last executing test programs: 2.418183218s ago: executing program 0 (id=3545): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(r1) close(0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000600000000000f000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) 2.417919758s ago: executing program 3 (id=3546): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xad5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xffffff32, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x75, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000}, 0x50) 2.34317078s ago: executing program 1 (id=3548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x8000000}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.257641372s ago: executing program 3 (id=3549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c8b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x3, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x7b, 0x6}]}, {0x0, [0x57, 0xe5e919b5517ad0d3, 0x61, 0x61]}}, &(0x7f0000001f00)=""/4083, 0x4e, 0xff3, 0x3}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r1}, 0x20) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r5, &(0x7f0000000080)="d510e438881c57c9aaa6b7ad", 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) openat$tun(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) sendmsg$inet(r4, 0x0, 0x4454) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 2.257370092s ago: executing program 1 (id=3550): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x10}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x5}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x205d9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb515592177c99e9, @perf_bp={&(0x7f0000000100), 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x3, 0x2, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000640)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={&(0x7f0000000280)="6aab93a3dad77b95ff15376af08000b58c6f45be29056cdf51e15fa904d367820daf88389dfa64b9d0a0e1c3546e4404aaeb47520f002444f2be66ffb45a2713792e57ff5681632d4da041e141721b51c01d884c61c74084269584514a6475f39aea71560cb1ebe22a26ad04470715bb77cfa94af41b3697e16335fd123f025e1e16", &(0x7f0000001740)=""/4096, &(0x7f0000002740)="4e60155e9c1af8ce94e9552e782924c81207f08622e6bd6eaa38301671d93e77a830c3533cb429439c61319cf29c26b1adc692da0d906056c77aa9649b04822f703cb883dc74b348316087f9048d56abd337c1086159aadfebb8a3ed2c9fa74161279e945df6531532998a57401245920a5f668d39ae", &(0x7f00000027c0)="cd744b1de13eca9360756c2a2754d8d8f52f94a774577650b9f324c19183c6d5aee0a1eaef121b5790", 0xcfb, r2, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000088000000880000000b000000000000000500000d000000000000000001000000060000000500000000000000000000000c00000000000000050000000100000000000000000000030000000005000000050000000900000000000000000000030000000004c7180002000000030000000a000000010000931200000002000000920e00005aa0440d0a000000000000020400000000"], &(0x7f0000000bc0)=""/238, 0xab, 0xee, 0x1, 0x9, 0x10000}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0xe}, 0x18a21, 0x0, 0x20, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xdd}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 2.225211003s ago: executing program 0 (id=3551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r1, 0x4) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091"], 0xfe33) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @union={0x2, 0x5, 0x0, 0x5, 0x0, 0x4, [{0xc, 0x4, 0x10001}, {0xa, 0x2, 0xffff8000}, {0x6, 0x2, 0x3}, {0x7, 0x3, 0x7}, {0xd, 0x1, 0x8}]}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x17, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x61, 0x2e, 0x61, 0x0]}}, &(0x7f00000004c0)=""/14, 0x88, 0xe, 0x0, 0x35, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r1, 0x4) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091"], 0xfe33) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xc, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @union={0x2, 0x5, 0x0, 0x5, 0x0, 0x4, [{0xc, 0x4, 0x10001}, {0xa, 0x2, 0xffff8000}, {0x6, 0x2, 0x3}, {0x7, 0x3, 0x7}, {0xd, 0x1, 0x8}]}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x17, 0x61, 0x2e, 0x2e, 0x5f, 0x0, 0x61, 0x2e, 0x61, 0x0]}}, &(0x7f00000004c0)=""/14, 0x88, 0xe, 0x0, 0x35, 0x10000, @value=r3}, 0x28) (async) 1.977606699s ago: executing program 2 (id=3553): socket$kcm(0x2, 0x5, 0x84) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000fe000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000d45db2d43ceba42df56ebedaaa0e9b79814240f1f479b9b4ece96279c3321204ee69233ffad7b08ef2aede423b074a97f6bc09c65e31d9b5c4e8d8c3b7fdf527b851c6433df2ef2cf5c56fb6800346369cb13af313198e97c656f40970f49416c6ee21a650e30700000053d650bbc0de50aec7542b8848682d0ca72c4c976fa5d86363fe80b1d0e35713757f5c64e43d0f79869d0dc3fdb93034937c6996998cd9402210fd", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}, 