last executing test programs: 19.629734547s ago: executing program 3 (id=2939): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0xfd, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000240), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 19.379658023s ago: executing program 3 (id=2946): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0xdd86, 0x9}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)="27030200f00f00000600002fb9088965c7297a05a2019e6bafedef4e39ffffffffe1053742e0e4650058f7", 0x2b}, {0x0}, {0x0, 0x2b00}, {0x0}], 0x4}, 0x0) 19.242275907s ago: executing program 3 (id=2950): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a7029740000feffffffffffffff00000000000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 17.656550011s ago: executing program 3 (id=2954): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@typedef={0xf, 0x0, 0x0, 0x8, 0x2}, @union={0xf, 0x5, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x0, 0x1000}, {0x8, 0x4, 0x40}, {0xc, 0x3, 0x9}, {0xa, 0x2, 0x9}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x3e, 0x30, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x4}, 0x4204, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5ae) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (fail_nth: 1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064a8f4", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e0a7875f80e000000400002007a17d34460bc24eab556a7", 0x27}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="7cba17fd900612c5f3fc05ad7d0c7f911a7327aa3180b0976b4701e3f80b9069075e8d9dcafe1ad84913ec2449939af9acf2b16f36e1970975883397bff47c1d66fa96c9277658d1d3adb6ee38322bbd2ee040c48a37665bca587651cf5ad37b15dbc85b3b", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r5 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) 17.110966766s ago: executing program 3 (id=2959): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}, 0x28004050) 17.072276807s ago: executing program 3 (id=2960): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x57, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x113, 0x113, 0xc, [@func={0xb, 0x0, 0x0, 0xc, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @enum={0x4, 0x5, 0x0, 0x6, 0x4, [{0x4}, {0x0, 0x1}, {0x5, 0x5}, {0x3, 0x5}, {0xb, 0x5}]}, @datasec={0xd, 0x3, 0x0, 0xf, 0x3, [{0x4, 0x80000001, 0xa}, {0x1, 0xfffffff3, 0xb}, {0x8, 0xffffffff, 0x2}], "14e7f0"}, @struct={0x8, 0x8, 0x0, 0x4, 0x1, 0x1d6, [{0xb, 0x0, 0x7ff}, {0x4, 0x1}, {0xe, 0x3, 0x401}, {0x10, 0x0, 0x3201ca9a}, {0xd, 0x5, 0x9}, {0x2, 0x4, 0x6}, {0x2, 0x5, 0x1000}, {0x3, 0x2, 0x6}]}, @union={0xa, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x0, 0x3, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x3e, 0x0, 0x0, 0x30, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f0000000440)=""/211, 0x138, 0xd3, 0x0, 0xffffffff}, 0x28) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x5ab, '\x00', r0, r2, 0x4, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r3, &(0x7f0000000600)="2ce6811b14e161af4308a245f81728113c7a446fd1798e6b5eb02ea96f42245f019a7d2cf421c6721225b10797fe", &(0x7f0000000640)=""/7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000740)='GPL\x00', 0xad9, 0x3, &(0x7f0000000780)=""/3, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x1, 0xdb51, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000880)=[r3, r4, r3], &(0x7f00000008c0)=[{0x0, 0x3, 0x6, 0x8}, {0x1, 0x1, 0xb, 0x8}], 0x10, 0x80000001}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000cc0)=r4, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r3, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002f40)={r5, 0x0, 0x1000, 0xf1, &(0x7f0000000dc0)="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", &(0x7f0000001dc0)=""/241, 0x4, 0x0, 0x64, 0x1000, &(0x7f0000001ec0)="2fe58cd6a5331fdd9739f4ca54203013a2a415ca6ebb85db427c7bd57b18184157af28cc887aaf661c602dbfb2d3ab90627048170334c0e9b913c1193d170204abe695e2275007d9b5de208db127d44e30290578b1a4625bbe4ce96f3d2784264ba2c985", &(0x7f0000001f40)="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", 0x4, 0x0, 0xffffffff}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002fc0)={0x1b, 0x0, 0x0, 0x5, 0x0, r3, 0x5, '\x00', r6, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000003280)=@base={0x18, 0xfffffffe, 0x5, 0x5, 0x40, r4, 0x4, '\x00', r0, r2, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000033c0)={0x14, 0x11, &(0x7f0000003040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3a2, 0x0, 0x0, 0x0, 0x4014}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003100)='syzkaller\x00', 0x4, 0xba, &(0x7f0000003140)=""/186, 0x41100, 0x8, '\x00', r8, @fallback=0x2a, r2, 0x8, &(0x7f0000003200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000003240)={0x2, 0xb, 0x2, 0xfffffeda}, 0x10, r7, r5, 0x6, &(0x7f0000003300)=[r4, r4, r10, r3], &(0x7f0000003340)=[{0x3, 0x3, 0xb, 0x5}, {0x4, 0x1, 0xb, 0x3}, {0x2, 0x5, 0xd, 0x2}, {0x3, 0x2, 0xf, 0xc}, {0x0, 0x3, 0x7}, {0x1, 0x4, 0xf, 0xa}], 0x10, 0x3}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000036c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000003480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe1}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffe0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000003500)='GPL\x00', 0xfffff800, 0xb5, &(0x7f0000003540)=""/181, 0x41000, 0x18, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000003600)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r1, 0x0, 0x1, &(0x7f0000003640)=[r10, r9, r3, r9, r9, r4, 0x1, r9], &(0x7f0000003680)=[{0x2, 0x1, 0x2, 0xc}], 0x10, 0x8}, 0x94) r12 = socket$kcm(0x29, 0x7, 0x0) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r8, r2, 0x4, 0x3, 0x5}, 0x50) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000003800)={0x0, r2}, 0x8) r14 = perf_event_open$cgroup(&(0x7f0000003900)={0x4, 0x80, 0x4, 0xd, 0x6, 0x2, 0x0, 0x2, 0x40800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000038c0), 0x4}, 0x1c200, 0x3, 0x9f, 0x4, 0xfffffffffffffffd, 0x7e0, 0x1, 0x0, 0xeb9, 0x0, 0x1ff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000003840)={0x5, 0x80, 0xd, 0x8, 0x1e, 0x2, 0x0, 0x8, 0x450a1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0xffff, 0x1}, 0x800, 0x101, 0xa, 0x8, 0x7, 0x65, 0x7, 0x0, 0xb17, 0x0, 0xffffffffffff7fff}, 0xffffffffffffffff, 0x0, r14, 0x9) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003a00)={r9, 0x58, &(0x7f0000003980)}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003c00)={r9, &(0x7f0000003a40)="048478beaccccff359d0464b2cc587c655d4c6e2e4aa8e140f47750504f65717326c0fd4ddc019922fc687cbd64865539fd3502f9ec01e0c40efed4c771fe5b611e152ac6cb8944bdc2abb2b5af3a4f9faa83542df946535bff588996a3c52c9318eaa25418ad447692ad11d178403827858b365ce2dd768c6ad3316cd35ded752a5e7208492ead0f4332983ce24bcbe27ac7e31e3c574414710f152ada53c2c0aa26615a931514e0bf91e5157fb2091b53a3a1b5ddb4269b986402792584417bab0055847770c3e866f9680686a23c4fc4ffb597363fab9f7e6a2", &(0x7f0000003b40)=""/129}, 0x20) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r14, 0x40042409, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000004e80)={0xb, 0x23, &(0x7f0000003c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @alu={0x4, 0x0, 0x8, 0x8, 0x2, 0x8, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0x73}]}, &(0x7f0000003d80)='GPL\x00', 0x10000, 0x1000, &(0x7f0000003dc0)=""/4096, 0x41000, 0x20, '\x00', r0, @fallback=0x2a, r4, 0x8, &(0x7f0000004dc0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, r11, 0x3, &(0x7f0000004e00)=[r9], &(0x7f0000004e40)=[{0x2, 0x4, 0x7, 0x4}, {0x1, 0x4, 0x8, 0x2}, {0x1, 0x4, 0x10}], 0x10, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000052c0)={r2, 0x20, &(0x7f0000005280)={&(0x7f0000005180)=""/145, 0x91, 0x0, &(0x7f0000005240)=""/45, 0x2d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x4, 0x7, &(0x7f0000004f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x71a220b}, [@alu={0x4, 0x1, 0xc, 0xa, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x6f}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000004fc0)='syzkaller\x00', 0x80, 0xd2, &(0x7f0000005000)=""/210, 0x40f00, 0x20, '\x00', r0, @fallback=0x8, r2, 0x8, &(0x7f0000005100)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000005140)={0x3, 0x9, 0x9, 0xad}, 0x10, r18, r15, 0x6, 0x0, &(0x7f0000005300)=[{0x2, 0x2, 0x5}, {0x5, 0x1, 0x7}, {0x4, 0x1, 0x5, 0xa}, {0x5, 0x5, 0x3, 0x3}, {0x4, 0x2, 0x3, 0x6}, {0x2, 0x2, 0x9, 0xc}], 0x10, 0xfff}, 0x94) (async) sendmsg$kcm(r2, &(0x7f0000006cc0)={&(0x7f0000005440)=@phonet={0x23, 0x9, 0xf2, 0x2}, 0x80, &(0x7f0000006ac0)=[{&(0x7f00000054c0)="571dbd6f8dc5d6684ebf30239f28f63cbb147c11fa2d68cc22411c8e185a7e4cb773282915b12af7d1ce39587eba6dc93132c0210e8f0a8a81d42bd6632f84c0b3461c91b9837c9b92d72af3fe550b5f2e4be953567affd673bdf4c8c5617b8603e688ea441b1fa98c3bcbfd1e6755ecfe9f3be7a3e65e4ef03a19dabbc9d8fc256e52a53621ab3b0d5d78f25ceca8d113500badcad7cdb99868009e6b21fe55a482aff297dfeecf522f7f6344d5", 0xae}, {&(0x7f0000005580)="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", 0x1000}, {&(0x7f0000006580)="ad627e336e60c2921a5a374d02ab5ee5dc8f76cf929ec53438ab8ac1d83ce688f43e02b1892035133ce5bf114a580835044ae1c17ba6ad1f4f14176359d6f64fbf085a1789375f9b888d7a1dd95f06d6c0d1841b4ba2a66c1ae8bcffb5ad016a2bd8eeb286cab25b37", 0x69}, {&(0x7f0000006600)="517b4e79b5ba77de30ce5f00e82b2a27921334ecf952a0667a9d4feeb7ca6c59c5be069556213a46ea378ec47dea46f0eee0ca6ca379495ae61bda11fe6c1a88dc7ea3585a8361a954958deb62ff2ca4ee2c4b0e671c734aaad3a326c08b7107bfeafb3f40b1d941dc2a2fcc3b7b06f2b35d720549ce1b70496b9943352616c0cb3361777de856154617215e1f1d010b98019e979d9b6a98b3044d1506e931ea27e56a6beed5d44d667e4e9296c73c8948cad96ca5577e7b0dafe9b1281fda412d5e90b8a0fd98b7849098b4f929e569a7ede3905731b62bc71692323d0e1b02a2ea415c26dfbc", 0xe7}, {&(0x7f0000006700)="e27550047905b9ddd72f481cf5f9675be769e1093354d6dc60cd654890006f2c515b70e6d03445112d580f14cf8ed220681595f64145f968", 0x38}, {&(0x7f0000006740)="40a2a9f9e30a41fa81eec21823cd99f0333c5a8a62bf8dafbc40da8f9467d517d66186b1e1edc2c8c25844ffe8879c564ed18bc29da26936804496a84713559bca2c87a9a7131110660b5b44508915f6c184a38cac8ccb50099f379a94ad14761692ad06862605c331f64b174b74745fd7a09307a64a93ce1571d294e7a84fba5e27c33e6ee8e4ecaa4d65f521f15ab7ba166b31d46f8cf135059f94fab0dea1f7d58b8d90340d6f4678b18d0287436c130e1652de5286c57452e827f06a39a5487328c0f44254d60350a409d454eebfa5132ad977cbfccf87527bb117c3b3bebfeb88982c8f1f156cca0c90bc64550c67f91920a43f", 0xf6}, {&(0x7f0000006840)="f81b8d4d4731a3f1d64b358040b72aac5a9b1cefb70fde50572be0597e93cf759fc8221efa8d6b754e88fd30cfd976", 0x2f}, {&(0x7f0000006880)="8791fe92ad0689e850633d25d67ba9a9bf4d623d57cd2d0259229d8a9460a7d6a9dd340da83b31a724f995cbdc7dbfd01a4ae5e03730086eda1a7009b697f98d186401518ec07078c9e0972472ddbad3cabaa4cef8c081f4289591ac92faba60ffdff50f6b2da8d196e195a86f5db10c50f060320c91fbf39560a1aa07f727b8fc07fffaadbc681ef727d36934860743e5ee79052bc329542d743c72a4c680eae9c68708d50fe0262d0d09483d08ee7789743f42c493f37aa9280961c40c109a468b83680a3c3af93781deb83ef0aef76a20740452a41f7daab95938b726999f0870dd9e63591d9d61c7b27dc645aefc865d4cdeef9a", 0xf6}, {&(0x7f0000006980)="c3cecf98487a58a6f94d43a9616fb6e3e49ab0e2aac092d2e85e63da3d06f814a2bfad0ca6b0efbbeca67252275b0022c2373281d6a6a13ff9b32a4d4ae52b8a2e3a904ccb40d7f4e7e4d513738b92d199a820c6f67189227f391927ef46215ab7a260e7", 0x64}, {&(0x7f0000006a00)="bb5257fa1cca4c4391cbfec82dd79162a7123590da98b45279aaf3a60e7bb9f55cd90656f49034889f212bf1b4a72fc24daa1c76103f6a6ea51d2c969b2bd21f8f5963d9ddcb5630fb77070b87159915d192154266fcd21e9516f2f6f38a6de3987bcff7fddaff244e19b4fb96caaca595f7692560dfc8c78a6c8f4effb7a13bfaf264e01861ba715cfc3f1ead0a0ec09073aa83e6d682de92a31b898017e9b8d1da4c0c8402c5a2832fc09e56eac42c7069ac0b0295e907e3", 0xb9}], 0xa, &(0x7f0000006b80)=[{0x38, 0x1, 0x1, "9d5430ffdd04c13d3c021e496328729180627a61dedb72c291f708917aa576c68409c20905eb94"}, {0xd8, 0x119, 0x7, "a0721f8d82edf91a2012e71fb1d7978597dc78db9173e2071e8faec749cca6652e569328d4ad3b40dc1fddcc0b40d94b0e75d024ce4bd44041ba3d87fcff0fa3102be189ad3548264efbaa3681b8334e3d419f7456fe9dd933275b995ec07fc58d239906427598f5c7a1816f0fcd69002bbe6154a497bed4f9addb89f8ce9585efc4bcf3be82a8ac94f117e2c8febfee5dd5c4d506fb872a74f790a341b5e7e5986ee4e52ef4f886187b7f92c7fdb0ec9cec59916e8f732d101d10a0777c6eca8d9185"}], 0x110}, 0x891) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000006d80)={r16, 0x58, &(0x7f0000006d00)}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000006dc0)={r17}) (async) syz_clone(0x20080900, &(0x7f0000006e00)="8b802fcfad90e1d52349ef689d60d769ce76ed34f3066d28b236ca08869fc2", 0x1f, &(0x7f0000006e40), &(0x7f0000006e80), &(0x7f0000006ec0)="2417cdb1138fd0a84c31f1d8fa3757c76067239a7da212eaf09d29699710baef312d4426e6a2514ac455507197a51dab2a587c1924614613f4d2cddc0e99f398da4fa16cbe816db7b1e178632280d052c90b02564c36a3dc1bf471efa7268ae08d4dd45cfa72b05eeca4f6f97e44c68a9c5ae27b65e693c6de92dfe4ff5227eefd081aeb9f9ccb877f89284f570c1a02211933971104198d18102afa41079e14d6a354f2c95badfe21153af23436343d589d8858255e587774bc6058") 6.912139548s ago: executing program 4 (id=3010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc066, 0xac5d, 0xffffffff, 0x0, 0xa, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000006080)={&(0x7f00000010c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}, 0x4) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000003000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.358675953s ago: executing program 4 (id=3013): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bf9600000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x90, &(0x7f00000001c0)=""/144, 0x0, 0x29}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000180)={0x0, 0x6e, 0xd, 0x2, 0x3, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x8800, 0x0, 0xfffffffc, 0x9, 0xae, 0x5e4c, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r4}, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000700)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xfffffffd}, 0x10}, 0x94) r7 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x7, 0x1, 0x6, 0x6, 0x0, 0x0, 0x4010, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x0, 0x4, 0x0, 0x2, 0xfff, 0x100, 0x1, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r2, 0x33853554451284b4) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000080000", @ANYRES32=0x0, @ANYBLOB="acfb1311e0000001000000007100ac14141d0000000500000000000000004000000000"], 0x48}, 0x200040c4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1866b51c56a6070100000000010000", @ANYRES32, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r0}, &(0x7f0000000380), &(0x7f0000000540)=r9}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x18, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000700000000000000ff01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000079dc00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70000000000008500000081ffde00186700000a7dac70f8500a00000000000000ffffff7f9500000000000000135e99d0f0add22f9bb2746b3dc9a6e5b419c4ae70e318ae239b456b9124ecb9b907fdb09d219383b6971fb6d0973934fe1e3c582a11edd50898145ab38c58722845261209acf0ae4de826cc8e904485d08abd9e5946017a8e100e5952ccdcd420b1532b59a52f8ac021b6290c6ca2532bfa6c6cfc88e319e8181cfc3fdb88a4c28985cdbe"], &(0x7f00000005c0)='GPL\x00', 0x98a4, 0x1000, &(0x7f0000001980)=""/4096, 0x41000, 0x42, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000002980)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000029c0)={0x36, 0x0, 0x5d2, 0x7fff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002a00)=[r1, r0, r0], &(0x7f0000002a40)=[{0x2, 0x4, 0xc, 0xb}, {0x5, 0x3, 0xf}, {0x4, 0x3, 0x9, 0x9}, {0x3, 0x3, 0xc}, {0x3, 0x1, 0x6, 0xb}], 0x10, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000504000000183300c8f0853a6fccfdca0000009500000001010000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, &(0x7f0000000240), 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x4, 0x2, 0x2, 0x9}, {0x5, 0x4, 0x3, 0xb}, {0x5, 0x1, 0xa, 0x6}, {0x2, 0x3, 0x4, 0xa}, {0x2, 0x4, 0x8, 0x4}, {0x4, 0x5, 0x7, 0x4}], 0x10, 0x81}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x1, 0x1, 0x1, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 5.195129346s ago: executing program 4 (id=3016): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="65bd4b83516515fc1bd08e90aafea0174d183c8b7f16293028422ac119256a25ac2dbd53feb421de597c9f02b83e1d9746eb43f27fae9cc7c41ef58118da1b3aa076bd156bf79d03ba0e2408d6d4d36050d5afb9d5eef741f8485b377b71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde23"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.194309766s ago: executing program 0 (id=3017): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x5}, 0xc) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async, rerun: 64) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000001400)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x5f, 0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x2d}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x1d, &(0x7f0000000680)}, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x15, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @alu={0x4, 0x1, 0x0, 0x9, 0x2, 0x20, 0xffffffffffffffff}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x400}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x39f4, 0x1000, &(0x7f0000000340)=""/4096, 0x0, 0x1c, '\x00', r4, @fallback=0x2c, r5, 0x8, &(0x7f0000001640)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x4, 0x7, 0x6, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000016c0), &(0x7f0000001700)=[{0x0, 0x1, 0x9, 0x9}, {0x3, 0x2, 0xf, 0x9}], 0x10, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a82, 0x0) r6 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd22, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfc4, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) (async, rerun: 32) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x1800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) r7 = getpid() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x2, 0x0, 0xfb, 0x0, 0x3, 0x4, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x9, 0x4}, 0x1, 0x7, 0x9, 0x5, 0x3, 0x100, 0x6, 0x0, 0x7, 0x0, 0x100}, r7, 0xffffffffffffffff, r6, 0x1) 5.094702168s ago: executing program 1 (id=3018): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f00000004c0), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=ANY=[@ANYBLOB="18000000000000000008000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=r2, 0x1d, 0x0, 0x200, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r9, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) 4.974546112s ago: executing program 0 (id=3019): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe5}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000002c0)}, {0x0}], 0x2, 0x0, 0x0, 0x40000}, 0x4c891) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000400142603600e120800090000000401a80016002000080000000d0000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x4880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000ff000000000000002d5156"], 0x0, 0x1a}, 0x28) 3.899038902s ago: executing program 0 (id=3021): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000", 0x17}], 0x1}, 0x28004050) 3.885163342s ago: executing program 1 (id=3022): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27032700590200000000002f1eafbcf706e10500000086ddffff1104ee162bd4b8bf4a82f6184b8a34f90186cee844000000080000", 0x35}, {&(0x7f0000000440)="63f805d7649496db72959811930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 64) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2}}}], 0x20}, 0x20008894) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x7, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54700, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x642, 0x9}, 0x0, 0x1, 0xff, 0x6, 0x7ff, 0x1, 0xb, 0x0, 0x0, 0x0, 0x400000000}, 0xffffffffffffffff, 0x0, r5, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0xb}, 0x94) (rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d6b09c01d9"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000680)=""/14, 0x2}, 0x20) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r2, 0x17, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) (rerun: 64) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f00000001c0)=r7) (async) recvmsg(r11, &(0x7f0000002500)={&(0x7f0000000280)=@nl=@unspec, 0x80, &(0x7f0000002480)=[{&(0x7f00000004c0)=""/190, 0xbe}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000008c0)=""/163, 0xa3}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/86, 0x56}, {&(0x7f00000023c0)=""/147, 0x93}], 0x7}, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0xcf, &(0x7f00000009c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) 3.753874356s ago: executing program 0 (id=3023): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000700000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="86dd00"/14, 