ 461.016014][T11016] should_failslab+0x9/0x20 [ 461.020764][T11016] slab_pre_alloc_hook+0x59/0x300 [ 461.025951][T11016] ? apparmor_sk_alloc_security+0x77/0x100 [ 461.031995][T11016] __kmem_cache_alloc_node+0x53/0x250 [ 461.037594][T11016] ? apparmor_sk_alloc_security+0x77/0x100 [ 461.043542][T11016] kmalloc_trace+0x2a/0xe0 [ 461.048056][T11016] apparmor_sk_alloc_security+0x77/0x100 [ 461.053859][T11016] security_sk_alloc+0x6e/0xa0 [ 461.058779][T11016] sk_prot_alloc+0x101/0x210 [ 461.063620][T11016] ? sk_alloc+0x24/0x350 [ 461.068622][T11016] sk_alloc+0x3a/0x350 [ 461.072760][T11016] ? bpf_ctx_init+0x154/0x190 [ 461.077503][T11016] bpf_prog_test_run_skb+0x371/0x18f0 [ 461.083189][T11016] ? __fget_files+0x28/0x460 [ 461.087820][T11016] ? __fget_files+0x3fc/0x460 [ 461.092630][T11016] ? cpu_online+0x60/0x60 [ 461.097266][T11016] bpf_prog_test_run+0x31f/0x390 [ 461.102594][T11016] __sys_bpf+0x49d/0x890 [ 461.107155][T11016] ? bpf_link_show_fdinfo+0x390/0x390 [ 461.112750][T11016] ? lock_chain_count+0x20/0x20 [ 461.117747][T11016] __x64_sys_bpf+0x7c/0x90 [ 461.122221][T11016] do_syscall_64+0x55/0xb0 [ 461.126936][T11016] ? clear_bhb_loop+0x40/0x90 [ 461.131946][T11016] ? clear_bhb_loop+0x40/0x90 [ 461.136921][T11016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.143213][T11016] RIP: 0033:0x7f58d099e019 [ 461.147958][T11016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.168744][T11016] RSP: 002b:00007f58d179c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.177571][T11016] RAX: ffffffffffffffda RBX: 00007f58d0c25fa0 RCX: 00007f58d099e019 [ 461.186339][T11016] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 461.195464][T11016] RBP: 00007f58d179c090 R08: 0000000000000000 R09: 0000000000000000 [ 461.204203][T11016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.212393][T11016] R13: 00007f58d0c26038 R14: 00007f58d0c25fa0 R15: 00007fff9324b2c8 [ 461.220947][T11016] [ 461.968860][T11028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1621'. [ 462.244461][T11028] bridge0: port 1(c@0) entered disabled state [ 462.617900][T11028] @0 (unregistering): left allmulticast mode [ 462.634512][T11028] @0 (unregistering): left promiscuous mode [ 462.640932][T11028] bridge0: port 1(c@0) entered disabled state [ 463.095182][T11041] netlink: 'syz.1.1626': attribute type 39 has an invalid length. [ 463.279493][T11043] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1626'. [ 463.293219][T11043] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1626'. [ 463.309948][T11043] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1626'. [ 463.339053][T11041] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1626'. [ 463.349838][T11046] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 463.646994][T11052] netlink: 'syz.2.1627': attribute type 4 has an invalid length. [ 463.684895][T11052] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1627'. [ 463.750653][T11052] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 463.822331][T11048] cgroup: fork rejected by pids controller in /syz1 [ 464.565123][T11073] netlink: 'syz.3.1637': attribute type 9 has an invalid length. [ 464.573491][T11073] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1637'. [ 464.731771][T11077] netlink: 'syz.2.1638': attribute type 9 has an invalid length. [ 464.775224][T11077] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1638'. [ 464.850193][T11077] FAULT_INJECTION: forcing a failure. [ 464.850193][T11077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.876711][ T7564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.901186][T11077] CPU: 0 PID: 11077 Comm: syz.2.1638 Not tainted syzkaller #0 [ 464.909214][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 464.919564][T11077] Call Trace: [ 464.923082][T11077] [ 464.926160][T11077] dump_stack_lvl+0x18c/0x250 [ 464.930911][T11077] ? show_regs_print_info+0x20/0x20 [ 464.936167][T11077] ? load_image+0x420/0x420 [ 464.940744][T11077] ? __might_fault+0xaa/0x120 [ 464.945486][T11077] ? __lock_acquire+0x7d80/0x7d80 [ 464.950659][T11077] should_fail_ex+0x394/0x4c0 [ 464.955488][T11077] _copy_from_user+0x2f/0xe0 [ 464.960308][T11077] ___sys_sendmsg+0x1c7/0x360 [ 464.965038][T11077] ? get_pid_task+0x20/0x1e0 [ 464.969949][T11077] ? __sys_sendmsg+0x2b0/0x2b0 [ 464.974789][T11077] ? __lock_acquire+0x7d80/0x7d80 [ 464.979888][T11077] __se_sys_sendmsg+0x1d0/0x2c0 [ 464.984973][T11077] ? __x64_sys_sendmsg+0x80/0x80 [ 464.990057][T11077] ? lockdep_hardirqs_on+0x98/0x150 [ 464.995843][T11077] do_syscall_64+0x55/0xb0 [ 465.000392][T11077] ? clear_bhb_loop+0x40/0x90 [ 465.005126][T11077] ? clear_bhb_loop+0x40/0x90 [ 465.009857][T11077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.015889][T11077] RIP: 0033:0x7f0d2c39e019 [ 465.020453][T11077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.040635][T11077] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.049475][T11077] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 465.057679][T11077] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 465.065865][T11077] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 465.074336][T11077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.082468][T11077] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 465.090710][T11077] [ 465.147084][T11078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1636'. [ 465.215017][T11078] bridge0: port 1(c@0) entered disabled state [ 465.530685][T11078] @0 (unregistering): left promiscuous mode [ 465.584481][T11078] bridge0: port 1(c@0) entered disabled state [ 465.591984][T11082] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1641'. [ 465.630085][T11082] openvswitch: netlink: Key type 29 is not supported [ 465.850085][ T7564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.013979][ T7564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.152928][ T7564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.216841][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.227680][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.236948][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.251603][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.261902][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 466.269931][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.325688][T11091] syzkaller0: entered promiscuous mode [ 466.331601][T11091] syzkaller0: entered allmulticast mode [ 467.833000][T11115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1652'. [ 468.327209][ T5789] Bluetooth: hci2: command tx timeout [ 469.086288][T11107] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1648'. [ 469.099939][T11115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1652'. [ 469.384117][T11127] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1653'. [ 469.641172][T11134] FAULT_INJECTION: forcing a failure. [ 469.641172][T11134] name failslab, interval 1, probability 0, space 0, times 0 [ 469.669007][T11134] CPU: 1 PID: 11134 Comm: syz.0.1657 Not tainted syzkaller #0 [ 469.676926][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.687231][T11134] Call Trace: [ 469.690599][T11134] [ 469.693665][T11134] dump_stack_lvl+0x18c/0x250 [ 469.698593][T11134] ? show_regs_print_info+0x20/0x20 [ 469.704021][T11134] ? load_image+0x420/0x420 [ 469.708846][T11134] ? verify_lock_unused+0x140/0x140 [ 469.714196][T11134] should_fail_ex+0x394/0x4c0 [ 469.719197][T11134] should_failslab+0x9/0x20 [ 469.723837][T11134] slab_pre_alloc_hook+0x59/0x300 [ 469.729099][T11134] kmem_cache_alloc+0x5a/0x2c0 [ 469.734016][T11134] ? skb_clone+0x1eb/0x370 [ 469.738688][T11134] skb_clone+0x1eb/0x370 [ 469.743877][T11134] __netlink_deliver_tap+0x411/0x7f0 [ 469.750011][T11134] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.755815][T11134] netlink_deliver_tap+0x19c/0x1b0 [ 469.761408][T11134] netlink_sendskb+0x68/0x130 [ 469.766256][T11134] netlink_ack+0xcd5/0x1160 [ 469.770950][T11134] ? netlink_dump+0xec0/0xec0 [ 469.775810][T11134] ? perf_trace_lock+0x303/0x3b0 [ 469.781435][T11134] netlink_rcv_skb+0x2b3/0x4c0 [ 469.786533][T11134] ? rtnetlink_bind+0x80/0x80 [ 469.791768][T11134] ? netlink_ack+0x1160/0x1160 [ 469.796619][T11134] ? __lock_acquire+0x7d80/0x7d80 [ 469.802054][T11134] ? netlink_deliver_tap+0x2e/0x1b0 [ 469.807748][T11134] netlink_unicast+0x7b1/0x930 [ 469.812866][T11134] netlink_sendmsg+0x8d0/0xbf0 [ 469.817755][T11134] ? netlink_getsockopt+0x590/0x590 [ 469.823442][T11134] ? apparmor_socket_sendmsg+0x8e/0x330 [ 469.829301][T11134] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 469.834815][T11134] ? security_socket_sendmsg+0x80/0xa0 [ 469.840588][T11134] ? netlink_getsockopt+0x590/0x590 [ 469.846272][T11134] ____sys_sendmsg+0x61b/0x980 [ 469.851103][T11134] ? __asan_memset+0x22/0x40 [ 469.855919][T11134] ? __sys_sendmsg_sock+0x30/0x30 [ 469.861157][T11134] ? __import_iovec+0x3fa/0x850 [ 469.866162][T11134] ? import_iovec+0x73/0xa0 [ 469.870841][T11134] ___sys_sendmsg+0x2a6/0x360 [ 469.875682][T11134] ? __sys_sendmsg+0x2b0/0x2b0 [ 469.880533][T11134] ? __lock_acquire+0x7d80/0x7d80 [ 469.885752][T11134] __se_sys_sendmsg+0x1d0/0x2c0 [ 469.891434][T11134] ? __x64_sys_sendmsg+0x80/0x80 [ 469.896909][T11134] ? lockdep_hardirqs_on+0x98/0x150 [ 469.902376][T11134] do_syscall_64+0x55/0xb0 [ 469.906864][T11134] ? clear_bhb_loop+0x40/0x90 [ 469.911670][T11134] ? clear_bhb_loop+0x40/0x90 [ 469.916411][T11134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.922354][T11134] RIP: 0033:0x7f9297b9e019 [ 469.926929][T11134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.947219][T11134] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.955971][T11134] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 469.964602][T11134] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 469.972717][T11134] RBP: 00007f9298ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 469.980739][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.988784][T11134] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 469.997116][T11134] [ 470.270956][T11135] tap0: tun_chr_ioctl cmd 35108 [ 470.417608][ T5789] Bluetooth: hci2: command tx timeout [ 471.011046][T11097] chnl_net:caif_netlink_parms(): no params data found [ 471.581033][T11166] netlink: 'syz.3.1664': attribute type 39 has an invalid length. [ 471.940515][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.979758][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.004987][T11097] bridge_slave_0: entered allmulticast mode [ 472.012598][T11097] bridge_slave_0: entered promiscuous mode [ 472.057513][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.068167][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.076074][T11097] bridge_slave_1: entered allmulticast mode [ 472.084111][T11097] bridge_slave_1: entered promiscuous mode [ 472.184696][T11169] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1664'. [ 472.270594][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.283511][T11169] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1664'. [ 472.316642][T11166] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1664'. [ 472.339851][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.502363][ T5789] Bluetooth: hci2: command tx timeout [ 473.288665][T11097] team0: Port device team_slave_0 added [ 473.350081][T11097] team0: Port device team_slave_1 added [ 473.521197][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.537227][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.600019][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.641793][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.675499][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.730800][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.040649][T11097] hsr_slave_0: entered promiscuous mode [ 474.077743][T11097] hsr_slave_1: entered promiscuous mode [ 474.101274][T11097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.119491][T11097] Cannot create hsr debugfs directory [ 474.243763][T11217] netlink: 'syz.3.1674': attribute type 2 has an invalid length. [ 474.254324][T11217] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1674'. [ 474.551073][ T7564] hsr_slave_0: left promiscuous mode [ 474.574883][ T5789] Bluetooth: hci2: command tx timeout [ 474.628761][ T7564] hsr_slave_1: left promiscuous mode [ 474.656622][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.694520][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.727800][ T7564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.792122][ T7564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.841781][ T7564] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 474.863279][ T7564] batman_adv: batadv0: Removing interface: virt_wifi0 [ 474.890604][ T7564] dummy0: left allmulticast mode [ 474.914689][ T7564] dummy0: left promiscuous mode [ 474.926473][ T7564] bridge0: port 3(dummy0) entered disabled state [ 474.963099][ T7564] bridge_slave_1: left allmulticast mode [ 474.989923][ T7564] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.024650][T11236] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1677'. [ 475.110204][ T7564] veth1_macvtap: left promiscuous mode [ 475.135509][ T7564] veth0_macvtap: left promiscuous mode [ 475.141588][ T7564] veth1_vlan: left promiscuous mode [ 475.209485][ T7564] veth0_vlan: left promiscuous mode [ 475.689568][T11245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1680'. [ 476.427625][ T7564] team_slave_1 (unregistering): left promiscuous mode [ 476.434968][ T7564] team_slave_1 (unregistering): left allmulticast mode [ 476.447910][ T7564] team0 (unregistering): Port device team_slave_1 removed [ 476.503855][ T7564] C (unregistering): left promiscuous mode [ 476.512391][ T7564] C (unregistering): left allmulticast mode [ 476.521517][ T7564] team0 (unregistering): Port device C removed [ 477.018401][T11227] netlink: 'syz.2.1677': attribute type 39 has an invalid length. [ 477.026901][T11236] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1677'. [ 477.038266][T11245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1680'. [ 478.833870][T11296] netlink: 'syz.3.1695': attribute type 39 has an invalid length. [ 479.078170][T11303] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1695'. [ 479.094969][T11303] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1695'. [ 479.142023][T11296] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1695'. [ 479.175181][T11303] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1695'. [ 479.319987][T11097] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 479.342677][T11097] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 479.360764][T11097] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 479.379674][T11097] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 479.541915][T11097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.587997][T11097] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.608304][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.615655][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.638963][ T7576] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.646381][ T7576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.209317][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 480.227319][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 480.258642][T11339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 480.381469][T11097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.469878][T11344] FAULT_INJECTION: forcing a failure. [ 480.469878][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.515331][T11344] CPU: 1 PID: 11344 Comm: syz.3.1698 Not tainted syzkaller #0 [ 480.523423][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.534067][T11344] Call Trace: [ 480.537662][T11344] [ 480.540764][T11344] dump_stack_lvl+0x18c/0x250 [ 480.545790][T11344] ? show_regs_print_info+0x20/0x20 [ 480.551597][T11344] ? load_image+0x420/0x420 [ 480.556793][T11344] ? __might_fault+0xaa/0x120 [ 480.561979][T11344] ? __lock_acquire+0x7d80/0x7d80 [ 480.563831][T11097] veth0_vlan: entered promiscuous mode [ 480.567222][T11344] should_fail_ex+0x394/0x4c0 [ 480.567267][T11344] _copy_from_user+0x2f/0xe0 [ 480.582599][T11344] __sys_bpf+0x23e/0x890 [ 480.587209][T11344] ? bpf_link_show_fdinfo+0x390/0x390 [ 480.592751][T11344] ? lock_chain_count+0x20/0x20 [ 480.598714][T11344] __x64_sys_bpf+0x7c/0x90 [ 480.603628][T11344] do_syscall_64+0x55/0xb0 [ 480.608253][T11344] ? clear_bhb_loop+0x40/0x90 [ 480.613659][T11344] ? clear_bhb_loop+0x40/0x90 [ 480.618708][T11344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.625461][T11344] RIP: 0033:0x7f58d099e019 [ 480.629938][T11344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.650447][T11344] RSP: 002b:00007f58d179c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 480.658991][T11344] RAX: ffffffffffffffda RBX: 00007f58d0c25fa0 RCX: 00007f58d099e019 [ 480.667174][T11344] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 480.675377][T11344] RBP: 00007f58d179c090 R08: 0000000000000000 R09: 0000000000000000 [ 480.683496][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.691946][T11344] R13: 00007f58d0c26038 R14: 00007f58d0c25fa0 R15: 00007fff9324b2c8 [ 480.700444][T11344] [ 480.718674][T11097] veth1_vlan: entered promiscuous mode [ 480.767105][T11097] veth0_macvtap: entered promiscuous mode [ 480.783344][T11097] veth1_macvtap: entered promiscuous mode [ 480.845754][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.893268][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.909435][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.923551][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.944665][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.961916][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.007680][T11097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.109527][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.149242][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.171587][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.189333][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.220392][T11097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.239714][T11097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.252557][T11097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.328422][T11359] netlink: 'syz.0.1700': attribute type 2 has an invalid length. [ 481.339490][T11359] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1700'. [ 481.363427][T11097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.382892][T11097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.400760][T11097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.413934][T11097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.893921][ T7576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.943819][ T7576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.015243][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.023414][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.465524][T11385] netlink: 'syz.1.1707': attribute type 39 has an invalid length. [ 482.843252][T11393] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1710'. [ 482.947566][T11390] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1710'. [ 483.096398][T11396] netlink: 'syz.3.1711': attribute type 17 has an invalid length. [ 483.145107][T11396] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1711'. [ 483.424170][T11406] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1712'. [ 483.459058][T11406] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 483.478344][T11399] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1707'. [ 483.504946][T11406] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.554518][T11399] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1707'. [ 486.148712][T11466] tap0: tun_chr_ioctl cmd 1074025677 [ 486.164830][T11466] tap0: linktype set to 780 [ 486.209045][T11471] __nla_validate_parse: 2 callbacks suppressed [ 486.209062][T11471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1722'. [ 486.255827][T11471] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1722'. [ 486.291433][T11475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1722'. [ 488.047866][T11521] netlink: 'syz.1.1732': attribute type 10 has an invalid length. [ 488.439872][T11532] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1735'. [ 490.159743][T11569] FAULT_INJECTION: forcing a failure. [ 490.159743][T11569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.174608][T11569] CPU: 0 PID: 11569 Comm: syz.0.1743 Not tainted syzkaller #0 [ 490.182854][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.193490][T11569] Call Trace: [ 490.196906][T11569] [ 490.199991][T11569] dump_stack_lvl+0x18c/0x250 [ 490.204848][T11569] ? show_regs_print_info+0x20/0x20 [ 