0x40800) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7", 0x93}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)}], 0x3}, 0x40e4804) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x2e}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6e}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.977288499s ago: executing program 0 (id=3554): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x2d, 0x0, 0x3, 0x5, 0x0, 0x8cc3, 0x800, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000280), 0xb}, 0x1, 0x2, 0xffff, 0x0, 0x8, 0x7, 0xd27e, 0x0, 0x6, 0x0, 0x240000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="070000000400001a18000000010000520a00e6771b93f1c8365059e9007cdce19c4a8b172e80840a6a1dcccd51d4c0d24f365c9cb470", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x23a, 0xf607}, 0x120, 0x400000, 0xb9, 0x0, 0xfffffffffffffffd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, r3, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x2, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x25b68d628f296dad) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000140)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8) 1.877197222s ago: executing program 1 (id=3555): socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x11, 0x7, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=r6], 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1.753115955s ago: executing program 0 (id=3556): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x11}, 0x3e8) 1.665751587s ago: executing program 2 (id=3557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x78, &(0x7f0000000b80)=""/120, 0x40f00, 0x8}, 0x94) 1.511178971s ago: executing program 1 (id=3558): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x6000, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)="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", 0xeba}], 0x5}, 0x40000) 1.487549452s ago: executing program 0 (id=3559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200ce0c0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000000)="b9158edfaa57fef007fd65580000ffff", 0x0, 0x1dc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071189e000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.406813584s ago: executing program 2 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="ffffed8e46dc3f0adf3303faca2a", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6f}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000300020006000a0000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) 1.380754415s ago: executing program 1 (id=3561): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB='\x00'/20, @ANYRESOCT, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000340b64e1687adace46f3bd9147b35390b8f660d244e7bd1707272f01fa03be79157ee36679a83161"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0x2}, 0x80, 0x0}, 0x8010) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0x5}], 0x10, 0xad}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Z', 0x1}], 0x1}, 0x10) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x10000) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 1.349459425s ago: executing program 2 (id=3562): socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x9a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 9) 1.242869638s ago: executing program 3 (id=3563): socket$kcm(0x2, 0x3, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYBLOB='E'], 0x31) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x10, 0x6, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x4100, 0x3, 0x0, 0x1, 0x5f, 0x0, 0x3, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r3, 0x0) (async) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="050008"]) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)=ANY=[]) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="025206ea4cd3f2eb0000000000000000"]) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, &(0x7f0000000640)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x23, 0x8, 0x0, 0x0}}, 0x10) (async) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000001b40), 0x4) (async) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x7b, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x100007, 0x4, 0x21, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r9, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r11, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r12, @cgroup_sysctl=0x12, r11, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r10, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) (async) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x80000001, 