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.729549266s ago: executing program 4 (id=3024): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0xff, 0x9, 0x4, 0x8, r0, 0xfffffff6, '\x00', r1, r0, 0x4, 0x2, 0x3, 0xa}, 0x50) close(r0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.721182166s ago: executing program 2 (id=3025): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cd00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfd, &(0x7f0000000100)=""/253, 0x0, 0x4}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x1, 0x0, 0x5, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x217b8ec}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='syzkaller\x00', 0x1, 0x42, &(0x7f00000005c0)=""/66, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xd, 0x7fff, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000006c0)=[r2, r2, r2], &(0x7f0000000700)=[{0x2, 0x1, 0x3, 0x2}, {0x5, 0x2, 0x10, 0xb}, {0x1, 0x3, 0x7, 0x1}, {0x3, 0x3, 0xc}, {0x0, 0x4, 0x10, 0x8}], 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0xfff, 0x7, 0x0, 0x800, r2, 0x8, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2}, 0x50) 3.538616702s ago: executing program 0 (id=3026): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000680)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x3}}, 0x10, &(0x7f00000006c0), 0x0, &(0x7f00000007c0)="a3af23265da085aa712258fa5a5ef5ed7395b2bfd8897bfcbe3cd25bebcb93e42b029d9abcf815d3d48e8d7624d60be4e80fb91bfb3c55d9881c918883ee33b9f23125dac71f9ffe74fe5b7dc3652af54bc63c132fefa1cc70a00910badee49ecca280ab4ba658b34e7fe4050bf50f02a8999ffc1d0e5e4fa1f09b9db3fd92f47e8230d9d744b3dfc3154c409fdeca49c4ae08d4afd2b267b13c40199f0c2dbc13c5f04d97870138d3c888a2f2100afbad35945064d09c21256a6c19c48975d1d8f471f66c66e431975ead", 0xcb, 0x20008050}, 0x4800) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)={[{0x2b, 'cpuacct'}]}, 0x9) setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640), 0x4) close(r3) recvmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.411104393s ago: executing program 1 (id=3027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xc00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) 2.351868294s ago: executing program 4 (id=3028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000007000000000000000080000085000000750000009500000000fcff00"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) unlink(0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000000000000000000000100000"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080008000600000004040000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="00000000fdffffff00008c0c00000000000000000000000000000000e90c8d696c6007d8e716eca1db039368611938b4ed9392bad8565329e052af2a0f"], 0x50) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) 2.332488385s ago: executing program 2 (id=3029): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x3}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee84400", 0x35}, {0x0}, {0x0}], 0x3}, 0x200400c4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000800"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x4c, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x1}, 0x2004, 0xc, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) 2.303834646s ago: executing program 0 (id=3030): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, 0x0, 0x101d0) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x8) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r6 = socket$kcm(0x29, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x80016, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, r4, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x11b) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b00c84e21000af32c6e0a0675f800250002400100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r3, r1}) close(0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 2.074765152s ago: executing program 1 (id=3031): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001ac0), 0x0, 0x1, 0x0, 0x13}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x80ffffff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="62043c00be0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}, {&(0x7f0000000740)="02368762f4dc3df47b2c7a3afb032259126c0b6979e5a788e10158851dfe135c89d4a04d7879af1bf758d81060eeedc26a944bcbe8d2011e882cd701cf4b65f5ceb40e8cf8cc63b7e7ce0cf1fd52aa4092cf2c7592da37ca9ef31f34177fae3a7580cce322981bab8fd5f6e75912156796c6a79f0f699f4c2199867f5ade575c30846041f8c30184ffeef0e1fbe65e67be73d938903e2aacee8b620dccbc6e33374875302e82408c180d4212ac35d3de2262a8", 0xb3}, {&(0x7f0000000b80)="313cc61375d93de3397103c9e30cc92e1a2988bc7997f6339ee3b8ea2411e5a2286f53ea5f72", 0x26}, {&(0x7f0000000cc0)="20957222171093dc1a6b407e68acea6baaabaf8393880bebeb2adeebfe1aef32a9fea4f47fc1604894b6e828c6675f61978417e3881911c98386c438d21f682b30184087a3dbe0438f289703d810e4f4a91eda122ce6ac173631e45c75581560f683e60d7a01f9365ec977d175f1cc0af60d9da73f471ff2d6dbacf2ad459ee336ea05d8a39119d0b6788a205d74829c29222eadd8dd17af362ae064e0e2f2f82bd4dc0ab6c7b964ca416c5cf7802b8aca28ba752ff0ee1485770e3aec092e9e510e098c8ca7a4e78d8dc6", 0xcb}], 0x4}, 0x20000000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) 2.065635133s ago: executing program 2 (id=3032): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e100602000000000e000a", 0x23}], 0x1}, 0x28004050) 1.881590218s ago: executing program 1 (id=3033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=[0x0], 0x0, 0xe8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), 0x0, 0x0, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000008000000000aec8000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000001000085000000860000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r7, 0x2f, 0x1, 0x8001, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r8, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@func]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x3, &(0x7f0000000380)=""/3, 0x41000, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x2, 0xa, 0xd0, 0x8000}, 0x10, r9, r4, 0x0, &(0x7f0000000a40)=[r3, r3, r3, r3, r3], &(0x7f0000000a80), 0x10, 0x1}, 0x94) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000180)=r5) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r10, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.872257958s ago: executing program 2 (id=3034): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="65bd4b83516515fc1bd08e90aafea0174d183c8b7f16293028422ac119256a25ac2dbd53feb421de597c9f02b83e1d9746eb43f27fae9cc7c41ef58118da1b3aa076bd156bf79d03ba0e2408d6d4d36050d5afb9d5eef741f8485b377b71"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9db"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 898.031715ms ago: executing program 2 (id=3035): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e33, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000680), 0x58}], 0x1}, 0x4008014) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000640)="a1", 0x1}], 0x1, 0x0, 0x0, 0x1000000}, 0x80) 778.258048ms ago: executing program 1 (id=3036): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x1}, 0x11c002, 0xac5d, 0x8000, 0x8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff23867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5eaa50095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x36, 0x0, &(0x7f0000001400)="400a548e00b3e326ed90c8b7543fa40f5d9b46577844df1ae8061f3d82ac7d15ae7d8af160f9402f5bb79b268dfa713b36a28ced1fd6", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x223ba, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="e61c112e206c3671076ca059ecfe1caaf58fd3b766d4a4d5969157f1dd25d4641dbb1a942858f106b377e7ae59d265b28deed24b521416dfb683a9fa7a707defba8aa75077d5262c93681ca92fd672360c43f8e914e4cebc098655ca24edb1de6c00"/112, @ANYRES16=r2, @ANYBLOB="11594c6fd4d3b5d15882d37fe9e1043f70357c74", @ANYRES32=r5, @ANYBLOB="790cc286eaee7de5d744b3a8f39f0da92c0e5b6ac605abb07882fb0cd5856192e567c0aeafd71c312cf414ca5d1b7dc4c7b4e9dcec161d0a09949a7b56d3740cf7f997b204e208f5a8467f12534d84bfa411b4becb53ddf9dc63dcdabf2111a554c7f23f4129bdaa63c5672c2c9db21eb3eacb183c00bc1be560", @ANYRES64=r6, @ANYRES64=0x0, @ANYRES16=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000340), &(0x7f0000000140)=r7}, 0x20) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c13c1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0xe, 0x0) sendmsg$inet(r10, 0x0, 0x48000) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000002c0)={'bond0\x00'}) write$cgroup_subtree(r9, &(0x7f0000000440)=ANY=[@ANYBLOB="c8ada03141b6f6bcfe77cc2c8847"], 0xffbf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r5, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001340)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x1, 0xfffffffe}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='\x00', 0x0, 0x8, r12}, 0x18) socket$kcm(0x10, 0x2, 0x0) 777.661488ms ago: executing program 4 (id=3037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x3}, 0x10009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x8, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xa104, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc7, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x5, 0x0, 0xdaa}, 0xffffffffffffffff, 0x4, r4, 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000240), 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x6400, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 0s ago: executing program 2 (id=3038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r0, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0xff, 0x9, 0x4, 0x8, r0, 0xfffffff6, '\x00', r1, r0, 0x4, 0x2, 0x3, 0xa}, 0x50) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): LT_INJECTION: forcing a failure. [ 259.292516][ T8481] name failslab, interval 1, probability 0, space 0, times 0 [ 259.305841][ T8481] CPU: 0 PID: 8481 Comm: syz.0.1493 Not tainted syzkaller #0 [ 259.313233][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.323293][ T8481] Call Trace: [ 259.326583][ T8481] [ 259.329520][ T8481] dump_stack_lvl+0x188/0x24e [ 259.334221][ T8481] ? show_regs_print_info+0x12/0x12 [ 259.339442][ T8481] ? load_image+0x410/0x410 [ 259.343964][ T8481] ? __might_sleep+0xd0/0xd0 [ 259.348570][ T8481] ? __lock_acquire+0x7c40/0x7c40 [ 259.353614][ T8481] ? verify_lock_unused+0x140/0x140 [ 259.358823][ T8481] should_fail_ex+0x390/0x4c0 [ 259.363491][ T8481] should_failslab+0x5/0x20 [ 259.367985][ T8481] slab_pre_alloc_hook+0x59/0x300 [ 259.373022][ T8481] ? __get_vm_area_node+0x122/0x330 [ 259.378223][ T8481] __kmem_cache_alloc_node+0x4f/0x270 [ 259.383583][ T8481] ? __get_vm_area_node+0x122/0x330 [ 259.388770][ T8481] kmalloc_node_trace+0x22/0xe0 [ 259.393611][ T8481] __get_vm_area_node+0x122/0x330 [ 259.398622][ T8481] ? __local_bh_enable_ip+0x136/0x1c0 [ 259.403983][ T8481] __vmalloc_node_range+0x357/0x1380 [ 259.409271][ T8481] ? netlink_sendmsg+0x5ec/0xbd0 [ 259.414242][ T8481] ? netlink_insert+0x28d/0x13b0 [ 259.419215][ T8481] ? free_vm_area+0x50/0x50 [ 259.423744][ T8481] ? netlink_sendmsg+0x5ec/0xbd0 [ 259.428692][ T8481] vmalloc+0x75/0x80 [ 259.432582][ T8481] ? netlink_sendmsg+0x5ec/0xbd0 [ 259.437512][ T8481] netlink_sendmsg+0x5ec/0xbd0 [ 259.442273][ T8481] ? netlink_getsockopt+0x550/0x550 [ 259.447478][ T8481] ? apparmor_socket_sendmsg+0x8a/0x330 [ 259.453023][ T8481] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 259.458314][ T8481] ? security_socket_sendmsg+0x7c/0xa0 [ 259.463780][ T8481] sock_write_iter+0x2d5/0x3e0 [ 259.468559][ T8481] ? sock_read_iter+0x3a0/0x3a0 [ 259.473435][ T8481] ? common_file_perm+0x171/0x1c0 [ 259.478452][ T8481] vfs_write+0x482/0x9a0 [ 259.482689][ T8481] ? file_end_write+0x250/0x250 [ 259.487530][ T8481] ? __fget_files+0x3fc/0x460 [ 259.492196][ T8481] ? __fdget_pos+0x1d4/0x360 [ 259.496771][ T8481] ? ksys_write+0x70/0x260 [ 259.501175][ T8481] ksys_write+0x14d/0x260 [ 259.505502][ T8481] ? __ia32_sys_read+0x80/0x80 [ 259.510286][ T8481] ? lockdep_hardirqs_on+0x94/0x140 [ 259.515497][ T8481] do_syscall_64+0x4c/0xa0 [ 259.519927][ T8481] ? clear_bhb_loop+0x60/0xb0 [ 259.524618][ T8481] ? clear_bhb_loop+0x60/0xb0 [ 259.529314][ T8481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.535225][ T8481] RIP: 0033:0x7f80de59e0d9 [ 259.539659][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.559277][ T8481] RSP: 002b:00007f80df547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.567699][ T8481] RAX: ffffffffffffffda RBX: 00007f80de825fa0 RCX: 00007f80de59e0d9 [ 259.575681][ T8481] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.583664][ T8481] RBP: 00007f80df547090 R08: 0000000000000000 R09: 0000000000000000 [ 259.591645][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.599630][ T8481] R13: 00007f80de826038 R14: 00007f80de825fa0 R15: 00007ffec77223f8 [ 259.607623][ T8481] [ 259.622031][ T8481] syz.0.1493: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 259.653960][ T8481] CPU: 0 PID: 8481 Comm: syz.0.1493 Not tainted syzkaller #0 [ 259.661355][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.671416][ T8481] Call Trace: [ 259.674704][ T8481] [ 259.677648][ T8481] dump_stack_lvl+0x188/0x24e [ 259.682348][ T8481] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 259.688778][ T8481] ? show_regs_print_info+0x12/0x12 [ 259.693999][ T8481] ? load_image+0x410/0x410 [ 259.698523][ T8481] ? __rcu_read_unlock+0x78/0xd0 [ 259.703471][ T8481] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 259.709903][ T8481] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 259.715175][ T8494] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 259.716404][ T8481] warn_alloc+0x242/0x330 [ 259.716431][ T8481] ? __get_vm_area_node+0x122/0x330 [ 259.716454][ T8481] ? zone_watermark_ok_safe+0x270/0x270 [ 259.739293][ T8481] ? rcu_is_watching+0x11/0xa0 [ 259.744072][ T8481] ? __get_vm_area_node+0x318/0x330 [ 259.749271][ T8481] ? __local_bh_enable_ip+0x136/0x1c0 [ 259.754666][ T8481] __vmalloc_node_range+0x37c/0x1380 [ 259.759960][ T8481] ? netlink_insert+0x28d/0x13b0 [ 259.764900][ T8481] ? free_vm_area+0x50/0x50 [ 259.769401][ T8481] ? netlink_sendmsg+0x5ec/0xbd0 [ 259.774331][ T8481] vmalloc+0x75/0x80 [ 259.778219][ T8481] ? netlink_sendmsg+0x5ec/0xbd0 [ 259.783157][ T8481] netlink_sendmsg+0x5ec/0xbd0 [ 259.787923][ T8481] ? netlink_getsockopt+0x550/0x550 [ 259.793117][ T8481] ? apparmor_socket_sendmsg+0x8a/0x330 [ 259.798653][ T8481] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 259.803929][ T8481] ? security_socket_sendmsg+0x7c/0xa0 [ 259.809382][ T8481] sock_write_iter+0x2d5/0x3e0 [ 259.814140][ T8481] ? sock_read_iter+0x3a0/0x3a0 [ 259.818986][ T8481] ? common_file_perm+0x171/0x1c0 [ 259.824008][ T8481] vfs_write+0x482/0x9a0 [ 259.828254][ T8481] ? file_end_write+0x250/0x250 [ 259.833098][ T8481] ? __fget_files+0x3fc/0x460 [ 259.837773][ T8481] ? __fdget_pos+0x1d4/0x360 [ 259.842356][ T8481] ? ksys_write+0x70/0x260 [ 259.846768][ T8481] ksys_write+0x14d/0x260 [ 259.851091][ T8481] ? __ia32_sys_read+0x80/0x80 [ 259.855852][ T8481] ? lockdep_hardirqs_on+0x94/0x140 [ 259.861042][ T8481] do_syscall_64+0x4c/0xa0 [ 259.865449][ T8481] ? clear_bhb_loop+0x60/0xb0 [ 259.870120][ T8481] ? clear_bhb_loop+0x60/0xb0 [ 259.874804][ T8481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.880688][ T8481] RIP: 0033:0x7f80de59e0d9 [ 259.885092][ T8481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.904692][ T8481] RSP: 002b:00007f80df547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.913097][ T8481] RAX: ffffffffffffffda RBX: 00007f80de825fa0 RCX: 00007f80de59e0d9 [ 259.921057][ T8481] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 259.929019][ T8481] RBP: 00007f80df547090 R08: 0000000000000000 R09: 0000000000000000 [ 259.936978][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.944937][ T8481] R13: 00007f80de826038 R14: 00007f80de825fa0 R15: 00007ffec77223f8 [ 259.952913][ T8481] [ 259.973773][ T8481] Mem-Info: [ 259.978167][ T8481] active_anon:5917 inactive_anon:0 isolated_anon:0 [ 259.978167][ T8481] active_file:19099 inactive_file:40023 isolated_file:0 [ 259.978167][ T8481] unevictable:768 dirty:146 writeback:0 [ 259.978167][ T8481] slab_reclaimable:20962 slab_unreclaimable:95370 [ 259.978167][ T8481] mapped:29537 shmem:1361 pagetables:612 [ 259.978167][ T8481] sec_pagetables:0 bounce:0 [ 259.978167][ T8481] kernel_misc_reclaimable:0 [ 259.978167][ T8481] free:1320619 free_pcp:11326 free_cma:0 [ 260.032201][ T8481] Node 0 active_anon:23668kB inactive_anon:0kB active_file:76396kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118148kB dirty:584kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 260.068372][ T8481] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.102573][ T8494] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 260.126624][ T8481] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.154136][ T8481] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 260.154205][ T8495] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 260.167447][ T8481] Node 0 DMA32 free:1369936kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23668kB inactive_anon:0kB active_file:76396kB inactive_file:159888kB unevictable:1536kB writepending:584kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:28388kB local_pcp:11436kB free_cma:0kB [ 260.181473][ T8495] netlink: 'syz.2.1497': attribute type 8 has an invalid length. [ 260.206777][ T8481] lowmem_reserve[]: 0 0 1 1 1 [ 260.213557][ T8481] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.226629][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1497'. [ 260.244881][ T8481] lowmem_reserve[]: 0 0 0 0 0 [ 260.254472][ T8481] Node 1 Normal free:3897436kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:10488kB free_cma:0kB [ 260.286534][ T8496] netlink: 'syz.2.1497': attribute type 2 has an invalid length. [ 260.299365][ T8500] raw_sendmsg: syz.1.1498 forgot to set AF_INET. Fix it! [ 260.308295][ T8496] netlink: 'syz.2.1497': attribute type 8 has an invalid length. [ 260.319354][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1497'. [ 260.333305][ T8481] lowmem_reserve[]: 0 0 0 0 0 [ 260.342463][ T8481] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.361657][ T8481] Node 0 DMA32: 2936*4kB (UM) 1332*8kB (UME) 1199*16kB (UME) 835*32kB (UME) 672*64kB (UME) 385*128kB (UME) 314*256kB (UM) 251*512kB (UM) 199*1024kB (UME) 3*2048kB (U) 193*4096kB (M) = 1369936kB [ 260.381659][ T8481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.420266][ T8481] Node 1 Normal: 157*4kB (UME) 57*8kB (UME) 32*16kB (UME) 29*32kB (UME) 18*64kB (UME) 8*128kB (UE) 4*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3897436kB [ 260.481842][ T8481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.492066][ T8481] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.504913][ T8481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.518019][ T8481] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.529431][ T8481] 60483 total pagecache pages [ 260.534216][ T8481] 0 pages in swap cache [ 260.544753][ T8481] Free swap = 124996kB [ 260.549334][ T8481] Total swap = 124996kB [ 260.553737][ T8481] 2097051 pages RAM [ 260.561108][ T8481] 0 pages HighMem/MovableOnly [ 260.581540][ T8481] 415222 pages reserved [ 260.590239][ T8481] 0 pages cma reserved [ 261.233156][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.241519][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.267430][ T8530] batman_adv: batadv0: Interface deactivated: vlan1 [ 261.307337][ T8530] batman_adv: batadv0: Removing interface: vlan1 [ 261.361683][ T8537] syz.4.1511[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 261.454015][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.566339][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.575005][ T8536] bridge0: port 1(bridge_slave_0) entered listening state [ 261.644543][ T8536] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.934777][ T8557] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1520'. [ 261.993056][ T8557] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1520'. [ 262.102794][ T8567] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1524'. [ 262.455490][ T8573] device dummy0 entered promiscuous mode [ 262.492605][ T8573] team0: Port device dummy0 added [ 263.384228][ T8622] validate_nla: 8 callbacks suppressed [ 263.384245][ T8622] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 263.463247][ T8622] device dummy0 entered promiscuous mode [ 263.476776][ T8622] team0: Port device dummy0 added [ 263.754504][ T8635] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1548'. [ 263.789417][ T8633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.847825][ T8633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.912845][ T8633] batman_adv: batadv0: Interface deactivated: vlan1 [ 263.969480][ T8633] batman_adv: batadv0: Removing interface: vlan1 [ 264.268924][ T8650] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1556'. [ 264.672283][ T8665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1562'. [ 264.806549][ T8668] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1561'. [ 265.107595][ T8680] netlink: 'syz.4.1568': attribute type 21 has an invalid length. [ 265.127391][ T8680] netlink: 'syz.4.1568': attribute type 11 has an invalid length. [ 265.157770][ T8685] netlink: 'syz.4.1568': attribute type 10 has an invalid length. [ 265.497151][ T8696] netlink: 'syz.3.1575': attribute type 10 has an invalid length. [ 265.526229][ T8696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1575'. [ 265.580448][ T8696] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 266.396195][ T8717] netlink: 'syz.4.1582': attribute type 21 has an invalid length. [ 267.229706][ T8747] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1594'. [ 267.266443][ T8748] netlink: 'syz.0.1595': attribute type 11 has an invalid length. [ 267.306894][ T8748] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1595'. [ 267.360218][ T8751] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 267.361446][ T8746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.697235][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 267.862914][ T8764] netlink: 'syz.0.1599': attribute type 3 has an invalid length. [ 267.963153][ T8764] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1599'. [ 268.795615][ T8781] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 268.835835][ T8781] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1604'. [ 268.860286][ T8781] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 269.881154][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1608'. [ 270.029962][ T8805] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1609'. [ 270.443832][ T8814] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1612'. [ 271.792780][ T49] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 272.037833][ T8849] FAULT_INJECTION: forcing a failure. [ 272.037833][ T8849] name failslab, interval 1, probability 0, space 0, times 0 [ 272.089899][ T8849] CPU: 0 PID: 8849 Comm: syz.4.1627 Not tainted syzkaller #0 [ 272.097324][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.107383][ T8849] Call Trace: [ 272.110657][ T8849] [ 272.113584][ T8849] dump_stack_lvl+0x188/0x24e [ 272.118270][ T8849] ? show_regs_print_info+0x12/0x12 [ 272.123471][ T8849] ? load_image+0x410/0x410 [ 272.127974][ T8849] ? __local_bh_enable_ip+0x136/0x1c0 [ 272.133365][ T8849] ? lockdep_hardirqs_on+0x94/0x140 [ 272.138601][ T8849] ? __local_bh_enable_ip+0x136/0x1c0 [ 272.144007][ T8849] should_fail_ex+0x390/0x4c0 [ 272.148726][ T8849] should_failslab+0x5/0x20 [ 272.153245][ T8849] slab_pre_alloc_hook+0x59/0x300 [ 272.158277][ T8849] ? sctp_get_port_local+0xd22/0x1500 [ 272.163660][ T8849] ? sctp_add_bind_addr+0x89/0x350 [ 272.168785][ T8849] __kmem_cache_alloc_node+0x4f/0x270 [ 272.174168][ T8849] ? sctp_add_bind_addr+0x89/0x350 [ 272.179290][ T8849] kmalloc_trace+0x26/0xe0 [ 272.183723][ T8849] sctp_add_bind_addr+0x89/0x350 [ 272.188671][ T8849] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 272.194151][ T8849] sctp_do_bind+0x57e/0x8f0 [ 272.198700][ T8849] sctp_connect_new_asoc+0x266/0x6a0 [ 272.204017][ T8849] ? __sctp_connect+0xd80/0xd80 [ 272.208878][ T8849] ? __local_bh_enable_ip+0x136/0x1c0 [ 272.214283][ T8849] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 272.219838][ T8849] ? security_sctp_bind_connect+0x85/0xb0 [ 272.225581][ T8849] sctp_sendmsg+0x1686/0x2940 [ 272.230310][ T8849] ? sctp_getsockopt+0x8a0/0x8a0 [ 272.235259][ T8849] ? __might_fault+0xa6/0x120 [ 272.239946][ T8849] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 272.246373][ T8849] ? aa_sock_msg_perm+0x94/0x150 [ 272.251339][ T8849] ? inet_sendmsg+0xca/0x2a0 [ 272.255935][ T8849] ? inet_send_prepare+0x250/0x250 [ 272.261057][ T8849] ____sys_sendmsg+0x5ed/0x9a0 [ 272.265854][ T8849] ? __sys_sendmsg_sock+0x30/0x30 [ 272.270889][ T8849] ? __import_iovec+0x306/0x510 [ 272.275774][ T8849] ? import_iovec+0x6f/0xa0 [ 272.280298][ T8849] ___sys_sendmsg+0x2a2/0x360 [ 272.285010][ T8849] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.289844][ T8849] ? __lock_acquire+0x7c40/0x7c40 [ 272.294938][ T8849] __se_sys_sendmsg+0x1c3/0x2b0 [ 272.299812][ T8849] ? __x64_sys_sendmsg+0x80/0x80 [ 272.304802][ T8849] ? lockdep_hardirqs_on+0x94/0x140 [ 272.310015][ T8849] do_syscall_64+0x4c/0xa0 [ 272.314440][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 272.319129][ T8849] ? clear_bhb_loop+0x60/0xb0 [ 272.323818][ T8849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.329718][ T8849] RIP: 0033:0x7f6f40b9e0d9 [ 272.334141][ T8849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.353756][ T8849] RSP: 002b:00007f6f41af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.362178][ T8849] RAX: ffffffffffffffda RBX: 00007f6f40e25fa0 RCX: 00007f6f40b9e0d9 [ 272.370154][ T8849] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 272.378130][ T8849] RBP: 00007f6f41af6090 R08: 0000000000000000 R09: 0000000000000000 [ 272.386106][ T8849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.394078][ T8849] R13: 00007f6f40e26038 R14: 00007f6f40e25fa0 R15: 00007ffff674e7d8 [ 272.402092][ T8849] [ 272.429571][ T8861] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1629'. [ 273.304817][ T8861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.333201][ T8861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.357918][ T8861] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 273.377941][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.390904][ T8861] bond0 (unregistering): Released all slaves [ 273.419465][ T8862] netlink: 'syz.3.1631': attribute type 10 has an invalid length. [ 273.868838][ T8887] device bridge_slave_1 left promiscuous mode [ 273.876549][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.958747][ T8887] device bridge_slave_0 left promiscuous mode [ 273.965185][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.335652][ T8896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.344712][ T8896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.374761][ T8896] batman_adv: batadv0: Interface deactivated: vlan1 [ 274.394723][ T8896] batman_adv: batadv0: Removing interface: vlan1 [ 275.295581][ T8906] netlink: 'syz.4.1646': attribute type 2 has an invalid length. [ 275.317157][ T8906] netlink: 'syz.4.1646': attribute type 8 has an invalid length. [ 275.325045][ T8906] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1646'. [ 275.597601][ T8924] FAULT_INJECTION: forcing a failure. [ 275.597601][ T8924] name failslab, interval 1, probability 0, space 0, times 0 [ 275.636150][ T8924] CPU: 1 PID: 8924 Comm: syz.3.1653 Not tainted syzkaller #0 [ 275.643569][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.653636][ T8924] Call Trace: [ 275.656925][ T8924] [ 275.659862][ T8924] dump_stack_lvl+0x188/0x24e [ 275.664561][ T8924] ? show_regs_print_info+0x12/0x12 [ 275.669783][ T8924] ? load_image+0x410/0x410 [ 275.674321][ T8924] ? __might_sleep+0xd0/0xd0 [ 275.678918][ T8924] ? __lock_acquire+0x7c40/0x7c40 [ 275.683957][ T8924] ? verify_lock_unused+0x140/0x140 [ 275.689173][ T8924] should_fail_ex+0x390/0x4c0 [ 275.693870][ T8924] should_failslab+0x5/0x20 [ 275.698383][ T8924] slab_pre_alloc_hook+0x59/0x300 [ 275.703434][ T8924] ? __get_vm_area_node+0x122/0x330 [ 275.708644][ T8924] __kmem_cache_alloc_node+0x4f/0x270 [ 275.714028][ T8924] ? __get_vm_area_node+0x122/0x330 [ 275.719243][ T8924] kmalloc_node_trace+0x22/0xe0 [ 275.724114][ T8924] __get_vm_area_node+0x122/0x330 [ 275.729155][ T8924] ? __local_bh_enable_ip+0x136/0x1c0 [ 275.734576][ T8924] __vmalloc_node_range+0x357/0x1380 [ 275.739864][ T8924] ? netlink_sendmsg+0x5ec/0xbd0 [ 275.744805][ T8924] ? netlink_insert+0x28d/0x13b0 [ 275.749741][ T8924] ? free_vm_area+0x50/0x50 [ 275.754243][ T8924] ? netlink_sendmsg+0x5ec/0xbd0 [ 275.759182][ T8924] vmalloc+0x75/0x80 [ 275.763069][ T8924] ? netlink_sendmsg+0x5ec/0xbd0 [ 275.768005][ T8924] netlink_sendmsg+0x5ec/0xbd0 [ 275.772768][ T8924] ? netlink_getsockopt+0x550/0x550 [ 275.777998][ T8924] ? apparmor_socket_sendmsg+0x8a/0x330 [ 275.783540][ T8924] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 275.788825][ T8924] ? security_socket_sendmsg+0x7c/0xa0 [ 275.794282][ T8924] sock_write_iter+0x2d5/0x3e0 [ 275.799038][ T8924] ? sock_read_iter+0x3a0/0x3a0 [ 275.803885][ T8924] ? common_file_perm+0x171/0x1c0 [ 275.808910][ T8924] vfs_write+0x482/0x9a0 [ 275.813154][ T8924] ? file_end_write+0x250/0x250 [ 275.818001][ T8924] ? __fget_files+0x3fc/0x460 [ 275.822681][ T8924] ? __fdget_pos+0x1d4/0x360 [ 275.827265][ T8924] ? ksys_write+0x70/0x260 [ 275.831674][ T8924] ksys_write+0x14d/0x260 [ 275.836000][ T8924] ? __ia32_sys_read+0x80/0x80 [ 275.840758][ T8924] ? lockdep_hardirqs_on+0x94/0x140 [ 275.845969][ T8924] do_syscall_64+0x4c/0xa0 [ 275.850379][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 275.855054][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 275.859730][ T8924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.865612][ T8924] RIP: 0033:0x7fde0e99e0d9 [ 275.870020][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.889626][ T8924] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 275.898037][ T8924] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 275.906000][ T8924] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 275.913968][ T8924] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 275.921935][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.929904][ T8924] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 275.937884][ T8924] [ 275.998906][ T8932] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 276.018272][ T8924] syz.3.1653: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 276.027296][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1657'. [ 276.041983][ T8924] CPU: 1 PID: 8924 Comm: syz.3.1653 Not tainted syzkaller #0 [ 276.049382][ T8924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.056387][ T8932] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 276.059429][ T8924] Call Trace: [ 276.059441][ T8924] [ 276.059448][ T8924] dump_stack_lvl+0x188/0x24e [ 276.059476][ T8924] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 276.059496][ T8924] ? show_regs_print_info+0x12/0x12 [ 276.059517][ T8924] ? load_image+0x410/0x410 [ 276.059539][ T8924] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 276.059560][ T8924] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 276.059582][ T8924] warn_alloc+0x242/0x330 [ 276.059604][ T8924] ? __get_vm_area_node+0x122/0x330 [ 276.059627][ T8924] ? zone_watermark_ok_safe+0x270/0x270 [ 276.059650][ T8924] ? rcu_is_watching+0x11/0xa0 [ 276.059679][ T8924] ? __get_vm_area_node+0x318/0x330 [ 276.059700][ T8924] ? __local_bh_enable_ip+0x136/0x1c0 [ 276.059723][ T8924] __vmalloc_node_range+0x37c/0x1380 [ 276.150351][ T8924] ? netlink_insert+0x28d/0x13b0 [ 276.155300][ T8924] ? free_vm_area+0x50/0x50 [ 276.159805][ T8924] ? netlink_sendmsg+0x5ec/0xbd0 [ 276.164739][ T8924] vmalloc+0x75/0x80 [ 276.168628][ T8924] ? netlink_sendmsg+0x5ec/0xbd0 [ 276.173560][ T8924] netlink_sendmsg+0x5ec/0xbd0 [ 276.178324][ T8924] ? netlink_getsockopt+0x550/0x550 [ 276.183520][ T8924] ? apparmor_socket_sendmsg+0x8a/0x330 [ 276.189060][ T8924] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 276.194335][ T8924] ? security_socket_sendmsg+0x7c/0xa0 [ 276.199788][ T8924] sock_write_iter+0x2d5/0x3e0 [ 276.204541][ T8924] ? sock_read_iter+0x3a0/0x3a0 [ 276.209390][ T8924] ? common_file_perm+0x171/0x1c0 [ 276.214416][ T8924] vfs_write+0x482/0x9a0 [ 276.218683][ T8924] ? file_end_write+0x250/0x250 [ 276.223530][ T8924] ? __fget_files+0x3fc/0x460 [ 276.228208][ T8924] ? __fdget_pos+0x1d4/0x360 [ 276.232793][ T8924] ? ksys_write+0x70/0x260 [ 276.237208][ T8924] ksys_write+0x14d/0x260 [ 276.241533][ T8924] ? __ia32_sys_read+0x80/0x80 [ 276.246293][ T8924] ? lockdep_hardirqs_on+0x94/0x140 [ 276.251491][ T8924] do_syscall_64+0x4c/0xa0 [ 276.255900][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 276.260575][ T8924] ? clear_bhb_loop+0x60/0xb0 [ 276.265243][ T8924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 276.271127][ T8924] RIP: 0033:0x7fde0e99e0d9 [ 276.275538][ T8924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.295134][ T8924] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.303539][ T8924] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 276.311505][ T8924] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 276.319465][ T8924] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 276.327428][ T8924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.335389][ T8924] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 276.343365][ T8924] [ 276.356864][ T8924] Mem-Info: [ 276.367101][ T8924] active_anon:5907 inactive_anon:0 isolated_anon:0 [ 276.367101][ T8924] active_file:19117 inactive_file:40031 isolated_file:0 [ 276.367101][ T8924] unevictable:768 dirty:197 writeback:0 [ 276.367101][ T8924] slab_reclaimable:20931 slab_unreclaimable:95096 [ 276.367101][ T8924] mapped:29529 shmem:1361 pagetables:617 [ 276.367101][ T8924] sec_pagetables:0 bounce:0 [ 276.367101][ T8924] kernel_misc_reclaimable:0 [ 276.367101][ T8924] free:1319660 free_pcp:11741 free_cma:0 [ 276.414874][ T8924] Node 0 active_anon:23828kB inactive_anon:0kB active_file:76468kB inactive_file:159920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118116kB dirty:788kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10260kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no [ 276.452375][ T8924] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 276.535231][ T8924] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.594439][ T8924] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 276.610866][ T8924] Node 0 DMA32 free:1365844kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23628kB inactive_anon:0kB active_file:76468kB inactive_file:159920kB unevictable:1536kB writepending:788kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:29108kB local_pcp:12932kB free_cma:0kB [ 276.641659][ T8924] lowmem_reserve[]: 0 0 1 1 1 [ 276.646934][ T8924] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 276.655934][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 276.676700][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 276.685917][ T8924] Node 1 Normal free:3897436kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:6784kB free_cma:0kB [ 276.731456][ T8948] netlink: 'syz.2.1660': attribute type 3 has an invalid length. [ 276.739806][ T8948] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1660'. [ 276.755722][ T8924] lowmem_reserve[]: 0 0 0 0 0 [ 276.760484][ T8924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.777925][ T49] Bluetooth: Frame is too long (len 149, expected len 4) [ 276.834329][ T8924] Node 0 DMA32: 1521*4kB (UM) 1295*8kB (UM) 1790*16kB (UME) 854*32kB (UME) 660*64kB (UME) 391*128kB (UME) 315*256kB (UM) 240*512kB (UM) 198*1024kB (UME) 4*2048kB (UM) 192*4096kB (M) = 1365596kB [ 276.856392][ T8924] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.868786][ T8924] Node 1 Normal: 157*4kB (UME) 57*8kB (UME) 32*16kB (UME) 29*32kB (UME) 18*64kB (UME) 8*128kB (UE) 4*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3897436kB [ 276.894481][ T8924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.924653][ T8924] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.999200][ T8924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.010131][ T8924] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 277.020711][ T8924] 60509 total pagecache pages [ 277.025409][ T8924] 0 pages in swap cache [ 277.040391][ T8924] Free swap = 124996kB [ 277.044574][ T8924] Total swap = 124996kB [ 277.065601][ T8924] 2097051 pages RAM [ 277.088041][ T8924] 0 pages HighMem/MovableOnly [ 277.092744][ T8924] 415222 pages reserved [ 277.147799][ T8924] 0 pages cma reserved [ 277.259290][ T8965] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1668'. [ 277.325781][ T8965] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 277.568033][ T8981] netlink: 'syz.3.1675': attribute type 5 has an invalid length. [ 277.587253][ T8981] netlink: 'syz.3.1675': attribute type 29 has an invalid length. [ 277.595435][ T8981] netlink: 'syz.3.1675': attribute type 29 has an invalid length. [ 277.676099][ T8981] netlink: 'syz.3.1675': attribute type 29 has an invalid length. [ 277.937346][ T8987] netlink: 'syz.4.1676': attribute type 3 has an invalid length. [ 277.969882][ T8987] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1676'. [ 277.970410][ T8994] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 278.013369][ T8994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1680'. [ 278.037918][ T8994] device team0 entered promiscuous mode [ 278.064174][ T8994] device team_slave_0 entered promiscuous mode [ 278.070766][ T8994] device team_slave_1 entered promiscuous mode [ 278.077296][ T8994] device macvlan0 entered promiscuous mode [ 278.084065][ T8994] bridge0: port 2(team0) entered blocking state [ 278.090780][ T8994] bridge0: port 2(team0) entered disabled state [ 280.696402][ T49] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 282.681618][ T9094] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1719'. [ 282.840002][ T9102] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 284.263402][ T9141] netlink: 'syz.0.1738': attribute type 4 has an invalid length. [ 284.298655][ T9141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1738'. [ 284.468478][ T9147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1741'. [ 284.506834][ T9153] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 284.566797][ T9153] device dummy0 entered promiscuous mode [ 284.581888][ T9153] team0: Port device dummy0 added [ 284.617286][ T9155] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1745'. [ 285.137855][ T9180] netlink: 'syz.0.1754': attribute type 29 has an invalid length. [ 285.156167][ T9180] netlink: 'syz.0.1754': attribute type 29 has an invalid length. [ 285.201650][ T9181] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 285.747079][ T9181] device vlan0 entered promiscuous mode [ 285.839777][ T9181] team0: Port device vlan0 added [ 285.853858][ T9180] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 285.885076][ T9180] netlink: 'syz.0.1754': attribute type 8 has an invalid length. [ 285.902796][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1754'. [ 285.916839][ T9183] netlink: 'syz.0.1754': attribute type 2 has an invalid length. [ 285.924579][ T9183] netlink: 'syz.0.1754': attribute type 8 has an invalid length. [ 285.929797][ T9195] FAULT_INJECTION: forcing a failure. [ 285.929797][ T9195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.947784][ T9195] CPU: 1 PID: 9195 Comm: syz.3.1758 Not tainted syzkaller #0 [ 285.955185][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.965245][ T9195] Call Trace: [ 285.968532][ T9195] [ 285.971468][ T9195] dump_stack_lvl+0x188/0x24e [ 285.976168][ T9195] ? show_regs_print_info+0x12/0x12 [ 285.981386][ T9195] ? load_image+0x410/0x410 [ 285.985906][ T9195] ? __lock_acquire+0x7c40/0x7c40 [ 285.990952][ T9195] should_fail_ex+0x390/0x4c0 [ 285.995651][ T9195] _copy_from_user+0x2c/0x170 [ 285.998113][ T9183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1754'. [ 286.000327][ T9195] __sys_bpf+0x2ea/0x780 [ 286.013584][ T9195] ? bpf_link_show_fdinfo+0x380/0x380 [ 286.018972][ T9195] ? lock_chain_count+0x20/0x20 [ 286.023824][ T9195] __x64_sys_bpf+0x78/0x90 [ 286.028235][ T9195] do_syscall_64+0x4c/0xa0 [ 286.032645][ T9195] ? clear_bhb_loop+0x60/0xb0 [ 286.037312][ T9195] ? clear_bhb_loop+0x60/0xb0 [ 286.041977][ T9195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.047860][ T9195] RIP: 0033:0x7fde0e99e0d9 [ 286.052263][ T9195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.071857][ T9195] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 286.080256][ T9195] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 286.088220][ T9195] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 286.096185][ T9195] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 286.104150][ T9195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.112113][ T9195] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 286.120094][ T9195] [ 286.602073][ T9219] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1769'. [ 286.634796][ T9219] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 286.643632][ T9221] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1768'. [ 286.662375][ T9221] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 287.873898][ T9254] validate_nla: 4 