last executing test programs: 3.841674582s ago: executing program 2 (id=1428): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000069c0)={&(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000000640)="1e3c08e6962eea885a599aa679be68fc653750bc415e8cd67daab8664c8871a55c780d7459c84ae37a6b34bad39951fe95e3de994afab56d1fac789da760e4f9e895627489272f85e060b62697b8b491", 0x50}, {&(0x7f0000005180)="53a90152cb5834999e30b4c192b0deb0bfce780dbcfd2f2b03671074e5e07745c038371ebd6eff711c7e150bc484d113053ae5557c20886a1075f5695ddacad4e10bf4d311228f4e2da31c77ceb2f2135bedd5194c48d06cdf2d34487a618aec10c1196707fdc44f721954f2809c7266abea5c1324ad3905224eef809a4ad22bb0fc5bd087188d6232a105201c1b8203974cdda95e863af8dafa6fb4b05af5fded558692aafba8064485e4cac2bf6bc548f267a3713daf5e24fc01c6a5e94c0d08fc70c78fc483a97b6e868892c761c8c52d5816d968c27814c3f37d391d72f4bc39f5b6194622bba56cefac6005156259ef97232097952d015e4a843c608f909efab39acbadbc352667d06c42f20d123fe8b08c0d78fcf77d5fb0cb4e749fae1e2379a31cf4158b96b7c45af6d6013196c3580f3ddc82d860515aa37d86c7112d95ef0e83f12f29716acd58112776cd76a912f246cbe3d02903432d5f5ee168a9624bcfccf41b05e23a3caf8ecbecc84b02f4684262f4a73efe584a984d46d554e3275f08b9f435123b3e1c76b6b66589c34e2d0fb377a4454322222f4bbda1e520ea6bdf086aee0764ccb7e53383bb0a27bdfc9959c77affe005b78863db710560a8896131809208df3b8f3a369dd9eaf23472cc08dea63322fd20b0ea0975b27e5cace4d04ea05762070f002aa9c3d292e9d8ad52949281aae9fae2ed26296381a0dad86c900b13308d9aa279687526cce53bf4244763afe4d0cdd17a43c9549e75870ab730634305d15528c7811408e66e5d1e8829d05e2f08c3f0d9b49a7b9178c62eea55207fc135548b12e83b9a54c575efe4a755c1291e5e3d112bc97777fbde4b7b648200dec4d5dd3e0ea036216f08ccfc201f6df3ae22900611ad018221b1d741d41025530a1ccf6a614c103a38a47f912305ab07a49cf7408a98717d96604f9e02a44862baf1d4215e188eba3a36b3b0754a1c3bad46187020947d248ec4f95ea8399453d28553faca865c6274cd369b36a2e0f85fd6da0d624ed545c2bb8a596a11473842193c33eda1c28f27ba331ec8299ac616b76af6279619592493d45559d9176575abba4eb36e1ccb24121888cbb40815f73384ef867172979474ff77cec3d1356d6394334309f7acb44fefcd2f452637830b739abc3e4dfe9d88a44143cf3d4edc69c8053c0d8912b4995dc417567eca4672b41aa287364eef9122ac19cebd929661514a236bb2270408564772e1e2b1aa134a7dec2cc4b0c58cfde287b6d6314ea4f89137a7705a925f8e591a356280f787a2977c8ee1ff49bc95afbb94707860b6c46d0e00418470dd2b336f2ca88b901a4fb58a087bda8a062acfb6578558eb3c1204396b96718cd126ee05e638ec9e6bd39acf1e6a83c17d862bd149de1f14d58c9172eb122372d16f01feb054695a7164f9d5d3c1acfb07c29e0dd08e677efcebeeb131bdd655beec9bd059b91c1dfd0f96c0b9cec4548643991ad49343a5326922c87163a709607cdd1d01e5ce561e4d9da8f6875359991f3e6d87a72d4784351c5e8fd037d74ada38d3c57a2648bf57ee2f9f8e2aed8d05edcf2b870c64e8eb1d90c9541c89e3b56a0fc9b38d5f68dc9514780928af0fc087aab6e7b406d2dbcb91f513320ee41426b2e6e6dff43e7eac2cb238e820c149e37a99f697d482998bd317e2a77438a03c057cbe8fd79ec7f03785773d62bb5990b66f0a6c606e585e56c129eae357024aef234b347b7c4224b13aeeb8226413fbfe2b3a43096ed534e6df59a328410eaa317d5083bc0c161629e469a984c27071a646130f5b2e93c312648efbe2afb837e9290c3cae966c0c822f554c9a4f1c95d564ad8ba271f8d91c1c1b43928b217a3cfbccf3197f3fcc719eb6266393bae7ee653a28e892523b3e6a86af0d8db8e767074dbee5b17a5cb377e8f4caaba03411eb2befd2030e0a5d4b6bb33c0515d1a2d7417f3fe9d8728e0360e890885b842ee0fe20f1f39b209e0b25be779edcf0ccd0ed6abf7a6d970adff3b0bbb22558f5f034c349bc44babab6c5ed817d85613af9643c0a899d3c120a65d13897e4ba0bc20e54f129e8eb5beaad7c46b902cb729820b580aaeb458b1a71ef77e1398901c65499d8730d79cc21948117b0be2d3060ab31caab0551c3c8dea25fbdf0ca3ea1f5b139807924176a68d986aff5df9d4ed1a32aabe41dcb8d3f18010d7f6e8f6e82f778c09ba57818a0e21dc13d227c0e514cf7760cc7f887a0ddc019b7f3c31a1ae1c8a610b2b884c229f8d295b89843ce94994c8c270e001781b7d02bc5b7f66fcbbad19f2c8e714e3eb3b747708dcb0848ede199cec42c10c03a809f30a5361be6b1a90ca1e4f1aa69480c66798514ae543f3e914416265e7f5896dc497774fe34eff597cb27da17cbfb95ebf91d6f177d82a0ab735a49e0b27b876b548dc205c825f6a62d056726efb5ee02f383be506ebccdbefc6365125c8b0641ad82594c27885b767d3a9e4d80d38b07ec70e8a549d857203a2c050ab542619438c726f880b46337d869a67053dbfffaf546fc31cd4f0170b1a98fa8cb94e03fab4fa8ba321182093adef578226f04586e91dba2fd74bae54ce066d0c34730bc3c4db6515abaccaaf2a6512ac81ecec3e870149ed6eddebc3996212d46ec68443bffab532ac32c109e8b9cfcf9316f0815eec3321d6226dd215be4bde88dcf4d1cd53a56abbae5bbb6eae06fa24c5bfbdb2b72293566f0767d3f9a170dfd03f455debf3c97e7917ad0af9cd56c0c107d4451c532e4e669524a430fcfe2769bcafde4485fe98091ab09bfc5fc1db891590e2ccf4145b2fe683431664fb677107230d481de416158ed5d08892489fb67f60d7e6fc40ca1f5f3815d2e4f0832f9e3fddca4acef061c11dbf0f1f38c32c7c2cf322b630309519f49e2ce78a8eabfb905b7555122f738eccc9b570bee8597acb144705d3bddfdc7945550e5ef03a98e5a34e6757b718134b16e75e7e874055eec9df9e81b06bf1e6ebb85f489860e98018a65c6d8576702d4a4fffbb4f5e248e189d14e7dd5a74adc2bcab5fe06b0dd988371bbaadefdcc553afbc7dba9cbf1c92b27874d21c6adb33d8abd2fbc034ebef64653f2db76a22e0101c40fe092bb8c99ad54d6e373b988d0c61e8c3d38d6353ac090ecb58695e0bc914e8299bd0c58c8ed914dcb1a5f6f35cf86369e57c1fe4448b5f2efbe9f4c26dbcf98c3de8af74483d61e80f39c048367087c1fd8b16e827ca4b30139c11a5b74f94a9e1ef2016df3212f8fb28f6b24d1a46e139e1c509137f489f9af7fa5b008bd2d97ecb33dc308c30eefb6355032adb496f4c6442e0b9198e696547b0133a3d0b87b0b95fe43da2f4dd292bc60b6792a2a49083e251396799c7f3d9887142bd8cf898004dffebc3316d9c718ac634ccb9094358d988a44046000dee228d1a3ed25025f1e6e74266e2f64c34aacbc0bbe0e0b66083f807c82411accb954056853dcfe7fecbed3941d41d098b0394f2f47b07824cdbb37edd71703f4114425ccbf4ffb454dc5f86cdef31392a7f0c57979dc51e6dae1931f984b3287d14a4fa472d2929933ed706e7e1ce2653cdfe73ee9cc9bb73468b7811abeaffac34ba059d3148d9d1c0333b4618a1d5483052a2a5670e5691bd74accdda2c03bbb4e3121ef5cff6cac491fd27da68762e4b00b00bf353e091c87bfa2492566dd133dd95636affeebd4c29ed09e39db89d5d83082ac03b25e0872a2efc93669e46dad51aa055df10cd77050779983ee1f877a568cd4c38f4385bc344fde2b4ec694b3036e3b502740e7d208e87fe25dc7723778b793f1ce90b95354e9a2e0b19875b821a4f432146953a53868988800393a74d9faf2d9eb97817724996d74a8d36c54394be33d92c106578c866aacbf4dd03d0fdbcbc6ffd8ded136b416bcf0dfe8e2eb8d5423a743b006091a6cb911df3a0fd40dd42ed6e1582a34c460599285933ee1ac4ec95f5743cd150b57fd3168839412bee6104d63d257c3c4a01610b235409678acf02ef1c1e3c4db19a9bd1fabf01eb7588eb4c16bf192d5c46c6527ae0a8cdb988214c901610a95c0c91803e197a4e2d35687b059563f42849f739da4314d2acc4a21a4607565c41e59e8f94f917ff51819fb0e5d68a8450092326dc5388313ba6baf428049c4f85dcee18317c660b7052f176c6ef364a0ce1636d8c9a5db48700efd648efc2d843775726ef92c324bce3d3b538f673bb10518c698c14fa0b2c97b59ef767f3358af473cc080d0a104db78722059909b90e66b8aa175a2e1fd00cd251d4752f7a4e37b7f3a8ca4eeaa9b6089af8230838b5b8785cb34407728e9d2aec3a02bbf510531f243bee36d295dc6ee2c127bbaed235af243ada961d20de1569a28cac3a1b7b4a9b8a2fab91054fed709d354025d274c308e69fb95918aea27e8afdc6010f2a7d1a207964876a8333a4831b8e2245470c3dc4f82f077f661f3a4b38d0aa0cca1f4f7a2ce5ca49ab2b43c7baa424366df94a34881b36f521886a8587c3b25ec87f4171ed0384249f974ccca3feb0d1dc4acf5c0f11c9767041beb2e0cc302daaa9f0cb1fa28874c226d06d630ebf7baa159e01b4bd637a9c04912c3dfded535f3384e1317dc747558bfdfababce1284fe0dd174843edc5502b85af362791b724432fdd9ed5974efcf5ddf709c3b9a859514f4f3ae48e2ddb0cadc55ba981b145cc1c03f0d3a6a01d56a2f3bc5c52cc6ae045f98f72e5167f088f4839f012599e2a7c280bd842c990cba346b5e7eda5da794919b8e870e34fc42880fdc6e6f16392c6b9d3e0869c061cc8012e3a0c06a842d64e0e8439640078a7d1547c43a2285d847706140d68843c4c5fb7651abb7dd54293739460995c9a4752040855cec23fe409466390bfd07daf19aea52ff9151afa321abacd1c55dc2762ed4d5acd736c78d8d65d3f0edefb475416e4f48a24d48433efe24f5d26dc6cd7c3cf40a50a29aa9719a40ef50a4cea77b6c25de676861fd86972b96e0259b3f2870a42ce065822597d43c430c6c6e274d57034831a91dfca3b536c983ec34ecdb9e20730ff7030d2125fa172018035944916c9e34dbf5820fe0c004e55bc4e0ae6f1e7473036e852f39fc09c9da11e1851f2fe89024841c6562bb85f9be2a028663036256dde220368939236fbeacc4b89268caf79c0460ac1567f23c6e256cabd135a6f15cc7ec474e12a15d2e339df9d035e79414c986f0d1334eb8dedeed8fbf18095f6195f624f14a9b076cd278ca239dada81cb2683b2af8c3f524ef89cdfafa44a763f4b63a6a215405ffa5f42e11f9291c9a1316107dddc951e19367024c0f1be99644eb129aa2bea886aa4277be7f5be9e546e22a240a9307d64d2724b79211665c7f7fcebfda749055f2657f147dc2f08d5b4316b46ca34827579d341159ddf2d1b6cef6cc3c82ebf0f20a1dc795da1469d71f59f75ca3d76a2bc7392266a1916c290899eb55365da53b708c7d81a27381d4e2096e16510c81340444fe3ba22cc3225e0abed6aa54579e9b9ec2fe88f76bd2d5cf7f6c16d4399b017f50ae7c26b85d446ee67f68c7a69d603270fefc54f6bc5fe4769f7991e522b73cfaf5cec93cd7494474fecc5b7313494c0e9a76b1f3f33185acff7f984af4e1553892b4e6d48850a74394b825c2a5016d6dba64c9d4c7d49f7d01615c907dbb3cf24b1baff5e183785054650d16a68fde54f8c6f93dbf7c2559a337874dfccb82fd1a6c7fe825db49632f07", 0x1000}, {&(0x7f0000006180)="e71176b7236315ffa12a7a909fd152cb213a54c154f9b81ae8a8e9a45a92fc9d990c8359fb2b3b15f5cd1ac10ff0b2bd6f4612d1e67dae1349ba9ae6ad48a611a7345e01cd09f369b09fc482355cf9e464e030aa6207f5a66cb745b222bd7aa9815c47466c4c4abfc61341885a978843793abe360e80fb78f3fac9968c2ed892df92ecefe2571b3a6c242eeb65c48c874ccf50e57100c27cec99e07f6853a2c7a8d66ce386f34e583cabfff9f78b86759aad5070f054931429bbbecf6f3d440fad73bd038a51ea35", 0xc8}, {&(0x7f0000006280)="36d0264a2f50d3a313acc191c00f", 0xe}, {&(0x7f00000062c0)="5f908f2d768b71d9e030787cd155ac9f0d44eb03364ff75e57278f34e36d", 0x1e}, {&(0x7f0000006300)="a45ac5c6ee20aac388315060054127252c8a6b95e10bbb5e8757cc390c4cce969e7746f932337edeef0cce2b6685b3f53b26649fe61b9f43917026278f70d969959af5352dc66dbbcbc4913d6ec42dee8395cd355ec66f68298972376f7939128a4e5e64795ef39aef6338bc2024e8fa4a1518dd92b625393e0319b59250c3744a8a936040cf994a77581ad1eb576d6ef65a9fcb01f88e804e8024d4587964480afffd14ca51f258f3d4a5", 0xab}, {&(0x7f00000063c0)}, {&(0x7f0000006480)="d04b7cdeac15ead37d292a9db100190b64557098b93ab3ec530a4ce0a6c47f7bf6e7af2460ebb1517454f8e6d0535fb42708f9da7212b516f98aa1d46cd104b5140701d42902c69773b731c499daafc041ef63dd4574b3fa4e99405dca0dd2ef0694090453ed7e5c5a09dbc0a584dd42d792a35cd193b95963d41b64ad3fb4047b3ab7d87bed0491447d1b53d1064b3b8afe107ab1a7439f2a1f6a8b85052b7e530d5b1ed6540733f275446dc03f4b0481f5f2e3a0b5dac2a360447b795fdc2cd10546afd8020b26", 0xc8}, {&(0x7f0000006580)="e806da69209716225f7c17493017f35e4f1cd66d3eba5392bef4c65e7ea550a3e6f31bc82fac0f18063a52360a27b53559bb75de4dbb7c585498dd0bbb1ef451a41cc9c3f7", 0x45}, {&(0x7f0000006600)="5eea6873712b4a6336ea8096b883ab4fa2cc3718a3f82135b26559babaa25a879540ff2f43c19b7b8857a9bdf54f1c3d27a0e0cd81db8ac80f9899bf884ae23d5f9a996bef21e6efa03ed2ed390fa053dc3c380fa35d86566082b3071d051f719cba7927bd5f73bf6d1168f827cc6af3e42b6bdd31b17da606bb1aadab5e1b06b9d1096e5212695173cd364e563b8712dacca3003674d0a5c53bb6901605fa19022fe56451489fd940f06a8e9b2ea3094f8e791d36e90c44eda34e038404179445d1112b4ed4ab7061ce7dd8e1e44378e3311b7fedae0898e3124787b3f202bd03", 0xe1}], 0xa, &(0x7f00000067c0)=[{0x28, 0x0, 0x2, "4887e25f5df0a8628125e870c5c6aa02d4e7f79757d5"}, {0x28, 0x108, 0x9, "abc8de15e4fb59eda7c057b51a4498abbdd4b52f3b21"}, {0xb0, 0x110, 0x3, "599d7b742298af95aee6fcbbff0a7487b594706fd2cd71727a6569ae63618fd4c7c1e974846ce8194b84a1a157de528f7f390c17ef2462ada966fc25012efe04b544d2876cca9c11585a8fc1711d2030c64566f6e182d6bb525112d7c0cfc2b25fef30bc97a1e20a432dea4e7cf790469f64584e809e4ed0b42e6fd20da697aa0ffe6df0ae42bf5a24607ec4ceac652ed1ffdae247d2810b0470f22d57"}, {0x100, 0x10e, 0x7fffffff, "fe416719b962dff4be298b75bbaa0d19941de93ec5dac04e20945846675cf0cad6d1298670983e79c50012cb6a05e26963e925a3d6d3d92ea66f59e093eb701289f2d0a736aec2ea3e92fc448a049a1ea7d1f1b1d76611667323017f990b3d186f5ccd357fc7d5b55fd7ceaa2dc065cb07a1729a4dc6f1e0092d4e7a8eec65c41e8233725ab4ccb526ab51e8f697337c816e21380f61fedf22054430921d84e35ccc55dfbcd1598c4a84d2b7b08b378de0b1387f666c3c6eede547c4625d618462e9ac97491aa4f0be8ac92787c2c8f9e46bbd3bb60730997ca0905e23fbd42715b022d92babb61cabb9e6186ba13319"}], 0x200}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={&(0x7f00000002c0)=@caif=@util, 0x80, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000b00)=""/179, 0xb3}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/5, 0x5}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x9, &(0x7f00000050c0)=""/66, 0x42}, 0x10000) 2.625128639s ago: executing program 2 (id=1440): syz_clone(0x656ef0ed0fc169e7, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$kcm(0x21, 0x2, 0xa) r3 = perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0xfc, 0x0, 0x6, 0x0, 0x0, 0x100, 0x4000, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf, 0x2, @perf_config_ext={0x9, 0x1}, 0x10008, 0xac, 0x8, 0x1, 0x906, 0xd, 0x8, 0x0, 0x2, 0x0, 0x800}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x1, 0x8, 0x8, 0xfd, 0x0, 0x9, 0x40400, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x83, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x105072, 0x3, 0x9, 0x7, 0x3, 0xf, 0xcb, 0x0, 0x67b, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r3, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x28}, 0xfc40) r12 = socket$kcm(0x21, 0x0, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x0, 0x2e, 0x30]}}, &(0x7f00000001c0)=""/169, 0x3d, 0xa9, 0x1, 0x1}, 0x28) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) 2.355554698s ago: executing program 2 (id=1443): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0x7ff}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x20, &(0x7f0000000ac0)={&(0x7f00000001c0)=""/23, 0x17, 0x0, &(0x7f0000000a40)=""/112, 0x70}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00e30000000080000000000000d27a56f3df1d7879dbff5903f7b10345e1e1fce196bf96009dd6a20b4d7f8bcce7faa6a8c75ccb35ed358741c89a9b0c8ba31d693cd19c07957fc20ee82cc24c50ef7adc00"/93, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8982, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="7488644306a46966170fc151eb0600000000000000b53a4dce8cb1681eeb67ed51168862bd25e2b002514901bde90288db3b27b7e5cbc93d90641fc32fe60cc2db198000a25ce9639b29044803a1109ffd16545f58198f308f0ea0a182fdd2bf43c9", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x81, &(0x7f0000000580)=""/129, 0x41100, 0x60, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x7e6c, 0x3}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000680)=[{0x1, 0x2, 0x4}, {0x5, 0x1, 0xd, 0xa}, {0x4, 0x1, 0x3, 0x2}, {0x0, 0x3, 0x10, 0xc}, {0x5, 0x2, 0x4, 0x8}], 0x10, 0x81}, 0x94) 2.29296181s ago: executing program 3 (id=1444): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a6596"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x1, 0x106) socketpair(0x10, 0x4, 0xb, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x14}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) 2.230349002s ago: executing program 0 (id=1445): socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c35fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 2.144816714s ago: executing program 2 (id=1446): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x40086602, 0x110e22fff2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7385f8fe6099bee9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00\f\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x200, r2}, 0x38) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000001c0)=r4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0xdf16, 0x7fff, 0x0, 0x4000, r3, 0x8, '\x00', 0x0, r4, 0x2, 0x4}, 0x50) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0x2}, 0x828, 0xb, 0x0, 0x0, 0x9, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd84382f4b7f3706e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000180)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r2}, 0x38) 2.094147546s ago: executing program 3 (id=1447): socket$kcm(0x2, 0x3, 0x106) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001040), 0x12) (async) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc8, &(0x7f00000011c0)=""/200, 0x0, 0x43, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2, 0x1, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$kcm(0x2, 0x3, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x0, 0x32, 0x0, 0x1}, 0x28) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) (async) r5 = socket$kcm(0xa, 0x6, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x4, &(0x7f0000001080)=ANY=[@ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x4, 0x1006, &(0x7f0000001980)=""/4102, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x22, &(0x7f0000000100)=r6, 0x120) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 1.94179646s ago: executing program 2 (id=1448): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000069c0)={&(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000006700)=[{&(0x7f0000000640)="1e3c08e6962eea885a599aa679be68fc653750bc415e8cd67daab8664c8871a55c780d7459c84ae37a6b34bad39951fe95e3de994afab56d1fac789da760e4f9e895627489272f85e060b62697b8b491", 0x50}, {&(0x7f0000005180)="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", 0x1000}, {&(0x7f0000006180)="e71176b7236315ffa12a7a909fd152cb213a54c154f9b81ae8a8e9a45a92fc9d990c8359fb2b3b15f5cd1ac10ff0b2bd6f4612d1e67dae1349ba9ae6ad48a611a7345e01cd09f369b09fc482355cf9e464e030aa6207f5a66cb745b222bd7aa9815c47466c4c4abfc61341885a978843793abe360e80fb78f3fac9968c2ed892df92ecefe2571b3a6c242eeb65c48c874ccf50e57100c27cec99e07f6853a2c7a8d66ce386f34e583cabfff9f78b86759aad5070f054931429bbbecf6f3d440fad73bd038a51ea35", 0xc8}, {&(0x7f0000006280)="36d0264a2f50d3a313acc191c00f", 0xe}, {&(0x7f00000062c0)="5f908f2d768b71d9e030787cd155ac9f0d44eb03364ff75e57278f34e36d", 0x1e}, {&(0x7f0000006300)="a45ac5c6ee20aac388315060054127252c8a6b95e10bbb5e8757cc390c4cce969e7746f932337edeef0cce2b6685b3f53b26649fe61b9f43917026278f70d969959af5352dc66dbbcbc4913d6ec42dee8395cd355ec66f68298972376f7939128a4e5e64795ef39aef6338bc2024e8fa4a1518dd92b625393e0319b59250c3744a8a936040cf994a77581ad1eb576d6ef65a9fcb01f88e804e8024d4587964480afffd14ca51f258f3d4a5", 0xab}, {&(0x7f00000063c0)="318bea87a70ca6110f104915ad63fb82aa4e4f2921135dabd9685b2769e4a827d5a3a8d8458efe21392942ae2ea31be577fd77c4ab61c1d19f68a37df1a485c22ab045b3476a71813fa31c07c2c0465478fb8057355044ea", 0x58}, {&(0x7f0000006480)="d04b7cdeac15ead37d292a9db100190b64557098b93ab3ec530a4ce0a6c47f7bf6e7af2460ebb1517454f8e6d0535fb42708f9da7212b516f98aa1d46cd104b5140701d42902c69773b731c499daafc041ef63dd4574b3fa4e99405dca0dd2ef0694090453ed7e5c5a09dbc0a584dd42d792a35cd193b95963d41b64ad3fb4047b3ab7d87bed0491447d1b53d1064b3b8afe107ab1a7439f2a1f6a8b85052b7e530d5b1ed6540733f275446dc03f4b0481f5f2e3a0b5dac2a360447b795fdc2cd10546afd8020b26", 0xc8}, {&(0x7f0000006580)="e806da69209716225f7c17493017f35e4f1cd66d3eba5392bef4c65e7ea550a3e6f31bc82fac0f18063a52360a27b53559bb75de4dbb7c585498dd0bbb1ef451a41cc9c3f7", 0x45}, {&(0x7f0000006600)="5eea6873712b4a6336ea8096b883ab4fa2cc3718a3f82135b26559babaa25a879540ff2f43c19b7b8857a9bdf54f1c3d27a0e0cd81db8ac80f9899bf884ae23d5f9a996bef21e6efa03ed2ed390fa053dc3c380fa35d86566082b3071d051f719cba7927bd5f73bf6d1168f827cc6af3e42b6bdd31b17da606bb1aadab5e1b06b9d1096e5212695173cd364e563b8712dacca3003674d0a5c53bb6901605fa19022fe56451489fd940f06a8e9b2ea3094f8e791d36e90c44eda34e038404179445d1112b4ed4ab7061ce7dd8e1e44378e3311b7fedae0898e3124787b3f202bd03", 0xe1}], 0xa, &(0x7f00000067c0)=[{0x28, 0x0, 0x2, "4887e25f5df0a8628125e870c5c6aa02d4e7f79757d5"}, {0x28, 0x108, 0x9, "abc8de15e4fb59eda7c057b51a4498abbdd4b52f3b21"}, {0xb0, 0x110, 0x3, "599d7b742298af95aee6fcbbff0a7487b594706fd2cd71727a6569ae63618fd4c7c1e974846ce8194b84a1a157de528f7f390c17ef2462ada966fc25012efe04b544d2876cca9c11585a8fc1711d2030c64566f6e182d6bb525112d7c0cfc2b25fef30bc97a1e20a432dea4e7cf790469f64584e809e4ed0b42e6fd20da697aa0ffe6df0ae42bf5a24607ec4ceac652ed1ffdae247d2810b0470f22d57"}, {0x100, 0x10e, 