0x7fffffff, 0x5, 0x8483, 0xffffffffffffffff, 0x9, '\x00', r12, r13, 0x1, 0x1}, 0x50) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x19, 0x0, 0x0) 549.640986ms ago: executing program 3 (id=3564): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syz_tun\x00', 0x10}) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x5}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x205d9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb515592177c99e9, @perf_bp={&(0x7f0000000100), 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x3, 0x2, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000640)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={&(0x7f0000000280)="6aab93a3dad77b95ff15376af08000b58c6f45be29056cdf51e15fa904d367820daf88389dfa64b9d0a0e1c3546e4404aaeb47520f002444f2be66ffb45a2713792e57ff5681632d4da041e141721b51c01d884c61c74084269584514a6475f39aea71560cb1ebe22a26ad04470715bb77cfa94af41b3697e16335fd123f025e1e16", &(0x7f0000001740)=""/4096, &(0x7f0000002740)="4e60155e9c1af8ce94e9552e782924c81207f08622e6bd6eaa38301671d93e77a830c3533cb429439c61319cf29c26b1adc692da0d906056c77aa9649b04822f703cb883dc74b348316087f9048d56abd337c1086159aadfebb8a3ed2c9fa74161279e945df6531532998a57401245920a5f668d39ae", &(0x7f00000027c0)="cd744b1de13eca9360756c2a2754d8d8f52f94a774577650b9f324c19183c6d5aee0a1eaef121b5790", 0xcfb, r2, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000088000000880000000b000000000000000500000d000000000000000001000000060000000500000000000000000000000c00000000000000050000000100000000000000000000030000000005000000050000000900000000000000000000030000000004c7180002000000030000000a000000010000931200000002000000920e00005aa0440d0a000000000000020400000000"], &(0x7f0000000bc0)=""/238, 0xab, 0xee, 0x1, 0x9, 0x10000}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0xe}, 0x18a21, 0x0, 0x20, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xdd}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 520.230476ms ago: executing program 2 (id=3565): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f00002f}, 0x600) 459.756748ms ago: executing program 0 (id=3566): socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffeffffffffffffe, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x240a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r8], 0x50) 437.104818ms ago: executing program 3 (id=3567): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)="02044a00ea0e0000000000001eafbcea06e105000000000000001104ee1606d4b8bf4a8207f0ffff74c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f409000a3164ae439862807a158983661a6d2341f7", 0x19}, {&(0x7f0000000040)="df3b46a13300"/17, 0x11}, {&(0x7f0000001480)="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", 0xeba}], 0x5}, 0x40000) (fail_nth: 8) 349.169691ms ago: executing program 1 (id=3568): r0 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206, 0x0, 0xd}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gre0\x00', 0x1000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x12}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, 0x0}, 0x3000c085) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$sock(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001900)='\x00', 0x1}], 0x1}, 0x8001) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001c80)=ANY=[], 0x2f8}, 0x20000080) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000200)=r0, 0x78) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x439) 348.777031ms ago: executing program 2 (id=3569): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'pimreg1\x00', @local}) r1 = socket$kcm(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x4321bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000840000000700000094040000863900000001000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700e5ff1010"], 0x10b8}, 0x7f40) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) sendmsg$kcm(r3, &(0x7f0000000a80)={&(0x7f0000000280)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000380)="cbebbcef220aa04a4fc636af51f73ff3f625f56cdf188abc9b8e345a1df97c8550a0de90266dbf112ca8341a484efc8990e8980e31fc627ad2175c4c0aecf642c2a62c72814414b440", 0x49}, {&(0x7f0000000580)="fd346442995b981becd156f54cc6ffc70a", 0x11}, {&(0x7f00000005c0)="651f", 0x2}, {&(0x7f0000000800)="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", 0xfa}, {&(0x7f0000000980)="913c912b3ac2ac11a53d4f50b8c7129327513ebbe12492998972da71e1d001d92475bc3837410a976c1c743a4f810012fa3c9b61b217a95670f8e0b08cb292ea9d85dbf972eb33fe6318cb3ef330a0870618ec6741e98c8cc80aab5c76c628eb380476ffeb5e2a4fa07a763a98914ec273d53c", 0x73}], 0x5}, 