callbacks suppressed [ 287.873914][ T9254] netlink: 'syz.3.1781': attribute type 10 has an invalid length. [ 287.888860][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1781'. [ 287.898552][ T9254] bridge0: port 2(team0) entered blocking state [ 287.907061][ T9254] bridge0: port 2(team0) entered disabled state [ 287.915636][ T9254] bridge0: port 2(team0) entered blocking state [ 287.922074][ T9254] bridge0: port 2(team0) entered listening state [ 288.169794][ T9261] netlink: 'syz.0.1784': attribute type 21 has an invalid length. [ 288.180842][ T9261] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1784'. [ 288.191680][ T9261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1784'. [ 288.263209][ T9271] netlink: 'syz.1.1786': attribute type 10 has an invalid length. [ 288.274246][ T9271] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1786'. [ 288.317269][ T9275] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1787'. [ 288.336674][ T9275] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 289.535061][ T9304] netlink: 'syz.4.1798': attribute type 10 has an invalid length. [ 289.558124][ T9304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1798'. [ 289.570543][ T9304] device team0 entered promiscuous mode [ 289.576707][ T9304] device team_slave_0 entered promiscuous mode [ 289.589067][ T9304] device team_slave_1 entered promiscuous mode [ 289.595372][ T9304] device hsr_slave_0 entered promiscuous mode [ 289.609305][ T9304] bridge0: port 2(team0) entered blocking state [ 289.616261][ T9304] bridge0: port 2(team0) entered disabled state [ 289.625450][ T9305] netlink: 'syz.2.1796': attribute type 10 has an invalid length. [ 290.368649][ T9319] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 290.388859][ T9319] device vlan0 entered promiscuous mode [ 290.505575][ T9319] team0: Port device vlan0 added [ 290.524522][ T9321] netlink: 'syz.4.1804': attribute type 10 has an invalid length. [ 290.538553][ T9324] delete_channel: no stack [ 291.255327][ T9343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1812'. [ 291.957792][ T9366] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.1820'. [ 291.987910][ T9366] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 292.037262][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.044727][ C0] bridge0: topology change detected, propagating [ 294.523958][ T9374] netlink: 'syz.2.1824': attribute type 10 has an invalid length. [ 294.551005][ T9374] device vlan0 entered promiscuous mode [ 294.635266][ T9374] team0: Port device vlan0 added [ 294.647423][ T9377] netlink: 'syz.4.1823': attribute type 10 has an invalid length. [ 294.890293][ T9399] netlink: 'syz.4.1831': attribute type 21 has an invalid length. [ 295.162752][ T9406] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 295.217360][ T9406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1834'. [ 295.239681][ T9406] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 295.393160][ T9410] FAULT_INJECTION: forcing a failure. [ 295.393160][ T9410] name failslab, interval 1, probability 0, space 0, times 0 [ 295.416052][ T9410] CPU: 1 PID: 9410 Comm: syz.0.1836 Not tainted syzkaller #0 [ 295.423441][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.433487][ T9410] Call Trace: [ 295.436816][ T9410] [ 295.439739][ T9410] dump_stack_lvl+0x188/0x24e [ 295.444414][ T9410] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 295.450563][ T9410] ? show_regs_print_info+0x12/0x12 [ 295.455757][ T9410] ? load_image+0x410/0x410 [ 295.460270][ T9410] should_fail_ex+0x390/0x4c0 [ 295.464943][ T9410] should_failslab+0x5/0x20 [ 295.469436][ T9410] slab_pre_alloc_hook+0x59/0x300 [ 295.474451][ T9410] ? __get_vm_area_node+0x122/0x330 [ 295.479639][ T9410] __kmem_cache_alloc_node+0x4f/0x270 [ 295.485004][ T9410] ? __get_vm_area_node+0x122/0x330 [ 295.490192][ T9410] kmalloc_node_trace+0x22/0xe0 [ 295.495042][ T9410] __get_vm_area_node+0x122/0x330 [ 295.500059][ T9410] ? __local_bh_enable_ip+0x136/0x1c0 [ 295.505424][ T9410] __vmalloc_node_range+0x357/0x1380 [ 295.510703][ T9410] ? netlink_sendmsg+0x5ec/0xbd0 [ 295.515645][ T9410] ? netlink_insert+0x28d/0x13b0 [ 295.520588][ T9410] ? free_vm_area+0x50/0x50 [ 295.525088][ T9410] ? netlink_sendmsg+0x5ec/0xbd0 [ 295.530018][ T9410] vmalloc+0x75/0x80 [ 295.533904][ T9410] ? netlink_sendmsg+0x5ec/0xbd0 [ 295.538835][ T9410] netlink_sendmsg+0x5ec/0xbd0 [ 295.543600][ T9410] ? netlink_getsockopt+0x550/0x550 [ 295.548795][ T9410] ? apparmor_socket_sendmsg+0x8a/0x330 [ 295.554335][ T9410] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 295.559609][ T9410] ? security_socket_sendmsg+0x7c/0xa0 [ 295.565062][ T9410] sock_write_iter+0x2d5/0x3e0 [ 295.569818][ T9410] ? sock_read_iter+0x3a0/0x3a0 [ 295.574662][ T9410] ? common_file_perm+0x171/0x1c0 [ 295.579687][ T9410] vfs_write+0x482/0x9a0 [ 295.583929][ T9410] ? file_end_write+0x250/0x250 [ 295.588774][ T9410] ? __fget_files+0x3fc/0x460 [ 295.593450][ T9410] ? __fdget_pos+0x1d4/0x360 [ 295.598032][ T9410] ? ksys_write+0x70/0x260 [ 295.602440][ T9410] ksys_write+0x14d/0x260 [ 295.606766][ T9410] ? __ia32_sys_read+0x80/0x80 [ 295.611525][ T9410] ? syscall_enter_from_user_mode+0x2a/0x80 [ 295.617411][ T9410] do_syscall_64+0x4c/0xa0 [ 295.621820][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 295.626492][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 295.631163][ T9410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.637055][ T9410] RIP: 0033:0x7f80de59e0d9 [ 295.641459][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.661054][ T9410] RSP: 002b:00007f80df547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.669456][ T9410] RAX: ffffffffffffffda RBX: 00007f80de825fa0 RCX: 00007f80de59e0d9 [ 295.677418][ T9410] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007 [ 295.685380][ T9410] RBP: 00007f80df547090 R08: 0000000000000000 R09: 0000000000000000 [ 295.693338][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.701300][ T9410] R13: 00007f80de826038 R14: 00007f80de825fa0 R15: 00007ffec77223f8 [ 295.709273][ T9410] [ 295.727799][ T9410] syz.0.1836: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 295.744361][ T9410] CPU: 1 PID: 9410 Comm: syz.0.1836 Not tainted syzkaller #0 [ 295.751755][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.761818][ T9410] Call Trace: [ 295.765101][ T9410] [ 295.768038][ T9410] dump_stack_lvl+0x188/0x24e [ 295.772732][ T9410] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 295.779157][ T9410] ? show_regs_print_info+0x12/0x12 [ 295.784375][ T9410] ? load_image+0x410/0x410 [ 295.788893][ T9410] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 295.795318][ T9410] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 295.801828][ T9410] warn_alloc+0x242/0x330 [ 295.806174][ T9410] ? __get_vm_area_node+0x122/0x330 [ 295.811386][ T9410] ? zone_watermark_ok_safe+0x270/0x270 [ 295.816957][ T9410] ? rcu_is_watching+0x11/0xa0 [ 295.821737][ T9410] ? __get_vm_area_node+0x318/0x330 [ 295.826944][ T9410] ? __local_bh_enable_ip+0x136/0x1c0 [ 295.832327][ T9410] __vmalloc_node_range+0x37c/0x1380 [ 295.837639][ T9410] ? netlink_insert+0x28d/0x13b0 [ 295.842600][ T9410] ? free_vm_area+0x50/0x50 [ 295.847118][ T9410] ? netlink_sendmsg+0x5ec/0xbd0 [ 295.852082][ T9410] vmalloc+0x75/0x80 [ 295.855988][ T9410] ? netlink_sendmsg+0x5ec/0xbd0 [ 295.860936][ T9410] netlink_sendmsg+0x5ec/0xbd0 [ 295.865717][ T9410] ? netlink_getsockopt+0x550/0x550 [ 295.870930][ T9410] ? apparmor_socket_sendmsg+0x8a/0x330 [ 295.876490][ T9410] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 295.881780][ T9410] ? security_socket_sendmsg+0x7c/0xa0 [ 295.887254][ T9410] sock_write_iter+0x2d5/0x3e0 [ 295.892024][ T9410] ? sock_read_iter+0x3a0/0x3a0 [ 295.896897][ T9410] ? common_file_perm+0x171/0x1c0 [ 295.901937][ T9410] vfs_write+0x482/0x9a0 [ 295.906201][ T9410] ? file_end_write+0x250/0x250 [ 295.911074][ T9410] ? __fget_files+0x3fc/0x460 [ 295.915777][ T9410] ? __fdget_pos+0x1d4/0x360 [ 295.920382][ T9410] ? ksys_write+0x70/0x260 [ 295.924819][ T9410] ksys_write+0x14d/0x260 [ 295.929175][ T9410] ? __ia32_sys_read+0x80/0x80 [ 295.933958][ T9410] ? syscall_enter_from_user_mode+0x2a/0x80 [ 295.939867][ T9410] do_syscall_64+0x4c/0xa0 [ 295.944295][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 295.948984][ T9410] ? clear_bhb_loop+0x60/0xb0 [ 295.953670][ T9410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.959572][ T9410] RIP: 0033:0x7f80de59e0d9 [ 295.963990][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.983602][ T9410] RSP: 002b:00007f80df547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.992026][ T9410] RAX: ffffffffffffffda RBX: 00007f80de825fa0 RCX: 00007f80de59e0d9 [ 296.000006][ T9410] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000007 [ 296.007982][ T9410] RBP: 00007f80df547090 R08: 0000000000000000 R09: 0000000000000000 [ 296.015957][ T9410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.023931][ T9410] R13: 00007f80de826038 R14: 00007f80de825fa0 R15: 00007ffec77223f8 [ 296.031921][ T9410] [ 296.063074][ T9410] Mem-Info: [ 296.069145][ T9410] active_anon:5928 inactive_anon:0 isolated_anon:0 [ 296.069145][ T9410] active_file:19134 inactive_file:40042 isolated_file:0 [ 296.069145][ T9410] unevictable:768 dirty:172 writeback:0 [ 296.069145][ T9410] slab_reclaimable:20911 slab_unreclaimable:95181 [ 296.069145][ T9410] mapped:29561 shmem:1361 pagetables:604 [ 296.069145][ T9410] sec_pagetables:0 bounce:0 [ 296.069145][ T9410] kernel_misc_reclaimable:0 [ 296.069145][ T9410] free:1323360 free_pcp:7700 free_cma:0 [ 296.125402][ T9410] Node 0 active_anon:23812kB inactive_anon:0kB active_file:76536kB inactive_file:159964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118244kB dirty:688kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10408kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no [ 296.178853][ T9410] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 296.210653][ T9410] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.240979][ T9410] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 296.247046][ T9410] Node 0 DMA32 free:1380392kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23812kB inactive_anon:0kB active_file:76536kB inactive_file:159964kB unevictable:1536kB writepending:688kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:14228kB local_pcp:4016kB free_cma:0kB [ 296.281221][ T9410] lowmem_reserve[]: 0 0 1 1 1 [ 296.287187][ T9410] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.314873][ T9410] lowmem_reserve[]: 0 0 0 0 0 [ 296.319887][ T9410] Node 1 Normal free:3897436kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17304kB local_pcp:6784kB free_cma:0kB [ 296.350250][ T9410] lowmem_reserve[]: 0 0 0 0 0 [ 296.355069][ T9410] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.368392][ T9410] Node 0 DMA32: 1242*4kB (M) 1206*8kB (UME) 1097*16kB (UME) 1087*32kB (UME) 721*64kB (UME) 415*128kB (UME) 314*256kB (UM) 248*512kB (UM) 201*1024kB (UME) 5*2048kB (UM) 193*4096kB (M) = 1380168kB [ 296.391355][ T9410] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.404887][ T9410] Node 1 Normal: 157*4kB (UME) 57*8kB (UME) 32*16kB (UME) 29*32kB (UME) 18*64kB (UME) 8*128kB (UE) 4*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3897436kB [ 296.424450][ T9410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.434477][ T9410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.444312][ T9410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.454417][ T9410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.464015][ T9410] 60537 total pagecache pages [ 296.469184][ T9410] 0 pages in swap cache [ 296.473422][ T9410] Free swap = 124996kB [ 296.477944][ T9410] Total swap = 124996kB [ 296.482396][ T9410] 2097051 pages RAM [ 296.486545][ T9410] 0 pages HighMem/MovableOnly [ 296.491299][ T9410] 415222 pages reserved [ 296.500390][ T9410] 0 pages cma reserved [ 297.198376][ T9419] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 298.481909][ T9445] netlink: 'syz.1.1847': attribute type 11 has an invalid length. [ 298.501526][ T9445] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1847'. [ 298.545236][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.850438][ T9456] can: request_module (can-proto-3) failed. [ 299.023511][ T9464] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1853'. [ 299.033507][ T9464] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 300.476489][ T9468] netlink: 'syz.1.1854': attribute type 10 has an invalid length. [ 300.488764][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.821036][ T9474] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 300.851076][ T9474] device geneve0 entered promiscuous mode [ 301.510053][ T9497] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1863'. [ 301.557975][ T9501] netlink: 'syz.3.1865': attribute type 10 has an invalid length. [ 301.606211][ T9501] bridge0: port 2(team0) entered disabled state [ 301.615745][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.425813][ T9508] netlink: 'syz.1.1869': attribute type 10 has an invalid length. [ 303.954243][ T9554] netlink: 'syz.0.1883': attribute type 21 has an invalid length. [ 303.977001][ T9554] netlink: 'syz.0.1883': attribute type 6 has an invalid length. [ 304.005817][ T9554] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1883'. [ 304.287166][ T9563] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 304.554127][ T9571] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1889'. [ 305.029666][ T9566] netlink: 'syz.0.1887': attribute type 10 has an invalid length. [ 305.119248][ T9571] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 305.140038][ T9571] CPU: 1 PID: 9571 Comm: syz.3.1889 Not tainted syzkaller #0 [ 305.147445][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.157514][ T9571] Call Trace: [ 305.160817][ T9571] [ 305.163764][ T9571] dump_stack_lvl+0x188/0x24e [ 305.168466][ T9571] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 305.174644][ T9571] ? show_regs_print_info+0x12/0x12 [ 305.179864][ T9571] ? load_image+0x410/0x410 [ 305.184412][ T9571] ? sysfs_warn_dup+0x61/0xa0 [ 305.189115][ T9571] sysfs_warn_dup+0x8a/0xa0 [ 305.193639][ T9571] sysfs_do_create_link_sd+0xc0/0x110 [ 305.199037][ T9571] device_add+0x83b/0x1050 [ 305.203478][ T9571] wiphy_register+0x1d8b/0x2aa0 [ 305.208359][ T9571] ? cfg80211_event_work+0x40/0x40 [ 305.213922][ T9571] ? minstrel_ht_alloc+0x894/0xa20 [ 305.219047][ T9571] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 305.225109][ T9571] ieee80211_register_hw+0x2d48/0x39f0 [ 305.230564][ T9571] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 305.236724][ T9571] ? ieee80211_register_hw+0xee1/0x39f0 [ 305.242269][ T9571] ? ieee80211_register_hw+0xee1/0x39f0 [ 305.247822][ T9571] ? ieee80211_tasklet_handler+0x20/0x20 [ 305.253447][ T9571] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 305.259339][ T9571] ? __debug_object_init+0xed/0x440 [ 305.264539][ T9571] ? memset+0x1e/0x40 [ 305.268516][ T9571] ? __hrtimer_init+0x189/0x270 [ 305.273361][ T9571] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 305.279092][ T9571] ? memcpy+0x3c/0x60 [ 305.283072][ T9571] hwsim_new_radio_nl+0xab7/0xc90 [ 305.288106][ T9571] genl_family_rcv_msg_doit+0x22f/0x350 [ 305.293653][ T9571] ? end_current_label_crit_section+0x170/0x170 [ 305.299897][ T9571] ? lockdep_hardirqs_on+0x94/0x140 [ 305.305090][ T9571] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 305.310988][ T9571] ? bpf_lsm_capable+0x5/0x10 [ 305.315658][ T9571] ? security_capable+0x85/0xb0 [ 305.320519][ T9571] genl_rcv_msg+0x601/0x790 [ 305.325024][ T9571] ? genl_bind+0x360/0x360 [ 305.329429][ T9571] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 305.335766][ T9571] netlink_rcv_skb+0x1ef/0x440 [ 305.340527][ T9571] ? genl_bind+0x360/0x360 [ 305.344933][ T9571] ? netlink_ack+0x1160/0x1160 [ 305.349705][ T9571] ? down_read+0x1a8/0x2d0 [ 305.354113][ T9571] genl_rcv+0x24/0x40 [ 305.358089][ T9571] netlink_unicast+0x7ad/0x920 [ 305.362855][ T9571] netlink_sendmsg+0x8ad/0xbd0 [ 305.367623][ T9571] ? netlink_getsockopt+0x550/0x550 [ 305.372822][ T9571] ? apparmor_socket_sendmsg+0x8a/0x330 [ 305.378366][ T9571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 305.383642][ T9571] ? security_socket_sendmsg+0x7c/0xa0 [ 305.389096][ T9571] ? netlink_getsockopt+0x550/0x550 [ 305.394294][ T9571] ____sys_sendmsg+0x5ed/0x9a0 [ 305.399065][ T9571] ? __sys_sendmsg_sock+0x30/0x30 [ 305.404082][ T9571] ? __import_iovec+0x306/0x510 [ 305.408935][ T9571] ? import_iovec+0x6f/0xa0 [ 305.413436][ T9571] ___sys_sendmsg+0x2a2/0x360 [ 305.418116][ T9571] ? __sys_sendmsg+0x2a0/0x2a0 [ 305.422897][ T9571] ? ktime_get+0x7b/0x270 [ 305.427242][ T9571] __se_sys_sendmsg+0x1c3/0x2b0 [ 305.432088][ T9571] ? ct_nmi_exit+0x145/0x1c0 [ 305.436669][ T9571] ? __x64_sys_sendmsg+0x80/0x80 [ 305.441613][ T9571] ? lockdep_hardirqs_on+0x94/0x140 [ 305.446803][ T9571] do_syscall_64+0x4c/0xa0 [ 305.451231][ T9571] ? clear_bhb_loop+0x60/0xb0 [ 305.455902][ T9571] ? clear_bhb_loop+0x60/0xb0 [ 305.460573][ T9571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.466460][ T9571] RIP: 0033:0x7fde0e99e0d9 [ 305.470874][ T9571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.490476][ T9571] RSP: 002b:00007fde0f7a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.498881][ T9571] RAX: ffffffffffffffda RBX: 00007fde0ec26270 RCX: 00007fde0e99e0d9 [ 305.506862][ T9571] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 305.514822][ T9571] RBP: 00007fde0ea35024 R08: 0000000000000000 R09: 0000000000000000 [ 305.522787][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.530750][ T9571] R13: 00007fde0ec26308 R14: 00007fde0ec26270 R15: 00007fffd3bbea88 [ 305.538724][ T9571] [ 307.047691][ T9614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1903'. [ 307.125463][ T9621] netlink: 'syz.3.1905': attribute type 25 has an invalid length. [ 307.175197][ T9621] netlink: 'syz.3.1905': attribute type 9 has an invalid length. [ 307.186982][ T9621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1905'. [ 307.212063][ T9624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1908'. [ 307.272256][ T9612] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1902'. [ 307.341962][ T9612] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 307.389170][ T9629] netlink: 'syz.0.1910': attribute type 29 has an invalid length. [ 307.429165][ T9629] netlink: 'syz.0.1910': attribute type 3 has an invalid length. [ 307.456237][ T9629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1910'. [ 308.342606][ T9662] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 308.370310][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1920'. [ 308.405975][ T9662] bridge0: port 2(team0) entered disabled state [ 308.448522][ T9662] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 308.514055][ T9664] netlink: 'syz.4.1922': attribute type 25 has an invalid length. [ 308.526476][ T9664] netlink: 'syz.4.1922': attribute type 9 has an invalid length. [ 308.552247][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1922'. [ 308.728820][ T9680] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1929'. [ 309.201951][ T9698] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.1935'. [ 309.226844][ T9698] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 309.667809][ T9715] netlink: 'syz.1.1941': attribute type 25 has an invalid length. [ 309.676323][ T9715] netlink: 'syz.1.1941': attribute type 9 has an invalid length. [ 309.684216][ T9715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1941'. [ 309.872976][ T9722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.899603][ T9722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.923683][ T9722] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 309.968717][ T9722] bond0 (unregistering): Released all slaves [ 310.278486][ T9736] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 311.859535][ T9805] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 312.137677][ T9821] netlink: 'syz.4.1985': attribute type 10 has an invalid length. [ 312.385787][ T9836] netlink: 'syz.0.1991': attribute type 4 has an invalid length. [ 312.407884][ T9836] __nla_validate_parse: 3 callbacks suppressed [ 312.407898][ T9836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1991'. [ 312.733121][ T9852] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 312.847878][ T9858] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2000'. [ 312.906080][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 313.017449][ T9856] netlink: 'syz.2.2001': attribute type 10 has an invalid length. [ 313.081034][ T9866] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.2004'. [ 313.444073][ T9885] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 313.452325][ T9885] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 313.462382][ T9885] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.2012'. [ 313.507751][ T9888] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 313.516064][ T9888] netlink: 'syz.3.2013': attribute type 29 has an invalid length. [ 313.572183][ T9888] netlink: 'syz.3.2013': attribute type 2 has an invalid length. [ 313.587794][ T9888] netlink: 'syz.3.2013': attribute type 8 has an invalid length. [ 313.596644][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2013'. [ 313.609401][ T9888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2013'. [ 313.825537][ T9896] FAULT_INJECTION: forcing a failure. [ 313.825537][ T9896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.851552][ T9896] CPU: 1 PID: 9896 Comm: syz.3.2017 Not tainted syzkaller #0 [ 313.858949][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 313.868998][ T9896] Call Trace: [ 313.872286][ T9896] [ 313.875226][ T9896] dump_stack_lvl+0x188/0x24e [ 313.879926][ T9896] ? show_regs_print_info+0x12/0x12 [ 313.885138][ T9896] ? load_image+0x410/0x410 [ 313.889661][ T9896] ? __lock_acquire+0x7c40/0x7c40 [ 313.894711][ T9896] should_fail_ex+0x390/0x4c0 [ 313.899414][ T9896] strncpy_from_user+0x32/0x340 [ 313.904288][ T9896] bpf_prog_load+0x200/0x1530 [ 313.908992][ T9896] ? map_freeze+0x390/0x390 [ 313.913509][ T9896] ? __might_fault+0xa6/0x120 [ 313.918216][ T9896] ? __might_fault+0xa6/0x120 [ 313.922906][ T9896] ? __might_fault+0xc2/0x120 [ 313.927587][ T9896] ? __might_fault+0xa6/0x120 [ 313.932264][ T9896] ? bpf_lsm_bpf+0x5/0x10 [ 313.936590][ T9896] ? security_bpf+0x7a/0xa0 [ 313.941114][ T9896] __sys_bpf+0x5b8/0x780 [ 313.945379][ T9896] ? bpf_link_show_fdinfo+0x380/0x380 [ 313.950777][ T9896] ? lock_chain_count+0x20/0x20 [ 313.955638][ T9896] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 313.961637][ T9896] __x64_sys_bpf+0x78/0x90 [ 313.966067][ T9896] do_syscall_64+0x4c/0xa0 [ 313.970496][ T9896] ? clear_bhb_loop+0x60/0xb0 [ 313.975184][ T9896] ? clear_bhb_loop+0x60/0xb0 [ 313.979883][ T9896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.985791][ T9896] RIP: 0033:0x7fde0e99e0d9 [ 313.990220][ T9896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.009831][ T9896] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.018236][ T9896] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 314.026201][ T9896] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 314.034161][ T9896] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 314.042122][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.050086][ T9896] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 314.058073][ T9896] [ 314.250644][ T9905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2021'. [ 314.939503][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2042'. [ 315.071778][ T9937] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2033'. [ 315.477823][ T9947] bond0: (slave bridge0): Releasing backup interface [ 315.576825][ T9947] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.584642][ T9947] bridge0: port 1(bridge_slave_0) entered listening state [ 315.615447][ T9947] device bridge0 entered promiscuous mode [ 315.642576][ T9947] team0: Port device bridge0 added [ 316.070702][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.138834][ T9961] device bridge0 left promiscuous mode [ 316.174217][ T9961] team0: Port device bridge0 removed [ 316.211783][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.219112][ T9961] bridge0: port 1(bridge_slave_0) entered listening state [ 316.251730][ T9961] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 316.794605][ T9984] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 317.008963][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.015336][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.441056][T10001] validate_nla: 17 callbacks suppressed [ 317.441073][T10001] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 317.459725][T10002] netlink: 'syz.4.2054': attribute type 2 has an invalid length. [ 317.485035][T10002] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 317.505942][T10002] __nla_validate_parse: 7 callbacks suppressed [ 317.505954][T10002] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2054'. [ 317.793056][T10016] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2065'. [ 317.829197][T10016] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 317.987455][T10022] netlink: 'syz.1.2067': attribute type 3 has an invalid length. [ 317.995785][T10022] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2067'. [ 318.011426][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2070'. [ 318.040769][T10029] netlink: 'syz.1.2067': attribute type 3 has an invalid length. [ 318.069054][T10029] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2067'. [ 318.297759][T10038] netlink: 'syz.0.2071': attribute type 10 has an invalid length. [ 318.818115][T10055] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2079'. [ 318.837875][T10055] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 319.693653][T10066] netlink: 'syz.2.2083': attribute type 10 has an invalid length. [ 319.712068][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2083'. [ 319.732448][T10066] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 321.611298][T10105] netlink: 'syz.3.2097': attribute type 21 has an invalid length. [ 322.882502][T10140] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 323.142348][T10143] netlink: 'syz.2.2109': attribute type 10 has an invalid length. [ 323.575540][T10162] netlink: 'syz.4.2118': attribute type 9 has an invalid length. [ 323.619899][T10162] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2118'. [ 323.720613][T10173] netlink: 'syz.4.2118': attribute type 3 has an invalid length. [ 323.751044][T10173] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2118'. [ 324.136151][T10180] netlink: 'syz.2.2123': attribute type 10 has an invalid length. [ 324.294125][T10188] netlink: 'syz.4.2127': attribute type 10 has an invalid length. [ 324.628640][T10200] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 324.646241][T10200] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2131'. [ 324.668678][T10200] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 325.010924][T10215] netlink: 'syz.2.2137': attribute type 9 has an invalid length. [ 325.020413][T10215] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2137'. [ 325.340749][T10215] netlink: 'syz.2.2137': attribute type 3 has an invalid length. [ 325.350737][T10215] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2137'. [ 326.078357][T10233] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 326.462070][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.963574][T10238] tap0: tun_chr_ioctl cmd 1074025677 [ 326.997631][T10238] tap0: linktype set to 804 [ 327.088481][T10242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2148'. [ 327.610429][T10257] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2152'. [ 327.623583][T10257] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 328.099881][T10275] validate_nla: 1 callbacks suppressed [ 328.099897][T10275] netlink: 'syz.0.2161': attribute type 21 has an invalid length. [ 328.155448][T10275] netlink: 'syz.0.2161': attribute type 6 has an invalid length. [ 328.180868][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2161'. [ 329.224232][T10283] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2164'. [ 329.243665][T10283] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 329.911210][T10299] netlink: 'syz.2.2169': attribute type 10 has an invalid length. [ 330.326073][T10323] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2178'. [ 330.336986][T10323] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 332.326296][T10366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2192'. [ 332.396006][T10372] netlink: 'syz.1.2195': attribute type 6 has an invalid length. [ 332.831476][T10380] FAULT_INJECTION: forcing a failure. [ 332.831476][T10380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.846343][T10380] CPU: 0 PID: 10380 Comm: syz.2.2197 Not tainted syzkaller #0 [ 332.853835][T10380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.863904][T10380] Call Trace: [ 332.867191][T10380] [ 332.870133][T10380] dump_stack_lvl+0x188/0x24e [ 332.874832][T10380] ? show_regs_print_info+0x12/0x12 [ 332.880050][T10380] ? load_image+0x410/0x410 [ 332.884574][T10380] ? __lock_acquire+0x7c40/0x7c40 [ 332.889620][T10380] should_fail_ex+0x390/0x4c0 [ 332.894390][T10380] _copy_from_user+0x2c/0x170 [ 332.899092][T10380] mptcp_setsockopt+0x122f/0x2f90 [ 332.904140][T10380] ? pm_nl_exit_net+0x220/0x220 [ 332.909004][T10380] ? aa_af_perm+0x340/0x340 [ 332.913511][T10380] ? __fget_files+0x3fc/0x460 [ 332.918188][T10380] ? aa_sock_opt_perm+0x74/0x100 [ 332.923122][T10380] ? sock_common_setsockopt+0x32/0xb0 [ 332.928486][T10380] ? sock_common_recvmsg+0x190/0x190 [ 332.933766][T10380] __sys_setsockopt+0x2bf/0x3d0 [ 332.938617][T10380] __x64_sys_setsockopt+0xb1/0xc0 [ 332.943639][T10380] do_syscall_64+0x4c/0xa0 [ 332.948049][T10380] ? clear_bhb_loop+0x60/0xb0 [ 332.952724][T10380] ? clear_bhb_loop+0x60/0xb0 [ 332.957395][T10380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.963281][T10380] RIP: 0033:0x7f3d4e39e0d9 [ 332.967688][T10380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.987288][T10380] RSP: 002b:00007f3d4f308028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 332.995696][T10380] RAX: ffffffffffffffda RBX: 00007f3d4e626090 RCX: 00007f3d4e39e0d9 [ 333.003667][T10380] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000005 [ 333.011627][T10380] RBP: 00007f3d4f308090 R08: 0000000000000004 R09: 0000000000000000 [ 333.019586][T10380] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.027554][T10380] R13: 00007f3d4e626128 R14: 00007f3d4e626090 R15: 00007ffe58e816e8 [ 333.035530][T10380] [ 333.458134][T10388] bridge0: port 2(team0) entered disabled state [ 333.473924][T10388] device bridge_slave_0 left promiscuous mode [ 333.485607][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.498166][T10390] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 333.523965][T10390] netlink: 'syz.2.2201': attribute type 3 has an invalid length. [ 333.532550][T10390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2201'. [ 333.545368][T10395] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 333.586170][T10395] netlink: 'syz.2.2201': attribute type 3 has an invalid length. [ 333.614334][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2201'. [ 333.677065][T10398] netlink: 'syz.1.2204': attribute type 10 has an invalid length. [ 333.805230][T10402] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 333.877761][T10407] sock: sock_set_timeout: `syz.0.2206' (pid 10407) tries to set negative timeout [ 334.919857][T10429] netlink: 'syz.4.2217': attribute type 10 has an invalid length. [ 334.964645][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2217'. [ 335.029189][T10429] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 335.077633][T10432] netlink: 'syz.2.2218': attribute type 6 has an invalid length. [ 335.151657][T10432] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.2218'. [ 336.282446][T10465] netlink: 'syz.4.2228': attribute type 13 has an invalid length. [ 336.334142][T10465] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2228'. [ 336.539177][T10481] sock: sock_set_timeout: `syz.2.2232' (pid 10481) tries to set negative timeout [ 338.333838][T10515] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2249'. [ 338.455334][T10515] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2249'. [ 338.489148][T10515] netlink: 'syz.4.2249': attribute type 2 has an invalid length. [ 338.497353][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2249'. [ 339.583751][T10527] sock: sock_set_timeout: `syz.1.2253' (pid 10527) tries to set negative timeout [ 339.727741][T10543] validate_nla: 1 callbacks suppressed [ 339.727868][T10543] netlink: 'syz.2.2257': attribute type 10 has an invalid length. [ 340.827843][T10572] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2269'. [ 340.843243][T10572] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2269'. [ 340.856069][T10572] netlink: 'syz.1.2269': attribute type 2 has an invalid length. [ 340.865556][T10572] netlink: 'syz.1.2269': attribute type 8 has an invalid length. [ 340.876667][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'. [ 341.801913][T10584] netlink: 'syz.4.2274': attribute type 10 has an invalid length. [ 342.052766][T10595] netlink: 'syz.2.2279': attribute type 10 has an invalid length. [ 342.080378][T10604] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2281'. [ 342.222450][T10604] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 342.396027][T10613] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 342.428693][T10613] device dummy0 left promiscuous mode [ 342.437353][T10613] team0: Port device dummy0 removed [ 342.445766][T10616] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2286'. [ 342.983297][T10639] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2290'. [ 343.050615][T10639] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2290'. [ 343.133874][T10639] netlink: 'syz.2.2290': attribute type 2 has an invalid length. [ 343.160116][T10639] netlink: 'syz.2.2290': attribute type 8 has an invalid length. [ 343.209957][T10639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2290'. [ 343.259604][T10651] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 343.720188][T10655] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 343.780262][T10659] FAULT_INJECTION: forcing a failure. [ 343.780262][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 343.822949][T10655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2298'. [ 343.843678][T10659] CPU: 0 PID: 10659 Comm: syz.1.2300 Not tainted syzkaller #0 [ 343.851169][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.861236][T10659] Call Trace: [ 343.864519][T10659] [ 343.867459][T10659] dump_stack_lvl+0x188/0x24e [ 343.872155][T10659] ? show_regs_print_info+0x12/0x12 [ 343.877374][T10659] ? load_image+0x410/0x410 [ 343.881895][T10659] ? __might_sleep+0xd0/0xd0 [ 343.886494][T10659] ? __lock_acquire+0x7c40/0x7c40 [ 343.891531][T10659] should_fail_ex+0x390/0x4c0 [ 343.896221][T10659] should_failslab+0x5/0x20 [ 343.900730][T10659] slab_pre_alloc_hook+0x59/0x300 [ 343.905764][T10659] ? __get_vm_area_node+0x122/0x330 [ 343.910973][T10659] __kmem_cache_alloc_node+0x4f/0x270 [ 343.916347][T10659] ? __get_vm_area_node+0x122/0x330 [ 343.921540][T10659] kmalloc_node_trace+0x22/0xe0 [ 343.926391][T10659] __get_vm_area_node+0x122/0x330 [ 343.931414][T10659] __vmalloc_node_range+0x357/0x1380 [ 343.936696][T10659] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 343.942260][T10659] ? aa_get_newest_label+0xf9/0x5b0 [ 343.947454][T10659] ? free_vm_area+0x50/0x50 [ 343.951953][T10659] ? end_current_label_crit_section+0x170/0x170 [ 343.958192][T10659] ? __lock_acquire+0x7c40/0x7c40 [ 343.963219][T10659] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 343.968765][T10659] __vmalloc+0x76/0x80 [ 343.972830][T10659] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 343.978373][T10659] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 343.983741][T10659] ? bpf_prog_alloc+0x13/0x1b0 [ 343.988503][T10659] bpf_prog_alloc+0x1c/0x1b0 [ 343.993090][T10659] bpf_prog_load+0x7d4/0x1530 [ 343.997768][T10659] ? map_freeze+0x390/0x390 [ 344.002267][T10659] ? __might_fault+0xa6/0x120 [ 344.006940][T10659] ? __might_fault+0xa6/0x120 [ 344.011607][T10659] ? __might_fault+0xc2/0x120 [ 344.016273][T10659] ? __might_fault+0xa6/0x120 [ 344.020939][T10659] ? bpf_lsm_bpf+0x5/0x10 [ 344.025259][T10659] ? security_bpf+0x7a/0xa0 [ 344.029759][T10659] __sys_bpf+0x5b8/0x780 [ 344.033996][T10659] ? bpf_link_show_fdinfo+0x380/0x380 [ 344.039369][T10659] ? lock_chain_count+0x20/0x20 [ 344.044209][T10659] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.050190][T10659] __x64_sys_bpf+0x78/0x90 [ 344.054601][T10659] do_syscall_64+0x4c/0xa0 [ 344.059011][T10659] ? clear_bhb_loop+0x60/0xb0 [ 344.063680][T10659] ? clear_bhb_loop+0x60/0xb0 [ 344.068351][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.074234][T10659] RIP: 0033:0x7fd9f8d9e0d9 [ 344.078638][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.098234][T10659] RSP: 002b:00007fd9f9c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.106639][T10659] RAX: ffffffffffffffda RBX: 00007fd9f9025fa0 RCX: 00007fd9f8d9e0d9 [ 344.114602][T10659] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 344.122562][T10659] RBP: 00007fd9f9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 344.130521][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.138479][T10659] R13: 00007fd9f9026038 R14: 00007fd9f9025fa0 R15: 00007ffd0fb4ebc8 [ 344.146452][T10659] [ 344.154260][T10659] syz.1.2300: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 344.177149][T10664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2298'. [ 344.209013][T10659] CPU: 1 PID: 10659 Comm: syz.1.2300 Not tainted syzkaller #0 [ 344.216523][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.226609][T10659] Call Trace: [ 344.229914][T10659] [ 344.232873][T10659] dump_stack_lvl+0x188/0x24e [ 344.237589][T10659] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 344.244041][T10659] ? show_regs_print_info+0x12/0x12 [ 344.249285][T10659] ? load_image+0x410/0x410 [ 344.253836][T10659] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 344.260290][T10659] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 344.266831][T10659] warn_alloc+0x242/0x330 [ 344.271207][T10659] ? __get_vm_area_node+0x122/0x330 [ 344.276456][T10659] ? zone_watermark_ok_safe+0x270/0x270 [ 344.282042][T10659] ? rcu_is_watching+0x11/0xa0 [ 344.286857][T10659] ? __get_vm_area_node+0x318/0x330 [ 344.292119][T10659] __vmalloc_node_range+0x37c/0x1380 [ 344.297515][T10659] ? aa_get_newest_label+0xf9/0x5b0 [ 344.302751][T10659] ? free_vm_area+0x50/0x50 [ 344.307279][T10659] ? end_current_label_crit_section+0x170/0x170 [ 344.313533][T10659] ? __lock_acquire+0x7c40/0x7c40 [ 344.318575][T10659] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 344.324128][T10659] __vmalloc+0x76/0x80 [ 344.328209][T10659] ? bpf_prog_alloc_no_stats+0x37/0x3a0 [ 344.333766][T10659] bpf_prog_alloc_no_stats+0x37/0x3a0 [ 344.339148][T10659] ? bpf_prog_alloc+0x13/0x1b0 [ 344.343933][T10659] bpf_prog_alloc+0x1c/0x1b0 [ 344.348541][T10659] bpf_prog_load+0x7d4/0x1530 [ 344.353252][T10659] ? map_freeze+0x390/0x390 [ 344.357764][T10659] ? __might_fault+0xa6/0x120 [ 344.362476][T10659] ? __might_fault+0xa6/0x120 [ 344.367157][T10659] ? __might_fault+0xc2/0x120 [ 344.371837][T10659] ? __might_fault+0xa6/0x120 [ 344.376519][T10659] ? bpf_lsm_bpf+0x5/0x10 [ 344.380849][T10659] ? security_bpf+0x7a/0xa0 [ 344.385369][T10659] __sys_bpf+0x5b8/0x780 [ 344.389625][T10659] ? bpf_link_show_fdinfo+0x380/0x380 [ 344.395032][T10659] ? lock_chain_count+0x20/0x20 [ 344.399889][T10659] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.405892][T10659] __x64_sys_bpf+0x78/0x90 [ 344.410318][T10659] do_syscall_64+0x4c/0xa0 [ 344.414738][T10659] ? clear_bhb_loop+0x60/0xb0 [ 344.419420][T10659] ? clear_bhb_loop+0x60/0xb0 [ 344.424107][T10659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.430004][T10659] RIP: 0033:0x7fd9f8d9e0d9 [ 344.434423][T10659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.454030][T10659] RSP: 002b:00007fd9f9c47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.462450][T10659] RAX: ffffffffffffffda RBX: 00007fd9f9025fa0 RCX: 00007fd9f8d9e0d9 [ 344.470425][T10659] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 344.478396][T10659] RBP: 00007fd9f9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 344.486367][T10659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.494337][T10659] R13: 00007fd9f9026038 R14: 00007fd9f9025fa0 R15: 00007ffd0fb4ebc8 [ 344.502343][T10659] [ 344.606159][T10659] Mem-Info: [ 344.610237][T10659] active_anon:5912 inactive_anon:0 isolated_anon:0 [ 344.610237][T10659] active_file:19225 inactive_file:40060 isolated_file:0 [ 344.610237][T10659] unevictable:768 dirty:220 writeback:0 [ 344.610237][T10659] slab_reclaimable:20960 slab_unreclaimable:96430 [ 344.610237][T10659] mapped:29670 shmem:1361 pagetables:608 [ 344.610237][T10659] sec_pagetables:0 bounce:0 [ 344.610237][T10659] kernel_misc_reclaimable:0 [ 344.610237][T10659] free:1317024 free_pcp:11993 free_cma:0 [ 344.667732][T10659] Node 0 active_anon:23648kB inactive_anon:0kB active_file:76900kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118680kB dirty:980kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10396kB pagetables:2432kB sec_pagetables:0kB all_unreclaimable? no [ 