0x7fffffff, "fe416719b962dff4be298b75bbaa0d19941de93ec5dac04e20945846675cf0cad6d1298670983e79c50012cb6a05e26963e925a3d6d3d92ea66f59e093eb701289f2d0a736aec2ea3e92fc448a049a1ea7d1f1b1d76611667323017f990b3d186f5ccd357fc7d5b55fd7ceaa2dc065cb07a1729a4dc6f1e0092d4e7a8eec65c41e8233725ab4ccb526ab51e8f697337c816e21380f61fedf22054430921d84e35ccc55dfbcd1598c4a84d2b7b08b378de0b1387f666c3c6eede547c4625d618462e9ac97491aa4f0be8ac92787c2c8f9e46bbd3bb60730997ca0905e23fbd42715b022d92babb61cabb9e6186ba13319"}], 0x200}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={&(0x7f00000002c0)=@caif=@util, 0x80, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f0000000580)=""/170, 0xaa}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000b00)=""/179, 0xb3}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/5, 0x5}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x9, &(0x7f00000050c0)=""/66, 0x42}, 0x10000) 1.745001916s ago: executing program 1 (id=1449): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x190b, [{0x2, 0x3, 0x4}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x61, 0x61, 0x2e, 0x61, 0x30, 0x30]}}, &(0x7f0000000300)=""/225, 0x45, 0xe1, 0x0, 0x8, 0x10000}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x8e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.669053329s ago: executing program 3 (id=1450): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES8=r2], 0x9a) 1.64525462s ago: executing program 1 (id=1451): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)="89000140120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad20409bbc7a46e39a8285dcdf12176679df069163ce955f070009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x20040842) 1.641278999s ago: executing program 0 (id=1452): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0x10, 0x4, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x60, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x108904, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000050000000c0000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000cfa09328b932dc48000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r7, r4}, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x4, 0xe5, 0x2, 0x0, 0x400000000000000b, 0x954a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x11efa, 0x4, 0x9c, 0x0, 0x2000000000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x18, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000c000000000000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7050000009500000000000000184000000100675b44bef0f78c9700efb0e5e8524f000000000000006d9efcac1625724d0197c631520000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xdc, &(0x7f00000003c0)=""/220, 0x40f00, 0x46, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x8, 0x3}, 0x10, 0x2e326, r0, 0x8, &(0x7f00000006c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x4, 0x2, 0xc}, {0x0, 0x1, 0x5, 0xb}, {0x3, 0x3, 0xa}, {0x2, 0x5, 0xa, 0xc}, {0x3, 0x1, 0x4, 0x6}, {0x0, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x0, 0x2}], 0x10, 0xfffffff5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r8) socket$kcm(0x11, 0x2, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r7, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x105b, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x60, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x48, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r0}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xd, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r12 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000540), 0x11b8}, 0x263171b11b818719) close(r14) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x10, &(0x7f0000000000)=r15, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) 1.492827504s ago: executing program 3 (id=1453): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000017"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b", 0x7}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) socket$kcm(0x1e, 0x4, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x2}, 0x4000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@ll={0x11, 0xef, 0x0, 0x1, 0x8a, 0x6, @local}, 0x80, 0x0}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) 1.492506314s ago: executing program 1 (id=1454): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000079102800000000006900420000000000950074000000", @ANYRESDEC], 0x0, 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xada}, 0x4000, 0x2, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) r5 = perf_event_open(0x0, 0x0, 0xd, r3, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000001c0)={0x7, 0x80, 0x6, 0x8, 0xd9, 0x7, 0x0, 0xffffffff, 0x3102, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_config_ext={0x73b, 0x8}, 0x12, 0xfffffffffffffffa, 0x8, 0x8, 0x8, 0x9, 0x2, 0x0, 0x7fffffff, 0x0, 0x6}, 0xffffffffffffffff, 0xb, r5, 0x14) 1.466380285s ago: executing program 0 (id=1455): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x28, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a6596"], 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xa, 0x1, 0x106) socketpair(0x10, 0x4, 0xb, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x14}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2000) 1.368013308s ago: executing program 1 (id=1456): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'macvlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES64=r1, @ANYBLOB='\x00'/13, @ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89fd, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb79100098"], 0xfdef) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 968.73668ms ago: executing program 0 (id=1457): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e86c0d85ff9782764532db", 0x0, 0x1300, 0x0, 0x0, 0xe00, 0x0, 0x0}, 0x50) 944.220161ms ago: executing program 2 (id=1458): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf00000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa313c6b876c1d0000007ea60864160af36507001ac0043f020208000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0680050003000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5e6f8a6df01f948e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x1a49, 0xf2f3}, 0x42, 0xc8, 0x0, 0x1, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000002009c2fe241487a7e3dd99f135539e92c5b84b98447a2f8173cbc2476e0b9da199082baee41c6c8779c1441d16d3da2f1000370fdd3eeddab3a3c06c1000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='dB', 0x2}], 0x1}, 0x22044880) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}, 0x8040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x34000}], 0x1}, 0x8054) write$cgroup_int(r4, &(0x7f0000000000)=0x7, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 356.853149ms ago: executing program 3 (id=1459): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x0}, 0x30) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x105101, 0x4, 0x7fff, 0x6, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, r1, 0x0, r0, 0x0) r14 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 355.974039ms ago: executing program 0 (id=1460): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000010006bcd9e3fe3dc6e48aa31086b8703130000ff1f00000000000000040014000d0013000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 303.85077ms ago: executing program 1 (id=1461): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB, @ANYRES8=r2], 0x9a) 129.194915ms ago: executing program 0 (id=1462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b91e76ea0c00000000000007007ef2", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (fail_nth: 38) 714.04µs ago: executing program 3 (id=1463): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000240), 0x5}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8010) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='^+,!z,-\x00') r1 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000380)=""/243, 0xf3}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2, &(0x7f0000001dc0)=""/176, 0xb0}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000800)="f43b", 0x2}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x2}) ioctl$TUNGETVNETHDRSZ(r3, 0x400454cc, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x5, 0xa, 0x7, 0x7, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x8f7}, 0x4000, 0x1, 0x0, 0x8, 0x5, 0xa800, 0xff, 0x0, 0x3d98, 0x0, 0x3113}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x4, 0x8, 0x8, 0x4, 0x0, 0x3, 0x33200, 0x15, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000140), 0x8}, 0x287, 0x0, 0x5, 0x9, 0x5, 0xffffff75, 0x7, 0x0, 0xffffffff, 0x0, 0x1000}, 0x0, 0xd, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xc5}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) 0s ago: executing program 1 (id=1464): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r13}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}, {&(0x7f0000000080)=""/169, 0xa9}, {0x0}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000001380)=""/162, 0xa2}], 0x6}, 0x0) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) kernel console output (not intermixed with test programs): 593] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 170.884232][ T7593] __kmem_cache_alloc_node+0x53/0x250 [ 170.889643][ T7593] ? memcg_alloc_slab_cgroups+0x87/0x130 [ 170.895397][ T7593] __kmalloc_node+0xa4/0x230 [ 170.900029][ T7593] memcg_alloc_slab_cgroups+0x87/0x130 [ 170.905534][ T7593] slab_post_alloc_hook+0xf4/0x4b0 [ 170.910700][ T7593] kmem_cache_alloc_node+0x14c/0x320 [ 170.916202][ T7593] ? __alloc_skb+0x103/0x2c0 [ 170.920836][ T7593] __alloc_skb+0x103/0x2c0 [ 170.925292][ T7593] alloc_skb_with_frags+0xca/0x7b0 [ 170.930451][ T7593] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 170.937193][ T7593] ? __fget_files+0x28/0x4b0 [ 170.941886][ T7593] sock_alloc_send_pskb+0x883/0x9a0 [ 170.947139][ T7593] ? sock_kzfree_s+0x50/0x50 [ 170.951759][ T7593] ? do_raw_spin_lock+0x11f/0x2c0 [ 170.956826][ T7593] ? __rwlock_init+0x150/0x150 [ 170.961634][ T7593] ? do_raw_spin_unlock+0x121/0x230 [ 170.966958][ T7593] unix_dgram_sendmsg+0x5a2/0x16d0 [ 170.972199][ T7593] ? aa_sk_perm+0x83c/0x970 [ 170.976742][ T7593] ? unix_dgram_poll+0x680/0x680 [ 170.981708][ T7593] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 170.988157][ T7593] ? __might_fault+0xaa/0x120 [ 170.992862][ T7593] ? aa_sock_msg_perm+0x94/0x150 [ 170.997836][ T7593] ? unix_seqpacket_sendmsg+0x10c/0x1e0 [ 171.003609][ T7593] ? unix_dgram_peer_wake_me+0x430/0x430 [ 171.009276][ T7593] ____sys_sendmsg+0x5ba/0x960 [ 171.014068][ T7593] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 171.020270][ T7593] ? __sys_sendmsg_sock+0x30/0x30 [ 171.025321][ T7593] ? __import_iovec+0x3fa/0x850 [ 171.030211][ T7593] ? import_iovec+0x73/0xa0 [ 171.034748][ T7593] ___sys_sendmsg+0x2a6/0x360 [ 171.039548][ T7593] ? get_pid_task+0x20/0x1e0 [ 171.044222][ T7593] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.049046][ T7593] ? __lock_acquire+0x7d40/0x7d40 [ 171.054142][ T7593] __se_sys_sendmsg+0x1c2/0x2b0 [ 171.059025][ T7593] ? __x64_sys_sendmsg+0x80/0x80 [ 171.064022][ T7593] ? lockdep_hardirqs_on+0x98/0x150 [ 171.069261][ T7593] do_syscall_64+0x55/0xb0 [ 171.073711][ T7593] ? clear_bhb_loop+0x40/0x90 [ 171.078501][ T7593] ? clear_bhb_loop+0x40/0x90 [ 171.083214][ T7593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.089228][ T7593] RIP: 0033:0x7fc56459ce59 [ 171.093670][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.113313][ T7593] RSP: 002b:00007fc56537c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.121758][ T7593] RAX: ffffffffffffffda RBX: 00007fc564815fa0 RCX: 00007fc56459ce59 [ 171.129766][ T7593] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000a [ 171.137856][ T7593] RBP: 00007fc56537c090 R08: 0000000000000000 R09: 0000000000000000 [ 171.145944][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.154025][ T7593] R13: 00007fc564816038 R14: 00007fc564815fa0 R15: 00007fffbea78528 [ 171.162051][ T7593] [ 171.594658][ T7600] netlink: 76 bytes leftover after parsing attributes in process `syz.0.583'. [ 171.669950][ T7601] netlink: 'syz.3.584': attribute type 29 has an invalid length. [ 171.693331][ T7601] netlink: 'syz.3.584': attribute type 29 has an invalid length. [ 171.879199][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 511 [ 172.109431][ T7609] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 172.197956][ T5790] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 172.206211][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 172.216627][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 172.224215][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.234300][ T5790] Workqueue: hci0 hci_rx_work [ 172.239014][ T5790] Call Trace: [ 172.242314][ T5790] [ 172.245263][ T5790] dump_stack_lvl+0x18c/0x250 [ 172.249972][ T5790] ? show_regs_print_info+0x20/0x20 [ 172.255198][ T5790] ? load_image+0x420/0x420 [ 172.259741][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 172.264882][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 172.269579][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 172.274822][ T5790] kobject_add_internal+0x61c/0xcc0 [ 172.280084][ T5790] kobject_add+0x164/0x240 [ 172.284545][ T5790] ? __rwlock_init+0x150/0x150 [ 172.289344][ T5790] ? kobject_init+0x1e0/0x1e0 [ 172.294254][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 172.299177][ T5790] ? get_device_parent+0x366/0x390 [ 172.304339][ T5790] device_add+0x408/0xc50 [ 172.308713][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 172.313712][ T5790] le_conn_complete_evt+0xf5d/0x1540 [ 172.319072][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 172.325357][ T5790] ? bt_info+0x180/0x180 [ 172.329621][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 172.335275][ T5790] ? skb_pull_data+0xfb/0x200 [ 172.340141][ T5790] hci_le_enh_conn_complete_evt+0x189/0x460 [ 172.346056][ T5790] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 172.352482][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 172.358829][ T5790] hci_event_packet+0x7ba/0x1270 [ 172.363814][ T5790] ? bis_list+0x290/0x290 [ 172.368182][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 172.373419][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 172.378634][ T5790] hci_rx_work+0x43a/0xd60 [ 172.383098][ T5790] ? process_scheduled_works+0x96f/0x15d0 [ 172.388860][ T5790] process_scheduled_works+0xa5d/0x15d0 [ 172.394714][ T5790] ? worker_attach_to_pool+0x380/0x380 [ 172.400538][ T5790] ? assign_work+0x3d2/0x5d0 [ 172.405144][ T5790] worker_thread+0xa55/0xfc0 [ 172.409766][ T5790] kthread+0x2fa/0x390 [ 172.413840][ T5790] ? pr_cont_work+0x560/0x560 [ 172.418707][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 172.423308][ T5790] ret_from_fork+0x48/0x80 [ 172.427731][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 172.432330][ T5790] ret_from_fork_asm+0x11/0x20 [ 172.437116][ T5790] [ 172.442932][ T5789] Bluetooth: hci1: command tx timeout [ 172.448477][ T5790] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 172.463518][ T5790] Bluetooth: hci0: failed to register connection device [ 172.800570][ T7631] netlink: 'syz.2.590': attribute type 29 has an invalid length. [ 172.808677][ T7631] netlink: 'syz.2.590': attribute type 29 has an invalid length. [ 173.009740][ T7637] netlink: 76 bytes leftover after parsing attributes in process `syz.3.594'. [ 173.024457][ T7639] netlink: 'syz.1.595': attribute type 21 has an invalid length. [ 173.050673][ T7639] netlink: 168 bytes leftover after parsing attributes in process `syz.1.595'. [ 173.282621][ T5790] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 173.291015][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 173.300969][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 173.308591][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 173.318703][ T5790] Workqueue: hci3 hci_rx_work [ 173.323458][ T5790] Call Trace: [ 173.326845][ T5790] [ 173.329924][ T5790] dump_stack_lvl+0x18c/0x250 [ 173.334691][ T5790] ? show_regs_print_info+0x20/0x20 [ 173.339964][ T5790] ? load_image+0x420/0x420 [ 173.344575][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 173.349846][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 173.354593][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 173.359869][ T5790] kobject_add_internal+0x61c/0xcc0 [ 173.365162][ T5790] kobject_add+0x164/0x240 [ 173.369658][ T5790] ? __rwlock_init+0x150/0x150 [ 173.374505][ T5790] ? kobject_init+0x1e0/0x1e0 [ 173.379268][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 173.384199][ T5790] ? get_device_parent+0x366/0x390 [ 173.389387][ T5790] device_add+0x408/0xc50 [ 173.393809][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 173.398827][ T5790] le_conn_complete_evt+0xf5d/0x1540 [ 173.404571][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 173.410878][ T5790] ? bt_info+0x180/0x180 [ 173.415185][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 173.420896][ T5790] ? skb_pull_data+0xfb/0x200 [ 173.425661][ T5790] hci_le_enh_conn_complete_evt+0x189/0x460 [ 173.431717][ T5790] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 173.438204][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 173.444337][ T5790] hci_event_packet+0x7ba/0x1270 [ 173.446956][ T7653] netlink: 'syz.2.599': attribute type 29 has an invalid length. [ 173.449349][ T5790] ? bis_list+0x290/0x290 [ 173.449432][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 173.449475][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 173.460248][ T7653] netlink: 'syz.2.599': attribute type 29 has an invalid length. [ 173.461539][ T5790] hci_rx_work+0x43a/0xd60 [ 173.484516][ T5790] ? process_scheduled_works+0x96f/0x15d0 [ 173.490308][ T5790] process_scheduled_works+0xa5d/0x15d0 [ 173.496028][ T5790] ? worker_attach_to_pool+0x380/0x380 [ 173.501584][ T5790] ? assign_work+0x3d2/0x5d0 [ 173.506271][ T5790] worker_thread+0xa55/0xfc0 [ 173.511018][ T5790] kthread+0x2fa/0x390 [ 173.515163][ T5790] ? pr_cont_work+0x560/0x560 [ 173.519920][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 173.524571][ T5790] ret_from_fork+0x48/0x80 [ 173.529039][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 173.533659][ T5790] ret_from_fork_asm+0x11/0x20 [ 173.538482][ T5790] [ 173.546077][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 173.562056][ T5790] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.579598][ T5790] Bluetooth: hci3: failed to register connection device [ 173.963957][ T7670] FAULT_INJECTION: forcing a failure. [ 173.963957][ T7670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.999947][ T7670] CPU: 0 PID: 7670 Comm: syz.3.604 Not tainted syzkaller #0 [ 174.007314][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.017398][ T7670] Call Trace: [ 174.020713][ T7670] [ 174.023661][ T7670] dump_stack_lvl+0x18c/0x250 [ 174.028384][ T7670] ? show_regs_print_info+0x20/0x20 [ 174.033615][ T7670] ? load_image+0x420/0x420 [ 174.038142][ T7670] ? __lock_acquire+0x7d40/0x7d40 [ 174.043190][ T7670] ? __virt_addr_valid+0x18c/0x540 [ 174.048334][ T7670] should_fail_ex+0x39d/0x4d0 [ 174.053063][ T7670] _copy_to_user+0x2f/0xa0 [ 174.057515][ T7670] bpf_vlog_reverse_ubuf+0x2d0/0x3c0 [ 174.062844][ T7670] bpf_vlog_finalize+0x1c2/0x3f0 [ 174.067815][ T7670] btf_new_fd+0x4ca/0x9f0 [ 174.072184][ T7670] ? bpf_btf_show_fdinfo+0x80/0x80 [ 174.077328][ T7670] ? capable+0x88/0xe0 [ 174.081453][ T7670] __sys_bpf+0x670/0x890 [ 174.085718][ T7670] ? bpf_link_show_fdinfo+0x390/0x390 [ 174.091131][ T7670] ? lock_chain_count+0x20/0x20 [ 174.096004][ T7670] __x64_sys_bpf+0x7c/0x90 [ 174.100420][ T7670] do_syscall_64+0x55/0xb0 [ 174.104834][ T7670] ? clear_bhb_loop+0x40/0x90 [ 174.109508][ T7670] ? clear_bhb_loop+0x40/0x90 [ 174.114183][ T7670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.120080][ T7670] RIP: 0033:0x7f0b79d9ce59 [ 174.124499][ T7670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.144195][ T7670] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.152603][ T7670] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 174.160594][ T7670] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 174.168566][ T7670] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 174.176626][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.184587][ T7670] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 174.192566][ T7670] [ 174.583458][ T7678] netlink: 76 bytes leftover after parsing attributes in process `syz.1.606'. [ 174.650219][ T5790] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 174.886821][ T7689] FAULT_INJECTION: forcing a failure. [ 174.886821][ T7689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.939252][ T7689] CPU: 1 PID: 7689 Comm: syz.0.611 Not tainted syzkaller #0 [ 174.946619][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.956718][ T7689] Call Trace: [ 174.960042][ T7689] [ 174.963010][ T7689] dump_stack_lvl+0x18c/0x250 [ 174.967752][ T7689] ? show_regs_print_info+0x20/0x20 [ 174.973013][ T7689] ? load_image+0x420/0x420 [ 174.977570][ T7689] ? __might_fault+0xaa/0x120 [ 174.982315][ T7689] ? __lock_acquire+0x7d40/0x7d40 [ 174.987415][ T7689] should_fail_ex+0x39d/0x4d0 [ 174.992165][ T7689] _copy_from_user+0x2f/0xe0 [ 174.996802][ T7689] __sys_bpf+0x23e/0x890 [ 175.001114][ T7689] ? bpf_link_show_fdinfo+0x390/0x390 [ 175.006579][ T7689] ? lock_chain_count+0x20/0x20 [ 175.011517][ T7689] __x64_sys_bpf+0x7c/0x90 [ 175.015999][ T7689] do_syscall_64+0x55/0xb0 [ 175.020468][ T7689] ? clear_bhb_loop+0x40/0x90 [ 175.025190][ T7689] ? clear_bhb_loop+0x40/0x90 [ 175.029922][ T7689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.035862][ T7689] RIP: 0033:0x7fc56459ce59 [ 175.040321][ T7689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.059974][ T7689] RSP: 002b:00007fc5627f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.068507][ T7689] RAX: ffffffffffffffda RBX: 00007fc564816090 RCX: 00007fc56459ce59 [ 175.076512][ T7689] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 175.084524][ T7689] RBP: 00007fc5627f6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.092515][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.100498][ T7689] R13: 00007fc564816128 R14: 00007fc564816090 R15: 00007fffbea78528 [ 175.108540][ T7689] [ 175.241921][ T7694] netlink: 763 bytes leftover after parsing attributes in process `syz.1.613'. [ 175.616384][ T7701] validate_nla: 4 callbacks suppressed [ 175.616418][ T7701] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 175.635561][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 175.635571][ T5790] Bluetooth: hci3: command tx timeout [ 175.651484][ T7701] netlink: 'syz.1.614': attribute type 29 has an invalid length. [ 175.936917][ T7706] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.616'. [ 176.275472][ T7716] netlink: 52 bytes leftover after parsing attributes in process `syz.3.619'. [ 176.754103][ T7720] netlink: 'syz.3.620': attribute type 29 has an invalid length. [ 176.770872][ T7720] netlink: 'syz.3.620': attribute type 29 has an invalid length. [ 176.937640][ T7724] netlink: 76 bytes leftover after parsing attributes in process `syz.2.621'. [ 176.974226][ T7727] netlink: 'syz.3.620': attribute type 10 has an invalid length. [ 177.419970][ T7740] netlink: 'syz.2.626': attribute type 29 has an invalid length. [ 177.429939][ T7740] netlink: 'syz.2.626': attribute type 29 has an invalid length. [ 177.699691][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 178.041792][ T7760] netlink: 76 bytes leftover after parsing attributes in process `syz.3.633'. [ 178.275689][ T7771] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 178.285543][ T7771] netlink: 'syz.0.638': attribute type 29 has an invalid length. [ 178.592811][ T7778] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 178.601576][ T7778] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 178.641682][ T7780] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 178.648850][ T7780] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 178.936736][ T7785] netlink: 'syz.1.642': attribute type 29 has an invalid length. [ 179.125972][ T7790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.645'. [ 179.935480][ T7800] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.648'. [ 180.030287][ T7810] netlink: 40 bytes leftover after parsing attributes in process `syz.0.651'. [ 180.091076][ T7810] bond0: (slave team0): Releasing backup interface [ 180.117123][ T7810] team0: left allmulticast mode [ 180.136847][ T7810] team_slave_0: left allmulticast mode [ 180.167365][ T7810] team_slave_1: left allmulticast mode [ 180.219403][ T7810] bridge0: port 4(team0) entered blocking state [ 180.234427][ T7810] bridge0: port 4(team0) entered disabled state [ 180.242097][ T7810] team0: entered allmulticast mode [ 180.247618][ T7810] team_slave_0: entered allmulticast mode [ 180.254867][ T7810] team_slave_1: entered allmulticast mode [ 180.352905][ T7816] netlink: 72 bytes leftover after parsing attributes in process `syz.2.653'. [ 180.529971][ T7821] netlink: 76 bytes leftover after parsing attributes in process `syz.0.655'. [ 180.657967][ T7825] validate_nla: 4 callbacks suppressed [ 180.657985][ T7825] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 180.700371][ T7825] bridge0: port 3(macvlan1) entered blocking state [ 180.739279][ T7825] bridge0: port 3(macvlan1) entered disabled state [ 180.746626][ T7825] macvlan1: entered allmulticast mode [ 180.760716][ T7825] macvlan1: entered promiscuous mode [ 180.767291][ T7827] netlink: 'syz.1.658': attribute type 5 has an invalid length. [ 180.789271][ T7827] netlink: 176 bytes leftover after parsing attributes in process `syz.1.658'. [ 180.849482][ T7832] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 180.889261][ T7832] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 181.091514][ T7843] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 181.178734][ T7842] netlink: 'syz.0.663': attribute type 29 has an invalid length. [ 181.213134][ T7842] netlink: 'syz.0.663': attribute type 29 has an invalid length. [ 181.225028][ T7846] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 181.255951][ T7846] team0: Device hsr_slave_0 failed to register rx_handler [ 181.321928][ T7848] netlink: 'syz.0.663': attribute type 29 has an invalid length. [ 181.628942][ T7857] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.666'. [ 181.694648][ T7858] netlink: 76 bytes leftover after parsing attributes in process `syz.0.667'. [ 181.767826][ T7863] FAULT_INJECTION: forcing a failure. [ 181.767826][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 181.796012][ T7863] CPU: 0 PID: 7863 Comm: syz.3.669 Not tainted syzkaller #0 [ 181.803363][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.813445][ T7863] Call Trace: [ 181.816753][ T7863] [ 181.819709][ T7863] dump_stack_lvl+0x18c/0x250 [ 181.824417][ T7863] ? show_regs_print_info+0x20/0x20 [ 181.829643][ T7863] ? load_image+0x420/0x420 [ 181.834176][ T7863] ? __might_sleep+0xe0/0xe0 [ 181.838803][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 181.843871][ T7863] ? perf_trace_lock_acquire+0x104/0x410 [ 181.849554][ T7863] should_fail_ex+0x39d/0x4d0 [ 181.854290][ T7863] should_failslab+0x9/0x20 [ 181.858933][ T7863] slab_pre_alloc_hook+0x59/0x310 [ 181.864008][ T7863] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 181.870615][ T7863] ? sock_kmalloc+0x96/0xf0 [ 181.875118][ T7863] ? sock_kmalloc+0x96/0xf0 [ 181.879621][ T7863] __kmem_cache_alloc_node+0x53/0x250 [ 181.885010][ T7863] ? sock_kmalloc+0x96/0xf0 [ 181.889511][ T7863] __kmalloc+0xa4/0x230 [ 181.893696][ T7863] sock_kmalloc+0x96/0xf0 [ 181.898032][ T7863] ____sys_sendmsg+0x1be/0x960 [ 181.902808][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 181.907843][ T7863] ? __asan_memset+0x22/0x40 [ 181.912445][ T7863] ? __sys_sendmsg_sock+0x30/0x30 [ 181.917471][ T7863] ? __import_iovec+0x3fa/0x850 [ 181.922341][ T7863] ? import_iovec+0x73/0xa0 [ 181.926848][ T7863] ___sys_sendmsg+0x2a6/0x360 [ 181.931533][ T7863] ? get_pid_task+0x20/0x1e0 [ 181.936139][ T7863] ? __sys_sendmsg+0x2a0/0x2a0 [ 181.940931][ T7863] ? __lock_acquire+0x7d40/0x7d40 [ 181.945984][ T7863] __se_sys_sendmsg+0x1c2/0x2b0 [ 181.950846][ T7863] ? __x64_sys_sendmsg+0x80/0x80 [ 181.955813][ T7863] ? lockdep_hardirqs_on+0x98/0x150 [ 181.961021][ T7863] do_syscall_64+0x55/0xb0 [ 181.965440][ T7863] ? clear_bhb_loop+0x40/0x90 [ 181.970115][ T7863] ? clear_bhb_loop+0x40/0x90 [ 181.974794][ T7863] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.980697][ T7863] RIP: 0033:0x7f0b79d9ce59 [ 181.985118][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.004835][ T7863] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.013349][ T7863] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 182.021422][ T7863] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 182.029407][ T7863] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 182.037379][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.045348][ T7863] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 182.053356][ T7863] [ 182.151690][ T7867] netlink: 76 bytes leftover after parsing attributes in process `syz.0.670'. [ 182.197070][ T7869] FAULT_INJECTION: forcing a failure. [ 182.197070][ T7869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.219229][ T7869] CPU: 1 PID: 7869 Comm: syz.3.672 Not tainted syzkaller #0 [ 182.226566][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 182.236629][ T7869] Call Trace: [ 182.239907][ T7869] [ 182.242925][ T7869] dump_stack_lvl+0x18c/0x250 [ 182.247613][ T7869] ? show_regs_print_info+0x20/0x20 [ 182.252815][ T7869] ? load_image+0x420/0x420 [ 182.257318][ T7869] ? __might_fault+0xaa/0x120 [ 182.261996][ T7869] ? __lock_acquire+0x7d40/0x7d40 [ 182.267022][ T7869] should_fail_ex+0x39d/0x4d0 [ 182.271703][ T7869] _copy_from_user+0x2f/0xe0 [ 182.276306][ T7869] ___sys_sendmsg+0x1c7/0x360 [ 182.280991][ T7869] ? __sys_sendmsg+0x2a0/0x2a0 [ 182.285805][ T7869] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 182.292063][ T7869] __se_sys_sendmsg+0x1c2/0x2b0 [ 182.296914][ T7869] ? __x64_sys_sendmsg+0x80/0x80 [ 182.301859][ T7869] ? lockdep_hardirqs_on+0x98/0x150 [ 182.307097][ T7869] do_syscall_64+0x55/0xb0 [ 182.311508][ T7869] ? clear_bhb_loop+0x40/0x90 [ 182.316181][ T7869] ? clear_bhb_loop+0x40/0x90 [ 182.320850][ T7869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.326751][ T7869] RIP: 0033:0x7f0b79d9ce59 [ 182.331168][ T7869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.350782][ T7869] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.359193][ T7869] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 182.367160][ T7869] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 182.375127][ T7869] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 182.383093][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.391058][ T7869] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 182.399039][ T7869] [ 182.504510][ T7876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.673'. [ 183.073792][ T7886] netlink: 76 bytes leftover after parsing attributes in process `syz.0.678'. [ 183.119571][ T51] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 183.241146][ T7892] netlink: 'syz.0.679': attribute type 29 has an invalid length. [ 183.413477][ T7899] team0: left allmulticast mode [ 183.449283][ T7899] team_slave_0: left allmulticast mode [ 183.468384][ T7899] team_slave_1: left allmulticast mode [ 183.475743][ T7899] team0: left promiscuous mode [ 183.482584][ T7899] team_slave_0: left promiscuous mode [ 183.500383][ T7899] team_slave_1: left promiscuous mode [ 183.523275][ T7899] bridge0: port 4(team0) entered disabled state [ 183.580924][ T7899] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.588670][ T7899] team0: entered promiscuous mode [ 183.594382][ T7899] team_slave_0: entered promiscuous mode [ 183.601024][ T7899] team_slave_1: entered promiscuous mode [ 183.607005][ T7899] team0: entered allmulticast mode [ 183.612665][ T7899] team_slave_0: entered allmulticast mode [ 183.618519][ T7899] team_slave_1: entered allmulticast mode [ 183.627259][ T7899] bond0: (slave team0): Enslaving as an active interface with an up link [ 183.637488][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.3.681'. [ 183.663364][ T7898] batman_adv: batadv0: Adding interface: veth0_vlan [ 183.670289][ T7898] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.701136][ T7898] batman_adv: batadv0: Interface activated: veth0_vlan [ 183.912374][ T7907] team0: Device hsr_slave_0 failed to register rx_handler [ 184.139571][ T7914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.687'. [ 184.273550][ T51] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 184.678676][ T7920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.690'. [ 185.266471][ T7933] team0: Device hsr_slave_0 failed to register rx_handler [ 185.719956][ T7954] netlink: 76 bytes leftover after parsing attributes in process `syz.1.699'. [ 185.885742][ T51] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 186.779304][ T7977] validate_nla: 11 callbacks suppressed [ 186.779349][ T7977] netlink: 'syz.3.709': attribute type 33 has an invalid length. [ 186.808526][ T7977] netlink: 164 bytes leftover after parsing attributes in process `syz.3.709'. [ 186.938805][ T7984] netlink: 76 bytes leftover after parsing attributes in process `syz.1.711'. [ 187.154716][ T7986] netlink: 'syz.3.712': attribute type 29 has an invalid length. [ 187.185047][ T7986] netlink: 'syz.3.712': attribute type 29 has an invalid length. [ 187.346453][ T7992] netlink: 'syz.3.712': attribute type 10 has an invalid length. [ 187.984703][ T8003] syzkaller0: entered promiscuous mode [ 187.990738][ T8003] syzkaller0: entered allmulticast mode [ 190.299119][ T8015] netlink: 'syz.2.720': attribute type 2 has an invalid length. [ 190.306838][ T8015] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 190.477129][ T8022] netlink: 76 bytes leftover after parsing attributes in process `syz.3.721'. [ 190.708906][ T8028] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 190.842883][ T8030] netlink: 'syz.3.726': attribute type 29 has an invalid length. [ 190.857252][ T8030] netlink: 'syz.3.726': attribute type 29 has an invalid length. [ 191.183739][ T8034] netlink: 'syz.3.726': attribute type 10 has an invalid length. [ 191.769800][ T8041] netlink: 'syz.2.729': attribute type 21 has an invalid length. [ 191.777904][ T8041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.729'. [ 191.819219][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 192.190920][ T8051] netlink: 76 bytes leftover after parsing attributes in process `syz.1.733'. [ 192.258761][ T8048] netlink: 'syz.0.732': attribute type 21 has an invalid length. [ 192.280228][ T8048] netlink: 132 bytes leftover after parsing attributes in process `syz.0.732'. [ 192.296329][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.732'. [ 192.527525][ T8058] FAULT_INJECTION: forcing a failure. [ 192.527525][ T8058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.589636][ T8058] CPU: 1 PID: 8058 Comm: syz.2.735 Not tainted syzkaller #0 [ 192.596994][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.607100][ T8058] Call Trace: [ 192.610406][ T8058] [ 192.613364][ T8058] dump_stack_lvl+0x18c/0x250 [ 192.618080][ T8058] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.624282][ T8058] ? show_regs_print_info+0x20/0x20 [ 192.629519][ T8058] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.635738][ T8058] should_fail_ex+0x39d/0x4d0 [ 192.640471][ T8058] _copy_from_user+0x2f/0xe0 [ 192.645094][ T8058] bpf_test_init+0xde/0x140 [ 192.649634][ T8058] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 192.655065][ T8058] ? dev_put+0x80/0x80 [ 192.659183][ T8058] ? dev_put+0x80/0x80 [ 192.663282][ T8058] bpf_prog_test_run+0x321/0x390 [ 192.668263][ T8058] __sys_bpf+0x49d/0x890 [ 192.672575][ T8058] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.678009][ T8058] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.684228][ T8058] __x64_sys_bpf+0x7c/0x90 [ 192.688694][ T8058] do_syscall_64+0x55/0xb0 [ 192.693148][ T8058] ? clear_bhb_loop+0x40/0x90 [ 192.697850][ T8058] ? clear_bhb_loop+0x40/0x90 [ 192.702655][ T8058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.708590][ T8058] RIP: 0033:0x7fc02299ce59 [ 192.713041][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.732681][ T8058] RSP: 002b:00007fc023907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.741113][ T8058] RAX: ffffffffffffffda RBX: 00007fc022c15fa0 RCX: 00007fc02299ce59 [ 192.749102][ T8058] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 192.757105][ T8058] RBP: 00007fc023907090 R08: 0000000000000000 R09: 0000000000000000 [ 192.765241][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.773235][ T8058] R13: 00007fc022c16038 R14: 00007fc022c15fa0 R15: 00007ffcafbe5688 [ 192.781239][ T8058] [ 193.005417][ T8060] netlink: 'syz.1.734': attribute type 2 has an invalid length. [ 193.019126][ T8060] netlink: 132 bytes leftover after parsing attributes in process `syz.1.734'. [ 193.727740][ T8069] netlink: 'syz.3.740': attribute type 3 has an invalid length. [ 193.752309][ T8069] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.740'. [ 193.770489][ T8067] netlink: 'syz.1.739': attribute type 29 has an invalid length. [ 193.817959][ T8067] netlink: 'syz.1.739': attribute type 29 has an invalid length. [ 193.831160][ T8073] netlink: 76 bytes leftover after parsing attributes in process `syz.2.742'. [ 194.033978][ T8079] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 194.323561][ T51] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 194.332013][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 194.342535][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 194.350066][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.360314][ T51] Workqueue: hci3 hci_rx_work [ 194.365078][ T51] Call Trace: [ 194.368497][ T51] [ 194.371491][ T51] dump_stack_lvl+0x18c/0x250 [ 194.376347][ T51] ? show_regs_print_info+0x20/0x20 [ 194.381623][ T51] ? load_image+0x420/0x420 [ 194.386211][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 194.391452][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 194.396202][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 194.401448][ T51] kobject_add_internal+0x61c/0xcc0 [ 194.406788][ T51] kobject_add+0x164/0x240 [ 194.411283][ T51] ? __rwlock_init+0x150/0x150 [ 194.416100][ T51] ? kobject_init+0x1e0/0x1e0 [ 194.420819][ T51] ? _raw_spin_unlock+0x28/0x40 [ 194.425735][ T51] ? get_device_parent+0x366/0x390 [ 194.430886][ T51] device_add+0x408/0xc50 [ 194.435298][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 194.440299][ T51] le_conn_complete_evt+0xf5d/0x1540 [ 194.445655][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 194.451939][ T51] ? bt_info+0x180/0x180 [ 194.456280][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 194.461953][ T51] ? skb_pull_data+0xfb/0x200 [ 194.466668][ T51] hci_le_enh_conn_complete_evt+0x189/0x460 [ 194.472595][ T51] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 194.479059][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 194.485159][ T51] hci_event_packet+0x7ba/0x1270 [ 194.490149][ T51] ? bis_list+0x290/0x290 [ 194.494524][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 194.499771][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 194.505010][ T51] hci_rx_work+0x43a/0xd60 [ 194.509492][ T51] ? process_scheduled_works+0x96f/0x15d0 [ 194.515242][ T51] process_scheduled_works+0xa5d/0x15d0 [ 194.520882][ T51] ? worker_attach_to_pool+0x380/0x380 [ 194.526391][ T51] ? assign_work+0x3d2/0x5d0 [ 194.531025][ T51] worker_thread+0xa55/0xfc0 [ 194.535721][ T51] kthread+0x2fa/0x390 [ 194.539857][ T51] ? pr_cont_work+0x560/0x560 [ 194.544576][ T51] ? kthread_blkcg+0xd0/0xd0 [ 194.549205][ T51] ret_from_fork+0x48/0x80 [ 194.553737][ T51] ? kthread_blkcg+0xd0/0xd0 [ 194.558382][ T51] ret_from_fork_asm+0x11/0x20 [ 194.563213][ T51] [ 194.568562][ T51] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.583495][ T51] Bluetooth: hci3: failed to register connection device [ 194.651920][ T8084] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 194.689032][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695460][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.723165][ T8084] netlink: 'syz.0.743': attribute type 29 has an invalid length. [ 194.892111][ T8097] netlink: 'syz.0.743': attribute type 10 has an invalid length. [ 195.325024][ T8106] netlink: 'syz.1.749': attribute type 21 has an invalid length. [ 195.349321][ T8106] netlink: 144 bytes leftover after parsing attributes in process `syz.1.749'. [ 195.578712][ T8112] syz.2.752: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 195.595003][ T8114] netlink: 76 bytes leftover after parsing attributes in process `syz.0.753'. [ 195.624925][ T8112] CPU: 1 PID: 8112 Comm: syz.2.752 Not tainted syzkaller #0 [ 195.632300][ T8112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.642408][ T8112] Call Trace: [ 195.645737][ T8112] [ 195.648806][ T8112] dump_stack_lvl+0x18c/0x250 [ 195.653557][ T8112] ? show_regs_print_info+0x20/0x20 [ 195.658811][ T8112] ? load_image+0x420/0x420 [ 195.663363][ T8112] ? __rcu_read_unlock+0x7c/0xd0 [ 195.668351][ T8112] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 195.674837][ T8112] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 195.681458][ T8112] warn_alloc+0x246/0x340 [ 195.685851][ T8112] ? stack_trace_save+0xaa/0x100 [ 195.690933][ T8112] ? zone_watermark_ok_safe+0x230/0x230 [ 195.696534][ T8112] ? kasan_set_track+0x5f/0x70 [ 195.701317][ T8112] ? kasan_set_track+0x4e/0x70 [ 195.706093][ T8112] ? __kasan_kmalloc+0x8f/0xa0 [ 195.710868][ T8112] ? xsk_init_queue+0xad/0x100 [ 195.715683][ T8112] ? xsk_setsockopt+0x4e5/0x760 [ 195.720564][ T8112] ? do_sock_setsockopt+0x175/0x1a0 [ 195.725814][ T8112] ? __x64_sys_setsockopt+0x182/0x200 [ 195.731247][ T8112] __vmalloc_node_range+0x126/0x1330 [ 195.736615][ T8112] ? free_vm_area+0x50/0x50 [ 195.741160][ T8112] vmalloc_user+0x74/0x80 [ 195.745511][ T8112] ? xskq_create+0xbf/0x170 [ 195.750028][ T8112] xskq_create+0xbf/0x170 [ 195.754379][ T8112] xsk_init_queue+0xad/0x100 [ 195.758988][ T8112] xsk_setsockopt+0x4e5/0x760 [ 195.763722][ T8112] ? xsk_poll+0x680/0x680 [ 195.768076][ T8112] ? __fget_files+0x28/0x4b0 [ 195.772681][ T8112] ? __fget_files+0x28/0x4b0 [ 195.777289][ T8112] ? aa_sock_opt_perm+0x74/0x100 [ 195.782265][ T8112] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 195.787835][ T8112] ? security_socket_setsockopt+0x7e/0xa0 [ 195.793574][ T8112] ? xsk_poll+0x680/0x680 [ 195.797931][ T8112] do_sock_setsockopt+0x175/0x1a0 [ 195.803011][ T8112] ? __fdget+0x180/0x210 [ 195.807279][ T8112] __x64_sys_setsockopt+0x182/0x200 [ 195.812503][ T8112] do_syscall_64+0x55/0xb0 [ 195.816930][ T8112] ? clear_bhb_loop+0x40/0x90 [ 195.821635][ T8112] ? clear_bhb_loop+0x40/0x90 [ 195.826360][ T8112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.832277][ T8112] RIP: 0033:0x7fc02299ce59 [ 195.836706][ T8112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.856432][ T8112] RSP: 002b:00007fc023907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.864877][ T8112] RAX: ffffffffffffffda RBX: 00007fc022c15fa0 RCX: 00007fc02299ce59 [ 195.872889][ T8112] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 195.880905][ T8112] RBP: 00007fc022a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 195.888896][ T8112] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 195.896891][ T8112] R13: 00007fc022c16038 R14: 00007fc022c15fa0 R15: 00007ffcafbe5688 [ 195.904940][ T8112] [ 195.919832][ T8112] Mem-Info: [ 195.928865][ T8112] active_anon:9565 inactive_anon:0 isolated_anon:0 [ 195.928865][ T8112] active_file:13491 inactive_file:39997 isolated_file:0 [ 195.928865][ T8112] unevictable:768 dirty:143 writeback:0 [ 195.928865][ T8112] slab_reclaimable:10147 slab_unreclaimable:93552 [ 195.928865][ T8112] mapped:24693 shmem:1361 pagetables:552 [ 195.928865][ T8112] sec_pagetables:0 bounce:0 [ 195.928865][ T8112] kernel_misc_reclaimable:0 [ 195.928865][ T8112] free:1344936 free_pcp:10421 free_cma:0 [ 196.007411][ T8112] Node 0 active_anon:38260kB inactive_anon:0kB active_file:53964kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98772kB dirty:568kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10684kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 196.040975][ T8112] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 196.079417][ T8112] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.118538][ T8112] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 196.126234][ T8112] Node 0 DMA32 free:1466780kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38320kB inactive_anon:0kB active_file:53964kB inactive_file:158960kB unevictable:1536kB writepending:568kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:25208kB local_pcp:11040kB free_cma:0kB [ 196.167589][ T8112] lowmem_reserve[]: 0 0 0 0 0 [ 196.173686][ T8112] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.202317][ T8112] lowmem_reserve[]: 0 0 0 0 0 [ 196.207349][ T8112] Node 1 Normal free:3897600kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16352kB local_pcp:6656kB free_cma:0kB [ 196.265724][ T8112] lowmem_reserve[]: 0 0 0 0 0 [ 196.288376][ T8112] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.321475][ T8112] Node 0 DMA32: 253*4kB (M) 497*8kB (UM) 762*16kB (UME) 1278*32kB (UM) 599*64kB (UME) 88*128kB (UME) 23*256kB (UM) 11*512kB (M) 6*1024kB (M) 3*2048kB (ME) 326*4096kB (UM) = 1466780kB [ 196.346758][ T8112] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 196.378723][ T8112] Node 1 Normal: 236*4kB (UME) 68*8kB (UME) 47*16kB (UME) 78*32kB (UME) 18*64kB (UME) 10*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897600kB [ 196.398362][ T8112] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.408638][ T8112] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.419480][ T8112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.444155][ T8112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.457654][ T8112] 54849 total pagecache pages [ 196.463251][ T8112] 0 pages in swap cache [ 196.467660][ T8112] Free swap = 124996kB [ 196.472600][ T8112] Total swap = 124996kB [ 196.476915][ T8112] 2097051 pages RAM [ 196.481670][ T8112] 0 pages HighMem/MovableOnly [ 196.487208][ T8112] 416933 pages reserved [ 196.498439][ T8112] 0 pages cma reserved [ 196.662419][ T5790] Bluetooth: hci3: command tx timeout [ 197.953899][ T8140] netlink: 76 bytes leftover after parsing attributes in process `syz.3.762'. [ 197.989847][ T5790] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 197.998736][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 198.008719][ T5790] CPU: 0 PID: 5790 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 198.016309][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.026411][ T5790] Workqueue: hci1 hci_rx_work [ 198.031135][ T5790] Call Trace: [ 198.034464][ T5790] [ 198.037417][ T5790] dump_stack_lvl+0x18c/0x250 [ 198.042129][ T5790] ? show_regs_print_info+0x20/0x20 [ 198.047411][ T5790] ? load_image+0x420/0x420 [ 198.051949][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 198.057087][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 198.061805][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 198.067117][ T5790] kobject_add_internal+0x61c/0xcc0 [ 198.072336][ T5790] kobject_add+0x164/0x240 [ 198.076771][ T5790] ? __rwlock_init+0x150/0x150 [ 198.081589][ T5790] ? kobject_init+0x1e0/0x1e0 [ 198.086279][ T5790] ? _raw_spin_unlock+0x28/0x40 [ 198.091147][ T5790] ? get_device_parent+0x366/0x390 [ 198.096274][ T5790] device_add+0x408/0xc50 [ 198.100617][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 198.105569][ T5790] le_conn_complete_evt+0xf5d/0x1540 [ 198.110873][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 198.117146][ T5790] ? bt_info+0x180/0x180 [ 198.121395][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 198.127036][ T5790] ? skb_pull_data+0xfb/0x200 [ 198.131733][ T5790] hci_le_enh_conn_complete_evt+0x189/0x460 [ 198.137645][ T5790] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 198.144070][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 198.150178][ T5790] hci_event_packet+0x7ba/0x1270 [ 198.155148][ T5790] ? bis_list+0x290/0x290 [ 198.159504][ T5790] ? lockdep_hardirqs_on+0x98/0x150 [ 198.164711][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 198.169932][ T5790] hci_rx_work+0x43a/0xd60 [ 198.174381][ T5790] ? process_scheduled_works+0x96f/0x15d0 [ 198.180119][ T5790] process_scheduled_works+0xa5d/0x15d0 [ 198.185703][ T5790] ? worker_attach_to_pool+0x380/0x380 [ 198.191172][ T5790] ? assign_work+0x3d2/0x5d0 [ 198.195802][ T5790] worker_thread+0xa55/0xfc0 [ 198.200421][ T5790] kthread+0x2fa/0x390 [ 198.204582][ T5790] ? pr_cont_work+0x560/0x560 [ 198.209351][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 198.213939][ T5790] ret_from_fork+0x48/0x80 [ 198.219491][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 198.224094][ T5790] ret_from_fork_asm+0x11/0x20 [ 198.229887][ T5790] [ 198.237907][ T5790] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 198.255044][ T5790] Bluetooth: hci1: failed to register connection device [ 198.298882][ T8145] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.763'. [ 198.497595][ T8149] validate_nla: 5 callbacks suppressed [ 198.497629][ T8149] netlink: 'syz.1.765': attribute type 21 has an invalid length. [ 198.521961][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.765'. [ 198.550114][ T8149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.765'. [ 198.875494][ T8158] netlink: 'syz.2.769': attribute type 29 has an invalid length. [ 198.907853][ T8158] netlink: 'syz.2.769': attribute type 29 has an invalid length. [ 199.020624][ T8163] syz.0.771 uses obsolete (PF_INET,SOCK_PACKET) [ 199.169637][ T8167] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 199.451083][ T8169] netlink: 128 bytes leftover after parsing attributes in process `syz.0.773'. [ 199.479195][ T8169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.541335][ T8171] netlink: 76 bytes leftover after parsing attributes in process `syz.1.772'. [ 199.948615][ T8181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.776'. [ 200.282039][ T8193] FAULT_INJECTION: forcing a failure. [ 200.282039][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.295511][ T8193] CPU: 1 PID: 8193 Comm: syz.3.781 Not tainted syzkaller #0 [ 200.302829][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.312921][ T8193] Call Trace: [ 200.316225][ T8193] [ 200.319178][ T8193] dump_stack_lvl+0x18c/0x250 [ 200.323896][ T8193] ? show_regs_print_info+0x20/0x20 [ 200.329133][ T8193] ? load_image+0x420/0x420 [ 200.333669][ T8193] ? __might_fault+0xaa/0x120 [ 200.338401][ T8193] ? __lock_acquire+0x7d40/0x7d40 [ 200.343468][ T8193] should_fail_ex+0x39d/0x4d0 [ 200.348197][ T8193] _copy_from_iter+0x1d9/0x12e0 [ 200.353083][ T8193] ? __might_fault+0xaa/0x120 [ 200.357783][ T8193] ? _copy_from_iter+0x24e/0x12e0 [ 200.362837][ T8193] ? __virt_addr_valid+0x18c/0x540 [ 200.367972][ T8193] ? __lock_acquire+0x7d40/0x7d40 [ 200.373014][ T8193] ? copyout_mc+0x70/0x70 [ 200.377356][ T8193] ? copyout_mc+0x70/0x70 [ 200.381688][ T8193] ? __virt_addr_valid+0x18c/0x540 [ 200.386811][ T8193] ? page_copy_sane+0x16a/0x270 [ 200.391670][ T8193] copy_page_from_iter+0x7b/0x100 [ 200.396695][ T8193] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 200.402512][ T8193] tun_get_user+0x15db/0x3ca0 [ 200.407200][ T8193] ? aa_file_perm+0x11b/0xee0 [ 200.411882][ T8193] ? rcu_read_unlock+0xa0/0xa0 [ 200.416652][ T8193] ? tun_get+0x1c/0x2e0 [ 200.420817][ T8193] ? __lock_acquire+0x7d40/0x7d40 [ 200.425936][ T8193] ? tun_get+0x1c/0x2e0 [ 200.430102][ T8193] tun_chr_write_iter+0x119/0x200 [ 200.435133][ T8193] vfs_write+0x46c/0x990 [ 200.439385][ T8193] ? file_end_write+0x250/0x250 [ 200.444251][ T8193] ? __fget_files+0x43d/0x4b0 [ 200.448935][ T8193] ? __fdget_pos+0x1d8/0x330 [ 200.453531][ T8193] ? ksys_write+0x75/0x260 [ 200.457953][ T8193] ksys_write+0x150/0x260 [ 200.462293][ T8193] ? __ia32_sys_read+0x90/0x90 [ 200.467063][ T8193] ? lockdep_hardirqs_on+0x98/0x150 [ 200.472269][ T8193] do_syscall_64+0x55/0xb0 [ 200.476691][ T8193] ? clear_bhb_loop+0x40/0x90 [ 200.481364][ T8193] ? clear_bhb_loop+0x40/0x90 [ 200.486038][ T8193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.491942][ T8193] RIP: 0033:0x7f0b79d9ce59 [ 200.496357][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.515972][ T8193] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.524394][ T8193] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 200.532366][ T8193] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 200.540335][ T8193] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 200.548305][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.556280][ T8193] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 200.564265][ T8193] [ 200.609168][ T5089] Bluetooth: hci1: command tx timeout [ 200.673237][ T8196] netlink: 76 bytes leftover after parsing attributes in process `syz.2.783'. [ 200.798783][ T8202] netlink: 'syz.3.784': attribute type 29 has an invalid length. [ 200.820975][ T8197] delete_channel: no stack [ 200.841279][ T8202] netlink: 'syz.3.784': attribute type 29 has an invalid length. [ 201.451478][ T8211] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 201.682726][ T8215] netlink: 'syz.1.790': attribute type 21 has an invalid length. [ 201.708596][ T8215] netlink: 'syz.1.790': attribute type 20 has an invalid length. [ 201.859295][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 201.880960][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 201.882640][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 202.536003][ T8227] FAULT_INJECTION: forcing a failure. [ 202.536003][ T8227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.555695][ T8227] CPU: 1 PID: 8227 Comm: syz.2.794 Not tainted syzkaller #0 [ 202.563060][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.573415][ T8227] Call Trace: [ 202.576713][ T8227] [ 202.579671][ T8227] dump_stack_lvl+0x18c/0x250 [ 202.584390][ T8227] ? show_regs_print_info+0x20/0x20 [ 202.589634][ T8227] ? load_image+0x420/0x420 [ 202.594175][ T8227] ? __might_fault+0xaa/0x120 [ 202.598543][ T8230] netlink: 76 bytes leftover after parsing attributes in process `syz.1.795'. [ 202.598866][ T8227] ? __lock_acquire+0x7d40/0x7d40 [ 202.598900][ T8227] should_fail_ex+0x39d/0x4d0 [ 202.598931][ T8227] _copy_from_user+0x2f/0xe0 [ 202.598955][ T8227] btf_new_fd+0x366/0x9f0 [ 202.598986][ T8227] ? bpf_btf_show_fdinfo+0x80/0x80 [ 202.599008][ T8227] ? capable+0x88/0xe0 [ 202.599034][ T8227] __sys_bpf+0x670/0x890 [ 202.640175][ T8227] ? bpf_link_show_fdinfo+0x390/0x390 [ 202.645607][ T8227] ? lock_chain_count+0x20/0x20 [ 202.650512][ T8227] __x64_sys_bpf+0x7c/0x90 [ 202.654973][ T8227] do_syscall_64+0x55/0xb0 [ 202.659425][ T8227] ? clear_bhb_loop+0x40/0x90 [ 202.664141][ T8227] ? clear_bhb_loop+0x40/0x90 [ 202.668855][ T8227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.674788][ T8227] RIP: 0033:0x7fc02299ce59 [ 202.679255][ T8227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.698994][ T8227] RSP: 002b:00007fc023907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.707420][ T8227] RAX: ffffffffffffffda RBX: 00007fc022c15fa0 RCX: 00007fc02299ce59 [ 202.715402][ T8227] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 202.723393][ T8227] RBP: 00007fc023907090 R08: 0000000000000000 R09: 0000000000000000 [ 202.731390][ T8227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.739383][ T8227] R13: 00007fc022c16038 R14: 00007fc022c15fa0 R15: 00007ffcafbe5688 [ 202.747392][ T8227] [ 202.773985][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 203.107595][ T8249] netlink: 'syz.1.802': attribute type 29 has an invalid length. [ 203.584702][ T8259] netlink: 76 bytes leftover after parsing attributes in process `syz.3.807'. [ 203.793553][ T8264] FAULT_INJECTION: forcing a failure. [ 203.793553][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.829378][ T8264] CPU: 0 PID: 8264 Comm: syz.3.808 Not tainted syzkaller #0 [ 203.836739][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.846827][ T8264] Call Trace: [ 203.850135][ T8264] [ 203.853110][ T8264] dump_stack_lvl+0x18c/0x250 [ 203.857834][ T8264] ? show_regs_print_info+0x20/0x20 [ 203.863069][ T8264] ? load_image+0x420/0x420 [ 203.867602][ T8264] ? __might_fault+0xaa/0x120 [ 203.872313][ T8264] ? __lock_acquire+0x7d40/0x7d40 [ 203.877388][ T8264] should_fail_ex+0x39d/0x4d0 [ 203.882294][ T8264] _copy_to_user+0x2f/0xa0 [ 203.886758][ T8264] bpf_test_finish+0x19f/0x650 [ 203.891562][ T8264] ? dst_hold+0x70/0x70 [ 203.895744][ T8264] ? convert_skb_to___skb+0x420/0x420 [ 203.901145][ T8264] ? slab_build_skb+0x25f/0x3f0 [ 203.906179][ T8264] bpf_prog_test_run_skb+0x1122/0x18c0 [ 203.911676][ T8264] ? cpu_online+0x60/0x60 [ 203.916121][ T8264] bpf_prog_test_run+0x321/0x390 [ 203.921194][ T8264] __sys_bpf+0x49d/0x890 [ 203.925474][ T8264] ? bpf_link_show_fdinfo+0x390/0x390 [ 203.930900][ T8264] ? lock_chain_count+0x20/0x20 [ 203.935803][ T8264] __x64_sys_bpf+0x7c/0x90 [ 203.940262][ T8264] do_syscall_64+0x55/0xb0 [ 203.944708][ T8264] ? clear_bhb_loop+0x40/0x90 [ 203.949401][ T8264] ? clear_bhb_loop+0x40/0x90 [ 203.954088][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.959998][ T8264] RIP: 0033:0x7f0b79d9ce59 [ 203.964408][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.984026][ T8264] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.992448][ T8264] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 204.000419][ T8264] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 204.008417][ T8264] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 204.016398][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.024376][ T8264] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 204.032358][ T8264] [ 204.102350][ T8266] FAULT_INJECTION: forcing a failure. [ 204.102350][ T8266] name failslab, interval 1, probability 0, space 0, times 0 [ 204.126056][ T8266] CPU: 0 PID: 8266 Comm: syz.0.809 Not tainted syzkaller #0 [ 204.133497][ T8266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 204.143665][ T8266] Call Trace: [ 204.146974][ T8266] [ 204.149932][ T8266] dump_stack_lvl+0x18c/0x250 [ 204.154651][ T8266] ? show_regs_print_info+0x20/0x20 [ 204.159897][ T8266] ? load_image+0x420/0x420 [ 204.164444][ T8266] ? __might_sleep+0xe0/0xe0 [ 204.169164][ T8266] ? __lock_acquire+0x7d40/0x7d40 [ 204.174221][ T8266] ? lock_chain_count+0x20/0x20 [ 204.179282][ T8266] should_fail_ex+0x39d/0x4d0 [ 204.184001][ T8266] should_failslab+0x9/0x20 [ 204.188540][ T8266] slab_pre_alloc_hook+0x59/0x310 [ 204.193602][ T8266] kmem_cache_alloc_node+0x60/0x320 [ 204.198838][ T8266] ? __alloc_skb+0x103/0x2c0 [ 204.203477][ T8266] __alloc_skb+0x103/0x2c0 [ 204.207917][ T8266] __ip6_append_data+0x2b56/0x3cf0 [ 204.213056][ T8266] ? inet6_sk+0xe0/0xe0 [ 204.217235][ T8266] ? ip6_setup_cork+0xfe0/0xfe0 [ 204.222107][ T8266] ip6_append_data+0x1b0/0x350 [ 204.226894][ T8266] ? inet6_sk+0xe0/0xe0 [ 204.231051][ T8266] ping_v6_sendmsg+0xe17/0x11f0 [ 204.235921][ T8266] ? ping_v6_pre_connect+0x30/0x30 [ 204.241031][ T8266] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 204.247234][ T8266] ? __local_bh_enable_ip+0x142/0x1c0 [ 204.252742][ T8266] ? _local_bh_enable+0xa0/0xa0 [ 204.257621][ T8266] ? do_raw_spin_unlock+0x121/0x230 [ 204.262845][ T8266] ? inet_sendmsg+0x14b/0x2f0 [ 204.267545][ T8266] ? inet_sendmsg+0x14b/0x2f0 [ 204.272230][ T8266] ? inet_send_prepare+0x260/0x260 [ 204.277349][ T8266] ____sys_sendmsg+0x5ba/0x960 [ 204.282116][ T8266] ? __lock_acquire+0x7d40/0x7d40 [ 204.287141][ T8266] ? __asan_memset+0x22/0x40 [ 204.291823][ T8266] ? __sys_sendmsg_sock+0x30/0x30 [ 204.296865][ T8266] ? __import_iovec+0x5f2/0x850 [ 204.301731][ T8266] ? import_iovec+0x73/0xa0 [ 204.306240][ T8266] ___sys_sendmsg+0x2a6/0x360 [ 204.310963][ T8266] ? __sys_sendmsg+0x2a0/0x2a0 [ 204.315740][ T8266] ? trace_call_bpf+0xc3/0x6c0 [ 204.320530][ T8266] __se_sys_sendmsg+0x1c2/0x2b0 [ 204.325382][ T8266] ? __x64_sys_sendmsg+0x80/0x80 [ 204.330333][ T8266] ? lockdep_hardirqs_on+0x98/0x150 [ 204.335539][ T8266] do_syscall_64+0x55/0xb0 [ 204.340043][ T8266] ? clear_bhb_loop+0x40/0x90 [ 204.344721][ T8266] ? clear_bhb_loop+0x40/0x90 [ 204.349412][ T8266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.355305][ T8266] RIP: 0033:0x7fc56459ce59 [ 204.359727][ T8266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.379518][ T8266] RSP: 002b:00007fc56537c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.387965][ T8266] RAX: ffffffffffffffda RBX: 00007fc564815fa0 RCX: 00007fc56459ce59 [ 204.395944][ T8266] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 204.403935][ T8266] RBP: 00007fc56537c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.411910][ T8266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.419879][ T8266] R13: 00007fc564816038 R14: 00007fc564815fa0 R15: 00007fffbea78528 [ 204.427861][ T8266] [ 204.734897][ T8281] validate_nla: 1 callbacks suppressed [ 204.734928][ T8281] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 204.775638][ T8281] netlink: 'syz.2.814': attribute type 29 has an invalid length. [ 204.826364][ T8287] netlink: 76 bytes leftover after parsing attributes in process `syz.0.816'. [ 205.130180][ T8294] netlink: 'syz.2.819': attribute type 41 has an invalid length. [ 205.238971][ T8294] netlink: 'syz.2.819': attribute type 9 has an invalid length. [ 205.252412][ T8294] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.819'. [ 205.907924][ T8317] netlink: 76 bytes leftover after parsing attributes in process `syz.2.830'. [ 206.412991][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.839'. [ 206.441565][ T8324] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 206.466377][ T8324] netlink: 'syz.3.831': attribute type 29 has an invalid length. [ 206.557365][ T8323] delete_channel: no stack [ 208.895803][ T8355] netlink: 'syz.0.843': attribute type 29 has an invalid length. [ 208.917320][ T8355] netlink: 'syz.0.843': attribute type 29 has an invalid length. [ 208.964768][ T8362] netlink: 'syz.3.846': attribute type 29 has an invalid length. [ 208.982981][ T8362] netlink: 'syz.3.846': attribute type 29 has an invalid length. [ 210.092041][ T8388] validate_nla: 1 callbacks suppressed [ 210.092075][ T8388] netlink: 'syz.3.851': attribute type 33 has an invalid length. [ 210.133620][ T8388] netlink: 164 bytes leftover after parsing attributes in process `syz.3.851'. [ 210.716606][ T8401] netlink: 'syz.2.856': attribute type 10 has an invalid length. [ 210.763890][ T8401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.856'. [ 210.811623][ T8401] batman_adv: batadv0: Adding interface: veth0_vlan [ 210.830862][ T8401] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.843194][ T8410] netlink: 'syz.3.860': attribute type 3 has an invalid length. [ 210.887116][ T8407] netlink: 'syz.0.859': attribute type 29 has an invalid length. [ 210.895543][ T8410] netlink: 'syz.3.860': attribute type 6 has an invalid length. [ 210.895558][ T8401] batman_adv: batadv0: Interface activated: veth0_vlan [ 210.925743][ T8410] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.860'. [ 210.937400][ T8407] netlink: 'syz.0.859': attribute type 29 has an invalid length. [ 211.189602][ T8413] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 211.644428][ T8420] netlink: 'syz.3.863': attribute type 33 has an invalid length. [ 211.660955][ T8422] syz.1.861[8422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.661193][ T8422] syz.1.861[8422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.679337][ T8420] netlink: 164 bytes leftover after parsing attributes in process `syz.3.863'. [ 212.015969][ T8430] netlink: 'syz.2.865': attribute type 2 has an invalid length. [ 212.045569][ T8430] netlink: 'syz.2.865': attribute type 8 has an invalid length. [ 212.057675][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.865'. [ 212.120106][ T8428] syzkaller0: entered promiscuous mode [ 212.139898][ T8428] syzkaller0: entered allmulticast mode [ 212.760008][ T8450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.871'. [ 212.782725][ T8450] batman_adv: batadv0: Adding interface: veth0_vlan [ 212.804543][ T8450] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.844831][ T8450] batman_adv: batadv0: Interface activated: veth0_vlan [ 213.015024][ T8457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.874'. [ 213.045936][ T8459] netlink: 164 bytes leftover after parsing attributes in process `syz.1.875'. [ 215.477300][ T8489] validate_nla: 3 callbacks suppressed [ 215.477340][ T8489] netlink: 'syz.1.885': attribute type 33 has an invalid length. [ 215.493783][ T8489] netlink: 164 bytes leftover after parsing attributes in process `syz.1.885'. [ 216.082550][ T8495] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 216.100191][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'. [ 216.130916][ T8495] batman_adv: batadv0: Adding interface: veth0_vlan [ 216.156841][ T8495] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.205628][ T8495] batman_adv: batadv0: Interface activated: veth0_vlan [ 217.077315][ T8516] netlink: 'syz.2.895': attribute type 33 has an invalid length. [ 217.156616][ T8516] netlink: 164 bytes leftover after parsing attributes in process `syz.2.895'. [ 217.205249][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.896'. [ 217.960156][ T8528] netlink: 'syz.0.899': attribute type 29 has an invalid length. [ 218.013062][ T8528] netlink: 'syz.0.899': attribute type 29 has an invalid length. [ 218.387584][ T8538] netlink: 'syz.0.899': attribute type 10 has an invalid length. [ 219.115684][ T8552] netlink: 'syz.0.907': attribute type 33 has an invalid length. [ 219.136071][ T8552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.907'. [ 219.167662][ T8555] netlink: 164 bytes leftover after parsing attributes in process `syz.1.908'. [ 219.784942][ T8570] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 219.832750][ T8570] netlink: 'syz.1.915': attribute type 29 has an invalid length. [ 219.904367][ T8575] netlink: 'syz.0.916': attribute type 10 has an invalid length. [ 220.251330][ T8575] hsr_slave_0: left promiscuous mode [ 220.270057][ T8575] hsr_slave_1: left promiscuous mode [ 220.565347][ T8583] validate_nla: 1 callbacks suppressed [ 220.565410][ T8583] netlink: 'syz.3.918': attribute type 9 has an invalid length. [ 220.599760][ T8583] netlink: 160016 bytes leftover after parsing attributes in process `syz.3.918'. [ 220.788865][ T8585] netlink: 'syz.0.919': attribute type 33 has an invalid length. [ 220.819351][ T8585] netlink: 164 bytes leftover after parsing attributes in process `syz.0.919'. [ 221.642645][ T8614] netlink: 'syz.3.929': attribute type 29 has an invalid length. [ 221.664274][ T8614] netlink: 'syz.3.929': attribute type 29 has an invalid length. [ 221.886491][ T8619] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 222.378755][ T8627] netlink: 'syz.1.933': attribute type 33 has an invalid length. [ 222.400686][ T8627] netlink: 164 bytes leftover after parsing attributes in process `syz.1.933'. [ 222.706213][ T8636] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.936'. [ 222.857609][ T8635] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.937'. [ 222.892089][ T8645] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 222.909686][ T8645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 223.003490][ T8635] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 223.736775][ T8653] netlink: 'syz.1.941': attribute type 19 has an invalid length. [ 223.759404][ T8653] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 223.796968][ T8653] netlink: 164 bytes leftover after parsing attributes in process `syz.1.941'. [ 223.932712][ T8656] netlink: 76 bytes leftover after parsing attributes in process `syz.3.942'. [ 224.083404][ T8664] netlink: 'syz.2.946': attribute type 33 has an invalid length. [ 224.092255][ T8664] netlink: 164 bytes leftover after parsing attributes in process `syz.2.946'. [ 224.425207][ T8673] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 224.463479][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.530100][ T8673] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 224.819331][ T8685] netlink: 76 bytes leftover after parsing attributes in process `syz.1.955'. [ 225.206632][ T8697] netlink: 164 bytes leftover after parsing attributes in process `syz.2.960'. [ 225.672559][ T8711] netlink: 76 bytes leftover after parsing attributes in process `syz.1.967'. [ 226.276541][ T8731] validate_nla: 2 callbacks suppressed [ 226.276577][ T8731] netlink: 'syz.3.977': attribute type 33 has an invalid length. [ 226.439934][ T8739] .@ÿ: renamed from bond_slave_0 (while UP) [ 227.184076][ T8752] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 227.477315][ T8763] netlink: 'syz.3.989': attribute type 33 has an invalid length. [ 227.509279][ T8763] __nla_validate_parse: 5 callbacks suppressed [ 227.509315][ T8763] netlink: 164 bytes leftover after parsing attributes in process `syz.3.989'. [ 230.202549][ T8797] netlink: 'syz.3.1000': attribute type 33 has an invalid length. [ 230.229292][ T8797] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1000'. [ 230.575149][ T8805] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1004'. [ 231.841353][ T8825] netlink: 'syz.2.1010': attribute type 9 has an invalid length. [ 231.851858][ T8825] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1010'. [ 232.015279][ T8828] netlink: 'syz.1.1012': attribute type 33 has an invalid length. [ 232.039839][ T8828] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1012'. [ 232.438420][ T8835] netlink: 'syz.1.1014': attribute type 4 has an invalid length. [ 232.447107][ T8835] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1014'. [ 232.855511][ T8851] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1019'. [ 232.998822][ T8854] netlink: 'syz.2.1021': attribute type 33 has an invalid length. [ 233.029371][ T8854] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1021'. [ 234.351568][ T8882] netlink: 'syz.1.1032': attribute type 33 has an invalid length. [ 234.389559][ T8882] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1032'. [ 234.441335][ T8885] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1033'. [ 234.477234][ T8885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.680729][ T8892] syzkaller0: entered promiscuous mode [ 234.686453][ T8892] syzkaller0: entered allmulticast mode [ 236.502051][ T8919] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1045'. [ 237.071029][ T8906] netlink: 'syz.0.1042': attribute type 33 has an invalid length. [ 237.082353][ T8906] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1042'. [ 237.920892][ T8939] netlink: 'syz.3.1052': attribute type 29 has an invalid length. [ 237.981065][ T8939] netlink: 'syz.3.1052': attribute type 29 has an invalid length. [ 237.996160][ T8947] netlink: 'syz.1.1055': attribute type 33 has an invalid length. [ 238.016352][ T8947] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1055'. [ 238.230305][ T8951] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 238.570992][ T8954] FAULT_INJECTION: forcing a failure. [ 238.570992][ T8954] name failslab, interval 1, probability 0, space 0, times 0 [ 238.589929][ T8954] CPU: 1 PID: 8954 Comm: syz.0.1056 Not tainted syzkaller #0 [ 238.597613][ T8954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.607915][ T8954] Call Trace: [ 238.611240][ T8954] [ 238.614245][ T8954] dump_stack_lvl+0x18c/0x250 [ 238.618991][ T8954] ? show_regs_print_info+0x20/0x20 [ 238.624262][ T8954] ? load_image+0x420/0x420 [ 238.628827][ T8954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 238.635070][ T8954] should_fail_ex+0x39d/0x4d0 [ 238.639828][ T8954] should_failslab+0x9/0x20 [ 238.644379][ T8954] slab_pre_alloc_hook+0x59/0x310 [ 238.649473][ T8954] kmem_cache_alloc+0x5a/0x2d0 [ 238.654291][ T8954] ? skb_clone+0x1eb/0x370 [ 238.658771][ T8954] skb_clone+0x1eb/0x370 [ 238.663087][ T8954] __netlink_deliver_tap+0x41c/0x830 [ 238.668472][ T8954] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.673815][ T8954] netlink_deliver_tap+0x19c/0x1b0 [ 238.678987][ T8954] netlink_sendskb+0x68/0x130 [ 238.683725][ T8954] netlink_ack+0xce1/0x1180 [ 238.688295][ T8954] ? __inet_diag_dump+0x380/0x380 [ 238.693442][ T8954] ? netlink_dump+0xe50/0xe50 [ 238.699123][ T8954] ? __inet_diag_dump+0x380/0x380 [ 238.704194][ T8954] ? sock_diag_rcv_msg+0x402/0x600 [ 238.709341][ T8954] netlink_rcv_skb+0x2c5/0x4d0 [ 238.714219][ T8954] ? sock_diag_bind+0xb0/0xb0 [ 238.718928][ T8954] ? netlink_ack+0x1180/0x1180 [ 238.723759][ T8954] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 238.729986][ T8954] sock_diag_rcv+0x2a/0x40 [ 238.734428][ T8954] netlink_unicast+0x751/0x8d0 [ 238.739253][ T8954] netlink_sendmsg+0x8d0/0xbf0 [ 238.744047][ T8954] ? perf_trace_lock+0x304/0x3b0 [ 238.749024][ T8954] ? netlink_getsockopt+0x590/0x590 [ 238.754256][ T8954] ? aa_sock_msg_perm+0x94/0x150 [ 238.759220][ T8954] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.764555][ T8954] ? security_socket_sendmsg+0x80/0xa0 [ 238.770051][ T8954] ? netlink_getsockopt+0x590/0x590 [ 238.775282][ T8954] ____sys_sendmsg+0x5ba/0x960 [ 238.780079][ T8954] ? __asan_memset+0x22/0x40 [ 238.784691][ T8954] ? __sys_sendmsg_sock+0x30/0x30 [ 238.789732][ T8954] ? __import_iovec+0x5f2/0x850 [ 238.794614][ T8954] ? import_iovec+0x73/0xa0 [ 238.799147][ T8954] ___sys_sendmsg+0x2a6/0x360 [ 238.803939][ T8954] ? __sys_sendmsg+0x2a0/0x2a0 [ 238.808776][ T8954] ? __lock_acquire+0x7d40/0x7d40 [ 238.813878][ T8954] __se_sys_sendmsg+0x1c2/0x2b0 [ 238.818861][ T8954] ? __x64_sys_sendmsg+0x80/0x80 [ 238.823951][ T8954] ? lockdep_hardirqs_on+0x98/0x150 [ 238.829335][ T8954] do_syscall_64+0x55/0xb0 [ 238.833785][ T8954] ? clear_bhb_loop+0x40/0x90 [ 238.838494][ T8954] ? clear_bhb_loop+0x40/0x90 [ 238.843294][ T8954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.849232][ T8954] RIP: 0033:0x7fc56459ce59 [ 238.853705][ T8954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.873526][ T8954] RSP: 002b:00007fc56537c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.882677][ T8954] RAX: ffffffffffffffda RBX: 00007fc564815fa0 RCX: 00007fc56459ce59 [ 238.891649][ T8954] RDX: 0000000000000850 RSI: 0000200000000000 RDI: 0000000000000005 [ 238.899659][ T8954] RBP: 00007fc56537c090 R08: 0000000000000000 R09: 0000000000000000 [ 238.908016][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.916012][ T8954] R13: 00007fc564816038 R14: 00007fc564815fa0 R15: 00007fffbea78528 [ 238.924034][ T8954] [ 239.271004][ T8969] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1062'. [ 239.645469][ T8978] netlink: 'syz.0.1066': attribute type 33 has an invalid length. [ 239.682361][ T8978] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1066'. [ 239.721299][ T8983] FAULT_INJECTION: forcing a failure. [ 239.721299][ T8983] name failslab, interval 1, probability 0, space 0, times 0 [ 239.754824][ T8983] CPU: 1 PID: 8983 Comm: syz.2.1068 Not tainted syzkaller #0 [ 239.762269][ T8983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.772351][ T8983] Call Trace: [ 239.775663][ T8983] [ 239.778613][ T8983] dump_stack_lvl+0x18c/0x250 [ 239.783321][ T8983] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.789507][ T8983] ? show_regs_print_info+0x20/0x20 [ 239.794732][ T8983] ? load_image+0x420/0x420 [ 239.799274][ T8983] should_fail_ex+0x39d/0x4d0 [ 239.804000][ T8983] should_failslab+0x9/0x20 [ 239.808541][ T8983] slab_pre_alloc_hook+0x59/0x310 [ 239.813599][ T8983] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 239.819178][ T8983] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 239.824752][ T8983] __kmem_cache_alloc_node+0x53/0x250 [ 239.830152][ T8983] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 239.835714][ T8983] __kmalloc+0xa4/0x230 [ 239.839904][ T8983] bpf_prog_test_run_skb+0x245/0x18c0 [ 239.845311][ T8983] ? __fget_files+0x28/0x4b0 [ 239.849932][ T8983] ? __fget_files+0x28/0x4b0 [ 239.854624][ T8983] ? __fget_files+0x43d/0x4b0 [ 239.859327][ T8983] ? cpu_online+0x60/0x60 [ 239.863675][ T8983] bpf_prog_test_run+0x321/0x390 [ 239.868629][ T8983] __sys_bpf+0x49d/0x890 [ 239.872929][ T8983] ? bpf_link_show_fdinfo+0x390/0x390 [ 239.878321][ T8983] ? lock_chain_count+0x20/0x20 [ 239.883189][ T8983] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 239.889187][ T8983] __x64_sys_bpf+0x7c/0x90 [ 239.893615][ T8983] do_syscall_64+0x55/0xb0 [ 239.898057][ T8983] ? clear_bhb_loop+0x40/0x90 [ 239.902838][ T8983] ? clear_bhb_loop+0x40/0x90 [ 239.907545][ T8983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.913459][ T8983] RIP: 0033:0x7fc02299ce59 [ 239.917884][ T8983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.937510][ T8983] RSP: 002b:00007fc023907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.945940][ T8983] RAX: ffffffffffffffda RBX: 00007fc022c15fa0 RCX: 00007fc02299ce59 [ 239.953927][ T8983] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 239.961916][ T8983] RBP: 00007fc023907090 R08: 0000000000000000 R09: 0000000000000000 [ 239.969899][ T8983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.977879][ T8983] R13: 00007fc022c16038 R14: 00007fc022c15fa0 R15: 00007ffcafbe5688 [ 239.985874][ T8983] [ 242.879992][ T8999] netlink: 'syz.0.1070': attribute type 29 has an invalid length. [ 242.901990][ T8999] netlink: 'syz.0.1070': attribute type 29 has an invalid length. [ 243.152650][ T9009] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1073'. [ 243.246282][ T9014] netlink: 'syz.0.1070': attribute type 10 has an invalid length. [ 243.421479][ T9016] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1074'. [ 245.248729][ T9045] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1084'. [ 247.199179][ T9049] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1085'. [ 247.264405][ T9051] netlink: 'syz.3.1086': attribute type 29 has an invalid length. [ 247.285054][ T9051] netlink: 'syz.3.1086': attribute type 29 has an invalid length. [ 247.445195][ T9057] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1089'. [ 247.557730][ T9063] netlink: 'syz.3.1086': attribute type 10 has an invalid length. [ 248.290280][ T9081] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1096'. [ 249.065991][ T9098] FAULT_INJECTION: forcing a failure. [ 249.065991][ T9098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.084090][ T9098] CPU: 0 PID: 9098 Comm: syz.1.1101 Not tainted syzkaller #0 [ 249.091544][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.101638][ T9098] Call Trace: [ 249.104945][ T9098] [ 249.107922][ T9098] dump_stack_lvl+0x18c/0x250 [ 249.112641][ T9098] ? show_regs_print_info+0x20/0x20 [ 249.117961][ T9098] ? load_image+0x420/0x420 [ 249.122496][ T9098] ? __lock_acquire+0x7d40/0x7d40 [ 249.127562][ T9098] ? __stack_depot_save+0x1f/0x630 [ 249.132720][ T9098] should_fail_ex+0x39d/0x4d0 [ 249.137435][ T9098] prepare_alloc_pages+0x1e2/0x5f0 [ 249.142587][ T9098] __alloc_pages+0x134/0x460 [ 249.147212][ T9098] ? zone_statistics+0x170/0x170 [ 249.152175][ T9098] ? perf_trace_lock+0xfc/0x3b0 [ 249.157151][ T9098] ? alloc_pages+0x4dc/0x740 [ 249.161775][ T9098] __get_free_pages+0xc/0x30 [ 249.166397][ T9098] kasan_populate_vmalloc_pte+0x35/0x100 [ 249.172075][ T9098] __apply_to_page_range+0x860/0xdd0 [ 249.177422][ T9098] ? kasan_populate_vmalloc+0x70/0x70 [ 249.183543][ T9098] ? apply_to_page_range+0x50/0x50 [ 249.188699][ T9098] ? do_raw_spin_unlock+0x121/0x230 [ 249.193955][ T9098] alloc_vmap_area+0x1d0c/0x1e30 [ 249.198963][ T9098] ? vm_map_ram+0xcb0/0xcb0 [ 249.203528][ T9098] ? rcu_is_watching+0x15/0xb0 [ 249.208332][ T9098] __get_vm_area_node+0x162/0x370 [ 249.213413][ T9098] __vmalloc_node_range+0x36e/0x1330 [ 249.218749][ T9098] ? netlink_sendmsg+0x602/0xbf0 [ 249.223756][ T9098] ? free_vm_area+0x50/0x50 [ 249.228312][ T9098] ? aa_file_perm+0x11b/0xee0 [ 249.233029][ T9098] ? netlink_sendmsg+0x602/0xbf0 [ 249.238083][ T9098] vmalloc+0x79/0x90 [ 249.242015][ T9098] ? netlink_sendmsg+0x602/0xbf0 [ 249.246991][ T9098] netlink_sendmsg+0x602/0xbf0 [ 249.251791][ T9098] ? netlink_getsockopt+0x590/0x590 [ 249.257021][ T9098] ? aa_sock_msg_perm+0x94/0x150 [ 249.261995][ T9098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.267308][ T9098] ? security_socket_sendmsg+0x80/0xa0 [ 249.272806][ T9098] sock_write_iter+0x2df/0x420 [ 249.277610][ T9098] ? sock_read_iter+0x3e0/0x3e0 [ 249.282559][ T9098] ? common_file_perm+0x198/0x1f0 [ 249.287625][ T9098] vfs_write+0x46c/0x990 [ 249.291909][ T9098] ? file_end_write+0x250/0x250 [ 249.296801][ T9098] ? __fget_files+0x43d/0x4b0 [ 249.301517][ T9098] ? __fdget_pos+0x1d8/0x330 [ 249.306143][ T9098] ? ksys_write+0x75/0x260 [ 249.310605][ T9098] ksys_write+0x150/0x260 [ 249.314971][ T9098] ? __ia32_sys_read+0x90/0x90 [ 249.319774][ T9098] ? lockdep_hardirqs_on+0x98/0x150 [ 249.325008][ T9098] do_syscall_64+0x55/0xb0 [ 249.329459][ T9098] ? clear_bhb_loop+0x40/0x90 [ 249.334159][ T9098] ? clear_bhb_loop+0x40/0x90 [ 249.338873][ T9098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.344798][ T9098] RIP: 0033:0x7f105d99ce59 [ 249.349250][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.368977][ T9098] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.377422][ T9098] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 249.385443][ T9098] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.393540][ T9098] RBP: 00007f105e8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 249.401561][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.409613][ T9098] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 249.417641][ T9098] [ 249.558101][ T9098] syz.1.1101: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 249.609079][ T9098] CPU: 0 PID: 9098 Comm: syz.1.1101 Not tainted syzkaller #0 [ 249.616605][ T9098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.626705][ T9098] Call Trace: [ 249.630021][ T9098] [ 249.632991][ T9098] dump_stack_lvl+0x18c/0x250 [ 249.637716][ T9098] ? show_regs_print_info+0x20/0x20 [ 249.642962][ T9098] ? load_image+0x420/0x420 [ 249.647496][ T9098] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 249.653951][ T9098] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 249.660487][ T9098] warn_alloc+0x246/0x340 [ 249.664860][ T9098] ? slab_free_freelist_hook+0x130/0x1a0 [ 249.670513][ T9098] ? zone_watermark_ok_safe+0x230/0x230 [ 249.676071][ T9098] ? __get_vm_area_node+0x17b/0x370 [ 249.681277][ T9098] ? __get_vm_area_node+0x17b/0x370 [ 249.686488][ T9098] __vmalloc_node_range+0x393/0x1330 [ 249.691799][ T9098] ? free_vm_area+0x50/0x50 [ 249.696309][ T9098] ? aa_file_perm+0x11b/0xee0 [ 249.700990][ T9098] ? netlink_sendmsg+0x602/0xbf0 [ 249.706013][ T9098] vmalloc+0x79/0x90 [ 249.709921][ T9098] ? netlink_sendmsg+0x602/0xbf0 [ 249.714890][ T9098] netlink_sendmsg+0x602/0xbf0 [ 249.719693][ T9098] ? netlink_getsockopt+0x590/0x590 [ 249.724895][ T9098] ? aa_sock_msg_perm+0x94/0x150 [ 249.729843][ T9098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.735151][ T9098] ? security_socket_sendmsg+0x80/0xa0 [ 249.740633][ T9098] sock_write_iter+0x2df/0x420 [ 249.745414][ T9098] ? sock_read_iter+0x3e0/0x3e0 [ 249.750277][ T9098] ? common_file_perm+0x198/0x1f0 [ 249.755342][ T9098] vfs_write+0x46c/0x990 [ 249.759597][ T9098] ? file_end_write+0x250/0x250 [ 249.764451][ T9098] ? __fget_files+0x43d/0x4b0 [ 249.769135][ T9098] ? __fdget_pos+0x1d8/0x330 [ 249.773776][ T9098] ? ksys_write+0x75/0x260 [ 249.778218][ T9098] ksys_write+0x150/0x260 [ 249.782560][ T9098] ? __ia32_sys_read+0x90/0x90 [ 249.787333][ T9098] ? lockdep_hardirqs_on+0x98/0x150 [ 249.792548][ T9098] do_syscall_64+0x55/0xb0 [ 249.797064][ T9098] ? clear_bhb_loop+0x40/0x90 [ 249.801737][ T9098] ? clear_bhb_loop+0x40/0x90 [ 249.806416][ T9098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.812315][ T9098] RIP: 0033:0x7f105d99ce59 [ 249.816730][ T9098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.836365][ T9098] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.844785][ T9098] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 249.852760][ T9098] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.860847][ T9098] RBP: 00007f105e8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 249.869018][ T9098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.877018][ T9098] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 249.885036][ T9098] [ 249.889394][ T9098] Mem-Info: [ 249.892550][ T9098] active_anon:9434 inactive_anon:0 isolated_anon:0 [ 249.892550][ T9098] active_file:16301 inactive_file:40017 isolated_file:0 [ 249.892550][ T9098] unevictable:768 dirty:336 writeback:0 [ 249.892550][ T9098] slab_reclaimable:10250 slab_unreclaimable:95473 [ 249.892550][ T9098] mapped:24653 shmem:1361 pagetables:559 [ 249.892550][ T9098] sec_pagetables:0 bounce:0 [ 249.892550][ T9098] kernel_misc_reclaimable:0 [ 249.892550][ T9098] free:1345393 free_pcp:6297 free_cma:0 [ 249.989312][ T9098] Node 0 active_anon:37736kB inactive_anon:0kB active_file:65204kB inactive_file:159868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98612kB dirty:1344kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10584kB pagetables:2236kB sec_pagetables:0kB all_unreclaimable? no [ 250.053516][ T9098] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 250.105586][ T9098] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.139105][ T9098] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 250.148212][ T9098] Node 0 DMA32 free:1468112kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:37796kB inactive_anon:0kB active_file:65204kB inactive_file:159040kB unevictable:1536kB writepending:1344kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:9528kB local_pcp:4276kB free_cma:0kB [ 250.157297][ T9100] netlink: 'syz.3.1102': attribute type 29 has an invalid length. [ 250.184703][ T9098] lowmem_reserve[]: 0 0 0 0 0 [ 250.193575][ T9098] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 250.201217][ T9100] netlink: 'syz.3.1102': attribute type 29 has an invalid length. [ 250.232854][ T9098] lowmem_reserve[]: 0 0 0 0 0 [ 250.237643][ T9098] Node 1 Normal free:3897856kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16096kB local_pcp:6656kB free_cma:0kB [ 250.278121][ T9098] lowmem_reserve[]: 0 0 0 0 0 [ 250.283321][ T9098] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 250.301450][ T9098] Node 0 DMA32: 920*4kB (UME) 788*8kB (UME) 580*16kB (UME) 1741*32kB (UME) 448*64kB (UME) 130*128kB (UME) 38*256kB (UM) 13*512kB (UM) 4*1024kB (M) 4*2048kB (UME) 322*4096kB (UM) = 1467872kB [ 250.326762][ T9098] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 250.347569][ T9098] Node 1 Normal: 236*4kB (UME) 68*8kB (UME) 47*16kB (UME) 86*32kB (UME) 18*64kB (UME) 10*128kB (UME) 1*256kB (M) 0*512kB 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3897856kB [ 250.371293][ T9098] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.388105][ T9098] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.402821][ T9098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.414776][ T9098] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.439267][ T9098] 57681 total pagecache pages [ 250.444306][ T9098] 0 pages in swap cache [ 250.458831][ T9098] Free swap = 124996kB [ 250.468971][ T9098] Total swap = 124996kB [ 250.473258][ T9098] 2097051 pages RAM [ 250.477080][ T9098] 0 pages HighMem/MovableOnly [ 250.497016][ T9098] 416933 pages reserved [ 250.509156][ T9098] 0 pages cma reserved [ 250.569817][ T9105] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 251.532521][ T9109] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1112'. [ 251.546680][ T9108] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1103'. [ 251.864358][ T9120] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1107'. [ 252.503398][ T9138] netlink: 'syz.3.1115': attribute type 29 has an invalid length. [ 252.536701][ T9138] netlink: 'syz.3.1115': attribute type 29 has an invalid length. [ 252.788509][ T9146] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 252.878764][ T9145] FAULT_INJECTION: forcing a failure. [ 252.878764][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 252.897811][ T9145] CPU: 1 PID: 9145 Comm: syz.1.1117 Not tainted syzkaller #0 [ 252.905271][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.915381][ T9145] Call Trace: [ 252.918705][ T9145] [ 252.921695][ T9145] dump_stack_lvl+0x18c/0x250 [ 252.926449][ T9145] ? show_regs_print_info+0x20/0x20 [ 252.931714][ T9145] ? load_image+0x420/0x420 [ 252.936290][ T9145] ? __might_sleep+0xe0/0xe0 [ 252.940940][ T9145] ? __lock_acquire+0x7d40/0x7d40 [ 252.946041][ T9145] ? trace_event_raw_event_lock+0x250/0x250 [ 252.952014][ T9145] should_fail_ex+0x39d/0x4d0 [ 252.956786][ T9145] should_failslab+0x9/0x20 [ 252.961355][ T9145] slab_pre_alloc_hook+0x59/0x310 [ 252.966447][ T9145] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 252.972093][ T9145] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 252.977715][ T9145] __kmem_cache_alloc_node+0x53/0x250 [ 252.993515][ T9145] ? bpf_prog_test_run_skb+0x245/0x18c0 [ 252.999112][ T9145] __kmalloc+0xa4/0x230 [ 253.003432][ T9145] bpf_prog_test_run_skb+0x245/0x18c0 [ 253.009402][ T9145] ? __fget_files+0x28/0x4b0 [ 253.014057][ T9145] ? __fget_files+0x28/0x4b0 [ 253.018714][ T9145] ? __fget_files+0x43d/0x4b0 [ 253.023516][ T9145] ? cpu_online+0x60/0x60 [ 253.027930][ T9145] bpf_prog_test_run+0x321/0x390 [ 253.032953][ T9145] __sys_bpf+0x49d/0x890 [ 253.037273][ T9145] ? bpf_link_show_fdinfo+0x390/0x390 [ 253.042752][ T9145] ? lock_chain_count+0x20/0x20 [ 253.047708][ T9145] __x64_sys_bpf+0x7c/0x90 [ 253.052185][ T9145] do_syscall_64+0x55/0xb0 [ 253.056657][ T9145] ? clear_bhb_loop+0x40/0x90 [ 253.061388][ T9145] ? clear_bhb_loop+0x40/0x90 [ 253.066126][ T9145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.072180][ T9145] RIP: 0033:0x7f105d99ce59 [ 253.076644][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.096307][ T9145] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.104802][ T9145] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 253.112826][ T9145] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 253.120848][ T9145] RBP: 00007f105e8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 253.128874][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.136910][ T9145] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 253.144997][ T9145] [ 253.476231][ T9151] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1118'. [ 253.846882][ T9159] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1122'. [ 254.091800][ T9165] netlink: 'syz.1.1125': attribute type 33 has an invalid length. [ 254.119341][ T9165] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1125'. [ 254.503760][ T9173] netlink: 'syz.1.1129': attribute type 29 has an invalid length. [ 254.520910][ T9173] netlink: 'syz.1.1129': attribute type 29 has an invalid length. [ 254.582635][ T9175] netlink: 'syz.3.1128': attribute type 3 has an invalid length. [ 254.619097][ T9175] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1128'. [ 255.492475][ T9190] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1132'. [ 255.634167][ T9194] validate_nla: 1 callbacks suppressed [ 255.634200][ T9194] netlink: 'syz.1.1134': attribute type 33 has an invalid length. [ 255.664104][ T9194] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1134'. [ 255.972300][ T9204] netlink: 'syz.3.1138': attribute type 10 has an invalid length. [ 256.022283][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1138'. [ 256.116205][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.122700][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.194952][ T9210] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1141'. [ 256.204524][ T9210] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 256.541349][ T9215] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1144'. [ 256.564594][ T9217] netlink: 'syz.0.1143': attribute type 29 has an invalid length. [ 256.583652][ T9217] netlink: 'syz.0.1143': attribute type 29 has an invalid length. [ 256.840207][ T9222] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 257.697605][ T9237] netlink: 'syz.0.1150': attribute type 10 has an invalid length. [ 257.869757][ T9241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1152'. [ 257.935142][ T9241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.117713][ T9250] syzkaller0: entered promiscuous mode [ 258.135417][ T9250] syzkaller0: entered allmulticast mode [ 259.102585][ T9260] netlink: 'syz.2.1158': attribute type 29 has an invalid length. [ 259.129640][ T9260] netlink: 'syz.2.1158': attribute type 29 has an invalid length. [ 259.403490][ T9260] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 259.563723][ T9263] netlink: 'syz.1.1160': attribute type 33 has an invalid length. [ 259.639941][ T9263] __nla_validate_parse: 1 callbacks suppressed [ 259.640063][ T9263] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1160'. [ 259.998376][ T9279] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1165'. [ 260.996671][ T9288] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1168'. [ 261.127355][ T9290] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1169'. [ 261.149329][ T9292] netlink: 'syz.0.1170': attribute type 6 has an invalid length. [ 261.175695][ T9292] netlink: 212824 bytes leftover after parsing attributes in process `syz.0.1170'. [ 261.248490][ T9293] netlink: 'syz.0.1170': attribute type 6 has an invalid length. [ 261.259884][ T9293] netlink: 212824 bytes leftover after parsing attributes in process `syz.0.1170'. [ 261.274573][ T9292] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1170'. [ 261.366707][ T9297] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1171'. [ 261.745740][ T9303] netlink: 'syz.0.1172': attribute type 33 has an invalid length. [ 261.771326][ T9303] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1172'. [ 262.260974][ T9318] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 262.280609][ T9319] syz.2.1177[9319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.280924][ T9319] syz.2.1177[9319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.008328][ T9326] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1180'. [ 263.264252][ T9336] netlink: 'syz.3.1184': attribute type 33 has an invalid length. [ 267.009257][ T9355] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 267.017178][ T9355] __nla_validate_parse: 6 callbacks suppressed [ 267.017190][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 267.059979][ T9355] bond0: (slave team0): Releasing backup interface [ 267.086723][ T9355] bridge0: port 4(team0) entered blocking state [ 267.099174][ T9355] bridge0: port 4(team0) entered disabled state [ 267.121428][ T9355] team0: entered allmulticast mode [ 267.139666][ T9355] team_slave_0: entered allmulticast mode [ 267.145483][ T9355] team_slave_1: entered allmulticast mode [ 267.184838][ T9355] team0: entered promiscuous mode [ 267.209214][ T9355] team_slave_0: entered promiscuous mode [ 267.226066][ T9355] team_slave_1: entered promiscuous mode [ 267.281978][ T9362] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 267.567225][ T9367] netlink: 'syz.2.1194': attribute type 33 has an invalid length. [ 267.611166][ T9367] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1194'. [ 268.006933][ T9374] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1197'. [ 268.218047][ T9376] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 268.235752][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1198'. [ 268.662388][ T9388] dummy0: entered promiscuous mode [ 271.513408][ T9400] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1207'. [ 271.526567][ T9396] netlink: 'syz.1.1206': attribute type 33 has an invalid length. [ 271.569300][ T9396] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1206'. [ 271.871156][ T9406] netlink: 'syz.0.1209': attribute type 10 has an invalid length. [ 271.919263][ T9406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1209'. [ 272.637675][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1212'. [ 272.709413][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1212'. [ 272.794554][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1212'. [ 272.835648][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1212'. [ 272.895447][ T9422] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1214'. [ 272.926590][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1214'. [ 273.336102][ T9419] netlink: 'syz.3.1213': attribute type 10 has an invalid length. [ 273.356621][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1213'. [ 273.617955][ T9436] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1217'. [ 273.963531][ T9442] netlink: 'syz.2.1220': attribute type 33 has an invalid length. [ 273.989625][ T9442] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1220'. [ 274.375614][ T9448] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 274.384650][ T9448] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1222'. [ 274.850823][ T9460] netlink: 'syz.0.1227': attribute type 29 has an invalid length. [ 274.869652][ T9460] netlink: 'syz.0.1227': attribute type 29 has an invalid length. [ 