0x11) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r3}) sendmsg$kcm(r8, &(0x7f0000001280)={&(0x7f0000000b00)=@in6={0xa, 0x4e24, 0x0, @remote, 0x3}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000b80)="d091ec78dfbee3097aa6f937956ebe65c9b64684bdfcbea6575c80cbc3db047aaae07ff547934edafeee2846054f1992d8bb9257a6bd6258255c685399f101eea6a82fbede8dafa3dc050232ee62fa4bbe7447230fc6abd278886fbe462411a4df71541ce8d651e06bc236cbd60867f1244dbffecc0ecdc7b3d2c0d7fa72b999e756721fb20a5966e377086b7d12282d847b80af15f3c828686e2c44f3260d2a06895732eebeb133c66ea7c241584f70fa01a7acc1b2137656d269132b425e978292b40ba577081c65521e1236562108a701d3a5eb885c098005f90c20b9", 0xde}, {&(0x7f0000000d00)="b9ae628d7fd2469f6e65d836fd064930e09c97eb34616a7adf7cadbdf16b6b0377f63a515edb0b66c88ce56df614c65709c287c9e4d59c38ab12a14df31e9122569296171405edcde18fb98a8c0c18e9776602134c0df746bee5d83f213a3f45678dc1ac8c36a8b689bd825e97a1f40a7c859b888ba48aa50dd53d7fa87052eebe36dcd54602bf9dd49956a2e9916557a2f9f9da62b99171da529a89ef7cbd", 0x9f}, {&(0x7f0000000dc0)="d6daf0cd002767", 0x7}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="a5b0d9b766a803a4de8a1b9f790ce1796a0740f894b2bdffa1e7c05a30a2999e6697b592f59bcf567016be5f8a54eb77c239bc89d1544b9ce830434be42c1c830c3ecaec4caf0e7538da8c6d9437681c45426385bd95decd0161b686beb2a475597bb3204dc17e365f6aad5808d6840c611d48de8077c12a74263cf373e6dda3707976e2987bad7c85dc022476bcb8889c931bfabb4739423e55dad861ff4aa91fd695581957a0f6bbdf6cec4b0f2aff00e597be0a7dec592c0a9c20d7021346dc6524101324d40c5cfb3ecfe241757186f6f4655a6c951e309e456aab3d0e39093442f3d893ec5a1b1e9f5d", 0xec}, {&(0x7f0000000f40)="3c45d797408d293cb87f992057eaa2815578c03cad933c48f35c8fbb350776d3f695d46eb844154cdfaae0bc0a0173579feeb12a50bf3f84358810a6077f42467910bbb49e68477b3b19a7e29468f24510c4813788979e1bff6fa9073dbe9dc603d97f", 0x63}, {&(0x7f0000000fc0)="a516f2ec40450980bc64ed98c6f1787986bd473b2ea5a9accbddabffb0aea2defff444a5072deeb058477e0d08c9099093ee17fcde3a6735d27d603525851b59a19813cea4ee397a98c5608a6f3907821851ba483862fb9239d3ea62cd3823d7ec9e3f6520b7a2ea52595ae09d7c82f26ce86738a8b85912426e17bdd2a0756eef2f3ad5e8e0acc5f708cd7b497dbe4a3009ceca4340935ec9ce318f9cca5a08de81ba3babd72aea3dbf4cb4abdaab8d9a2183766572607924e2c7bc0581e939cae5ff7d1a111acca86bde721b70f744e9a0f1ec7f1e3ba972c6455e248eff97c1fe2209226648f111a79d1b09b48e0022d8ec156b42", 0xf6}], 0x7, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x108}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000)=r0, 0x4) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=3570): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000000e00)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="4a440100000021d77e601993f019", 0xe}], 0x1, 0x0, 0x6000}, 0x0) kernel console output (not intermixed with test programs): es in process `syz.1.2615'. [ 490.297982][T13608] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2615'. [ 490.877375][T10198] wlan1: Trigger new scan to find an IBSS to join [ 491.024928][T13632] netlink: 'syz.1.2623': attribute type 4 has an invalid length. [ 491.036923][T13632] netlink: 'syz.1.2623': attribute type 4 has an invalid length. [ 491.322767][T13642] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 491.331784][T13642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2626'. [ 491.342062][T13642] team0: entered promiscuous mode [ 491.347568][T13642] team_slave_0: entered promiscuous mode [ 491.361069][T13642] team_slave_1: entered promiscuous mode [ 491.369557][T13642] team0: entered allmulticast mode [ 491.375302][T13642] team_slave_0: entered allmulticast mode [ 491.387578][T13642] team_slave_1: entered allmulticast mode [ 491.406240][T13642] bridge0: port 3(team0) entered blocking state [ 491.415190][T13642] bridge0: port 3(team0) entered disabled state [ 491.444203][T13642] bridge0: port 3(team0) entered blocking state [ 491.451406][T13642] bridge0: port 3(team0) entered forwarding state [ 491.719638][T13659] FAULT_INJECTION: forcing a failure. [ 491.719638][T13659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.738012][T13659] CPU: 0 PID: 13659 Comm: syz.1.2632 Not tainted syzkaller #0 [ 491.745516][T13659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.755599][T13659] Call Trace: [ 491.758905][T13659] [ 491.761862][T13659] dump_stack_lvl+0x18c/0x250 [ 491.766573][T13659] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.772770][T13659] ? show_regs_print_info+0x20/0x20 [ 491.777996][T13659] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.784201][T13659] should_fail_ex+0x394/0x4c0 [ 491.788925][T13659] _copy_from_user+0x2f/0xe0 [ 491.793545][T13659] __copy_msghdr+0x388/0x560 [ 491.798165][T13659] ___sys_sendmsg+0x214/0x360 [ 491.802879][T13659] ? __sys_sendmsg+0x2b0/0x2b0 [ 491.807716][T13659] ? ktime_get+0x7f/0x280 [ 