344.731855][T10659] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 344.806906][T10659] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.845273][T10659] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 344.866847][T10659] Node 0 DMA32 free:1355048kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:23484kB inactive_anon:0kB active_file:77000kB inactive_file:160036kB unevictable:1536kB writepending:1256kB present:3129332kB managed:2592912kB mlocked:0kB bounce:0kB free_pcp:31488kB local_pcp:18324kB free_cma:0kB [ 344.923799][T10659] lowmem_reserve[]: 0 0 1 1 1 [ 344.929286][T10659] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.966241][T10659] lowmem_reserve[]: 0 0 0 0 0 [ 344.971208][T10659] Node 1 Normal free:3897436kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17304kB local_pcp:6784kB free_cma:0kB [ 345.044953][T10659] lowmem_reserve[]: 0 0 0 0 0 [ 345.049861][T10659] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.062855][T10659] Node 0 DMA32: 2*4kB (UE) 402*8kB (M) 1813*16kB (UME) 474*32kB (UM) 701*64kB (UM) 411*128kB (UME) 315*256kB (UME) 244*512kB (UME) 201*1024kB (UM) 6*2048kB (UM) 192*4096kB (M) = 1354984kB [ 345.082089][T10659] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.098796][T10659] Node 1 Normal: 157*4kB (UME) 57*8kB (UME) 32*16kB (UME) 29*32kB (UME) 18*64kB (UME) 8*128kB (UE) 4*256kB (UM) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3897436kB [ 345.127618][T10659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.138990][T10659] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.155319][T10659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.168644][T10659] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.178751][T10659] 60671 total pagecache pages [ 345.183550][T10659] 0 pages in swap cache [ 345.188095][T10659] Free swap = 124996kB [ 345.192502][T10659] Total swap = 124996kB [ 345.197037][T10659] 2097051 pages RAM [ 345.204989][T10659] 0 pages HighMem/MovableOnly [ 345.210141][T10659] 415222 pages reserved [ 345.214592][T10659] 0 pages cma reserved [ 345.398001][T10695] validate_nla: 6 callbacks suppressed [ 345.398051][T10695] netlink: 'syz.1.2311': attribute type 10 has an invalid length. [ 346.512151][T10708] netlink: 'syz.0.2317': attribute type 21 has an invalid length. [ 346.528284][T10708] __nla_validate_parse: 1 callbacks suppressed [ 346.528322][T10708] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2317'. [ 346.585123][T10708] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2317'. [ 346.614650][T10713] netlink: 'syz.1.2318': attribute type 10 has an invalid length. [ 346.626003][T10713] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2318'. [ 348.318590][T10765] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2339'. [ 348.711473][T10785] netlink: 'syz.2.2345': attribute type 29 has an invalid length. [ 348.767344][T10785] netlink: 'syz.2.2345': attribute type 29 has an invalid length. [ 348.848168][T10787] netlink: 'syz.2.2345': attribute type 29 has an invalid length. [ 348.922731][T10795] netlink: 'syz.4.2347': attribute type 10 has an invalid length. [ 348.957436][T10795] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2347'. [ 349.052197][T10795] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 350.617742][T10849] netlink: 'syz.4.2369': attribute type 15 has an invalid length. [ 350.698022][T10849] netlink: 'syz.4.2369': attribute type 7 has an invalid length. [ 351.407986][T10856] netlink: 'syz.1.2371': attribute type 21 has an invalid length. [ 353.427341][T10876] netlink: 'syz.0.2376': attribute type 10 has an invalid length. [ 353.453013][T10876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2376'. [ 353.500265][T10876] bridge0: port 3(veth0_vlan) entered blocking state [ 353.510280][T10876] bridge0: port 3(veth0_vlan) entered disabled state [ 353.566163][T10876] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 354.477508][T10909] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 354.485556][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2391'. [ 354.523586][T10909] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 354.644468][T10922] netlink: 'syz.2.2394': attribute type 11 has an invalid length. [ 354.662753][T10922] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2394'. [ 354.677941][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.427012][T10940] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2402'. [ 355.552046][T10948] netlink: 'syz.1.2400': attribute type 10 has an invalid length. [ 355.593113][T10948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2400'. [ 355.670656][T10948] bridge0: port 2(veth0_vlan) entered blocking state [ 355.703497][T10948] bridge0: port 2(veth0_vlan) entered disabled state [ 355.766791][T10948] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 355.985418][T10959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2407'. [ 356.588246][T10969] netlink: 'syz.0.2408': attribute type 3 has an invalid length. [ 356.606566][T10969] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2408'. [ 357.654795][T10976] FAULT_INJECTION: forcing a failure. [ 357.654795][T10976] name failslab, interval 1, probability 0, space 0, times 0 [ 357.717970][T10976] CPU: 0 PID: 10976 Comm: syz.3.2414 Not tainted syzkaller #0 [ 357.725513][T10976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.735582][T10976] Call Trace: [ 357.738870][T10976] [ 357.741807][T10976] dump_stack_lvl+0x188/0x24e [ 357.746547][T10976] ? show_regs_print_info+0x12/0x12 [ 357.751756][T10976] ? load_image+0x410/0x410 [ 357.756275][T10976] ? __lock_acquire+0x7c40/0x7c40 [ 357.761319][T10976] ? rcu_is_watching+0x11/0xa0 [ 357.766176][T10976] ? __alloc_pages+0x290/0x4f0 [ 357.771011][T10976] should_fail_ex+0x390/0x4c0 [ 357.775779][T10976] should_failslab+0x5/0x20 [ 357.780348][T10976] slab_pre_alloc_hook+0x59/0x300 [ 357.785391][T10976] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 357.791359][T10976] __kmem_cache_alloc_node+0x4f/0x270 [ 357.796742][T10976] ? sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 357.802646][T10976] kmalloc_trace+0x26/0xe0 [ 357.807076][T10976] sctp_auth_asoc_copy_shkeys+0x148/0x5a0 [ 357.812804][T10976] ? sctp_stream_interleave_init+0x54/0x90 [ 357.818629][T10976] sctp_association_new+0x15d4/0x2520 [ 357.824095][T10976] sctp_connect_new_asoc+0x2da/0x6a0 [ 357.829395][T10976] ? __sctp_connect+0xd80/0xd80 [ 357.834250][T10976] ? __local_bh_enable_ip+0x136/0x1c0 [ 357.839667][T10976] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 357.845278][T10976] ? security_sctp_bind_connect+0x85/0xb0 [ 357.851051][T10976] sctp_sendmsg+0x1686/0x2940 [ 357.855747][T10976] ? sctp_getsockopt+0x8a0/0x8a0 [ 357.860694][T10976] ? __might_fault+0xa6/0x120 [ 357.865384][T10976] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 357.871854][T10976] ? aa_sock_msg_perm+0x94/0x150 [ 357.876846][T10976] ? inet_sendmsg+0xca/0x2a0 [ 357.881448][T10976] ? inet_send_prepare+0x250/0x250 [ 357.886567][T10976] ____sys_sendmsg+0x5ed/0x9a0 [ 357.891406][T10976] ? __sys_sendmsg_sock+0x30/0x30 [ 357.896440][T10976] ? __import_iovec+0x306/0x510 [ 357.901368][T10976] ? import_iovec+0x6f/0xa0 [ 357.905885][T10976] ___sys_sendmsg+0x2a2/0x360 [ 357.910576][T10976] ? __sys_sendmsg+0x2a0/0x2a0 [ 357.915366][T10976] ? __lock_acquire+0x7c40/0x7c40 [ 357.920431][T10976] __se_sys_sendmsg+0x1c3/0x2b0 [ 357.925303][T10976] ? __x64_sys_sendmsg+0x80/0x80 [ 357.930267][T10976] ? lockdep_hardirqs_on+0x94/0x140 [ 357.935476][T10976] do_syscall_64+0x4c/0xa0 [ 357.939908][T10976] ? clear_bhb_loop+0x60/0xb0 [ 357.944669][T10976] ? clear_bhb_loop+0x60/0xb0 [ 357.949358][T10976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.955255][T10976] RIP: 0033:0x7fde0e99e0d9 [ 357.959677][T10976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.979286][T10976] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.987708][T10976] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 357.995682][T10976] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 358.003653][T10976] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 358.011629][T10976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.019602][T10976] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 358.027594][T10976] [ 358.286461][T10997] netlink: 'syz.1.2420': attribute type 2 has an invalid length. [ 358.304587][T10997] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2420'. [ 359.288293][T11018] netlink: 'syz.2.2425': attribute type 10 has an invalid length. [ 359.361297][T11018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2425'. [ 359.451825][T11018] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 359.808824][T11028] netlink: 'syz.4.2428': attribute type 10 has an invalid length. [ 361.208732][T11040] netlink: 'syz.4.2433': attribute type 41 has an invalid length. [ 361.799915][T11060] netlink: 'syz.2.2440': attribute type 10 has an invalid length. [ 362.601953][T11078] netlink: 'syz.2.2443': attribute type 21 has an invalid length. [ 362.636129][T11078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2443'. [ 362.655856][T11078] netlink: 'syz.2.2443': attribute type 4 has an invalid length. [ 362.948558][T11088] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2446'. [ 362.962087][T11088] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 362.970793][T11088] CPU: 0 PID: 11088 Comm: syz.0.2446 Not tainted syzkaller #0 [ 362.978278][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.988347][T11088] Call Trace: [ 362.991645][T11088] [ 362.994596][T11088] dump_stack_lvl+0x188/0x24e [ 362.999306][T11088] ? show_regs_print_info+0x12/0x12 [ 363.004526][T11088] ? load_image+0x410/0x410 [ 363.009058][T11088] sysfs_warn_dup+0x8a/0xa0 [ 363.013602][T11088] sysfs_do_create_link_sd+0xc0/0x110 [ 363.018988][T11088] device_add+0x83b/0x1050 [ 363.023506][T11088] wiphy_register+0x1d8b/0x2aa0 [ 363.028447][T11088] ? cfg80211_event_work+0x40/0x40 [ 363.033570][T11088] ? minstrel_ht_alloc+0x894/0xa20 [ 363.038767][T11088] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 363.044877][T11088] ieee80211_register_hw+0x2d48/0x39f0 [ 363.050414][T11088] ? ieee80211_register_hw+0xee1/0x39f0 [ 363.055971][T11088] ? ieee80211_register_hw+0xee1/0x39f0 [ 363.061545][T11088] ? ieee80211_tasklet_handler+0x20/0x20 [ 363.067186][T11088] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 363.073099][T11088] ? __debug_object_init+0xed/0x440 [ 363.078366][T11088] ? memset+0x1e/0x40 [ 363.082406][T11088] ? __hrtimer_init+0x189/0x270 [ 363.087316][T11088] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 363.093125][T11088] ? memcpy+0x3c/0x60 [ 363.097122][T11088] hwsim_new_radio_nl+0xab7/0xc90 [ 363.102173][T11088] genl_family_rcv_msg_doit+0x22f/0x350 [ 363.107776][T11088] ? end_current_label_crit_section+0x170/0x170 [ 363.114030][T11088] ? lockdep_hardirqs_on+0x94/0x140 [ 363.119237][T11088] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 363.125175][T11088] ? bpf_lsm_capable+0x5/0x10 [ 363.129906][T11088] ? security_capable+0x85/0xb0 [ 363.134817][T11088] genl_rcv_msg+0x601/0x790 [ 363.139335][T11088] ? genl_bind+0x360/0x360 [ 363.143754][T11088] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 363.150110][T11088] netlink_rcv_skb+0x1ef/0x440 [ 363.154927][T11088] ? genl_bind+0x360/0x360 [ 363.159349][T11088] ? netlink_ack+0x1160/0x1160 [ 363.164137][T11088] ? down_read+0x1a8/0x2d0 [ 363.168560][T11088] genl_rcv+0x24/0x40 [ 363.172546][T11088] netlink_unicast+0x7ad/0x920 [ 363.177331][T11088] netlink_sendmsg+0x8ad/0xbd0 [ 363.182116][T11088] ? netlink_getsockopt+0x550/0x550 [ 363.187330][T11088] ? apparmor_socket_sendmsg+0x8a/0x330 [ 363.192890][T11088] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 363.198177][T11088] ? security_socket_sendmsg+0x7c/0xa0 [ 363.203646][T11088] ? netlink_getsockopt+0x550/0x550 [ 363.208862][T11088] ____sys_sendmsg+0x5ed/0x9a0 [ 363.213646][T11088] ? __sys_sendmsg_sock+0x30/0x30 [ 363.218677][T11088] ? __import_iovec+0x306/0x510 [ 363.223549][T11088] ? import_iovec+0x6f/0xa0 [ 363.228071][T11088] ___sys_sendmsg+0x2a2/0x360 [ 363.232766][T11088] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.237623][T11088] __se_sys_sendmsg+0x1c3/0x2b0 [ 363.242486][T11088] ? __x64_sys_sendmsg+0x80/0x80 [ 363.247458][T11088] ? lockdep_hardirqs_on+0x94/0x140 [ 363.252666][T11088] do_syscall_64+0x4c/0xa0 [ 363.257090][T11088] ? clear_bhb_loop+0x60/0xb0 [ 363.261782][T11088] ? clear_bhb_loop+0x60/0xb0 [ 363.266468][T11088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.272369][T11088] RIP: 0033:0x7f80de59e0d9 [ 363.276789][T11088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.296402][T11088] RSP: 002b:00007f80df505028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.304823][T11088] RAX: ffffffffffffffda RBX: 00007f80de826180 RCX: 00007f80de59e0d9 [ 363.312799][T11088] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 363.320770][T11088] RBP: 00007f80de635024 R08: 0000000000000000 R09: 0000000000000000 [ 363.328743][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.336718][T11088] R13: 00007f80de826218 R14: 00007f80de826180 R15: 00007ffec77223f8 [ 363.344712][T11088] [ 363.748279][T11101] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2449'. [ 364.188026][T11107] bridge0: port 2(team0) entered disabled state [ 364.242263][T11107] device bridge_slave_0 left promiscuous mode [ 364.266330][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.444878][T11112] netlink: 'syz.2.2453': attribute type 21 has an invalid length. [ 364.456986][T11112] netlink: 'syz.2.2453': attribute type 2 has an invalid length. [ 364.465203][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2453'. [ 364.495819][T11116] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2454'. [ 365.597428][T11150] netlink: 'syz.0.2464': attribute type 10 has an invalid length. [ 365.605311][T11150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2464'. [ 365.699321][T11150] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 366.344764][T11171] netlink: 'syz.0.2472': attribute type 10 has an invalid length. [ 366.618561][T11184] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2477'. [ 366.664418][T11185] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2477'. [ 368.122266][T11226] netlink: 'syz.3.2489': attribute type 10 has an invalid length. [ 370.860374][T11282] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 370.923845][T11282] device dummy0 left promiscuous mode [ 370.952311][T11282] team0: Port device dummy0 removed [ 370.962976][T11284] netlink: 'syz.1.2507': attribute type 10 has an invalid length. [ 371.496014][T11296] netlink: 'syz.1.2512': attribute type 4 has an invalid length. [ 371.522054][T11296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2512'. [ 372.099055][T11309] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2518'. [ 372.327602][T11312] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2519'. [ 373.805095][T11322] tun0: tun_chr_ioctl cmd 1074812118 [ 373.938906][T11333] FAULT_INJECTION: forcing a failure. [ 373.938906][T11333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.006545][T11333] CPU: 0 PID: 11333 Comm: syz.1.2526 Not tainted syzkaller #0 [ 374.014061][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.024135][T11333] Call Trace: [ 374.027419][T11333] [ 374.030360][T11333] dump_stack_lvl+0x188/0x24e [ 374.035064][T11333] ? show_regs_print_info+0x12/0x12 [ 374.040288][T11333] ? load_image+0x410/0x410 [ 374.044809][T11333] ? __lock_acquire+0x7c40/0x7c40 [ 374.049857][T11333] should_fail_ex+0x390/0x4c0 [ 374.054559][T11333] _copy_from_user+0x2c/0x170 [ 374.059253][T11333] ___sys_sendmsg+0x1c3/0x360 [ 374.063961][T11333] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.068767][T11333] ? __lock_acquire+0x7c40/0x7c40 [ 374.073836][T11333] __se_sys_sendmsg+0x1c3/0x2b0 [ 374.078713][T11333] ? __x64_sys_sendmsg+0x80/0x80 [ 374.083717][T11333] ? lockdep_hardirqs_on+0x94/0x140 [ 374.088938][T11333] do_syscall_64+0x4c/0xa0 [ 374.093374][T11333] ? clear_bhb_loop+0x60/0xb0 [ 374.098066][T11333] ? clear_bhb_loop+0x60/0xb0 [ 374.102761][T11333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.108672][T11333] RIP: 0033:0x7fd9f8d9e0d9 [ 374.113099][T11333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.132714][T11333] RSP: 002b:00007fd9f9c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.141144][T11333] RAX: ffffffffffffffda RBX: 00007fd9f9025fa0 RCX: 00007fd9f8d9e0d9 [ 374.149128][T11333] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 374.157113][T11333] RBP: 00007fd9f9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 374.165097][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.173081][T11333] R13: 00007fd9f9026038 R14: 00007fd9f9025fa0 R15: 00007ffd0fb4ebc8 [ 374.181083][T11333] [ 375.277736][T11369] netlink: 'syz.2.2538': attribute type 29 has an invalid length. [ 375.290820][T11370] netlink: 'syz.3.2537': attribute type 10 has an invalid length. [ 375.309509][T11369] netlink: 'syz.2.2538': attribute type 29 has an invalid length. [ 375.438163][T11371] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 375.455328][T11371] netlink: 'syz.2.2538': attribute type 8 has an invalid length. [ 375.472871][T11371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2538'. [ 375.512181][T11371] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 375.522901][T11371] netlink: 'syz.2.2538': attribute type 8 has an invalid length. [ 375.545391][T11371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2538'. [ 377.117977][T11382] netlink: 'syz.2.2542': attribute type 10 has an invalid length. [ 378.426868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.433230][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.660282][T11382] team0: Device veth1_vlan failed to register rx_handler [ 379.205151][T11403] netlink: 'syz.4.2547': attribute type 39 has an invalid length. [ 380.215184][T11403] device macvlan0 entered promiscuous mode [ 380.733082][T11429] netlink: 'syz.1.2558': attribute type 10 has an invalid length. [ 380.883201][T11429] team0: Device veth1_vlan failed to register rx_handler [ 384.530668][T11465] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 384.640288][T11470] netlink: 'syz.0.2573': attribute type 10 has an invalid length. [ 384.763853][T11470] team0: Device veth1_vlan is already a lower device of the team interface [ 384.951405][T11482] netlink: 'syz.3.2575': attribute type 29 has an invalid length. [ 385.016919][T11482] netlink: 'syz.3.2575': attribute type 29 has an invalid length. [ 385.032686][T11485] netlink: 'syz.3.2575': attribute type 29 has an invalid length. [ 385.076822][T11487] ref_ctr_offset mismatch. inode: 0xa48 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 386.058458][T11503] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 386.520340][T11513] netlink: 'syz.0.2584': attribute type 10 has an invalid length. [ 387.266970][T11539] netlink: 'syz.4.2593': attribute type 10 has an invalid length. [ 388.010716][T11539] device geneve1 entered promiscuous mode [ 388.031420][T11539] team0: Port device geneve1 added [ 388.039711][T11549] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 388.253032][T11561] netlink: 'syz.1.2600': attribute type 16 has an invalid length. [ 388.261098][T11561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2600'. [ 388.302219][T11564] netlink: 'syz.2.2599': attribute type 21 has an invalid length. [ 388.517716][T11573] netlink: 'syz.1.2601': attribute type 10 has an invalid length. [ 389.729335][T11584] netlink: 'syz.3.2606': attribute type 10 has an invalid length. [ 389.775215][T11584] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 389.885478][T11593] netlink: 'syz.0.2609': attribute type 33 has an invalid length. [ 389.895119][T11593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2609'. [ 389.906851][T11593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.033588][T11598] netlink: 'syz.2.2612': attribute type 10 has an invalid length. [ 390.854966][T11618] netlink: 'syz.1.2619': attribute type 11 has an invalid length. [ 390.864114][T11618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2619'. [ 390.876649][T11617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.753716][T11638] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 391.783799][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2625'. [ 391.807894][T11638] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 391.897742][T11642] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2626'. [ 393.357642][T11683] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2641'. [ 395.306781][T11716] FAULT_INJECTION: forcing a failure. [ 395.306781][T11716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.323293][T11716] CPU: 0 PID: 11716 Comm: syz.2.2649 Not tainted syzkaller #0 [ 