490.210374][T11569] ? load_image+0x420/0x420 [ 490.215586][T11569] ? __might_fault+0xaa/0x120 [ 490.220748][T11569] ? __lock_acquire+0x7d80/0x7d80 [ 490.226284][T11569] ? __virt_addr_valid+0x10c/0x380 [ 490.231556][T11569] should_fail_ex+0x394/0x4c0 [ 490.237013][T11569] _copy_to_user+0x2f/0xa0 [ 490.241557][T11569] generic_map_lookup_batch+0x85d/0xc60 [ 490.247301][T11569] ? bpf_map_update_value+0x710/0x710 [ 490.253173][T11569] ? __fdget+0x180/0x210 [ 490.257663][T11569] ? bpf_map_update_value+0x710/0x710 [ 490.263065][T11569] bpf_map_do_batch+0x2e3/0x600 [ 490.268142][T11569] ? bpf_lsm_bpf+0x9/0x10 [ 490.272803][T11569] ? security_bpf+0x7e/0xa0 [ 490.277870][T11569] __sys_bpf+0x7d7/0x890 [ 490.282619][T11569] ? bpf_link_show_fdinfo+0x390/0x390 [ 490.288558][T11569] ? lock_chain_count+0x20/0x20 [ 490.293709][T11569] __x64_sys_bpf+0x7c/0x90 [ 490.298621][T11569] do_syscall_64+0x55/0xb0 [ 490.303076][T11569] ? clear_bhb_loop+0x40/0x90 [ 490.307877][T11569] ? clear_bhb_loop+0x40/0x90 [ 490.312680][T11569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.319390][T11569] RIP: 0033:0x7f9297b9e019 [ 490.323929][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.344532][T11569] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.353504][T11569] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 490.361684][T11569] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 490.370658][T11569] RBP: 00007f9298ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 490.379135][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.387615][T11569] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 490.396013][T11569] [ 490.552970][T11574] netlink: 'syz.1.1741': attribute type 33 has an invalid length. [ 490.584559][T11574] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1741'. [ 490.780469][T11579] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 490.855362][T11576] netlink: 'syz.0.1745': attribute type 10 has an invalid length. [ 491.638303][T11599] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1752'. [ 492.350877][T11607] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1755'. [ 492.615852][T11616] netlink: 'syz.0.1758': attribute type 3 has an invalid length. [ 492.634512][T11616] netlink: 99516 bytes leftover after parsing attributes in process `syz.0.1758'. [ 494.215066][T11649] FAULT_INJECTION: forcing a failure. [ 494.215066][T11649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.233142][T11649] CPU: 1 PID: 11649 Comm: syz.3.1768 Not tainted syzkaller #0 [ 494.240870][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.251349][T11649] Call Trace: [ 494.254857][T11649] [ 494.257923][T11649] dump_stack_lvl+0x18c/0x250 [ 494.262843][T11649] ? show_regs_print_info+0x20/0x20 [ 494.268202][T11649] ? load_image+0x420/0x420 [ 494.272875][T11649] ? __lock_acquire+0x7d80/0x7d80 [ 494.278314][T11649] ? snprintf+0xe9/0x140 [ 494.283282][T11649] should_fail_ex+0x394/0x4c0 [ 494.288650][T11649] _copy_to_user+0x2f/0xa0 [ 494.293304][T11649] simple_read_from_buffer+0xe7/0x150 [ 494.298944][T11649] proc_fail_nth_read+0x1e8/0x260 [ 494.304328][T11649] ? proc_fault_inject_write+0x360/0x360 [ 494.310397][T11649] ? fsnotify_perm+0x271/0x5e0 [ 494.315337][T11649] ? proc_fault_inject_write+0x360/0x360 [ 494.321167][T11649] vfs_read+0x298/0x990 [ 494.325576][T11649] ? kernel_read+0x1e0/0x1e0 [ 494.330322][T11649] ? __fget_files+0x28/0x460 [ 494.335507][T11649] ? __fget_files+0x3fc/0x460 [ 494.340530][T11649] ? __fdget_pos+0x2a3/0x330 [ 494.345573][T11649] ? ksys_read+0x74/0x260 [ 494.349979][T11649] ksys_read+0x151/0x260 [ 494.354502][T11649] ? vfs_write+0x9a0/0x9a0 [ 494.359340][T11649] ? lockdep_hardirqs_on+0x98/0x150 [ 494.364823][T11649] do_syscall_64+0x55/0xb0 [ 494.369477][T11649] ? clear_bhb_loop+0x40/0x90 [ 494.374563][T11649] ? clear_bhb_loop+0x40/0x90 [ 494.379821][T11649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.386035][T11649] RIP: 0033:0x7f58d095e84e [ 494.390684][T11649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.411576][T11649] RSP: 002b:00007f58d179bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 494.420693][T11649] RAX: ffffffffffffffda RBX: 00007f58d179c6c0 RCX: 00007f58d095e84e [ 494.429098][T11649] RDX: 000000000000000f RSI: 00007f58d179c0a0 RDI: 0000000000000006 [ 494.437429][T11649] RBP: 00007f58d179c090 R08: 0000000000000000 R09: 0000000000000000 [ 494.445549][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.453841][T11649] R13: 00007f58d0c26038 R14: 00007f58d0c25fa0 R15: 00007fff9324b2c8 [ 494.462074][T11649] [ 496.264922][T11665] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1775'. [ 497.342043][T11690] netlink: 'syz.2.1779': attribute type 4 has an invalid length. [ 497.377043][T11690] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1779'. [ 497.865920][T11703] netlink: 167388 bytes leftover after parsing attributes in process `syz.0.1789'. [ 498.090970][T11715] netlink: 'syz.0.1791': attribute type 1 has an invalid length. [ 498.130313][T11715] netlink: 'syz.0.1791': attribute type 4 has an invalid length. [ 498.145406][T11715] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1791'. [ 498.203165][T11718] netlink: 'syz.3.1794': attribute type 2 has an invalid length. [ 498.239640][T11718] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 498.249792][T11718] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1794'. [ 498.376655][T11726] FAULT_INJECTION: forcing a failure. [ 498.376655][T11726] name failslab, interval 1, probability 0, space 0, times 0 [ 498.428722][T11726] CPU: 1 PID: 11726 Comm: syz.1.1796 Not tainted syzkaller #0 [ 498.436901][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.447619][T11726] Call Trace: [ 498.451131][T11726] [ 498.454470][T11726] dump_stack_lvl+0x18c/0x250 [ 498.459477][T11726] ? show_regs_print_info+0x20/0x20 [ 498.464928][T11726] ? load_image+0x420/0x420 [ 498.469778][T11726] ? __might_sleep+0xe0/0xe0 [ 498.474529][T11726] ? __lock_acquire+0x7d80/0x7d80 [ 498.479889][T11726] should_fail_ex+0x394/0x4c0 [ 498.484640][T11726] should_failslab+0x9/0x20 [ 498.489302][T11726] slab_pre_alloc_hook+0x59/0x300 [ 498.494399][T11726] ? __lock_acquire+0x7d80/0x7d80 [ 498.499491][T11726] kmem_cache_alloc_node+0x5e/0x310 [ 498.504770][T11726] ? __alloc_skb+0x103/0x2c0 [ 498.509519][T11726] __alloc_skb+0x103/0x2c0 [ 498.514260][T11726] netlink_sendmsg+0x66a/0xbf0 [ 498.519121][T11726] ? netlink_getsockopt+0x590/0x590 [ 498.524582][T11726] ? apparmor_socket_sendmsg+0x8e/0x330 [ 498.530552][T11726] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 498.536212][T11726] ? security_socket_sendmsg+0x80/0xa0 [ 498.542079][T11726] ? netlink_getsockopt+0x590/0x590 [ 498.547592][T11726] ____sys_sendmsg+0x61b/0x980 [ 498.552496][T11726] ? __asan_memset+0x22/0x40 [ 498.557239][T11726] ? __sys_sendmsg_sock+0x30/0x30 [ 498.562419][T11726] ? __import_iovec+0x5f2/0x850 [ 498.567501][T11726] ? import_iovec+0x73/0xa0 [ 498.572294][T11726] ___sys_sendmsg+0x2a6/0x360 [ 498.577535][T11726] ? get_pid_task+0x20/0x1e0 [ 498.582350][T11726] ? __sys_sendmsg+0x2b0/0x2b0 [ 498.587342][T11726] ? __lock_acquire+0x7d80/0x7d80 [ 498.592435][T11726] __se_sys_sendmsg+0x1d0/0x2c0 [ 498.597848][T11726] ? __x64_sys_sendmsg+0x80/0x80 [ 498.602926][T11726] ? lockdep_hardirqs_on+0x98/0x150 [ 498.608353][T11726] do_syscall_64+0x55/0xb0 [ 498.613003][T11726] ? clear_bhb_loop+0x40/0x90 [ 498.617713][T11726] ? clear_bhb_loop+0x40/0x90 [ 498.622426][T11726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.628356][T11726] RIP: 0033:0x7f80dfb9e019 [ 498.632924][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.653619][T11726] RSP: 002b:00007f80e0b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.662684][T11726] RAX: ffffffffffffffda RBX: 00007f80dfe25fa0 RCX: 00007f80dfb9e019 [ 498.671154][T11726] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000003 [ 498.680304][T11726] RBP: 00007f80e0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 498.688442][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.696716][T11726] R13: 00007f80dfe26038 R14: 00007f80dfe25fa0 R15: 00007ffc1f22af28 [ 498.705196][T11726] [ 498.761411][T11730] netlink: 'syz.0.1797': attribute type 9 has an invalid length. [ 498.794568][T11730] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1797'. [ 499.439363][T11753] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 499.494904][T11753] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 499.601173][T11757] netlink: 'syz.1.1807': attribute type 29 has an invalid length. [ 499.636634][T11757] netlink: 'syz.1.1807': attribute type 29 has an invalid length. [ 499.859769][T11764] netlink: 'syz.2.1808': attribute type 10 has an invalid length. [ 500.359874][T11769] FAULT_INJECTION: forcing a failure. [ 500.359874][T11769] name failslab, interval 1, probability 0, space 0, times 0 [ 500.378894][T11769] CPU: 1 PID: 11769 Comm: syz.1.1810 Not tainted syzkaller #0 [ 500.386894][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.397280][T11769] Call Trace: [ 500.400607][T11769] [ 500.403584][T11769] dump_stack_lvl+0x18c/0x250 [ 500.408508][T11769] ? show_regs_print_info+0x20/0x20 [ 500.413867][T11769] ? load_image+0x420/0x420 [ 500.418447][T11769] ? __might_sleep+0xe0/0xe0 [ 500.423270][T11769] ? __lock_acquire+0x7d80/0x7d80 [ 500.428381][T11769] should_fail_ex+0x394/0x4c0 [ 500.433313][T11769] should_failslab+0x9/0x20 [ 500.437992][T11769] slab_pre_alloc_hook+0x59/0x300 [ 500.443297][T11769] ? sk_prot_alloc+0xe7/0x210 [ 500.448234][T11769] ? sk_prot_alloc+0xe7/0x210 [ 500.453243][T11769] __kmem_cache_alloc_node+0x53/0x250 [ 500.458791][T11769] ? sk_prot_alloc+0xe7/0x210 [ 500.463787][T11769] __kmalloc+0xa7/0x240 [ 500.468468][T11769] sk_prot_alloc+0xe7/0x210 [ 500.473461][T11769] ? sk_alloc+0x24/0x350 [ 500.478119][T11769] sk_alloc+0x3a/0x350 [ 500.482342][T11769] ? bpf_ctx_init+0x154/0x190 [ 500.487910][T11769] bpf_prog_test_run_skb+0x371/0x18f0 [ 500.493626][T11769] ? __fget_files+0x28/0x460 [ 500.498547][T11769] ? __fget_files+0x3fc/0x460 [ 500.504060][T11769] ? cpu_online+0x60/0x60 [ 500.508458][T11769] bpf_prog_test_run+0x31f/0x390 [ 500.513902][T11769] __sys_bpf+0x49d/0x890 [ 500.518301][T11769] ? bpf_link_show_fdinfo+0x390/0x390 [ 500.524055][T11769] ? lock_chain_count+0x20/0x20 [ 500.529006][T11769] __x64_sys_bpf+0x7c/0x90 [ 500.533630][T11769] do_syscall_64+0x55/0xb0 [ 500.538271][T11769] ? clear_bhb_loop+0x40/0x90 [ 500.543552][T11769] ? clear_bhb_loop+0x40/0x90 [ 500.548975][T11769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.555187][T11769] RIP: 0033:0x7f80dfb9e019 [ 500.559747][T11769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.580459][T11769] RSP: 002b:00007f80e0b07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 500.589230][T11769] RAX: ffffffffffffffda RBX: 00007f80dfe25fa0 RCX: 00007f80dfb9e019 [ 500.597777][T11769] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 500.605894][T11769] RBP: 00007f80e0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 500.614181][T11769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.622387][T11769] R13: 00007f80dfe26038 R14: 00007f80dfe25fa0 R15: 00007ffc1f22af28 [ 500.630611][T11769] [ 501.562708][T11788] delete_channel: no stack [ 501.876951][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.100752][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.107871][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.347230][T11821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1830'. [ 503.371364][T11821] tc_dump_action: action bad kind [ 506.095306][T11872] syzkaller0: entered promiscuous mode [ 506.112661][T11872] syzkaller0: entered allmulticast mode [ 506.324834][T11872] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1851'. [ 506.340677][T11872] bridge_slave_1: entered promiscuous mode [ 506.399846][T11889] FAULT_INJECTION: forcing a failure. [ 506.399846][T11889] name failslab, interval 1, probability 0, space 0, times 0 [ 506.413539][T11889] CPU: 0 PID: 11889 Comm: syz.0.1855 Not tainted syzkaller #0 [ 506.421448][T11889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.432117][T11889] Call Trace: [ 506.435716][T11889] [ 506.438794][T11889] dump_stack_lvl+0x18c/0x250 [ 506.443629][T11889] ? sctp_sendmsg+0x1519/0x27b0 [ 506.448551][T11889] ? ___sys_sendmsg+0x2a6/0x360 [ 506.453479][T11889] ? show_regs_print_info+0x20/0x20 [ 506.458953][T11889] ? load_image+0x420/0x420 [ 506.463859][T11889] should_fail_ex+0x394/0x4c0 [ 506.468797][T11889] should_failslab+0x9/0x20 [ 506.473723][T11889] slab_pre_alloc_hook+0x59/0x300 [ 506.479203][T11889] ? sctp_add_bind_addr+0x8c/0x360 [ 506.484855][T11889] __kmem_cache_alloc_node+0x53/0x250 [ 506.490678][T11889] ? sctp_add_bind_addr+0x8c/0x360 [ 506.496039][T11889] kmalloc_trace+0x2a/0xe0 [ 506.500875][T11889] sctp_add_bind_addr+0x8c/0x360 [ 506.506589][T11889] sctp_copy_local_addr_list+0x31b/0x4e0 [ 506.512725][T11889] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 506.519430][T11889] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 506.525671][T11889] ? sctp_v4_is_any+0x35/0x60 [ 506.530578][T11889] ? sctp_copy_one_addr+0x8c/0x350 [ 506.535934][T11889] sctp_bind_addr_copy+0xb3/0x3c0 [ 506.541208][T11889] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 506.547697][T11889] sctp_connect_new_asoc+0x2f9/0x6a0 [ 506.553138][T11889] ? __sctp_connect+0xd80/0xd80 [ 506.558385][T11889] ? __local_bh_enable_ip+0x13a/0x1c0 [ 506.564070][T11889] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 506.569931][T11889] ? security_sctp_bind_connect+0x89/0xb0 [ 506.575906][T11889] sctp_sendmsg+0x1519/0x27b0 [ 506.581182][T11889] ? sctp_getsockopt+0xb60/0xb60 [ 506.586192][T11889] ? aa_af_perm+0x330/0x330 [ 506.591249][T11889] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 506.597755][T11889] ? sock_rps_record_flow+0x19/0x3f0 [ 506.603097][T11889] ? inet_sendmsg+0xce/0x2a0 [ 506.607817][T11889] ? inet_send_prepare+0x250/0x250 [ 506.613324][T11889] ____sys_sendmsg+0x61b/0x980 [ 506.618228][T11889] ? __asan_memset+0x22/0x40 [ 506.623119][T11889] ? __sys_sendmsg_sock+0x30/0x30 [ 506.628262][T11889] ? __import_iovec+0x5f2/0x850 [ 506.633931][T11889] ? import_iovec+0x73/0xa0 [ 506.638544][T11889] ___sys_sendmsg+0x2a6/0x360 [ 506.643866][T11889] ? get_pid_task+0x20/0x1e0 [ 506.649226][T11889] ? __sys_sendmsg+0x2b0/0x2b0 [ 506.654244][T11889] ? __lock_acquire+0x7d80/0x7d80 [ 506.659497][T11889] __se_sys_sendmsg+0x1d0/0x2c0 [ 506.664620][T11889] ? __x64_sys_sendmsg+0x80/0x80 [ 506.670071][T11889] ? lockdep_hardirqs_on+0x98/0x150 [ 506.675500][T11889] do_syscall_64+0x55/0xb0 [ 506.680258][T11889] ? clear_bhb_loop+0x40/0x90 [ 506.685115][T11889] ? clear_bhb_loop+0x40/0x90 [ 506.690107][T11889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.696687][T11889] RIP: 0033:0x7f9297b9e019 [ 506.701163][T11889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.721441][T11889] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.729999][T11889] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 506.738499][T11889] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 506.747131][T11889] RBP: 00007f9298ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 506.755688][T11889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.764166][T11889] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 506.772839][T11889] [ 507.930890][T11910] FAULT_INJECTION: forcing a failure. [ 507.930890][T11910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.945087][T11910] CPU: 1 PID: 11910 Comm: syz.2.1865 Not tainted syzkaller #0 [ 507.952707][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.963094][T11910] Call Trace: [ 507.966411][T11910] [ 507.969497][T11910] dump_stack_lvl+0x18c/0x250 [ 507.974502][T11910] ? show_regs_print_info+0x20/0x20 [ 507.979733][T11910] ? load_image+0x420/0x420 [ 507.984805][T11910] ? __might_fault+0xaa/0x120 [ 507.989967][T11910] ? __lock_acquire+0x7d80/0x7d80 [ 507.995383][T11910] ? __virt_addr_valid+0x10c/0x380 [ 508.000810][T11910] should_fail_ex+0x394/0x4c0 [ 508.006083][T11910] _copy_from_user+0x2f/0xe0 [ 508.011067][T11910] btf_new_fd+0x366/0x9e0 [ 508.015723][T11910] ? bpf_btf_show_fdinfo+0x80/0x80 [ 508.021752][T11910] ? capable+0x88/0xe0 [ 508.025982][T11910] __sys_bpf+0x670/0x890 [ 508.030448][T11910] ? bpf_link_show_fdinfo+0x390/0x390 [ 508.035964][T11910] ? lock_chain_count+0x20/0x20 [ 508.041660][T11910] __x64_sys_bpf+0x7c/0x90 [ 508.046225][T11910] do_syscall_64+0x55/0xb0 [ 508.050852][T11910] ? clear_bhb_loop+0x40/0x90 [ 508.055917][T11910] ? clear_bhb_loop+0x40/0x90 [ 508.060635][T11910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 508.067710][T11910] RIP: 0033:0x7f0d2c39e019 [ 508.072255][T11910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.092942][T11910] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 508.101809][T11910] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 508.109921][T11910] RDX: 0000000000000028 RSI: 00002000000001c0 RDI: 0000000000000012 [ 508.118831][T11910] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 508.127809][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.136792][T11910] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 508.145335][T11910] [ 508.320302][T11918] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1864'. [ 510.884201][T11907] validate_nla: 1 callbacks suppressed [ 510.890421][T11907] netlink: 'syz.0.1862': attribute type 41 has an invalid length. [ 510.914111][T11918] netlink: 'syz.1.1864': attribute type 5 has an invalid length. [ 510.979525][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1869'. [ 510.989373][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1869'. [ 511.008478][T11933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1869'. [ 511.219773][T11935] netlink: 'syz.3.1870': attribute type 4 has an invalid length. [ 511.220371][T11938] netlink: 'syz.2.1871': attribute type 25 has an invalid length. [ 511.244954][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1870'. [ 511.268870][T11938] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1871'. [ 511.308928][T11935] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1870'. [ 512.475604][T11953] netlink: 'syz.1.1877': attribute type 21 has an invalid length. [ 512.712096][T11956] netlink: 'syz.2.1878': attribute type 9 has an invalid length. [ 512.764612][T11956] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1878'. [ 513.010942][T11965] netlink: 'syz.2.1878': attribute type 9 has an invalid length. [ 513.030183][T11965] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1878'. [ 513.288903][T11972] netlink: 'syz.2.1884': attribute type 39 has an invalid length. [ 513.400145][T11976] FAULT_INJECTION: forcing a failure. [ 513.400145][T11976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.416908][T11972] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1884'. [ 513.430649][T11976] CPU: 1 PID: 11976 Comm: syz.3.1885 Not tainted syzkaller #0 [ 513.438551][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.448665][T11976] Call Trace: [ 513.452115][T11976] [ 513.455202][T11976] dump_stack_lvl+0x18c/0x250 [ 513.460137][T11976] ? show_regs_print_info+0x20/0x20 [ 513.465415][T11976] ? load_image+0x420/0x420 [ 513.470257][T11976] ? __might_fault+0xaa/0x120 [ 513.475468][T11976] ? __lock_acquire+0x7d80/0x7d80 [ 513.481295][T11976] ? bpf_percpu_hash_update+0x2b/0x200 [ 513.487017][T11976] ? __virt_addr_valid+0x10c/0x380 [ 513.492282][T11976] should_fail_ex+0x394/0x4c0 [ 513.497206][T11976] _copy_from_user+0x2f/0xe0 [ 513.501949][T11976] generic_map_update_batch+0x53e/0x800 [ 513.507746][T11976] ? rcu_read_unlock+0xa0/0xa0 [ 513.512652][T11976] ? __fdget+0x180/0x210 [ 513.516954][T11976] ? rcu_read_unlock+0xa0/0xa0 [ 513.522158][T11976] bpf_map_do_batch+0x3f2/0x600 [ 513.527425][T11976] ? bpf_lsm_key_alloc+0x10/0x10 [ 513.532523][T11976] __sys_bpf+0x381/0x890 [ 513.536916][T11976] ? bpf_link_show_fdinfo+0x390/0x390 [ 513.542449][T11976] ? lock_chain_count+0x20/0x20 [ 513.547406][T11976] __x64_sys_bpf+0x7c/0x90 [ 513.551880][T11976] do_syscall_64+0x55/0xb0 [ 513.556487][T11976] ? clear_bhb_loop+0x40/0x90 [ 513.561441][T11976] ? clear_bhb_loop+0x40/0x90 [ 513.566340][T11976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.573237][T11976] RIP: 0033:0x7f58d099e019 [ 513.577980][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.598443][T11976] RSP: 002b:00007f58d179c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.607982][T11976] RAX: ffffffffffffffda RBX: 00007f58d0c25fa0 RCX: 00007f58d099e019 [ 513.616531][T11976] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 513.624819][T11976] RBP: 00007f58d179c090 R08: 0000000000000000 R09: 0000000000000000 [ 513.633202][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 513.641843][T11976] R13: 00007f58d0c26038 R14: 