491.812074][T13659] ? trace_call_bpf+0xc3/0x6c0 [ 491.816911][T13659] __se_sys_sendmsg+0x1d0/0x2c0 [ 491.821817][T13659] ? perf_trace_preemptirq_template+0x269/0x330 [ 491.828092][T13659] ? __x64_sys_sendmsg+0x80/0x80 [ 491.833072][T13659] ? lockdep_hardirqs_on+0x98/0x150 [ 491.838308][T13659] do_syscall_64+0x55/0xb0 [ 491.842753][T13659] ? clear_bhb_loop+0x40/0x90 [ 491.847451][T13659] ? clear_bhb_loop+0x40/0x90 [ 491.852156][T13659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.858078][T13659] RIP: 0033:0x7fd1c9b9e019 [ 491.862535][T13659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.882166][T13659] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.890606][T13659] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 491.898603][T13659] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 000000000000000b [ 491.906623][T13659] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 491.914620][T13659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.922616][T13659] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 491.930627][T13659] [ 491.966690][T13662] netlink: 'syz.2.2633': attribute type 3 has an invalid length. [ 491.990115][T13662] netlink: 'syz.2.2633': attribute type 1 has an invalid length. [ 492.167964][T13670] FAULT_INJECTION: forcing a failure. [ 492.167964][T13670] name failslab, interval 1, probability 0, space 0, times 0 [ 492.184500][T13670] CPU: 0 PID: 13670 Comm: syz.1.2636 Not tainted syzkaller #0 [ 492.192002][T13670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.202092][T13670] Call Trace: [ 492.205396][T13670] [ 492.208352][T13670] dump_stack_lvl+0x18c/0x250 [ 492.213057][T13670] ? show_regs_print_info+0x20/0x20 [ 492.218279][T13670] ? load_image+0x420/0x420 [ 492.222840][T13670] ? __lock_acquire+0x7d80/0x7d80 [ 492.227893][T13670] ? verify_lock_unused+0x140/0x140 [ 492.233122][T13670] should_fail_ex+0x394/0x4c0 [ 492.237848][T13670] should_failslab+0x9/0x20 [ 492.242387][T13670] slab_pre_alloc_hook+0x59/0x300 [ 492.247452][T13670] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 492.253113][T13670] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 492.258702][T13670] __kmem_cache_alloc_node+0x53/0x250 [ 492.264109][T13670] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 492.269652][T13670] __kmalloc+0xa7/0x240 [ 492.273815][T13670] bpf_prog_test_run_skb+0x242/0x18f0 [ 492.279210][T13670] ? __fget_files+0x28/0x460 [ 492.283839][T13670] ? __fget_files+0x3fc/0x460 [ 492.288520][T13670] ? cpu_online+0x60/0x60 [ 492.292874][T13670] bpf_prog_test_run+0x31f/0x390 [ 492.297837][T13670] __sys_bpf+0x49d/0x890 [ 492.302095][T13670] ? bpf_link_show_fdinfo+0x390/0x390 [ 492.307485][T13670] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.313665][T13670] __x64_sys_bpf+0x7c/0x90 [ 492.318090][T13670] do_syscall_64+0x55/0xb0 [ 492.322517][T13670] ? clear_bhb_loop+0x40/0x90 [ 492.327202][T13670] ? clear_bhb_loop+0x40/0x90 [ 492.331885][T13670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.337785][T13670] RIP: 0033:0x7fd1c9b9e019 [ 492.342211][T13670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.361849][T13670] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 492.370290][T13670] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 492.378271][T13670] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 492.386278][T13670] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 492.394284][T13670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.402275][T13670] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 492.410290][T13670] [ 492.637800][T13681] netlink: 'syz.0.2641': attribute type 10 has an invalid length. [ 492.654489][T13681] team0: entered promiscuous mode [ 492.661701][T13681] team_slave_0: entered promiscuous mode [ 492.668742][T13681] team_slave_1: entered promiscuous mode [ 492.680860][T13681] team0: entered allmulticast mode [ 492.697752][T13681] team_slave_0: entered allmulticast mode [ 492.704043][T13681] team_slave_1: entered allmulticast mode [ 492.723953][T13681] bridge0: port 3(team0) entered blocking state [ 492.746312][T13681] bridge0: port 3(team0) entered disabled state [ 492.800745][T13681] bridge0: port 3(team0) entered blocking state [ 492.807761][T13681] bridge0: port 3(team0) entered forwarding state [ 494.379849][T13727] netlink: 'syz.3.2654': attribute type 17 has an invalid length. [ 494.402107][T13727] netlink: 'syz.3.2654': attribute type 16 has an invalid length. [ 494.424725][T13727] __nla_validate_parse: 1 callbacks suppressed [ 494.424740][T13727] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2654'. [ 494.504500][T13737] netlink: 'syz.2.2657': attribute type 16 has an invalid length. [ 494.516672][T13737] netlink: 