275.161397][ T9466] netlink: 'syz.0.1227': attribute type 10 has an invalid length. [ 275.891917][ T9472] netlink: 'syz.1.1230': attribute type 33 has an invalid length. [ 276.394183][ T9483] netlink: 'syz.2.1233': attribute type 6 has an invalid length. [ 277.983219][ T9501] __nla_validate_parse: 5 callbacks suppressed [ 277.983241][ T9501] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1239'. [ 278.484601][ T9503] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1240'. [ 278.717214][ T9508] netlink: 'syz.1.1242': attribute type 33 has an invalid length. [ 278.804515][ T9508] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1242'. [ 280.474426][ T9525] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1246'. [ 281.630535][ T9534] netlink: 'syz.1.1250': attribute type 10 has an invalid length. [ 281.639746][ T9534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1250'. [ 281.672120][ T9534] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 281.916108][ T9541] netlink: 'syz.2.1252': attribute type 33 has an invalid length. [ 281.969288][ T9541] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1252'. [ 282.073484][ T9545] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1253'. [ 283.783300][ T9557] netlink: 'syz.3.1256': attribute type 4 has an invalid length. [ 283.964280][ T9557] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1256'. [ 285.142136][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1259'. [ 286.001520][ T9579] netlink: 'syz.0.1263': attribute type 33 has an invalid length. [ 286.019627][ T9579] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1263'. [ 287.767625][ T9602] FAULT_INJECTION: forcing a failure. [ 287.767625][ T9602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.917668][ T9602] CPU: 0 PID: 9602 Comm: syz.3.1269 Not tainted syzkaller #0 [ 287.925231][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.935345][ T9602] Call Trace: [ 287.938677][ T9602] [ 287.941656][ T9602] dump_stack_lvl+0x18c/0x250 [ 287.946535][ T9602] ? show_regs_print_info+0x20/0x20 [ 287.951790][ T9602] ? load_image+0x420/0x420 [ 287.956458][ T9602] ? __might_fault+0xaa/0x120 [ 287.961207][ T9602] ? __lock_acquire+0x7d40/0x7d40 [ 287.966303][ T9602] should_fail_ex+0x39d/0x4d0 [ 287.971057][ T9602] _copy_from_user+0x2f/0xe0 [ 287.975720][ T9602] inet6_ioctl+0x1ad/0x2d0 [ 287.980199][ T9602] ? inet6_getname+0x650/0x650 [ 287.985041][ T9602] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 287.990690][ T9602] sock_do_ioctl+0xfc/0x310 [ 287.995264][ T9602] ? sock_show_fdinfo+0xb0/0xb0 [ 288.000241][ T9602] sock_ioctl+0x5ba/0x7e0 [ 288.004642][ T9602] ? sock_poll+0x3e0/0x3e0 [ 288.009146][ T9602] ? bpf_lsm_file_ioctl+0x9/0x10 [ 288.014138][ T9602] ? security_file_ioctl+0x80/0xa0 [ 288.019743][ T9602] ? sock_poll+0x3e0/0x3e0 [ 288.024220][ T9602] __se_sys_ioctl+0xfd/0x170 [ 288.028880][ T9602] do_syscall_64+0x55/0xb0 [ 288.033357][ T9602] ? clear_bhb_loop+0x40/0x90 [ 288.038522][ T9602] ? clear_bhb_loop+0x40/0x90 [ 288.043351][ T9602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.049289][ T9602] RIP: 0033:0x7f0b79d9ce59 [ 288.053734][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.073978][ T9602] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.082447][ T9602] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 288.090514][ T9602] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 288.098516][ T9602] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 288.106502][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.114537][ T9602] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 288.122578][ T9602] [ 288.356634][ T9607] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1272'. [ 288.564396][ T9613] netlink: 'syz.1.1274': attribute type 33 has an invalid length. [ 288.598809][ T9613] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1274'. [ 289.543204][ T9618] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1275'. [ 289.712598][ T9618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.962680][ T9626] netlink: 'syz.2.1278': attribute type 29 has an invalid length. [ 290.060669][ T9626] netlink: 'syz.2.1278': attribute type 29 has an invalid length. [ 290.400802][ T9636] netlink: 'syz.2.1278': attribute type 10 has an invalid length. [ 290.803197][ T9641] netlink: 'syz.1.1284': attribute type 33 has an invalid length. [ 290.839239][ T9641] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1284'. [ 291.555679][ T9652] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1286'. [ 292.418486][ T9663] FAULT_INJECTION: forcing a failure. [ 292.418486][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 292.431278][ T9663] CPU: 1 PID: 9663 Comm: syz.1.1292 Not tainted syzkaller #0 [ 292.438877][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.448983][ T9663] Call Trace: [ 292.452314][ T9663] [ 292.455311][ T9663] dump_stack_lvl+0x18c/0x250 [ 292.460049][ T9663] ? show_regs_print_info+0x20/0x20 [ 292.465335][ T9663] ? load_image+0x420/0x420 [ 292.469982][ T9663] ? __kmem_cache_alloc_node+0x13a/0x250 [ 292.475849][ T9663] ? netdev_core_pick_tx+0x340/0x340 [ 292.481208][ T9663] should_fail_ex+0x39d/0x4d0 [ 292.485954][ T9663] should_failslab+0x9/0x20 [ 292.490504][ T9663] slab_pre_alloc_hook+0x59/0x310 [ 292.495574][ T9663] kmem_cache_alloc+0x5a/0x2d0 [ 292.500385][ T9663] ? skb_clone+0x1eb/0x370 [ 292.504927][ T9663] skb_clone+0x1eb/0x370 [ 292.509230][ T9663] bpf_clone_redirect+0x167/0x4a0 [ 292.514311][ T9663] bpf_prog_208b094576c80b22+0x5e/0x63 [ 292.519796][ T9663] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 292.525798][ T9663] ? lock_chain_count+0x20/0x20 [ 292.530676][ T9663] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 292.536696][ T9663] ? lockdep_softirqs_on+0x580/0x580 [ 292.542035][ T9663] ? lock_chain_count+0x20/0x20 [ 292.546909][ T9663] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 292.553185][ T9663] ? __local_bh_disable_ip+0x108/0x1a0 [ 292.558661][ T9663] ? __cant_sleep+0x220/0x220 [ 292.563351][ T9663] ? __local_bh_enable_ip+0x13a/0x1c0 [ 292.568740][ T9663] ? _local_bh_enable+0xa0/0xa0 [ 292.573616][ T9663] ? bpf_test_timer_continue+0x135/0x380 [ 292.579287][ T9663] ? bpf_test_run+0x174/0x870 [ 292.583985][ T9663] bpf_test_run+0x2df/0x870 [ 292.588534][ T9663] ? bpf_test_run+0x174/0x870 [ 292.593322][ T9663] ? dst_hold+0x70/0x70 [ 292.597514][ T9663] ? eth_get_headlen+0x210/0x210 [ 292.602496][ T9663] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 292.607930][ T9663] ? cpu_online+0x60/0x60 [ 292.612283][ T9663] bpf_prog_test_run+0x321/0x390 [ 292.617252][ T9663] __sys_bpf+0x49d/0x890 [ 292.621538][ T9663] ? bpf_link_show_fdinfo+0x390/0x390 [ 292.626960][ T9663] ? lock_chain_count+0x20/0x20 [ 292.631852][ T9663] __x64_sys_bpf+0x7c/0x90 [ 292.636295][ T9663] do_syscall_64+0x55/0xb0 [ 292.640745][ T9663] ? clear_bhb_loop+0x40/0x90 [ 292.645436][ T9663] ? clear_bhb_loop+0x40/0x90 [ 292.650262][ T9663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.656197][ T9663] RIP: 0033:0x7f105d99ce59 [ 292.660755][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.680396][ T9663] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.688846][ T9663] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 292.696851][ T9663] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 292.704868][ T9663] RBP: 00007f105e8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 292.712871][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.720860][ T9663] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 292.728945][ T9663] [ 293.788056][ T9676] netlink: 'syz.1.1295': attribute type 33 has an invalid length. [ 293.843891][ T9676] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1295'. [ 295.299676][ T9687] netlink: 'syz.0.1298': attribute type 29 has an invalid length. [ 295.311663][ T9687] netlink: 'syz.0.1298': attribute type 29 has an invalid length. [ 295.572621][ T9690] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 295.667556][ T9693] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1299'. [ 295.760707][ T9695] netlink: 'syz.0.1298': attribute type 10 has an invalid length. [ 295.783624][ T9690] netlink: 'syz.3.1296': attribute type 29 has an invalid length. [ 297.071557][ T9712] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 297.284787][ T9712] team0: left allmulticast mode [ 297.362751][ T9712] team_slave_0: left allmulticast mode [ 297.368300][ T9712] team_slave_1: left allmulticast mode [ 297.571867][ T9712] team0: left promiscuous mode [ 297.639096][ T9712] team_slave_0: left promiscuous mode [ 297.735105][ T9712] team_slave_1: left promiscuous mode [ 297.791629][ T9712] bridge0: port 4(team0) entered disabled state [ 297.907397][ T9711] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 297.973986][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.006757][ T9712] bond0: (slave team0): Enslaving as an active interface with an up link [ 298.039490][ T9718] netlink: 'syz.1.1306': attribute type 33 has an invalid length. [ 298.062110][ T9718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1306'. [ 298.100574][ T9711] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1303'. [ 298.520518][ T9734] netlink: 'syz.0.1310': attribute type 21 has an invalid length. [ 298.744552][ T9736] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1311'. [ 299.218944][ T9743] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 299.244310][ T9743] netlink: 'syz.1.1313': attribute type 29 has an invalid length. [ 299.262807][ T9742] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1322'. [ 301.178059][ T9780] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1326'. [ 301.353349][ T9784] FAULT_INJECTION: forcing a failure. [ 301.353349][ T9784] name failslab, interval 1, probability 0, space 0, times 0 [ 301.366466][ T9784] CPU: 0 PID: 9784 Comm: syz.1.1328 Not tainted syzkaller #0 [ 301.373870][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.383970][ T9784] Call Trace: [ 301.388064][ T9784] [ 301.391027][ T9784] dump_stack_lvl+0x18c/0x250 [ 301.395749][ T9784] ? show_regs_print_info+0x20/0x20 [ 301.401073][ T9784] ? load_image+0x420/0x420 [ 301.405636][ T9784] should_fail_ex+0x39d/0x4d0 [ 301.410359][ T9784] should_failslab+0x9/0x20 [ 301.414875][ T9784] slab_pre_alloc_hook+0x59/0x310 [ 301.419917][ T9784] kmem_cache_alloc_node+0x60/0x320 [ 301.425257][ T9784] ? __alloc_skb+0x103/0x2c0 [ 301.429880][ T9784] __alloc_skb+0x103/0x2c0 [ 301.434322][ T9784] ip_frag_next+0xd1/0xaf0 [ 301.438751][ T9784] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 301.443620][ T9784] ip_do_fragment+0x76f/0x1760 [ 301.448400][ T9784] ? __ip_local_out+0x5f0/0x5f0 [ 301.453260][ T9784] ? ip_fragment+0x210/0x210 [ 301.457854][ T9784] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 301.462748][ T9784] ip_output+0x2a1/0x3b0 [ 301.467084][ T9784] ? ip_output+0x60/0x3b0 [ 301.471419][ T9784] iptunnel_xmit+0x4f0/0x920 [ 301.476030][ T9784] ip_tunnel_xmit+0x1cbc/0x2410 [ 301.480910][ T9784] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 301.485940][ T9784] ? validate_xmit_xfrm+0xbc/0x12c0 [ 301.491162][ T9784] ? gre_build_header+0x25b/0x990 [ 301.496210][ T9784] ipgre_xmit+0x7a6/0xb20 [ 301.500555][ T9784] dev_hard_start_xmit+0x246/0x740 [ 301.505697][ T9784] __dev_queue_xmit+0x19a3/0x3660 [ 301.510743][ T9784] ? __dev_queue_xmit+0x265/0x3660 [ 301.515871][ T9784] ? netdev_core_pick_tx+0x340/0x340 [ 301.521252][ T9784] ? skb_release_data+0x1d1/0x7b0 [ 301.526305][ T9784] __bpf_tx_skb+0x189/0x250 [ 301.530818][ T9784] bpf_clone_redirect+0x30f/0x4a0 [ 301.535865][ T9784] bpf_prog_208b094576c80b22+0x5e/0x63 [ 301.541331][ T9784] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 301.547331][ T9784] ? lock_chain_count+0x20/0x20 [ 301.552197][ T9784] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 301.558535][ T9784] ? lockdep_softirqs_on+0x580/0x580 [ 301.563824][ T9784] ? ktime_get+0x7f/0x280 [ 301.568158][ T9784] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 301.574410][ T9784] ? ktime_get_real_ts64+0x440/0x440 [ 301.579699][ T9784] ? bpf_prog_test_run+0x321/0x390 [ 301.584824][ T9784] ? __local_bh_disable_ip+0x108/0x1a0 [ 301.590297][ T9784] ? __cant_sleep+0x220/0x220 [ 301.594985][ T9784] ? read_tsc+0x9/0x20 [ 301.599060][ T9784] ? ktime_get+0x24b/0x280 [ 301.603483][ T9784] ? bpf_test_run+0x174/0x870 [ 301.608171][ T9784] bpf_test_run+0x2df/0x870 [ 301.612854][ T9784] ? bpf_test_run+0x174/0x870 [ 301.617541][ T9784] ? dst_hold+0x70/0x70 [ 301.621710][ T9784] ? eth_get_headlen+0x210/0x210 [ 301.626662][ T9784] bpf_prog_test_run_skb+0xdc8/0x18c0 [ 301.632075][ T9784] ? cpu_online+0x60/0x60 [ 301.636437][ T9784] bpf_prog_test_run+0x321/0x390 [ 301.641383][ T9784] __sys_bpf+0x49d/0x890 [ 301.645636][ T9784] ? bpf_link_show_fdinfo+0x390/0x390 [ 301.651031][ T9784] ? lock_chain_count+0x20/0x20 [ 301.655899][ T9784] __x64_sys_bpf+0x7c/0x90 [ 301.660322][ T9784] do_syscall_64+0x55/0xb0 [ 301.664743][ T9784] ? clear_bhb_loop+0x40/0x90 [ 301.669419][ T9784] ? clear_bhb_loop+0x40/0x90 [ 301.674101][ T9784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.680001][ T9784] RIP: 0033:0x7f105d99ce59 [ 301.684421][ T9784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.704040][ T9784] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.712476][ T9784] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 301.720480][ T9784] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 301.728467][ T9784] RBP: 00007f105e8f2090 R08: 0000000000000000 R09: 0000000000000000 [ 301.736438][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.744409][ T9784] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 301.752399][ T9784] [ 301.961204][ T9791] validate_nla: 4 callbacks suppressed [ 301.961252][ T9791] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 301.998090][ T9791] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 302.226120][ T9797] netlink: 'syz.2.1329': attribute type 10 has an invalid length. [ 302.894901][ T9804] FAULT_INJECTION: forcing a failure. [ 302.894901][ T9804] name failslab, interval 1, probability 0, space 0, times 0 [ 302.989179][ T9804] CPU: 0 PID: 9804 Comm: syz.3.1332 Not tainted syzkaller #0 [ 302.996616][ T9804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.006705][ T9804] Call Trace: [ 303.009999][ T9804] [ 303.012934][ T9804] dump_stack_lvl+0x18c/0x250 [ 303.017626][ T9804] ? show_regs_print_info+0x20/0x20 [ 303.022843][ T9804] ? load_image+0x420/0x420 [ 303.027358][ T9804] ? __might_sleep+0xe0/0xe0 [ 303.031969][ T9804] ? __lock_acquire+0x7d40/0x7d40 [ 303.037008][ T9804] should_fail_ex+0x39d/0x4d0 [ 303.041700][ T9804] should_failslab+0x9/0x20 [ 303.046207][ T9804] slab_pre_alloc_hook+0x59/0x310 [ 303.051244][ T9804] kmem_cache_alloc_node+0x60/0x320 [ 303.056451][ T9804] ? perf_event_alloc+0x15a/0x21b0 [ 303.061571][ T9804] perf_event_alloc+0x15a/0x21b0 [ 303.066543][ T9804] ? _raw_spin_unlock+0x28/0x40 [ 303.071428][ T9804] ? alloc_fd+0x58f/0x630 [ 303.075781][ T9804] ? find_lively_task_by_vpid+0x19/0x290 [ 303.081432][ T9804] ? find_lively_task_by_vpid+0x19/0x290 [ 303.087084][ T9804] __se_sys_perf_event_open+0x740/0x1c50 [ 303.092737][ T9804] ? mutex_unlock+0x10/0x10 [ 303.097254][ T9804] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 303.102914][ T9804] ? lock_chain_count+0x20/0x20 [ 303.107781][ T9804] ? lockdep_hardirqs_on+0x98/0x150 [ 303.112997][ T9804] ? __x64_sys_perf_event_open+0x20/0xc0 [ 303.118647][ T9804] do_syscall_64+0x55/0xb0 [ 303.123075][ T9804] ? clear_bhb_loop+0x40/0x90 [ 303.127784][ T9804] ? clear_bhb_loop+0x40/0x90 [ 303.132470][ T9804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.138557][ T9804] RIP: 0033:0x7f0b79d9ce59 [ 303.143022][ T9804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.162643][ T9804] RSP: 002b:00007f0b7ac62028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 303.171103][ T9804] RAX: ffffffffffffffda RBX: 00007f0b7a015fa0 RCX: 00007f0b79d9ce59 [ 303.179089][ T9804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 303.187069][ T9804] RBP: 00007f0b7ac62090 R08: 0000000000000000 R09: 0000000000000000 [ 303.195050][ T9804] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 303.203034][ T9804] R13: 00007f0b7a016038 R14: 00007f0b7a015fa0 R15: 00007fffee456eb8 [ 303.211131][ T9804] [ 303.491974][ T9812] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1336'. [ 303.976476][ T9832] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 303.978060][ T9831] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 304.026640][ T9832] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 304.057608][ T9836] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 304.096043][ T9831] netlink: 'syz.1.1346': attribute type 29 has an invalid length. [ 306.674790][ T9849] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1348'. [ 306.952422][ T9860] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1353'. [ 307.021943][ T9865] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1356'. [ 308.311290][ T9895] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 308.320095][ T9895] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1364'. [ 308.361058][ T9889] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 308.376466][ T9889] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.1362'. [ 308.388088][ T9889] openvswitch: netlink: Flow key attr not present in new flow. [ 308.549101][ T9899] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1367'. [ 308.858281][ T9907] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1370'. [ 310.040744][ T9936] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1382'. [ 310.170490][ T9940] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1384'. [ 310.211618][ T9942] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1385'. [ 311.205027][ T9965] netlink: 'syz.0.1393': attribute type 29 has an invalid length. [ 311.266211][ T9965] netlink: 'syz.0.1393': attribute type 29 has an invalid length. [ 311.570388][ T9969] netlink: 'syz.3.1394': attribute type 5 has an invalid length. [ 311.645043][ T9969] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 311.774719][ T9969] team0: Port device dummy0 added [ 311.969784][ T9991] __nla_validate_parse: 3 callbacks suppressed [ 311.969805][ T9991] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1402'. [ 312.423127][ T9995] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1403'. [ 313.592325][T10021] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1413'. [ 313.653576][T10022] FAULT_INJECTION: forcing a failure. [ 313.653576][T10022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.722674][T10022] CPU: 0 PID: 10022 Comm: syz.3.1412 Not tainted syzkaller #0 [ 313.730203][T10022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.740545][T10022] Call Trace: [ 313.743843][T10022] [ 313.746799][T10022] dump_stack_lvl+0x18c/0x250 [ 313.751518][T10022] ? show_regs_print_info+0x20/0x20 [ 313.756756][T10022] ? load_image+0x420/0x420 [ 313.761454][T10022] ? __might_fault+0xaa/0x120 [ 313.766138][T10022] ? __lock_acquire+0x7d40/0x7d40 [ 313.771175][T10022] should_fail_ex+0x39d/0x4d0 [ 313.775865][T10022] _copy_to_user+0x2f/0xa0 [ 313.780292][T10022] __htab_map_lookup_and_delete_batch+0x1034/0x1360 [ 313.786911][T10022] ? __fget_files+0x28/0x4b0 [ 313.791659][T10022] ? jhash+0x740/0x740 [ 313.795744][T10022] ? __fdget+0x180/0x210 [ 313.801389][T10022] ? htab_map_lookup_and_delete_elem+0x40/0x40 [ 313.807571][T10022] bpf_map_do_batch+0x477/0x610 [ 313.812480][T10022] __sys_bpf+0x78c/0x890 [ 313.816727][T10022] ? bpf_link_show_fdinfo+0x390/0x390 [ 313.822111][T10022] ? lock_chain_count+0x20/0x20 [ 313.826971][T10022] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 313.832964][T10022] __x64_sys_bpf+0x7c/0x90 [ 313.837387][T10022] do_syscall_64+0x55/0xb0 [ 313.841815][T10022] ? clear_bhb_loop+0x40/0x90 [ 313.846500][T10022] ? clear_bhb_loop+0x40/0x90 [ 313.851181][T10022] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.857097][T10022] RIP: 0033:0x7f0b79d9ce59 [ 313.861519][T10022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.881135][T10022] RSP: 002b:00007f0b7ac41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.889556][T10022] RAX: ffffffffffffffda RBX: 00007f0b7a016090 RCX: 00007f0b79d9ce59 [ 313.897534][T10022] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 313.905509][T10022] RBP: 00007f0b7ac41090 R08: 0000000000000000 R09: 0000000000000000 [ 313.913475][T10022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.921450][T10022] R13: 00007f0b7a016128 R14: 00007f0b7a016090 R15: 00007fffee456eb8 [ 313.929439][T10022] [ 314.009758][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 314.553142][T10038] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1421'. [ 315.246664][T10059] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1426'. [ 316.787148][T10096] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1440'. [ 316.815426][T10097] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1441'. [ 317.557736][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.566145][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.717802][T10124] sctp: [Deprecated]: syz.0.1452 (pid 10124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.717802][T10124] Use struct sctp_sack_info instead [ 318.335276][T10135] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1456'. [ 318.374191][T10135] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 318.384780][T10135] CPU: 1 PID: 10135 Comm: syz.1.1456 Not tainted syzkaller #0 [ 318.392305][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.402393][T10135] Call Trace: [ 318.405751][T10135] [ 318.408734][T10135] dump_stack_lvl+0x18c/0x250 [ 318.413463][T10135] ? show_regs_print_info+0x20/0x20 [ 318.418701][T10135] ? load_image+0x420/0x420 [ 318.423246][T10135] sysfs_warn_dup+0x8e/0xa0 [ 318.427775][T10135] sysfs_do_create_link_sd+0xc0/0x110 [ 318.433170][T10135] device_add_class_symlinks+0x1cf/0x240 [ 318.438838][T10135] device_add+0x507/0xc50 [ 318.443226][T10135] wiphy_register+0x1dad/0x2ae0 [ 318.448120][T10135] ? cfg80211_event_work+0x40/0x40 [ 318.453284][T10135] ? minstrel_ht_alloc+0x88a/0x990 [ 318.458594][T10135] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 318.464694][T10135] ieee80211_register_hw+0x3464/0x4250 [ 318.470309][T10135] ? ieee80211_tasklet_handler+0x20/0x20 [ 318.475953][T10135] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 318.481873][T10135] ? __debug_object_init+0xec/0x450 [ 318.487092][T10135] ? __asan_memset+0x22/0x40 [ 318.491697][T10135] ? __hrtimer_init+0x186/0x270 [ 318.496566][T10135] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 318.502320][T10135] ? mac80211_hwsim_free+0x220/0x220 [ 318.507616][T10135] ? rcu_is_watching+0x15/0xb0 [ 318.512405][T10135] ? kstrndup+0xbd/0x140 [ 318.516672][T10135] hwsim_new_radio_nl+0xdc9/0x1a90 [ 318.521802][T10135] ? __nla_validate+0x50/0x50 [ 318.526592][T10135] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 318.532957][T10135] ? __nla_parse+0x40/0x50 [ 318.537385][T10135] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 318.543743][T10135] genl_family_rcv_msg_doit+0x211/0x310 [ 318.549323][T10135] ? end_current_label_crit_section+0x170/0x170 [ 318.555584][T10135] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 318.561503][T10135] ? bpf_lsm_capable+0x9/0x10 [ 318.566200][T10135] ? security_capable+0x89/0xb0 [ 318.571076][T10135] genl_rcv_msg+0x619/0x7a0 [ 318.575605][T10135] ? genl_bind+0x360/0x360 [ 318.580035][T10135] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 318.586380][T10135] ? ref_tracker_free+0x690/0x840 [ 318.591428][T10135] netlink_rcv_skb+0x241/0x4d0 [ 318.596224][T10135] ? genl_bind+0x360/0x360 [ 318.600658][T10135] ? netlink_ack+0x1180/0x1180 [ 318.605526][T10135] ? __lock_acquire+0x7d40/0x7d40 [ 318.610578][T10135] ? down_read+0x1ac/0x2e0 [ 318.615013][T10135] genl_rcv+0x28/0x40 [ 318.619004][T10135] netlink_unicast+0x751/0x8d0 [ 318.623797][T10135] netlink_sendmsg+0x8d0/0xbf0 [ 318.628574][T10135] ? netlink_getsockopt+0x590/0x590 [ 318.633782][T10135] ? aa_sock_msg_perm+0x94/0x150 [ 318.638731][T10135] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.644033][T10135] ? security_socket_sendmsg+0x80/0xa0 [ 318.649501][T10135] ? netlink_getsockopt+0x590/0x590 [ 318.654711][T10135] ____sys_sendmsg+0x5ba/0x960 [ 318.659518][T10135] ? __asan_memset+0x22/0x40 [ 318.664115][T10135] ? __sys_sendmsg_sock+0x30/0x30 [ 318.669148][T10135] ? __import_iovec+0x5f2/0x850 [ 318.674015][T10135] ? import_iovec+0x73/0xa0 [ 318.678641][T10135] ___sys_sendmsg+0x2a6/0x360 [ 318.683368][T10135] ? __sys_sendmsg+0x2a0/0x2a0 [ 318.688198][T10135] __se_sys_sendmsg+0x1c2/0x2b0 [ 318.693076][T10135] ? __x64_sys_sendmsg+0x80/0x80 [ 318.698039][T10135] ? lockdep_hardirqs_on+0x98/0x150 [ 318.703282][T10135] do_syscall_64+0x55/0xb0 [ 318.707714][T10135] ? clear_bhb_loop+0x40/0x90 [ 318.712395][T10135] ? clear_bhb_loop+0x40/0x90 [ 318.717077][T10135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.722986][T10135] RIP: 0033:0x7f105d99ce59 [ 318.727408][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.747027][T10135] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.755453][T10135] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 318.763433][T10135] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 318.771408][T10135] RBP: 00007f105da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 318.779475][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.787452][T10135] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 318.795449][T10135] [ 318.909305][T10140] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1458'. [ 319.357434][T10155] ================================================================== [ 319.365544][T10155] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 319.373482][T10155] Write of size 72 at addr ffff88802feca890 by task syz.1.1464/10155 [ 319.381654][T10155] [ 319.383985][T10155] CPU: 0 PID: 10155 Comm: syz.1.1464 Not tainted syzkaller #0 [ 319.391471][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.401527][T10155] Call Trace: [ 319.404810][T10155] [ 319.407733][T10155] dump_stack_lvl+0x18c/0x250 [ 319.412416][T10155] ? __lock_acquire+0x7d40/0x7d40 [ 319.417439][T10155] ? show_regs_print_info+0x20/0x20 [ 319.422633][T10155] ? load_image+0x420/0x420 [ 319.427132][T10155] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 319.432593][T10155] ? __virt_addr_valid+0x18c/0x540 [ 319.437706][T10155] ? __virt_addr_valid+0x469/0x540 [ 319.442833][T10155] print_report+0xa8/0x210 [ 319.447251][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 319.452899][T10155] kasan_report+0x117/0x150 [ 319.457408][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 319.462527][T10155] kasan_check_range+0x241/0x290 [ 319.467473][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 319.472756][T10155] __asan_memcpy+0x40/0x70 [ 319.477168][T10155] __bpf_get_stackid+0x6bf/0x900 [ 319.482108][T10155] bpf_get_stackid_pe+0x343/0x410 [ 319.487134][T10155] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 319.492588][T10155] bpf_overflow_handler+0x1fc/0x510 [ 319.497788][T10155] ? perf_prepare_header+0x1e0/0x1e0 [ 319.503085][T10155] ? bpf_overflow_handler+0xde/0x510 [ 319.508465][T10155] ? tp_perf_event_destroy+0x20/0x20 [ 319.513840][T10155] ? __perf_event_account_interrupt+0x187/0x280 [ 319.520124][T10155] __perf_event_overflow+0x447/0x630 [ 319.525410][T10155] perf_swevent_event+0x319/0x570 [ 319.530430][T10155] ? perf_tp_event+0x1520/0x1520 [ 319.535371][T10155] ___perf_sw_event+0x4a7/0x730 [ 319.540218][T10155] ? ___perf_sw_event+0x199/0x730 [ 319.545237][T10155] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 319.551667][T10155] ? __lock_acquire+0x1347/0x7d40 [ 319.556686][T10155] ? rep_movs_alternative+0x4a/0x90 [ 319.561894][T10155] ? verify_lock_unused+0x140/0x140 [ 319.567124][T10155] ? kasan_set_track+0x5f/0x70 [ 319.571895][T10155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 319.577874][T10155] ? do_syscall_64+0x55/0xb0 [ 319.582459][T10155] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.588551][T10155] ? lock_chain_count+0x20/0x20 [ 319.593401][T10155] __perf_sw_event+0x139/0x270 [ 319.598192][T10155] do_user_addr_fault+0x123e/0x12c0 [ 319.603385][T10155] ? rcu_is_watching+0x15/0xb0 [ 319.608147][T10155] exc_page_fault+0x64/0x100 [ 319.612739][T10155] asm_exc_page_fault+0x26/0x30 [ 319.617590][T10155] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 319.623398][T10155] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 319.643035][T10155] RSP: 0018:ffffc900199a7bd0 EFLAGS: 00050206 [ 319.649100][T10155] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 00000000000004ed [ 319.657071][T10155] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807796a080 [ 319.665045][T10155] RBP: ffffc900199a7d20 R08: 0000000000000004 R09: 0000000000000005 [ 319.673016][T10155] R10: dffffc0000000000 R11: ffffed100ef2d4ad R12: 00002000000024ed [ 319.680998][T10155] R13: 1ffff92003334fbd R14: ffff88807796a000 R15: 0000200000001f80 [ 319.688979][T10155] ? _copy_from_user+0x41/0xe0 [ 319.693766][T10155] _copy_from_user+0x8b/0xe0 [ 319.698445][T10155] generic_map_update_batch+0x59a/0x810 [ 319.703997][T10155] ? rcu_read_unlock+0xa0/0xa0 [ 319.708764][T10155] ? __fdget+0x180/0x210 [ 319.713011][T10155] ? rcu_read_unlock+0xa0/0xa0 [ 319.717796][T10155] bpf_map_do_batch+0x3d7/0x610 [ 319.722647][T10155] __sys_bpf+0x381/0x890 [ 319.726886][T10155] ? bpf_link_show_fdinfo+0x390/0x390 [ 319.732792][T10155] ? lock_chain_count+0x20/0x20 [ 319.737651][T10155] __x64_sys_bpf+0x7c/0x90 [ 319.742111][T10155] do_syscall_64+0x55/0xb0 [ 319.746569][T10155] ? clear_bhb_loop+0x40/0x90 [ 319.751262][T10155] ? clear_bhb_loop+0x40/0x90 [ 319.755943][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.761836][T10155] RIP: 0033:0x7f105d99ce59 [ 319.766249][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.785943][T10155] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 319.794354][T10155] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 319.802671][T10155] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 319.810673][T10155] RBP: 00007f105da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 319.818640][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.826611][T10155] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 319.834594][T10155] [ 319.837604][T10155] [ 319.839921][T10155] Allocated by task 10155: [ 319.844325][T10155] kasan_set_track+0x4e/0x70 [ 319.848949][T10155] __kasan_kmalloc+0x8f/0xa0 [ 319.853539][T10155] __kmalloc_node+0xb4/0x230 [ 319.858134][T10155] bpf_map_area_alloc+0x5e/0x110 [ 319.863074][T10155] prealloc_elems_and_freelist+0x86/0x1c0 [ 319.868827][T10155] stack_map_alloc+0x33a/0x4c0 [ 319.873600][T10155] map_create+0x877/0x12f0 [ 319.878015][T10155] __sys_bpf+0x651/0x890 [ 319.882253][T10155] __x64_sys_bpf+0x7c/0x90 [ 319.886760][T10155] do_syscall_64+0x55/0xb0 [ 319.891215][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.897150][T10155] [ 319.899477][T10155] The buggy address belongs to the object at ffff88802feca880 [ 319.899477][T10155] which belongs to the cache kmalloc-cg-64 of size 64 [ 319.913614][T10155] The buggy address is located 16 bytes inside of [ 319.913614][T10155] allocated 40-byte region [ffff88802feca880, ffff88802feca8a8) [ 319.927677][T10155] [ 319.930001][T10155] The buggy address belongs to the physical page: [ 319.936507][T10155] page:ffffea0000bfb280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2feca [ 319.946654][T10155] memcg:ffff88802ab8d601 [ 319.950883][T10155] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 319.958773][T10155] page_type: 0xffffffff() [ 319.963118][T10155] raw: 00fff00000000800 ffff888017c4da00 ffffea000180ec80 0000000000000007 [ 319.971754][T10155] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802ab8d601 [ 319.980338][T10155] page dumped because: kasan: bad access detected [ 319.986762][T10155] page_owner tracks the page as allocated [ 319.992477][T10155] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5778, tgid 5778 (syz-executor), ts 292358976411, free_ts 292358142721 [ 320.010975][T10155] post_alloc_hook+0x1c1/0x200 [ 320.015750][T10155] get_page_from_freelist+0x1951/0x19e0 [ 320.021289][T10155] __alloc_pages+0x1f0/0x460 [ 320.025885][T10155] alloc_slab_page+0x5d/0x160 [ 320.030569][T10155] new_slab+0x87/0x2d0 [ 320.034651][T10155] ___slab_alloc+0xc5d/0x12f0 [ 320.039325][T10155] __kmem_cache_alloc_node+0x19e/0x250 [ 320.044779][T10155] kmalloc_trace+0x2a/0xe0 [ 320.049194][T10155] alloc_fdtable+0xca/0x2c0 [ 320.053702][T10155] dup_fd+0x786/0xa50 [ 320.057683][T10155] copy_files+0xc3/0x120 [ 320.061935][T10155] copy_process+0x15ab/0x3dc0 [ 320.066613][T10155] kernel_clone+0x24b/0x8a0 [ 320.071111][T10155] __x64_sys_clone+0x1b7/0x230 [ 320.075875][T10155] do_syscall_64+0x55/0xb0 [ 320.080316][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.086215][T10155] page last free stack trace: [ 320.090874][T10155] free_unref_page_prepare+0x7b2/0x8c0 [ 320.096343][T10155] free_unref_page+0x32/0x2e0 [ 320.101022][T10155] vfree+0x1a6/0x320 [ 320.104918][T10155] __do_replace+0x858/0x990 [ 320.109414][T10155] do_ip6t_set_ctl+0xb48/0xe10 [ 320.114181][T10155] nf_setsockopt+0x263/0x280 [ 320.118767][T10155] do_sock_setsockopt+0x175/0x1a0 [ 320.123785][T10155] __x64_sys_setsockopt+0x182/0x200 [ 320.128975][T10155] do_syscall_64+0x55/0xb0 [ 320.133389][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.139279][T10155] [ 320.141591][T10155] Memory state around the buggy address: [ 320.147210][T10155] ffff88802feca780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 320.155283][T10155] ffff88802feca800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 320.163360][T10155] >ffff88802feca880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 320.171503][T10155] ^ [ 320.176860][T10155] ffff88802feca900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 320.184921][T10155] ffff88802feca980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 320.193000][T10155] ================================================================== [ 320.201070][T10155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 320.208718][T10155] CPU: 0 PID: 10155 Comm: syz.1.1464 Not tainted syzkaller #0 [ 320.216176][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.226319][T10155] Call Trace: [ 320.229686][T10155] [ 320.232612][T10155] dump_stack_lvl+0x18c/0x250 [ 320.237290][T10155] ? show_regs_print_info+0x20/0x20 [ 320.242493][T10155] ? load_image+0x420/0x420 [ 320.247081][T10155] panic+0x2dc/0x730 [ 320.250987][T10155] ? __lock_acquire+0x7d40/0x7d40 [ 320.256036][T10155] ? bpf_jit_dump+0xd0/0xd0 [ 320.260990][T10155] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 320.266895][T10155] ? _raw_spin_unlock+0x40/0x40 [ 320.271754][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 320.276946][T10155] check_panic_on_warn+0x84/0xa0 [ 320.281881][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 320.286995][T10155] end_report+0x6f/0x130 [ 320.291327][T10155] kasan_report+0x128/0x150 [ 320.295831][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 320.300959][T10155] kasan_check_range+0x241/0x290 [ 320.305898][T10155] ? __bpf_get_stackid+0x6bf/0x900 [ 320.311007][T10155] __asan_memcpy+0x40/0x70 [ 320.315421][T10155] __bpf_get_stackid+0x6bf/0x900 [ 320.320360][T10155] bpf_get_stackid_pe+0x343/0x410 [ 320.325387][T10155] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 320.330883][T10155] bpf_overflow_handler+0x1fc/0x510 [ 320.336082][T10155] ? perf_prepare_header+0x1e0/0x1e0 [ 320.341370][T10155] ? bpf_overflow_handler+0xde/0x510 [ 320.346655][T10155] ? tp_perf_event_destroy+0x20/0x20 [ 320.351940][T10155] ? __perf_event_account_interrupt+0x187/0x280 [ 320.358183][T10155] __perf_event_overflow+0x447/0x630 [ 320.363478][T10155] perf_swevent_event+0x319/0x570 [ 320.368503][T10155] ? perf_tp_event+0x1520/0x1520 [ 320.373486][T10155] ___perf_sw_event+0x4a7/0x730 [ 320.378339][T10155] ? ___perf_sw_event+0x199/0x730 [ 320.383358][T10155] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 320.389805][T10155] ? __lock_acquire+0x1347/0x7d40 [ 320.394847][T10155] ? rep_movs_alternative+0x4a/0x90 [ 320.400057][T10155] ? verify_lock_unused+0x140/0x140 [ 320.405259][T10155] ? kasan_set_track+0x5f/0x70 [ 320.410020][T10155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 320.415995][T10155] ? do_syscall_64+0x55/0xb0 [ 320.421018][T10155] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.427082][T10155] ? lock_chain_count+0x20/0x20 [ 320.431933][T10155] __perf_sw_event+0x139/0x270 [ 320.436693][T10155] do_user_addr_fault+0x123e/0x12c0 [ 320.441905][T10155] ? rcu_is_watching+0x15/0xb0 [ 320.446668][T10155] exc_page_fault+0x64/0x100 [ 320.451281][T10155] asm_exc_page_fault+0x26/0x30 [ 320.456150][T10155] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 320.461984][T10155] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 320.481861][T10155] RSP: 0018:ffffc900199a7bd0 EFLAGS: 00050206 [ 320.487949][T10155] RAX: ffffffff842a7f01 RBX: 000000000000056d RCX: 00000000000004ed [ 320.495942][T10155] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807796a080 [ 320.504025][T10155] RBP: ffffc900199a7d20 R08: 0000000000000004 R09: 0000000000000005 [ 320.512019][T10155] R10: dffffc0000000000 R11: ffffed100ef2d4ad R12: 00002000000024ed [ 320.519996][T10155] R13: 1ffff92003334fbd R14: ffff88807796a000 R15: 0000200000001f80 [ 320.528059][T10155] ? _copy_from_user+0x41/0xe0 [ 320.532837][T10155] _copy_from_user+0x8b/0xe0 [ 320.537426][T10155] generic_map_update_batch+0x59a/0x810 [ 320.542999][T10155] ? rcu_read_unlock+0xa0/0xa0 [ 320.547755][T10155] ? __fdget+0x180/0x210 [ 320.551993][T10155] ? rcu_read_unlock+0xa0/0xa0 [ 320.556830][T10155] bpf_map_do_batch+0x3d7/0x610 [ 320.561683][T10155] __sys_bpf+0x381/0x890 [ 320.565929][T10155] ? bpf_link_show_fdinfo+0x390/0x390 [ 320.571306][T10155] ? lock_chain_count+0x20/0x20 [ 320.576159][T10155] __x64_sys_bpf+0x7c/0x90 [ 320.580569][T10155] do_syscall_64+0x55/0xb0 [ 320.584985][T10155] ? clear_bhb_loop+0x40/0x90 [ 320.589658][T10155] ? clear_bhb_loop+0x40/0x90 [ 320.594505][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.600395][T10155] RIP: 0033:0x7f105d99ce59 [ 320.604801][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.624428][T10155] RSP: 002b:00007f105e8f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.632858][T10155] RAX: ffffffffffffffda RBX: 00007f105dc15fa0 RCX: 00007f105d99ce59 [ 320.640844][T10155] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 320.648819][T10155] RBP: 00007f105da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 320.656815][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.664782][T10155] R13: 00007f105dc16038 R14: 00007f105dc15fa0 R15: 00007ffde42dd3e8 [ 320.672756][T10155] [ 320.676033][T10155] Kernel Offset: disabled [ 320.680345][T10155] Rebooting in 86400 seconds..