00007f58d0c25fa0 R15: 00007fff9324b2c8 [ 513.650636][T11976] [ 513.827934][T11978] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1886'. [ 514.286164][T11991] bridge_slave_1: default FDB implementation only supports local addresses [ 514.591992][T11987] netlink: 'syz.0.1890': attribute type 10 has an invalid length. [ 514.692488][T11987] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 514.705186][T11987] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.758669][T11987] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 515.928295][T12023] syzkaller0: entered promiscuous mode [ 515.936679][T12023] syzkaller0: entered allmulticast mode [ 517.632141][T12047] __nla_validate_parse: 8 callbacks suppressed [ 517.632163][T12047] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1910'. [ 519.789022][T12044] netlink: 'syz.0.1910': attribute type 39 has an invalid length. [ 520.610936][T12075] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1917'. [ 520.648561][T12075] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1917'. [ 520.700357][T12075] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1917'. [ 520.816937][T12080] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 520.851713][T12080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1917'. [ 520.868075][T12080] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 520.880558][T12080] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.936370][T12080] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 520.950653][T12069] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1917'. [ 521.974979][T12099] netlink: 'syz.3.1926': attribute type 9 has an invalid length. [ 522.010207][T12099] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1926'. [ 525.106284][T12115] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1930'. [ 525.154685][T12115] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1930'. [ 525.208413][T12113] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1930'. [ 525.245196][T12117] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1930'. [ 525.371370][T12113] netlink: 'syz.2.1930': attribute type 10 has an invalid length. [ 525.404865][T12113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1930'. [ 525.466803][T12113] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 525.504834][T12113] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.594679][T12113] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 526.335866][T12130] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 526.360282][T12130] netlink: 'syz.3.1935': attribute type 21 has an invalid length. [ 526.385480][T12130] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 526.406596][T12130] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1935'. [ 526.906638][T12134] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1937'. [ 538.493992][T12282] netlink: 'syz.1.1984': attribute type 12 has an invalid length. [ 538.517028][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1984'. [ 538.572856][T12284] netlink: 'syz.2.1986': attribute type 12 has an invalid length. [ 538.593697][T12284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1986'. [ 540.691068][T12315] FAULT_INJECTION: forcing a failure. [ 540.691068][T12315] name failslab, interval 1, probability 0, space 0, times 0 [ 540.724703][T12315] CPU: 1 PID: 12315 Comm: syz.0.2004 Not tainted syzkaller #0 [ 540.732745][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.743438][T12315] Call Trace: [ 540.747190][T12315] [ 540.750454][T12315] dump_stack_lvl+0x18c/0x250 [ 540.755465][T12315] ? show_regs_print_info+0x20/0x20 [ 540.761247][T12315] ? load_image+0x420/0x420 [ 540.765912][T12315] ? __might_sleep+0xe0/0xe0 [ 540.771088][T12315] ? __lock_acquire+0x7d80/0x7d80 [ 540.776475][T12315] should_fail_ex+0x394/0x4c0 [ 540.781216][T12315] should_failslab+0x9/0x20 [ 540.785784][T12315] slab_pre_alloc_hook+0x59/0x300 [ 540.791175][T12315] ? apparmor_sk_alloc_security+0x77/0x100 [ 540.797489][T12315] __kmem_cache_alloc_node+0x53/0x250 [ 540.803322][T12315] ? apparmor_sk_alloc_security+0x77/0x100 [ 540.809425][T12315] kmalloc_trace+0x2a/0xe0 [ 540.814167][T12315] apparmor_sk_alloc_security+0x77/0x100 [ 540.821004][T12315] security_sk_alloc+0x6e/0xa0 [ 540.826031][T12315] sk_prot_alloc+0x101/0x210 [ 540.830764][T12315] ? sk_alloc+0x24/0x350 [ 540.835078][T12315] sk_alloc+0x3a/0x350 [ 540.839587][T12315] ? bpf_ctx_init+0x154/0x190 [ 540.844842][T12315] bpf_prog_test_run_skb+0x371/0x18f0 [ 540.850280][T12315] ? __fget_files+0x28/0x460 [ 540.854923][T12315] ? __fget_files+0x3fc/0x460 [ 540.859735][T12315] ? cpu_online+0x60/0x60 [ 540.864715][T12315] bpf_prog_test_run+0x31f/0x390 [ 540.869699][T12315] __sys_bpf+0x49d/0x890 [ 540.873977][T12315] ? bpf_link_show_fdinfo+0x390/0x390 [ 540.879602][T12315] ? lock_chain_count+0x20/0x20 [ 540.884555][T12315] __x64_sys_bpf+0x7c/0x90 [ 540.889054][T12315] do_syscall_64+0x55/0xb0 [ 540.893721][T12315] ? clear_bhb_loop+0x40/0x90 [ 540.898876][T12315] ? clear_bhb_loop+0x40/0x90 [ 540.903943][T12315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.910140][T12315] RIP: 0033:0x7f9297b9e019 [ 540.914706][T12315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.935425][T12315] RSP: 002b:00007f9298ac1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 540.944237][T12315] RAX: ffffffffffffffda RBX: 00007f9297e25fa0 RCX: 00007f9297b9e019 [ 540.952433][T12315] RDX: 0000000000000032 RSI: 00002000000003c0 RDI: 000000000000000a [ 540.960795][T12315] RBP: 00007f9298ac1090 R08: 0000000000000000 R09: 0000000000000000 [ 540.968989][T12315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.977702][T12315] R13: 00007f9297e26038 R14: 00007f9297e25fa0 R15: 00007ffcebb41718 [ 540.986183][T12315] [ 541.052001][T12319] netlink: 'syz.1.1997': attribute type 10 has an invalid length. [ 541.265056][T12321] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1996'. [ 541.937569][T12335] netlink: 'syz.3.2003': attribute type 12 has an invalid length. [ 541.975262][T12335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2003'. [ 542.267807][T12340] netlink: 'syz.1.2006': attribute type 12 has an invalid length. [ 542.293197][T12340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2006'. [ 543.128209][T12355] netlink: 'syz.0.2010': attribute type 9 has an invalid length. [ 543.209497][T12360] netlink: 'syz.0.2010': attribute type 3 has an invalid length. [ 543.231840][T12351] syzkaller0: entered promiscuous mode [ 543.236038][T12355] netlink: 157508 bytes leftover after parsing attributes in process `syz.0.2010'. [ 543.248521][T12351] syzkaller0: entered allmulticast mode [ 543.272250][T12360] netlink: 70352 bytes leftover after parsing attributes in process `syz.0.2010'. [ 543.382610][T12363] FAULT_INJECTION: forcing a failure. [ 543.382610][T12363] name failslab, interval 1, probability 0, space 0, times 0 [ 543.402658][T12363] CPU: 0 PID: 12363 Comm: syz.1.2011 Not tainted syzkaller #0 [ 543.410659][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.421839][T12363] Call Trace: [ 543.425268][T12363] [ 543.428346][T12363] dump_stack_lvl+0x18c/0x250 [ 543.433177][T12363] ? show_regs_print_info+0x20/0x20 [ 543.438792][T12363] ? load_image+0x420/0x420 [ 543.443676][T12363] ? __might_sleep+0xe0/0xe0 [ 543.448607][T12363] ? __lock_acquire+0x7d80/0x7d80 [ 543.453700][T12363] should_fail_ex+0x394/0x4c0 [ 543.458450][T12363] should_failslab+0x9/0x20 [ 543.463021][T12363] slab_pre_alloc_hook+0x59/0x300 [ 543.468122][T12363] ? __get_vm_area_node+0x125/0x370 [ 543.473402][T12363] __kmem_cache_alloc_node+0x53/0x250 [ 543.478861][T12363] ? __get_vm_area_node+0x125/0x370 [ 543.484741][T12363] kmalloc_node_trace+0x26/0xe0 [ 543.490115][T12363] __get_vm_area_node+0x125/0x370 [ 543.495350][T12363] __vmalloc_node_range+0x36f/0x1320 [ 543.500835][T12363] ? netlink_sendmsg+0x602/0xbf0 [ 543.506201][T12363] ? netlink_insert+0x1094/0x1390 [ 543.511734][T12363] ? netlink_insert+0x2ba/0x1390 [ 543.516788][T12363] ? free_vm_area+0x50/0x50 [ 543.521379][T12363] ? netlink_sendmsg+0x602/0xbf0 [ 543.526377][T12363] vmalloc+0x79/0x90 [ 543.530585][T12363] ? netlink_sendmsg+0x602/0xbf0 [ 543.535776][T12363] netlink_sendmsg+0x602/0xbf0 [ 543.540783][T12363] ? netlink_getsockopt+0x590/0x590 [ 543.546233][T12363] ? apparmor_socket_sendmsg+0x8e/0x330 [ 543.552312][T12363] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.558025][T12363] ? security_socket_sendmsg+0x80/0xa0 [ 543.563775][T12363] ? netlink_getsockopt+0x590/0x590 [ 543.569044][T12363] ____sys_sendmsg+0x61b/0x980 [ 543.573878][T12363] ? __asan_memset+0x22/0x40 [ 543.578666][T12363] ? __sys_sendmsg_sock+0x30/0x30 [ 543.583806][T12363] ? __import_iovec+0x5f2/0x850 [ 543.589004][T12363] ? import_iovec+0x73/0xa0 [ 543.593859][T12363] ___sys_sendmsg+0x2a6/0x360 [ 543.599076][T12363] ? get_pid_task+0x20/0x1e0 [ 543.604109][T12363] ? __sys_sendmsg+0x2b0/0x2b0 [ 543.609329][T12363] ? __lock_acquire+0x7d80/0x7d80 [ 543.615575][T12363] __se_sys_sendmsg+0x1d0/0x2c0 [ 543.620933][T12363] ? __x64_sys_sendmsg+0x80/0x80 [ 543.626280][T12363] ? lockdep_hardirqs_on+0x98/0x150 [ 543.631847][T12363] do_syscall_64+0x55/0xb0 [ 543.636416][T12363] ? clear_bhb_loop+0x40/0x90 [ 543.641691][T12363] ? clear_bhb_loop+0x40/0x90 [ 543.646896][T12363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.653147][T12363] RIP: 0033:0x7f80dfb9e019 [ 543.657713][T12363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.677731][T12363] RSP: 002b:00007f80e0ae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.686919][T12363] RAX: ffffffffffffffda RBX: 00007f80dfe26090 RCX: 00007f80dfb9e019 [ 543.695044][T12363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 543.703512][T12363] RBP: 00007f80e0ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.711918][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.720056][T12363] R13: 00007f80dfe26128 R14: 00007f80dfe26090 R15: 00007ffc1f22af28 [ 543.728854][T12363] [ 543.736948][T12363] warn_alloc: 1 callbacks suppressed [ 543.738203][T12363] syz.1.2011: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 543.759784][T12363] CPU: 0 PID: 12363 Comm: syz.1.2011 Not tainted syzkaller #0 [ 543.767636][T12363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.778472][T12363] Call Trace: [ 543.781908][T12363] [ 543.784992][T12363] dump_stack_lvl+0x18c/0x250 [ 543.790026][T12363] ? show_regs_print_info+0x20/0x20 [ 543.795762][T12363] ? load_image+0x420/0x420 [ 543.800582][T12363] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 543.807516][T12363] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 543.814211][T12363] warn_alloc+0x246/0x340 [ 543.818729][T12363] ? __get_vm_area_node+0x125/0x370 [ 543.824798][T12363] ? zone_watermark_ok_safe+0x230/0x230 [ 543.831049][T12363] ? rcu_is_watching+0x15/0xb0 [ 543.836348][T12363] ? __get_vm_area_node+0x356/0x370 [ 543.841674][T12363] __vmalloc_node_range+0x394/0x1320 [ 543.847031][T12363] ? netlink_insert+0x1094/0x1390 [ 543.852148][T12363] ? netlink_insert+0x2ba/0x1390 [ 543.857171][T12363] ? free_vm_area+0x50/0x50 [ 543.861754][T12363] ? netlink_sendmsg+0x602/0xbf0 [ 543.866769][T12363] vmalloc+0x79/0x90 [ 543.870846][T12363] ? netlink_sendmsg+0x602/0xbf0 [ 543.876058][T12363] netlink_sendmsg+0x602/0xbf0 [ 543.881184][T12363] ? netlink_getsockopt+0x590/0x590 [ 543.886617][T12363] ? apparmor_socket_sendmsg+0x8e/0x330 [ 543.892497][T12363] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.898421][T12363] ? security_socket_sendmsg+0x80/0xa0 [ 543.904384][T12363] ? netlink_getsockopt+0x590/0x590 [ 543.910257][T12363] ____sys_sendmsg+0x61b/0x980 [ 543.915533][T12363] ? __asan_memset+0x22/0x40 [ 543.920273][T12363] ? __sys_sendmsg_sock+0x30/0x30 [ 543.925728][T12363] ? __import_iovec+0x5f2/0x850 [ 543.930662][T12363] ? import_iovec+0x73/0xa0 [ 543.935508][T12363] ___sys_sendmsg+0x2a6/0x360 [ 543.940343][T12363] ? get_pid_task+0x20/0x1e0 [ 543.945014][T12363] ? __sys_sendmsg+0x2b0/0x2b0 [ 543.950142][T12363] ? __lock_acquire+0x7d80/0x7d80 [ 543.955712][T12363] __se_sys_sendmsg+0x1d0/0x2c0 [ 543.960719][T12363] ? __x64_sys_sendmsg+0x80/0x80 [ 543.965916][T12363] ? lockdep_hardirqs_on+0x98/0x150 [ 543.971280][T12363] do_syscall_64+0x55/0xb0 [ 543.975761][T12363] ? clear_bhb_loop+0x40/0x90 [ 543.980675][T12363] ? clear_bhb_loop+0x40/0x90 [ 543.985507][T12363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.991766][T12363] RIP: 0033:0x7f80dfb9e019 [ 543.996785][T12363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.017499][T12363] RSP: 002b:00007f80e0ae6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.026333][T12363] RAX: ffffffffffffffda RBX: 00007f80dfe26090 RCX: 00007f80dfb9e019 [ 544.035596][T12363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 544.044218][T12363] RBP: 00007f80e0ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.053024][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.061285][T12363] R13: 00007f80dfe26128 R14: 00007f80dfe26090 R15: 00007ffc1f22af28 [ 544.069572][T12363] [ 544.075157][T12363] Mem-Info: [ 544.078432][T12363] active_anon:21893 inactive_anon:0 isolated_anon:0 [ 544.078432][T12363] active_file:19007 inactive_file:40129 isolated_file:0 [ 544.078432][T12363] unevictable:768 dirty:392 writeback:0 [ 544.078432][T12363] slab_reclaimable:10533 slab_unreclaimable:96975 [ 544.078432][T12363] mapped:26750 shmem:17784 pagetables:536 [ 544.078432][T12363] sec_pagetables:0 bounce:0 [ 544.078432][T12363] kernel_misc_reclaimable:0 [ 544.078432][T12363] free:1330033 free_pcp:4946 free_cma:0 [ 544.160844][T12363] Node 0 active_anon:84572kB inactive_anon:0kB active_file:76028kB inactive_file:160316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:107000kB dirty:1568kB writeback:0kB shmem:66500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no [ 544.214737][T12363] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 544.279482][T12363] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.324453][T12363] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 544.332773][T12363] Node 0 DMA32 free:1405292kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:79732kB inactive_anon:0kB active_file:76028kB inactive_file:159496kB unevictable:1536kB writepending:1568kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:13256kB local_pcp:9028kB free_cma:0kB [ 544.394382][T12363] lowmem_reserve[]: 0 0 0 0 0 [ 544.399344][T12363] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 544.458771][T12363] lowmem_reserve[]: 0 0 0 0 0 [ 544.463755][T12363] Node 1 Normal free:3899480kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15776kB local_pcp:10272kB free_cma:0kB [ 544.509036][T12363] lowmem_reserve[]: 0 0 0 0 0 [ 544.514610][T12363] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.528395][T12363] Node 0 DMA32: 1*4kB (M) 1*8kB (E) 50*16kB (UME) 1567*32kB (UME) 908*64kB (UME) 321*128kB (UME) 120*256kB (UM) 43*512kB (UME) 18*1024kB (UME) 6*2048kB (UM) 286*4096kB (UM) = 1405068kB [ 544.588613][T12363] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.620472][T12363] Node 1 Normal: 236*4kB (UE) 51*8kB (UE) 35*16kB (UE) 181*32kB (UE) 49*64kB (UME) 6*128kB (UM) 1*256kB (E) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3899480kB [ 544.652709][T12363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.671985][T12363] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.685688][T12363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.706117][T12363] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.729607][T12363] 72245 total pagecache pages [ 544.735137][T12363] 0 pages in swap cache [ 544.739809][T12363] Free swap = 124996kB [ 544.759055][T12363] Total swap = 124996kB [ 544.766974][T12363] 2097051 pages RAM [ 544.770972][T12363] 0 pages HighMem/MovableOnly [ 544.789308][T12363] 416955 pages reserved [ 544.799086][T12363] 0 pages cma reserved [ 547.761577][T12362] netlink: 'syz.1.2011': attribute type 9 has an invalid length. [ 547.786100][T12362] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2011'. [ 548.082871][T12384] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2019'. [ 548.202901][T12386] netlink: 'syz.3.2020': attribute type 12 has an invalid length. [ 548.227689][T12386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2020'. [ 548.415588][T12394] lo: entered allmulticast mode [ 548.721567][T12394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2024'. [ 548.824658][ T5789] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 549.335967][T12398] bY4`Ҙ: renamed from lo [ 550.010023][T12429] netlink: 'syz.3.2036': attribute type 12 has an invalid length. [ 550.021613][T12429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2036'. [ 550.562734][ T5789] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 551.403800][T12450] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2043'. [ 551.503305][T12457] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2046'. [ 551.521204][T12447] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 551.558718][T12447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2043'. [ 551.606079][T12447] bridge0: port 3(dummy0) entered blocking state [ 551.636497][T12447] bridge0: port 3(dummy0) entered disabled state [ 551.661685][T12447] dummy0: entered allmulticast mode [ 551.684577][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 551.713698][T12447] dummy0: entered promiscuous mode [ 551.748037][T12447] bridge0: port 3(dummy0) entered blocking state [ 551.755955][T12447] bridge0: port 3(dummy0) entered forwarding state [ 552.481188][T12471] netlink: 'syz.2.2051': attribute type 12 has an invalid length. [ 552.504518][T12471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2051'. [ 553.153120][T12475] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2053'. [ 553.512833][T12488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2055'. [ 553.580801][T12488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2055'. [ 553.662887][T12486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2055'. [ 553.915969][T12495] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2060'. [ 553.999867][T12499] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0200:ac14:140a with DS=0x31 [ 554.943927][T12515] netlink: 'syz.0.2065': attribute type 12 has an invalid length. [ 554.982345][T12515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2065'. [ 555.253459][T12517] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2066'. [ 555.582992][T12529] FAULT_INJECTION: forcing a failure. [ 555.582992][T12529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.615389][T12529] CPU: 1 PID: 12529 Comm: syz.2.2069 Not tainted syzkaller #0 [ 555.623476][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.634152][T12529] Call Trace: [ 555.637872][T12529] [ 555.641126][T12529] dump_stack_lvl+0x18c/0x250 [ 555.646286][T12529] ? show_regs_print_info+0x20/0x20 [ 555.651996][T12529] ? load_image+0x420/0x420 [ 555.656746][T12529] ? __might_fault+0xaa/0x120 [ 555.661574][T12529] ? __lock_acquire+0x7d80/0x7d80 [ 555.667272][T12529] ? bpf_percpu_array_update+0xec/0x490 [ 555.673298][T12529] ? __virt_addr_valid+0x10c/0x380 [ 555.678717][T12529] should_fail_ex+0x394/0x4c0 [ 555.683725][T12529] _copy_from_user+0x2f/0xe0 [ 555.688440][T12529] generic_map_update_batch+0x58c/0x800 [ 555.694238][T12529] ? rcu_read_unlock+0xa0/0xa0 [ 555.699221][T12529] ? __fdget+0x180/0x210 [ 555.703626][T12529] ? rcu_read_unlock+0xa0/0xa0 [ 555.708682][T12529] bpf_map_do_batch+0x3f2/0x600 [ 555.713891][T12529] ? bpf_lsm_key_alloc+0x10/0x10 [ 555.719393][T12529] __sys_bpf+0x381/0x890 [ 555.725242][T12529] ? bpf_link_show_fdinfo+0x390/0x390 [ 555.731286][T12529] ? lock_chain_count+0x20/0x20 [ 555.736224][T12529] __x64_sys_bpf+0x7c/0x90 [ 555.741646][T12529] do_syscall_64+0x55/0xb0 [ 555.746628][T12529] ? clear_bhb_loop+0x40/0x90 [ 555.752127][T12529] ? clear_bhb_loop+0x40/0x90 [ 555.757158][T12529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.763968][T12529] RIP: 0033:0x7f0d2c39e019 [ 555.768890][T12529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.791065][T12529] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.800422][T12529] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 555.809578][T12529] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 555.817943][T12529] RBP: 00007f0d2d290090 R08: 0000000000000000 R09: 0000000000000000 [ 555.827144][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.836208][T12529] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 555.844496][T12529] [ 556.211168][T12534] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 556.404095][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.183027][T12534] bridge_slave_1: left allmulticast mode [ 557.241401][T12534] bridge_slave_1: left promiscuous mode [ 