'syz.2.2657': attribute type 3 has an invalid length. [ 494.524520][T13737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2657'. [ 494.626400][T13740] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2659'. [ 495.402561][T13776] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2670'. [ 495.452387][T13778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2672'. [ 495.534599][T13778] dummy0: entered promiscuous mode [ 495.568933][T13778] dummy0: entered allmulticast mode [ 495.580938][T13778] bridge0: port 1(dummy0) entered blocking state [ 495.613552][T13778] bridge0: port 1(dummy0) entered disabled state [ 495.639563][T13778] bridge0: port 1(dummy0) entered blocking state [ 495.646116][T13778] bridge0: port 1(dummy0) entered forwarding state [ 495.805843][T13791] FAULT_INJECTION: forcing a failure. [ 495.805843][T13791] name failslab, interval 1, probability 0, space 0, times 0 [ 495.818906][T13791] CPU: 1 PID: 13791 Comm: syz.0.2677 Not tainted syzkaller #0 [ 495.826403][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.836481][T13791] Call Trace: [ 495.839779][T13791] [ 495.842729][T13791] dump_stack_lvl+0x18c/0x250 [ 495.847446][T13791] ? show_regs_print_info+0x20/0x20 [ 495.852678][T13791] ? load_image+0x420/0x420 [ 495.857228][T13791] ? skb_network_protocol+0x529/0x790 [ 495.862733][T13791] should_fail_ex+0x394/0x4c0 [ 495.867453][T13791] should_failslab+0x9/0x20 [ 495.871997][T13791] slab_pre_alloc_hook+0x59/0x300 [ 495.877074][T13791] kmem_cache_alloc+0x5a/0x2c0 [ 495.881876][T13791] ? skb_clone+0x1eb/0x370 [ 495.886331][T13791] skb_clone+0x1eb/0x370 [ 495.890605][T13791] ? dev_queue_xmit_nit+0x204/0xba0 [ 495.895837][T13791] dev_queue_xmit_nit+0x23f/0xba0 [ 495.900896][T13791] ? dev_queue_xmit_nit+0x2d/0xba0 [ 495.906047][T13791] dev_hard_start_xmit+0x150/0x790 [ 495.911212][T13791] ? __dev_queue_xmit+0x275/0x3630 [ 495.916372][T13791] __dev_queue_xmit+0x198c/0x3630 [ 495.921453][T13791] ? __dev_queue_xmit+0x275/0x3630 [ 495.926623][T13791] ? netdev_core_pick_tx+0x370/0x370 [ 495.931962][T13791] ? ref_tracker_alloc+0x347/0x4b0 [ 495.937117][T13791] ? __copy_skb_header+0xa3/0x4a0 [ 495.942177][T13791] ? __asan_memcpy+0x40/0x70 [ 495.946812][T13791] ? __skb_clone+0x5c/0x6c0 [ 495.951355][T13791] ? __skb_clone+0x446/0x6c0 [ 495.955982][T13791] ? skb_clone+0x21f/0x370 [ 495.960428][T13791] __netlink_deliver_tap+0x579/0x7f0 [ 495.965753][T13791] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.970979][T13791] netlink_deliver_tap+0x19c/0x1b0 [ 495.976119][T13791] netlink_unicast+0x77b/0x930 [ 495.981021][T13791] netlink_sendmsg+0x8d0/0xbf0 [ 495.985828][T13791] ? netlink_getsockopt+0x590/0x590 [ 495.991060][T13791] ? apparmor_socket_sendmsg+0x8e/0x330 [ 495.996651][T13791] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.001979][T13791] ? security_socket_sendmsg+0x80/0xa0 [ 496.007468][T13791] ? netlink_getsockopt+0x590/0x590 [ 496.012712][T13791] ____sys_sendmsg+0x61b/0x980 [ 496.017882][T13791] ? __asan_memset+0x22/0x40 [ 496.022508][T13791] ? __sys_sendmsg_sock+0x30/0x30 [ 496.027559][T13791] ? __import_iovec+0x5f2/0x850 [ 496.032465][T13791] ? import_iovec+0x73/0xa0 [ 496.037022][T13791] ___sys_sendmsg+0x2a6/0x360 [ 496.041729][T13791] ? get_pid_task+0x20/0x1e0 [ 496.046356][T13791] ? __sys_sendmsg+0x2b0/0x2b0 [ 496.051170][T13791] ? __lock_acquire+0x7d80/0x7d80 [ 496.056269][T13791] __se_sys_sendmsg+0x1d0/0x2c0 [ 496.061161][T13791] ? __x64_sys_sendmsg+0x80/0x80 [ 496.066171][T13791] ? lockdep_hardirqs_on+0x98/0x150 [ 496.071422][T13791] do_syscall_64+0x55/0xb0 [ 496.075872][T13791] ? clear_bhb_loop+0x40/0x90 [ 496.080581][T13791] ? clear_bhb_loop+0x40/0x90 [ 496.085296][T13791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.091222][T13791] RIP: 0033:0x7f930919e019 [ 496.095661][T13791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.115299][T13791] RSP: 002b:00007f930a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.123739][T13791] RAX: ffffffffffffffda RBX: 00007f9309425fa0 RCX: 00007f930919e019 [ 496.131738][T13791] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 496.139736][T13791] RBP: 00007f930a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 496.147728][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.155725][T13791] R13: 00007f9309426038 R14: 00007f9309425fa0 R15: 00007ffef885ffd8 [ 496.163740][T13791] [ 496.172574][ T59] wlan1: Trigger new scan to find an IBSS to join [ 496.210544][T13791] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.232413][T13791] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2677'. [ 496.893074][T13806] IPv6: NLM_F_CREATE should be specified when creating new route [ 497.171309][ T59] wlan1: Creating new IBSS network, BSSID