395.330774][T11716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.340831][T11716] Call Trace: [ 395.344112][T11716] [ 395.347047][T11716] dump_stack_lvl+0x188/0x24e [ 395.351738][T11716] ? show_regs_print_info+0x12/0x12 [ 395.356950][T11716] ? load_image+0x410/0x410 [ 395.361464][T11716] ? __lock_acquire+0x7c40/0x7c40 [ 395.366502][T11716] should_fail_ex+0x390/0x4c0 [ 395.371193][T11716] _copy_from_user+0x2c/0x170 [ 395.375884][T11716] ___sys_sendmsg+0x1c3/0x360 [ 395.380593][T11716] ? __sys_sendmsg+0x2a0/0x2a0 [ 395.385385][T11716] ? __lock_acquire+0x7c40/0x7c40 [ 395.390441][T11716] __se_sys_sendmsg+0x1c3/0x2b0 [ 395.395299][T11716] ? ct_nmi_exit+0x145/0x1c0 [ 395.399898][T11716] ? __x64_sys_sendmsg+0x80/0x80 [ 395.404866][T11716] ? lockdep_hardirqs_on+0x94/0x140 [ 395.410076][T11716] do_syscall_64+0x4c/0xa0 [ 395.414499][T11716] ? clear_bhb_loop+0x60/0xb0 [ 395.419185][T11716] ? clear_bhb_loop+0x60/0xb0 [ 395.423881][T11716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.429783][T11716] RIP: 0033:0x7f3d4e39e0d9 [ 395.434202][T11716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.453812][T11716] RSP: 002b:00007f3d4f329028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.462236][T11716] RAX: ffffffffffffffda RBX: 00007f3d4e625fa0 RCX: 00007f3d4e39e0d9 [ 395.470212][T11716] RDX: 0000000000004000 RSI: 0000200000003c40 RDI: 0000000000000003 [ 395.478191][T11716] RBP: 00007f3d4f329090 R08: 0000000000000000 R09: 0000000000000000 [ 395.486163][T11716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.494137][T11716] R13: 00007f3d4e626038 R14: 00007f3d4e625fa0 R15: 00007ffe58e816e8 [ 395.502125][T11716] [ 395.824438][T11728] netlink: 'syz.3.2653': attribute type 21 has an invalid length. [ 395.852669][T11728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2653'. [ 395.951821][T11735] netlink: 'syz.2.2656': attribute type 2 has an invalid length. [ 395.973980][T11735] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 396.025811][T11735] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2656'. [ 396.077514][T11746] netlink: 'syz.0.2659': attribute type 21 has an invalid length. [ 396.086480][T11746] netlink: 'syz.0.2659': attribute type 6 has an invalid length. [ 396.094914][T11746] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2659'. [ 396.256895][T11751] netlink: 'syz.0.2661': attribute type 10 has an invalid length. [ 399.447286][T11808] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2681'. [ 399.497197][T11808] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 399.537691][T11808] CPU: 1 PID: 11808 Comm: syz.4.2681 Not tainted syzkaller #0 [ 399.545203][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.555283][T11808] Call Trace: [ 399.558582][T11808] [ 399.561532][T11808] dump_stack_lvl+0x188/0x24e [ 399.566246][T11808] ? show_regs_print_info+0x12/0x12 [ 399.571471][T11808] ? load_image+0x410/0x410 [ 399.576032][T11808] sysfs_warn_dup+0x8a/0xa0 [ 399.580570][T11808] sysfs_do_create_link_sd+0xc0/0x110 [ 399.585988][T11808] device_add+0x83b/0x1050 [ 399.590451][T11808] wiphy_register+0x1d8b/0x2aa0 [ 399.595366][T11808] ? cfg80211_event_work+0x40/0x40 [ 399.600510][T11808] ? minstrel_ht_alloc+0x894/0xa20 [ 399.605669][T11808] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 399.611770][T11808] ieee80211_register_hw+0x2d48/0x39f0 [ 399.617281][T11808] ? ieee80211_register_hw+0xee1/0x39f0 [ 399.622849][T11808] ? ieee80211_register_hw+0xee1/0x39f0 [ 399.628437][T11808] ? ieee80211_tasklet_handler+0x20/0x20 [ 399.634092][T11808] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 399.640015][T11808] ? __debug_object_init+0xed/0x440 [ 399.645250][T11808] ? memset+0x1e/0x40 [ 399.649254][T11808] ? __hrtimer_init+0x189/0x270 [ 399.654141][T11808] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 399.659921][T11808] ? memcpy+0x3c/0x60 [ 399.663945][T11808] hwsim_new_radio_nl+0xab7/0xc90 [ 399.669037][T11808] genl_family_rcv_msg_doit+0x22f/0x350 [ 399.674606][T11808] ? end_current_label_crit_section+0x170/0x170 [ 399.680885][T11808] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 399.686821][T11808] ? bpf_lsm_capable+0x5/0x10 [ 399.691521][T11808] ? security_capable+0x85/0xb0 [ 399.696414][T11808] genl_rcv_msg+0x601/0x790 [ 399.700960][T11808] ? genl_bind+0x360/0x360 [ 399.705409][T11808] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 399.711824][T11808] netlink_rcv_skb+0x1ef/0x440 [ 399.716630][T11808] ? genl_bind+0x360/0x360 [ 399.721073][T11808] ? netlink_ack+0x1160/0x1160 [ 399.725887][T11808] ? down_read+0x1a8/0x2d0 [ 399.730327][T11808] genl_rcv+0x24/0x40 [ 399.734326][T11808] netlink_unicast+0x7ad/0x920 [ 399.739149][T11808] netlink_sendmsg+0x8ad/0xbd0 [ 399.743962][T11808] ? netlink_getsockopt+0x550/0x550 [ 399.749197][T11808] ? apparmor_socket_sendmsg+0x8a/0x330 [ 399.754772][T11808] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 399.760077][T11808] ? security_socket_sendmsg+0x7c/0xa0 [ 399.765566][T11808] ? netlink_getsockopt+0x550/0x550 [ 399.772276][T11808] ____sys_sendmsg+0x5ed/0x9a0 [ 399.777091][T11808] ? __sys_sendmsg_sock+0x30/0x30 [ 399.782144][T11808] ? __import_iovec+0x306/0x510 [ 399.787037][T11808] ? import_iovec+0x6f/0xa0 [ 399.791575][T11808] ___sys_sendmsg+0x2a2/0x360 [ 399.796294][T11808] ? __sys_sendmsg+0x2a0/0x2a0 [ 399.801182][T11808] __se_sys_sendmsg+0x1c3/0x2b0 [ 399.806058][T11808] ? ct_nmi_exit+0x145/0x1c0 [ 399.810672][T11808] ? __x64_sys_sendmsg+0x80/0x80 [ 399.815680][T11808] ? lockdep_hardirqs_on+0x94/0x140 [ 399.820911][T11808] do_syscall_64+0x4c/0xa0 [ 399.825354][T11808] ? clear_bhb_loop+0x60/0xb0 [ 399.830053][T11808] ? clear_bhb_loop+0x60/0xb0 [ 399.834760][T11808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.840674][T11808] RIP: 0033:0x7f6f40b9e0d9 [ 399.845108][T11808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.864735][T11808] RSP: 002b:00007f6f41ad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.873170][T11808] RAX: ffffffffffffffda RBX: 00007f6f40e26090 RCX: 00007f6f40b9e0d9 [ 399.881155][T11808] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 399.889149][T11808] RBP: 00007f6f40c35024 R08: 0000000000000000 R09: 0000000000000000 [ 399.897144][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.905134][T11808] R13: 00007f6f40e26128 R14: 00007f6f40e26090 R15: 00007ffff674e7d8 [ 399.913156][T11808] [ 400.801622][T11815] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2683'. [ 400.966910][T11827] device bridge_slave_0 left promiscuous mode [ 400.973236][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.420954][T11847] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2695'. [ 401.452834][T11848] netlink: 'syz.2.2693': attribute type 21 has an invalid length. [ 401.466811][T11848] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2693'. [ 401.594222][T11850] netlink: 'syz.1.2696': attribute type 10 has an invalid length. [ 401.633857][T11850] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2696'. [ 401.665023][T11850] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 403.541478][T11879] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 403.681869][T11883] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2709'. [ 403.839778][T11888] netlink: 'syz.1.2710': attribute type 10 has an invalid length. [ 403.966662][T11895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2714'. [ 404.030717][T11895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2714'. [ 404.067765][T11894] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2714'. [ 405.661086][T11923] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 406.550036][T11927] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2723'. [ 406.658183][T11934] netlink: 'syz.0.2728': attribute type 9 has an invalid length. [ 406.659627][T11935] netlink: 'syz.4.2727': attribute type 10 has an invalid length. [ 406.672941][T11934] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2728'. [ 406.821437][T11942] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2730'. [ 407.154630][T11955] netlink: 'syz.0.2736': attribute type 10 has an invalid length. [ 408.530729][T11981] netlink: 'syz.2.2744': attribute type 10 has an invalid length. [ 408.635083][T11985] delete_channel: no stack [ 408.640654][T11985] delete_channel: no stack [ 408.932068][T11997] netlink: 'syz.3.2750': attribute type 10 has an invalid length. [ 409.167824][T12010] netlink: 'syz.1.2753': attribute type 10 has an invalid length. [ 409.273438][T12010] device dummy0 left promiscuous mode [ 409.328603][T12010] team0: Port device dummy0 removed [ 409.487510][T12025] tun0: tun_chr_ioctl cmd 1074025675 [ 409.525819][T12025] tun0: persist enabled [ 409.551352][T12026] tun0: tun_chr_ioctl cmd 1074025675 [ 409.579934][T12026] tun0: persist enabled [ 409.650873][T12028] netlink: 'syz.1.2763': attribute type 2 has an invalid length. [ 409.696330][T12028] netlink: 'syz.1.2763': attribute type 4 has an invalid length. [ 409.745796][T12028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2763'. [ 410.124002][T12030] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2764'. [ 411.371070][T12038] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2767'. [ 411.441258][T12041] device pim6reg1 entered promiscuous mode [ 411.588078][T12040] netlink: 'syz.0.2768': attribute type 10 has an invalid length. [ 411.612453][T12047] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2771'. [ 411.816358][T12054] netlink: 'syz.3.2773': attribute type 10 has an invalid length. [ 414.094307][T12092] netlink: 'syz.2.2785': attribute type 10 has an invalid length. [ 414.116025][T12094] tipc: Started in network mode [ 414.120943][T12094] tipc: Node identity 9215a268, cluster identity 4711 [ 414.167765][T12094] tipc: Node number set to 2450891368 [ 414.173930][T12096] netlink: 'syz.0.2787': attribute type 10 has an invalid length. [ 414.249366][T12103] netlink: 'syz.4.2788': attribute type 29 has an invalid length. [ 414.292973][T12103] netlink: 'syz.4.2788': attribute type 29 has an invalid length. [ 414.317607][T12105] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 414.328311][T12105] netlink: 'syz.3.2791': attribute type 8 has an invalid length. [ 414.352262][T12105] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'. [ 417.236387][T12103] netlink: 'syz.4.2788': attribute type 2 has an invalid length. [ 417.244234][T12103] netlink: 'syz.4.2788': attribute type 8 has an invalid length. [ 417.255961][T12103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2788'. [ 417.308152][T12108] netlink: 'syz.4.2788': attribute type 2 has an invalid length. [ 417.345712][T12108] netlink: 'syz.4.2788': attribute type 8 has an invalid length. [ 417.374367][T12108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2788'. [ 417.612396][T12127] device sit0 entered promiscuous mode [ 417.780326][T12133] netlink: 'syz.0.2799': attribute type 10 has an invalid length. [ 420.475982][T12148] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 420.496030][T12148] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2803'. [ 420.778622][T12167] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.2811'. [ 421.027375][T12182] netlink: 'syz.0.2814': attribute type 10 has an invalid length. [ 422.241930][T12197] netlink: 'syz.2.2818': attribute type 29 has an invalid length. [ 422.264121][T12197] netlink: 'syz.2.2818': attribute type 29 has an invalid length. [ 422.280858][T12197] netlink: 'syz.2.2818': attribute type 29 has an invalid length. [ 423.886000][T12236] netlink: 'syz.0.2828': attribute type 10 has an invalid length. [ 424.094545][T12241] netlink: 'syz.3.2832': attribute type 16 has an invalid length. [ 424.156445][T12240] netlink: 'syz.1.2833': attribute type 21 has an invalid length. [ 424.168279][T12241] netlink: 'syz.3.2832': attribute type 3 has an invalid length. [ 424.184479][T12241] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2832'. [ 424.428890][T12252] netlink: 'syz.2.2837': attribute type 4 has an invalid length. [ 424.437779][T12252] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2837'. [ 424.889422][T12271] netlink: 'syz.2.2844': attribute type 11 has an invalid length. [ 424.900389][T12271] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2844'. [ 424.918967][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.280131][T12275] netlink: 'syz.2.2845': attribute type 10 has an invalid length. [ 426.209045][T12282] netlink: 'syz.2.2848': attribute type 21 has an invalid length. [ 426.225817][T12282] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.233617][T12282] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.240879][T12282] IPv6: NLM_F_CREATE should be set when creating new route [ 426.248154][T12282] IPv6: NLM_F_CREATE should be set when creating new route [ 426.255374][T12282] IPv6: NLM_F_CREATE should be set when creating new route [ 426.502624][T12295] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2852'. [ 426.578573][T12298] netlink: 'syz.4.2853': attribute type 10 has an invalid length. [ 426.586971][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2853'. [ 426.596792][T12298] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 427.189546][T12310] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2858'. [ 427.211094][T12310] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 427.412392][T12322] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 428.849812][ T4328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.912447][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.923079][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.931232][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.933949][ T4328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.952264][ T4279] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.961527][ T4279] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.968846][ T4279] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.085547][T12368] FAULT_INJECTION: forcing a failure. [ 429.085547][T12368] name failslab, interval 1, probability 0, space 0, times 0 [ 429.098656][T12368] CPU: 0 PID: 12368 Comm: syz.1.2877 Not tainted syzkaller #0 [ 429.106136][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.116205][T12368] Call Trace: [ 429.119495][T12368] [ 429.122438][T12368] dump_stack_lvl+0x188/0x24e [ 429.127142][T12368] ? sctp_sendmsg+0x1686/0x2940 [ 429.132017][T12368] ? ___sys_sendmsg+0x2a2/0x360 [ 429.136903][T12368] ? show_regs_print_info+0x12/0x12 [ 429.142121][T12368] ? load_image+0x410/0x410 [ 429.146656][T12368] should_fail_ex+0x390/0x4c0 [ 429.151362][T12368] should_failslab+0x5/0x20 [ 429.155881][T12368] slab_pre_alloc_hook+0x59/0x300 [ 429.160926][T12368] ? sctp_add_bind_addr+0x89/0x350 [ 429.166062][T12368] __kmem_cache_alloc_node+0x4f/0x270 [ 429.171456][T12368] ? sctp_add_bind_addr+0x89/0x350 [ 429.176586][T12368] kmalloc_trace+0x26/0xe0 [ 429.181033][T12368] sctp_add_bind_addr+0x89/0x350 [ 429.185992][T12368] sctp_copy_local_addr_list+0x317/0x4d0 [ 429.191654][T12368] ? sctp_copy_local_addr_list+0xa0/0x4d0 [ 429.197393][T12368] ? sctp_do_8_2_transport_strike+0x900/0x900 [ 429.203484][T12368] ? sctp_v4_is_any+0x31/0x50 [ 429.208176][T12368] ? sctp_copy_one_addr+0x93/0x660 [ 429.213306][T12368] sctp_bind_addr_copy+0xaf/0x3c0 [ 429.218354][T12368] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 429.224711][T12368] sctp_connect_new_asoc+0x2f5/0x6a0 [ 429.230027][T12368] ? __sctp_connect+0xd80/0xd80 [ 429.234902][T12368] ? __local_bh_enable_ip+0x136/0x1c0 [ 429.240292][T12368] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 429.245851][T12368] ? security_sctp_bind_connect+0x85/0xb0 [ 429.251597][T12368] sctp_sendmsg+0x1686/0x2940 [ 429.256307][T12368] ? sctp_getsockopt+0x8a0/0x8a0 [ 429.261265][T12368] ? __might_fault+0xa6/0x120 [ 429.265958][T12368] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 429.272390][T12368] ? aa_sock_msg_perm+0x94/0x150 [ 429.277354][T12368] ? inet_sendmsg+0xca/0x2a0 [ 429.281958][T12368] ? inet_send_prepare+0x250/0x250 [ 429.287085][T12368] ____sys_sendmsg+0x5ed/0x9a0 [ 429.291881][T12368] ? __sys_sendmsg_sock+0x30/0x30 [ 429.296924][T12368] ? __import_iovec+0x306/0x510 [ 429.301801][T12368] ? import_iovec+0x6f/0xa0 [ 429.306365][T12368] ___sys_sendmsg+0x2a2/0x360 [ 429.311070][T12368] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.315875][T12368] ? __lock_acquire+0x7c40/0x7c40 [ 429.320947][T12368] __se_sys_sendmsg+0x1c3/0x2b0 [ 429.325825][T12368] ? __x64_sys_sendmsg+0x80/0x80 [ 429.330797][T12368] ? lockdep_hardirqs_on+0x94/0x140 [ 429.336995][T12368] do_syscall_64+0x4c/0xa0 [ 429.341695][T12368] ? clear_bhb_loop+0x60/0xb0 [ 429.346391][T12368] ? clear_bhb_loop+0x60/0xb0 [ 429.351092][T12368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.357019][T12368] RIP: 0033:0x7fd9f8d9e0d9 [ 429.361445][T12368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.381058][T12368] RSP: 002b:00007fd9f9c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.389471][T12368] RAX: ffffffffffffffda RBX: 00007fd9f9025fa0 RCX: 00007fd9f8d9e0d9 [ 429.397448][T12368] RDX: 0000000000000040 RSI: 0000200000000e40 RDI: 0000000000000003 [ 429.405427][T12368] RBP: 00007fd9f9c47090 R08: 0000000000000000 R09: 0000000000000000 [ 429.413401][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.421365][T12368] R13: 00007fd9f9026038 R14: 00007fd9f9025fa0 R15: 00007ffd0fb4ebc8 [ 429.429360][T12368] [ 429.895278][ T4328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.073208][ T4328] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.173147][T12363] chnl_net:caif_netlink_parms(): no params data found [ 430.267421][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.274916][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.284609][T12363] device bridge_slave_0 entered promiscuous mode [ 430.293547][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.302075][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.310635][T12363] device bridge_slave_1 entered promiscuous mode [ 430.359694][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.387573][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.508027][T12363] team0: Port device team_slave_0 added [ 430.526799][T12363] team0: Port device team_slave_1 added [ 430.594589][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.610896][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.654034][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.672800][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.680350][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.708573][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.924012][T12363] device hsr_slave_0 entered promiscuous mode [ 430.946566][T12363] device hsr_slave_1 entered promiscuous mode [ 431.056020][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 432.297547][T12428] netlink: 'syz.4.2892': attribute type 21 has an invalid length. [ 432.305576][T12428] netlink: 'syz.4.2892': attribute type 6 has an invalid length. [ 432.322124][T12428] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2892'. [ 432.405598][T12363] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.469164][T12363] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.579488][T12363] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.597187][T12436] netlink: 'syz.3.2895': attribute type 10 has an invalid length. [ 432.628320][T12363] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.001493][T12458] netlink: 'syz.3.2900': attribute type 29 has an invalid length. [ 433.135916][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 433.419234][T12458] netlink: 'syz.3.2900': attribute type 29 has an invalid length. [ 433.456449][T12460] netlink: 'syz.3.2900': attribute type 29 has an invalid length. [ 433.680609][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.734848][T11749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.745218][T11749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.216256][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 435.980014][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.012870][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.037803][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.061905][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.069119][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.089021][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.135464][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 436.150659][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.162212][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.169410][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.202640][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 