557.290329][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.522778][T12534] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 557.910262][T12553] netlink: 'syz.0.2076': attribute type 29 has an invalid length. [ 558.051578][T12553] netlink: 'syz.0.2076': attribute type 29 has an invalid length. [ 558.330798][T12563] netlink: 'syz.3.2080': attribute type 12 has an invalid length. [ 558.381621][T12563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2080'. [ 558.536173][T12564] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2079'. [ 559.688885][ T5789] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 559.982767][T12595] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2090'. [ 560.184906][T12595] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 560.244770][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2090'. [ 560.274931][T12595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 561.075048][T12603] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 561.154423][T12603] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2093'. [ 561.355828][T12603] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 561.505357][T12611] sock: sock_set_timeout: `syz.3.2095' (pid 12611) tries to set negative timeout [ 561.743599][T12603] batman_adv: batadv0: Removing interface: virt_wifi0 [ 562.090610][T12625] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 562.134377][T12625] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2100'. [ 562.924422][T12637] netlink: 'syz.3.2104': attribute type 12 has an invalid length. [ 562.964449][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2104'. [ 563.531257][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.538285][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.981830][ T5789] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 564.404509][ T5789] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 564.704463][ T5789] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 567.153766][T12671] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2115'. [ 568.077891][T12691] FAULT_INJECTION: forcing a failure. [ 568.077891][T12691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.156950][T12691] CPU: 1 PID: 12691 Comm: syz.3.2121 Not tainted syzkaller #0 [ 568.164525][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.175114][T12691] Call Trace: [ 568.178472][T12691] [ 568.181461][T12691] dump_stack_lvl+0x18c/0x250 [ 568.186531][T12691] ? show_regs_print_info+0x20/0x20 [ 568.192097][T12691] ? load_image+0x420/0x420 [ 568.196931][T12691] ? __might_fault+0xaa/0x120 [ 568.201695][T12691] ? __lock_acquire+0x7d80/0x7d80 [ 568.207151][T12691] ? __virt_addr_valid+0x10c/0x380 [ 568.212516][T12691] should_fail_ex+0x394/0x4c0 [ 568.217291][T12691] _copy_from_user+0x2f/0xe0 [ 568.222111][T12691] generic_map_update_batch+0x53e/0x800 [ 568.228247][T12691] ? rcu_read_unlock+0xa0/0xa0 [ 568.233129][T12691] ? __fdget+0x180/0x210 [ 568.237622][T12691] ? rcu_read_unlock+0xa0/0xa0 [ 568.242745][T12691] bpf_map_do_batch+0x3f2/0x600 [ 568.248010][T12691] ? bpf_lsm_key_alloc+0x10/0x10 [ 568.253209][T12691] __sys_bpf+0x381/0x890 [ 568.257650][T12691] ? bpf_link_show_fdinfo+0x390/0x390 [ 568.263192][T12691] ? lock_chain_count+0x20/0x20 [ 568.268658][T12691] __x64_sys_bpf+0x7c/0x90 [ 568.273614][T12691] do_syscall_64+0x55/0xb0 [ 568.278273][T12691] ? clear_bhb_loop+0x40/0x90 [ 568.283160][T12691] ? clear_bhb_loop+0x40/0x90 [ 568.288340][T12691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.294302][T12691] RIP: 0033:0x7f58d099e019 [ 568.299301][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.319841][T12691] RSP: 002b:00007f58d179c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.328591][T12691] RAX: ffffffffffffffda RBX: 00007f58d0c25fa0 RCX: 00007f58d099e019 [ 568.336683][T12691] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 568.344925][T12691] RBP: 00007f58d179c090 R08: 0000000000000000 R09: 0000000000000000 [ 568.353015][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.361107][T12691] R13: 00007f58d0c26038 R14: 00007f58d0c25fa0 R15: 00007fff9324b2c8 [ 568.369572][T12691] [ 568.708105][ T5789] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 569.868876][T12712] FAULT_INJECTION: forcing a failure. [ 569.868876][T12712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.924440][ T5789] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 570.054598][T12712] CPU: 1 PID: 12712 Comm: syz.1.2125 Not tainted syzkaller #0 [ 570.069996][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.080392][T12712] Call Trace: [ 570.083738][T12712] [ 570.086715][T12712] dump_stack_lvl+0x18c/0x250 [ 570.091447][T12712] ? show_regs_print_info+0x20/0x20 [ 570.096695][T12712] ? load_image+0x420/0x420 [ 570.101248][T12712] ? __might_fault+0xaa/0x120 [ 570.105981][T12712] ? __lock_acquire+0x7d80/0x7d80 [ 570.111324][T12712] should_fail_ex+0x394/0x4c0 [ 570.116432][T12712] _copy_from_user+0x2f/0xe0 [ 570.121401][T12712] ___sys_sendmsg+0x1c7/0x360 [ 570.126316][T12712] ? __sys_sendmsg+0x2b0/0x2b0 [ 570.131172][T12712] ? trace_call_bpf+0xc3/0x6c0 [ 570.136279][T12712] __se_sys_sendmsg+0x1d0/0x2c0 [ 570.141551][T12712] ? perf_trace_preemptirq_template+0x269/0x330 [ 570.148456][T12712] ? __x64_sys_sendmsg+0x80/0x80 [ 570.153451][T12712] ? lockdep_hardirqs_on+0x98/0x150 [ 570.158964][T12712] do_syscall_64+0x55/0xb0 [ 570.163799][T12712] ? clear_bhb_loop+0x40/0x90 [ 570.168609][T12712] ? clear_bhb_loop+0x40/0x90 [ 570.173678][T12712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.180227][T12712] RIP: 0033:0x7f80dfb9e019 [ 570.184936][T12712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.206252][T12712] RSP: 002b:00007f80e0b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.215058][T12712] RAX: ffffffffffffffda RBX: 00007f80dfe25fa0 RCX: 00007f80dfb9e019 [ 570.223756][T12712] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 570.231856][T12712] RBP: 00007f80e0b07090 R08: 0000000000000000 R09: 0000000000000000 [ 570.239990][T12712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.248334][T12712] R13: 00007f80dfe26038 R14: 00007f80dfe25fa0 R15: 00007ffc1f22af28 [ 570.256451][T12712] [ 571.214472][ T5789] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 571.302004][T12714] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2125'. [ 571.345062][T12714] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2125'. [ 571.807298][T12726] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 571.867105][T12726] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 571.914563][T12726] netlink: 'syz.0.2129': attribute type 2 has an invalid length. [ 571.944007][T12726] netlink: 'syz.0.2129': attribute type 3 has an invalid length. [ 571.987862][T12726] netlink: 'syz.0.2129': attribute type 4 has an invalid length. [ 572.035136][T12726] netlink: 'syz.0.2129': attribute type 5 has an invalid length. [ 572.043947][T12726] netlink: 'syz.0.2129': attribute type 6 has an invalid length. [ 572.193083][T12726] netlink: 'syz.0.2129': attribute type 7 has an invalid length. [ 572.232742][T12726] netlink: 'syz.0.2129': attribute type 9 has an invalid length. [ 572.277208][T12726] netlink: 'syz.0.2129': attribute type 10 has an invalid length. [ 572.350024][T12726] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.2129'. [ 572.557221][ T5789] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 576.105722][ T5789] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 577.035803][T12794] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2149'. [ 577.325178][ C0] ================================================================== [ 577.325194][ C0] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 577.325230][ C0] Write of size 56 at addr ffff888023ebaf10 by task syz.2.2151/12796 [ 577.325249][ C0] [ 577.325255][ C0] CPU: 0 PID: 12796 Comm: syz.2.2151 Not tainted syzkaller #0 [ 577.325275][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.325287][ C0] Call Trace: [ 577.325295][ C0] <#DB> [ 577.325302][ C0] dump_stack_lvl+0x18c/0x250 [ 577.325326][ C0] ? __virt_addr_valid+0x10c/0x380 [ 577.325355][ C0] ? show_regs_print_info+0x20/0x20 [ 577.325377][ C0] ? load_image+0x420/0x420 [ 577.325407][ C0] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 577.325440][ C0] ? __virt_addr_valid+0x10c/0x380 [ 577.325465][ C0] ? __virt_addr_valid+0x10c/0x380 [ 577.325491][ C0] ? __virt_addr_valid+0x10c/0x380 [ 577.325520][ C0] print_report+0xa8/0x210 [ 577.325539][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.325564][ C0] kasan_report+0x117/0x150 [ 577.325591][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.325624][ C0] kasan_check_range+0x241/0x290 [ 577.325649][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.325676][ C0] __asan_memcpy+0x40/0x70 [ 577.325706][ C0] __bpf_get_stackid+0x6c7/0x900 [ 577.325739][ C0] bpf_get_stackid_pe+0x343/0x410 [ 577.325771][ C0] bpf_prog_f996dc42cdf0283d+0x29/0x41 [ 577.325792][ C0] bpf_overflow_handler+0x1fc/0x510 [ 577.325822][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 577.325852][ C0] ? bpf_overflow_handler+0xde/0x510 [ 577.325881][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 577.325916][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 577.325949][ C0] __perf_event_overflow+0x461/0x660 [ 577.325979][ C0] perf_swevent_event+0x319/0x570 [ 577.326005][ C0] ? perf_tp_event+0x1550/0x1550 [ 577.326030][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 577.326057][ C0] perf_bp_event+0x319/0x430 [ 577.326080][ C0] ? look_up_lock_class+0x75/0x140 [ 577.326110][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 577.326133][ C0] ? rcu_is_watching+0x15/0xb0 [ 577.326160][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 577.326177][ C0] ? lock_release+0xb5/0x8c0 [ 577.326203][ C0] ? rep_movs_alternative+0x4a/0x90 [ 577.326242][ C0] ? lock_acquire+0x2c2/0x420 [ 577.326272][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 577.326369][ C0] notifier_call_chain+0x18f/0x380 [ 577.326398][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 577.326426][ C0] atomic_notifier_call_chain+0xda/0x180 [ 577.326455][ C0] notify_die+0x145/0x1a0 [ 577.326483][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 577.326515][ C0] ? rcu_is_watching+0x15/0xb0 [ 577.326545][ C0] notify_debug+0x2e/0x50 [ 577.326582][ C0] exc_debug+0xde/0x140 [ 577.326607][ C0] asm_exc_debug+0x1e/0x40 [ 