ba:67:3f:f9:61:0a [ 497.351568][T13826] validate_nla: 2 callbacks suppressed [ 497.351588][T13826] netlink: 'syz.1.2688': attribute type 10 has an invalid length. [ 497.369254][T13828] netlink: 'syz.0.2689': attribute type 10 has an invalid length. [ 497.369276][T13828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2689'. [ 497.444160][T13826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.652866][T13826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.799834][T13838] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.2692'. [ 497.967917][T13826] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 497.979678][T13832] mac80211_hwsim hwsim33 .3ãc¤±: renamed from wlan1 (while UP) [ 498.617500][T13866] netlink: 'syz.3.2703': attribute type 3 has an invalid length. [ 498.634842][T13866] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2703'. [ 498.841281][T13881] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2707'. [ 498.899085][T13882] delete_channel: no stack [ 499.607702][T13909] __nla_validate_parse: 1 callbacks suppressed [ 499.607719][T13909] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2714'. [ 500.150492][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.282146][T13909] bridge_slave_0 (unregistering): left allmulticast mode [ 500.289323][T13909] bridge_slave_0 (unregistering): left promiscuous mode [ 500.296531][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.361406][T13914] netlink: 'syz.0.2717': attribute type 6 has an invalid length. [ 500.372482][T13914] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2717'. [ 500.379050][T13918] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2718'. [ 500.984622][T13948] netlink: 'syz.2.2727': attribute type 3 has an invalid length. [ 501.006278][T13948] netlink: 'syz.2.2727': attribute type 4 has an invalid length. [ 501.015901][T13938] syzkaller0: entered promiscuous mode [ 501.039967][T13948] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.2727'. [ 501.505508][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.520034][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.144926][T13980] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2742'. [ 503.235426][T13980] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2742'. [ 503.565770][T13986] netlink: 'syz.1.2743': attribute type 16 has an invalid length. [ 503.578880][T13986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2743'. [ 503.601240][T13986] veth1_macvtap: entered allmulticast mode [ 503.885304][T13999] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2746'. [ 504.241501][T14004] netlink: 'syz.2.2748': attribute type 10 has an invalid length. [ 504.287329][T14012] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2751'. [ 504.306247][T14004] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 504.484655][T14016] netlink: 'syz.3.2752': attribute type 6 has an invalid length. [ 504.505348][T14016] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2752'. [ 504.746608][T14034] __nla_validate_parse: 1 callbacks suppressed [ 504.746624][T14034] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2754'. [ 504.879673][T14022] netlink: 'syz.3.2752': attribute type 10 has an invalid length. [ 504.892342][T14022] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2752'. [ 505.220128][T14045] netlink: 'syz.3.2759': attribute type 21 has an invalid length. [ 505.242403][T14043] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2758'. [ 505.269318][T14043] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2758'. [ 505.413869][T14055] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2762'. [ 505.439070][T14054] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2763'. [ 505.622277][T14061] hsr0: entered allmulticast mode [ 505.627477][T14061] hsr_slave_0: entered allmulticast mode [ 505.639189][T14061] hsr_slave_1: entered allmulticast mode [ 505.681964][T14065] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2766'. [ 505.706072][T14065] netlink: zone id is out of range [ 505.712381][T14065] netlink: zone id is out of range [ 505.717670][T14065] netlink: zone id is out of range [ 505.723264][T14065] netlink: zone id is out of range [ 505.728544][T14065] netlink: zone id is out of range [ 505.734005][T14065] netlink: zone id is out of range [ 505.739286][T14065] netlink: zone id is out of range [ 505.744767][T14065] netlink: zone id is out of range [ 505.750132][T14065] netlink: zone id is out of range [ 505.755501][T14065] netlink: zone id is out of range [ 505.922425][T14069] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2767'. [ 506.032456][T14069] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2767'. [ 