436.214843][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.316088][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.324955][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.334778][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.367690][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.385310][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 436.432223][T12363] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 436.457580][T12363] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 436.483348][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.523450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.540118][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.549537][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.576865][ T4328] device hsr_slave_0 left promiscuous mode [ 436.583751][ T4328] device hsr_slave_1 left promiscuous mode [ 436.604378][ T4328] device veth1_macvtap left promiscuous mode [ 436.611218][ T4328] device veth0_macvtap left promiscuous mode [ 436.950763][ T4328] device macvlan0 left promiscuous mode [ 436.958890][ T4328] team0 (unregistering): Port device macvlan0 removed [ 437.172240][ T4328] device team_slave_1 left promiscuous mode [ 437.178911][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 437.211590][ T4328] device team_slave_0 left promiscuous mode [ 437.218929][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 437.300959][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 437.490646][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.939588][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.950104][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.979017][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.001364][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.012795][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.038117][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.048516][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.059847][T12363] device veth0_vlan entered promiscuous mode [ 438.070483][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 438.080268][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.094049][T12363] device veth1_vlan entered promiscuous mode [ 438.123597][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 438.133187][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 438.143082][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.151958][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.164236][T12363] device veth0_macvtap entered promiscuous mode [ 438.176063][T12363] device veth1_macvtap entered promiscuous mode [ 438.208058][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.215483][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.225595][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.237130][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.246123][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.257834][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.270222][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.279679][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 438.291823][T12363] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.303729][T12363] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.314133][T12363] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.323402][T12363] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.752467][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.770191][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.793838][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.921148][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.965867][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.017663][T11749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.612278][T12538] netlink: 'syz.2.2921': attribute type 21 has an invalid length. [ 439.859490][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.866177][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.323635][T12546] FAULT_INJECTION: forcing a failure. [ 441.323635][T12546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.373552][T12546] CPU: 1 PID: 12546 Comm: syz.0.2865 Not tainted syzkaller #0 [ 441.381052][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.391114][T12546] Call Trace: [ 441.394385][T12546] [ 441.397308][T12546] dump_stack_lvl+0x188/0x24e [ 441.401984][T12546] ? show_regs_print_info+0x12/0x12 [ 441.407176][T12546] ? load_image+0x410/0x410 [ 441.411668][T12546] ? __lock_acquire+0x7c40/0x7c40 [ 441.416684][T12546] ? perf_trace_lock_acquire+0x101/0x3f0 [ 441.422309][T12546] should_fail_ex+0x390/0x4c0 [ 441.426982][T12546] _copy_from_user+0x2c/0x170 [ 441.431650][T12546] ___sys_sendmsg+0x1c3/0x360 [ 441.436325][T12546] ? __sys_sendmsg+0x2a0/0x2a0 [ 441.441092][T12546] ? __lock_acquire+0x7c40/0x7c40 [ 441.446119][T12546] __se_sys_sendmsg+0x1c3/0x2b0 [ 441.450960][T12546] ? __x64_sys_sendmsg+0x80/0x80 [ 441.455899][T12546] ? lockdep_hardirqs_on+0x94/0x140 [ 441.461086][T12546] do_syscall_64+0x4c/0xa0 [ 441.465497][T12546] ? clear_bhb_loop+0x60/0xb0 [ 441.470163][T12546] ? clear_bhb_loop+0x60/0xb0 [ 441.474831][T12546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.480712][T12546] RIP: 0033:0x7fb26b79e0d9 [ 441.485114][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.504713][T12546] RSP: 002b:00007fb26c5d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.513115][T12546] RAX: ffffffffffffffda RBX: 00007fb26ba25fa0 RCX: 00007fb26b79e0d9 [ 441.521077][T12546] RDX: 0000000000600300 RSI: 0000200000000000 RDI: 0000000000000003 [ 441.529036][T12546] RBP: 00007fb26c5d1090 R08: 0000000000000000 R09: 0000000000000000 [ 441.536994][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.544951][T12546] R13: 00007fb26ba26038 R14: 00007fb26ba25fa0 R15: 00007ffd0d350ea8 [ 441.552919][T12546] [ 441.782662][T12549] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.839976][T12549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.252107][T12605] device sit0 left promiscuous mode [ 443.693738][T12621] syz.4.2952[12621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 443.693843][T12621] syz.4.2952[12621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.909746][T12633] FAULT_INJECTION: forcing a failure. [ 444.909746][T12633] name failslab, interval 1, probability 0, space 0, times 0 [ 444.966085][T12633] CPU: 1 PID: 12633 Comm: syz.3.2954 Not tainted syzkaller #0 [ 444.973584][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.983651][T12633] Call Trace: [ 444.986987][T12633] [ 444.989934][T12633] dump_stack_lvl+0x188/0x24e [ 444.994639][T12633] ? show_regs_print_info+0x12/0x12 [ 444.999876][T12633] ? load_image+0x410/0x410 [ 445.004405][T12633] ? __might_sleep+0xd0/0xd0 [ 445.009079][T12633] ? __lock_acquire+0x7c40/0x7c40 [ 445.014102][T12633] ? __might_sleep+0xd0/0xd0 [ 445.018690][T12633] should_fail_ex+0x390/0x4c0 [ 445.023367][T12633] should_failslab+0x5/0x20 [ 445.027862][T12633] slab_pre_alloc_hook+0x59/0x300 [ 445.032883][T12633] kmem_cache_alloc_lru+0x49/0x2e0 [ 445.037981][T12633] ? sock_alloc_inode+0x24/0xc0 [ 445.042827][T12633] sock_alloc_inode+0x24/0xc0 [ 445.047493][T12633] ? sockfs_init_fs_context+0xa0/0xa0 [ 445.052851][T12633] new_inode_pseudo+0x5f/0x1c0 [ 445.057630][T12633] __sock_create+0x129/0x940 [ 445.062214][T12633] ? __might_fault+0xa6/0x120 [ 445.066881][T12633] ? __might_fault+0xc2/0x120 [ 445.071548][T12633] __sys_socketpair+0x1bd/0x540 [ 445.076397][T12633] __x64_sys_socketpair+0x97/0xb0 [ 445.081418][T12633] do_syscall_64+0x4c/0xa0 [ 445.085827][T12633] ? clear_bhb_loop+0x60/0xb0 [ 445.090497][T12633] ? clear_bhb_loop+0x60/0xb0 [ 445.095173][T12633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.101058][T12633] RIP: 0033:0x7fde0e99e0d9 [ 445.105464][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.125059][T12633] RSP: 002b:00007fde0f80a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 445.133466][T12633] RAX: ffffffffffffffda RBX: 00007fde0ec25fa0 RCX: 00007fde0e99e0d9 [ 445.141428][T12633] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 445.149388][T12633] RBP: 00007fde0f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 445.157350][T12633] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 445.165310][T12633] R13: 00007fde0ec26038 R14: 00007fde0ec25fa0 R15: 00007fffd3bbea88 [ 445.173289][T12633] [ 445.216423][T12633] socket: no more sockets [ 446.930234][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.939380][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.947898][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.956703][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.965490][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 446.973090][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.630366][T12682] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2969'. [ 447.939258][T12676] chnl_net:caif_netlink_parms(): no params data found [ 447.950765][T12692] netlink: 'syz.0.2972': attribute type 2 has an invalid length. [ 447.967093][T12692] netlink: 'syz.0.2972': attribute type 4 has an invalid length. [ 447.979320][T12692] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2972'. [ 448.110415][T12700] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2975'. [ 448.163039][T12704] netlink: 'syz.1.2978': attribute type 2 has an invalid length. [ 448.232284][T12676] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.304741][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.317844][T12676] device bridge_slave_0 entered promiscuous mode [ 448.339656][T12711] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2977'. [ 448.473237][T12676] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.490789][T12676] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.533142][T12676] device bridge_slave_1 entered promiscuous mode [ 449.065923][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 449.740285][T12676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.836852][T12676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link Stopping sshd: [ 449.930746][T12676] team0: Port device team_slave_0 added [ 449.964562][T12676] team0: Port device team_slave_1 added [ 449.979481][T12733] FAULT_INJECTION: forcing a failure. [ 449.979481][T12733] name failslab, interval 1, probability 0, space 0, times 0 [ 450.068157][T12733] CPU: 0 PID: 12733 Comm: syz.4.2985 Not tainted syzkaller #0 [ 450.075660][T12733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.085720][T12733] Call Trace: [ 450.089005][T12733] [ 450.091939][T12733] dump_stack_lvl+0x188/0x24e [ 450.096643][T12733] ? show_regs_print_info+0x12/0x12 [ 450.101806][T12676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.101843][T12733] ? load_image+0x410/0x410 [ 450.113273][T12733] ? __might_sleep+0xd0/0xd0 [ 450.117886][T12733] ? __lock_acquire+0x7c40/0x7c40 [ 450.122932][T12733] should_fail_ex+0x390/0x4c0 [ 450.123188][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.127607][T12733] should_failslab+0x5/0x20 [ 450.127625][T12733] slab_pre_alloc_hook+0x59/0x300 [ 450.127648][T12733] kmem_cache_alloc_node+0x5a/0x310 [ 450.127665][T12733] ? __alloc_skb+0xf9/0x7d0 [ 450.127690][T12733] __alloc_skb+0xf9/0x7d0 [ 450.127714][T12733] netlink_sendmsg+0x654/0xbd0 [ 450.127746][T12733] ? netlink_getsockopt+0x550/0x550 [ 450.127768][T12733] ? apparmor_socket_sendmsg+0x8a/0x330 [ 450.127791][T12733] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 450.127807][T12733] ? security_socket_sendmsg+0x7c/0xa0 [ 450.127826][T12733] ? netlink_getsockopt+0x550/0x550 [ 450.127849][T12733] ____sys_sendmsg+0x5ed/0x9a0 [ 450.127879][T12733] ? __sys_sendmsg_sock+0x30/0x30 [ 450.127897][T12733] ? __import_iovec+0x306/0x510 [ 450.127924][T12733] ? import_iovec+0x6f/0xa0 [ 450.127946][T12733] ___sys_sendmsg+0x2a2/0x360 [ 450.127972][T12733] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.128012][T12733] ? __lock_acquire+0x7c40/0x7c40 [ 450.128055][T12733] __se_sys_sendmsg+0x1c3/0x2b0 [ 450.128080][T12733] ? __x64_sys_sendmsg+0x80/0x80 [ 450.128115][T12733] ? lockdep_hardirqs_on+0x94/0x140 [ 450.128136][T12733] do_syscall_64+0x4c/0xa0 [ 450.128157][T12733] ? clear_bhb_loop+0x60/0xb0 [ 450.128178][T12733] ? clear_bhb_loop+0x60/0xb0 [ 450.128197][T12733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.128215][T12733] RIP: 0033:0x7f6f40b9e0d9 [ 450.128231][T12733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.128245][T12733] RSP: 002b:00007f6f41af6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.128266][T12733] RAX: ffffffffffffffda RBX: 00007f6f40e25fa0 RCX: 00007f6f40b9e0d9 [ 450.128279][T12733] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 450.128297][T12733] RBP: 00007f6f41af6090 R08: 0000000000000000 R09: 0000000000000000 [ 450.128309][T12733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.128320][T12733] R13: 00007f6f40e26038 R14: 00007f6f40e25fa0 R15: 00007ffff674e7d8 [ 450.128345][T12733] [ 450.227713][T12728] netlink: 'syz.0.2984': attribute type 3 has an invalid length. stopped /usr/sbin/sshd (pid 4027) OK [ 450.523018][T12676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.717261][T12728] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2984'. Stopping crond: [ 450.909056][T12742] netlink: 'syz.1.2987': attribute type 10 has an invalid length. [ 450.926705][T12676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.933690][T12676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.982820][T12676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active stopped /usr/sbin/crond (pid 4011) OK [ 451.139118][ T49] Bluetooth: hci5: command 0x041b tx timeout Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) Stopping network: [ 451.968515][T12676] device hsr_slave_0 entered promiscuous mode [ 451.995071][T12676] device hsr_slave_1 entered promiscuous mode [ 452.033006][T12676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.073499][T12676] Cannot create hsr debugfs directory [ 453.216064][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 453.591381][ T4328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.924874][ T4328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.001057][T12793] netlink: 'syz.2.2997': attribute type 21 has an invalid length. [ 454.016156][T12793] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2997'. [ 454.053532][T12793] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2997'. [ 454.189811][ T4328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.397419][ T4328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.431715][T12816] netlink: 'syz.0.3005': attribute type 29 has an invalid length. [ 454.487108][T12816] netlink: 'syz.0.3005': attribute type 29 has an invalid length. OK [ 454.848883][T12816] netlink: 'syz.0.3005': attribute type 2 has an invalid length. [ 454.886156][T12816] netlink: 'syz.0.3005': attribute type 8 has an invalid length. [ 454.906113][T12816] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3005'. [ 455.045958][T12819] netlink: 'syz.0.3005': attribute type 2 has an invalid length. [ 455.082778][T12819] netlink: 'syz.0.3005': attribute type 8 has an invalid length. [ 455.125965][T12819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3005'. Stopping iptables: [ 455.297088][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 455.386695][ T4328] tipc: Left network mode OK Stopping system message bus: done [ 457.011761][T12855] netlink: 'syz.0.3012': attribute type 10 has an invalid length. [ 457.022914][T12855] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.030619][T12855] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.084450][T12855] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.091615][T12855] bridge0: port 2(bridge_slave_1) entered listening state [ 457.098957][T12855] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.106107][T12855] bridge0: port 1(bridge_slave_0) entered listening state [ 457.137797][T12855] bond0: (slave bridge0): Enslaving as an active interface with an up link killall: can't kill pid 6735: No such process killall: can't kill pid 7768: No such process [ 457.481466][T12882] netlink: 'syz.1.3018': attribute type 29 has an invalid length. Stopping klogd: [ 458.254989][T12882] netlink: 'syz.1.3018': attribute type 29 has an invalid length. [ 458.282022][T12884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3018'. [ 458.434789][T12888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3018'. [ 458.719397][T12676] netdevsim netdevsim3 netdevsim0: renamed from eth0 OK [ 458.850193][T12676] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.869783][T12676] netdevsim netdevsim3 netdevsim2: renamed from eth2 Stopping acpid: [ 460.012607][T12676] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 460.029208][T12921] validate_nla: 5 callbacks suppressed [ 460.029222][T12921] netlink: 'syz.0.3026': attribute type 10 has an invalid length. [ 460.044223][T12921] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.051394][T12921] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.321454][T12676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.334394][T12928] netlink: 'syz.4.3028': attribute type 2 has an invalid length. [ 460.356670][T12928] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3028'. OK [ 460.431406][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.453861][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.503730][T12676] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.557145][T12936] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 460.584063][T12936] syzkaller1: linktype set to 823 Stopping syslogd: stopped /sbin/syslogd (pid 3621) OK [ 461.528920][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.547984][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.558811][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.565966][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.595975][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 461.604914][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 461.636216][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.643286][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.670788][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 461.682628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready umount: can't remount debugfs read-only [ 461.707318][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 461.738197][ T4328] device bridge_slave_0 left promiscuous mode [ 461.759267][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.810855][ T4328] device veth1_macvtap left promiscuous mode [ 461.817535][ T4328] device veth0_macvtap left promiscuous mode [ 461.823908][ T4328] device veth1_vlan left promiscuous mode [ 461.833270][ T4328] device veth0_vlan left promiscuous mode [ 462.216615][ T4328] device geneve1 left promiscuous mode [ 462.228252][ T4328] team0 (unregistering): Port device geneve1 removed [ 462.372981][ T4328] device macvlan0 left promiscuous mode [ 462.379722][ T4328] team0 (unregistering): Port device macvlan0 removed umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.46 closed by remote host. [ 462.980930][ T4328] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 463.023863][ T4328] device team_slave_1 left promiscuous mode [ 463.031587][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 463.069457][ T4328] device team_slave_0 left promiscuous mode [ 463.076402][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 463.108596][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.151265][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.325172][ T4328] device dummy0 left promiscuous mode [ 463.331218][ T4328] team0 (unregistering): Port device dummy0 removed [ 463.367383][ T4328] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 463.376274][ T4328] bond0 (unregistering): Released all slaves [ 463.468008][T12956] netlink: 'syz.4.3037': attribute type 10 has an invalid length. [ 463.479093][T12956] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3037'. [ 463.499278][T12956] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. Sent SIGKILL to all processes Requesting system poweroff [ 464.236458][ T4328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.327316][ T4328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.444181][ T4328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.494096][ T4328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.597648][ T4328] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.659873][ T4328] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.718155][ T4328] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.770681][ T4328] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.939269][T12969] kvm: exiting hardware virtualization [ 464.954473][T12969] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 464.973663][T12969] ACPI: PM: Preparing to enter system sleep state S5 [ 464.987688][T12969] reboot: Power down serialport: VM disconnected.