577.326627][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 577.326652][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 577.326669][ C0] RSP: 0018:ffffc90003c77d50 EFLAGS: 00050202 [ 577.326687][ C0] RAX: ffffffff8431f301 RBX: 0000000000000050 RCX: 000000000000000f [ 577.326702][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90003c77e01 [ 577.326715][ C0] RBP: ffffc90003c77ee8 R08: ffffc90003c77e0f R09: 1ffff9200078efc1 [ 577.326730][ C0] R10: dffffc0000000000 R11: fffff5200078efc2 R12: 0000200000000310 [ 577.326745][ C0] R13: 0000000000000050 R14: ffffc90003c77dc0 R15: 00002000000002c0 [ 577.326765][ C0] ? rcuref_put_slowpath+0x101/0x150 [ 577.326794][ C0] [ 577.326800][ C0] [ 577.326806][ C0] _copy_from_user+0x8b/0xe0 [ 577.326828][ C0] __sys_bpf+0x23e/0x890 [ 577.326852][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 577.326887][ C0] ? lock_chain_count+0x20/0x20 [ 577.326916][ C0] __x64_sys_bpf+0x7c/0x90 [ 577.326944][ C0] do_syscall_64+0x55/0xb0 [ 577.326965][ C0] ? clear_bhb_loop+0x40/0x90 [ 577.326986][ C0] ? clear_bhb_loop+0x40/0x90 [ 577.327008][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.327029][ C0] RIP: 0033:0x7f0d2c39e019 [ 577.327046][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.327062][ C0] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.327082][ C0] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 577.327096][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 577.327109][ C0] RBP: 00007f0d2c43500c R08: 0000000000000000 R09: 0000000000000000 [ 577.327121][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.327133][ C0] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 577.327160][ C0] [ 577.327166][ C0] [ 577.327169][ C0] Allocated by task 12796: [ 577.327178][ C0] kasan_set_track+0x4e/0x70 [ 577.327199][ C0] __kasan_kmalloc+0x8f/0xa0 [ 577.327220][ C0] __kmalloc_node+0xb6/0x240 [ 577.327245][ C0] bpf_map_area_alloc+0x5e/0x110 [ 577.327272][ C0] prealloc_elems_and_freelist+0x86/0x1c0 [ 577.327296][ C0] stack_map_alloc+0x32b/0x4b0 [ 577.327317][ C0] map_create+0x877/0x12f0 [ 577.327335][ C0] __sys_bpf+0x651/0x890 [ 577.327353][ C0] __x64_sys_bpf+0x7c/0x90 [ 577.327370][ C0] do_syscall_64+0x55/0xb0 [ 577.327387][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.327406][ C0] [ 577.327409][ C0] Last potentially related work creation: [ 577.327414][ C0] kasan_save_stack+0x3e/0x60 [ 577.327435][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 577.327459][ C0] call_rcu+0x153/0x900 [ 577.327483][ C0] nf_unregister_net_hooks+0xcb/0x130 [ 577.327561][ C0] cleanup_net+0x592/0xbb0 [ 577.327577][ C0] process_scheduled_works+0xa60/0x1600 [ 577.327601][ C0] worker_thread+0xa5e/0xfe0 [ 577.327622][ C0] kthread+0x2fa/0x390 [ 577.327639][ C0] ret_from_fork+0x48/0x80 [ 577.327661][ C0] ret_from_fork_asm+0x11/0x20 [ 577.327694][ C0] [ 577.327698][ C0] The buggy address belongs to the object at ffff888023ebaf00 [ 577.327698][ C0] which belongs to the cache kmalloc-cg-64 of size 64 [ 577.327714][ C0] The buggy address is located 16 bytes inside of [ 577.327714][ C0] allocated 40-byte region [ffff888023ebaf00, ffff888023ebaf28) [ 577.327736][ C0] [ 577.327739][ C0] The buggy address belongs to the physical page: [ 577.327752][ C0] page:ffffea00008fae80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888023ebad80 pfn:0x23eba [ 577.327775][ C0] memcg:ffff88801f3bb601 [ 577.327782][ C0] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 577.327799][ C0] page_type: 0xffffffff() [ 577.327817][ C0] raw: 00fff00000000800 ffff888017c4da00 ffffea00012707c0 0000000000000002 [ 577.327835][ C0] raw: ffff888023ebad80 000000008020001f 00000001ffffffff ffff88801f3bb601 [ 577.327844][ C0] page dumped because: kasan: bad access detected [ 577.327859][ C0] page_owner tracks the page as allocated [ 577.327864][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5790, tgid 5790 (syz-executor), ts 122013871628, free_ts 122013157646 [ 577.327897][ C0] post_alloc_hook+0x1c1/0x200 [ 577.327932][ C0] get_page_from_freelist+0x2181/0x22a0 [ 577.327950][ C0] __alloc_pages+0x1f0/0x460 [ 577.327966][ C0] alloc_slab_page+0x5d/0x180 [ 577.327983][ C0] new_slab+0x87/0x2d0 [ 577.327997][ C0] ___slab_alloc+0xc5c/0x12f0 [ 577.328013][ C0] __kmem_cache_alloc_node+0x11f/0x250 [ 577.328040][ C0] kmalloc_trace+0x2a/0xe0 [ 577.328064][ C0] alloc_fdtable+0xca/0x2c0 [ 577.328088][ C0] dup_fd+0x747/0xa20 [ 577.328111][ C0] copy_files+0xaf/0x110 [ 577.328130][ C0] copy_process+0x157d/0x3da0 [ 577.328149][ C0] kernel_clone+0x24b/0x8a0 [ 577.328168][ C0] __x64_sys_clone+0x1b7/0x230 [ 577.328188][ C0] do_syscall_64+0x55/0xb0 [ 577.328206][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.328225][ C0] page last free stack trace: [ 577.328229][ C0] free_unref_page_prepare+0x7d7/0x8f0 [ 577.328244][ C0] free_unref_page+0x32/0x2e0 [ 577.328260][ C0] vfree+0x1a7/0x340 [ 577.328281][ C0] __do_replace+0x878/0x9b0 [ 577.328357][ C0] do_ip6t_set_ctl+0xb41/0xe10 [ 577.328380][ C0] nf_setsockopt+0x263/0x280 [ 577.328427][ C0] do_sock_setsockopt+0x175/0x1a0 [ 577.328446][ C0] __x64_sys_setsockopt+0x182/0x200 [ 577.328463][ C0] do_syscall_64+0x55/0xb0 [ 577.328480][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.328499][ C0] [ 577.328502][ C0] Memory state around the buggy address: [ 577.328511][ C0] ffff888023ebae00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 577.328524][ C0] ffff888023ebae80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 577.328536][ C0] >ffff888023ebaf00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 577.328546][ C0] ^ [ 577.328555][ C0] ffff888023ebaf80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 577.328566][ C0] ffff888023ebb000: fa fb fb fb fb fb fb fb fc fc fc fc fa fb fb fb [ 577.328576][ C0] ================================================================== [ 577.328592][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 577.328602][ C0] CPU: 0 PID: 12796 Comm: syz.2.2151 Not tainted syzkaller #0 [ 577.328620][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.328631][ C0] Call Trace: [ 577.328638][ C0] <#DB> [ 577.328645][ C0] dump_stack_lvl+0x18c/0x250 [ 577.328671][ C0] ? show_regs_print_info+0x20/0x20 [ 577.328693][ C0] ? load_image+0x420/0x420 [ 577.328731][ C0] panic+0x2ca/0x720 [ 577.328756][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 577.328783][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 577.328815][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 577.328846][ C0] ? _raw_spin_unlock+0x40/0x40 [ 577.328878][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.328903][ C0] check_panic_on_warn+0x84/0xa0 [ 577.328938][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.328963][ C0] end_report+0x6f/0x130 [ 577.328987][ C0] kasan_report+0x128/0x150 [ 577.329013][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.329063][ C0] kasan_check_range+0x241/0x290 [ 577.329089][ C0] ? __bpf_get_stackid+0x6c7/0x900 [ 577.329116][ C0] __asan_memcpy+0x40/0x70 [ 577.329144][ C0] __bpf_get_stackid+0x6c7/0x900 [ 577.329178][ C0] bpf_get_stackid_pe+0x343/0x410 [ 577.329209][ C0] bpf_prog_f996dc42cdf0283d+0x29/0x41 [ 577.329229][ C0] bpf_overflow_handler+0x1fc/0x510 [ 577.329260][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 577.329283][ C0] ? bpf_overflow_handler+0xde/0x510 [ 577.329312][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 577.329347][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 577.329374][ C0] __perf_event_overflow+0x461/0x660 [ 577.329403][ C0] perf_swevent_event+0x319/0x570 [ 577.329430][ C0] ? perf_tp_event+0x1550/0x1550 [ 577.329452][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 577.329477][ C0] perf_bp_event+0x319/0x430 [ 577.329500][ C0] ? look_up_lock_class+0x75/0x140 [ 577.329529][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 577.329552][ C0] ? rcu_is_watching+0x15/0xb0 [ 577.329578][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 577.329595][ C0] ? lock_release+0xb5/0x8c0 [ 577.329621][ C0] ? rep_movs_alternative+0x4a/0x90 [ 577.329658][ C0] ? lock_acquire+0x2c2/0x420 [ 577.329687][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 577.329716][ C0] notifier_call_chain+0x18f/0x380 [ 577.329742][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 577.329768][ C0] atomic_notifier_call_chain+0xda/0x180 [ 577.329795][ C0] notify_die+0x145/0x1a0 [ 577.329822][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 577.329854][ C0] ? rcu_is_watching+0x15/0xb0 [ 577.329882][ C0] notify_debug+0x2e/0x50 [ 577.329902][ C0] exc_debug+0xde/0x140 [ 577.329933][ C0] asm_exc_debug+0x1e/0x40 [ 577.329953][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 577.329976][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 577.329997][ C0] RSP: 0018:ffffc90003c77d50 EFLAGS: 00050202 [ 577.330013][ C0] RAX: ffffffff8431f301 RBX: 0000000000000050 RCX: 000000000000000f [ 577.330026][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90003c77e01 [ 577.330044][ C0] RBP: ffffc90003c77ee8 R08: ffffc90003c77e0f R09: 1ffff9200078efc1 [ 577.330059][ C0] R10: dffffc0000000000 R11: fffff5200078efc2 R12: 0000200000000310 [ 577.330073][ C0] R13: 0000000000000050 R14: ffffc90003c77dc0 R15: 00002000000002c0 [ 577.330093][ C0] ? rcuref_put_slowpath+0x101/0x150 [ 577.330122][ C0] [ 577.330128][ C0] [ 577.330133][ C0] _copy_from_user+0x8b/0xe0 [ 577.330156][ C0] __sys_bpf+0x23e/0x890 [ 577.330184][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 577.330218][ C0] ? lock_chain_count+0x20/0x20 [ 577.330249][ C0] __x64_sys_bpf+0x7c/0x90 [ 577.330270][ C0] do_syscall_64+0x55/0xb0 [ 577.330290][ C0] ? clear_bhb_loop+0x40/0x90 [ 577.330310][ C0] ? clear_bhb_loop+0x40/0x90 [ 577.330333][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.330354][ C0] RIP: 0033:0x7f0d2c39e019 [ 577.330370][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.330386][ C0] RSP: 002b:00007f0d2d290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 577.330406][ C0] RAX: ffffffffffffffda RBX: 00007f0d2c625fa0 RCX: 00007f0d2c39e019 [ 577.330421][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000001c [ 577.330433][ C0] RBP: 00007f0d2c43500c R08: 0000000000000000 R09: 0000000000000000 [ 577.330445][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.330457][ C0] R13: 00007f0d2c626038 R14: 00007f0d2c625fa0 R15: 00007fff7a93cce8 [ 577.330483][ C0] [ 577.331089][ C0] Kernel Offset: disabled