506.268204][T14084] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2773'. [ 506.345969][T14088] FAULT_INJECTION: forcing a failure. [ 506.345969][T14088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.359566][T14088] CPU: 0 PID: 14088 Comm: syz.0.2774 Not tainted syzkaller #0 [ 506.367071][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.377156][T14088] Call Trace: [ 506.380465][T14088] [ 506.383429][T14088] dump_stack_lvl+0x18c/0x250 [ 506.388158][T14088] ? show_regs_print_info+0x20/0x20 [ 506.393389][T14088] ? load_image+0x420/0x420 [ 506.397930][T14088] ? __might_fault+0xaa/0x120 [ 506.402648][T14088] ? __lock_acquire+0x7d80/0x7d80 [ 506.407707][T14088] ? unix_ioctl+0x259/0x6b0 [ 506.412274][T14088] should_fail_ex+0x394/0x4c0 [ 506.417000][T14088] _copy_from_user+0x2f/0xe0 [ 506.421628][T14088] sock_do_ioctl+0x190/0x310 [ 506.426259][T14088] ? sock_show_fdinfo+0xb0/0xb0 [ 506.431156][T14088] sock_ioctl+0x5be/0x7e0 [ 506.435523][T14088] ? sock_poll+0x3e0/0x3e0 [ 506.439979][T14088] ? bpf_lsm_file_ioctl+0x9/0x10 [ 506.444957][T14088] ? security_file_ioctl+0x80/0xa0 [ 506.450112][T14088] ? sock_poll+0x3e0/0x3e0 [ 506.454558][T14088] __se_sys_ioctl+0xfd/0x170 [ 506.459186][T14088] do_syscall_64+0x55/0xb0 [ 506.463637][T14088] ? clear_bhb_loop+0x40/0x90 [ 506.468359][T14088] ? clear_bhb_loop+0x40/0x90 [ 506.473075][T14088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.479010][T14088] RIP: 0033:0x7f930919e019 [ 506.483462][T14088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.503105][T14088] RSP: 002b:00007f930a0cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.511547][T14088] RAX: ffffffffffffffda RBX: 00007f9309425fa0 RCX: 00007f930919e019 [ 506.519546][T14088] RDX: 0000200000000580 RSI: 0000000000008927 RDI: 0000000000000006 [ 506.527550][T14088] RBP: 00007f930a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 506.535559][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.543554][T14088] R13: 00007f9309426038 R14: 00007f9309425fa0 R15: 00007ffef885ffd8 [ 506.551562][T14088] [ 507.597215][T14119] syzkaller0: entered promiscuous mode [ 509.430727][T14150] netlink: 'syz.3.2792': attribute type 10 has an invalid length. [ 509.539530][T14150] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 509.556985][T14158] delete_channel: no stack [ 509.564791][T14158] delete_channel: no stack [ 509.572324][T14153] netlink: 'syz.2.2794': attribute type 10 has an invalid length. [ 510.157897][T14176] __nla_validate_parse: 7 callbacks suppressed [ 510.157913][T14176] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2799'. [ 510.216442][T14171] syzkaller0: entered promiscuous mode [ 511.910112][T14190] netlink: 'syz.2.2805': attribute type 3 has an invalid length. [ 511.917893][T14190] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2805'. [ 511.956427][T14193] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2804'. [ 512.568120][T14199] netlink: 'syz.2.2807': attribute type 4 has an invalid length. [ 512.576655][T14199] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2807'. [ 512.589031][T14199] .`: renamed from bond0 (while UP) [ 512.693803][T14207] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 512.735398][T14207] netlink: 'syz.0.2810': attribute type 10 has an invalid length. [ 512.747754][T14207] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.2810'. [ 512.798202][T14207] net_ratelimit: 25 callbacks suppressed [ 512.798236][T14207] openvswitch: netlink: Message has 4 unknown bytes. [ 513.068909][T14209] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2811'. [ 513.418153][T14227] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.2816'. [ 513.442782][T14222] syzkaller0: entered promiscuous mode [ 514.861331][T14224] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2817'. [ 515.283670][T14244] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 515.293394][T14244] netlink: 'syz.3.2823': attribute type 4 has an invalid length. [ 515.301999][T14244] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2823'. [ 515.327360][T14244] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.585087][T14257] team0: Port device team_slave_0 removed [ 515.714883][T14261] netlink: 'syz.2.2829': attribute type 10 has an invalid length. [ 515.773170][T14261] vxcan1: entered promiscuous mode [ 515.788218][T14261] vxcan1: entered allmulticast mode [ 515.794307][T14261] team0: Device vxcan1 is of different type [ 515.938333][T14271] netlink: 'syz.1.2831': attribute type 21 has an invalid length. [ 515.946854][T14271] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.955740][T14271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.963023][T14271] IPv6: NLM_F_CREATE should be set when creating new route [ 515.970423][T14271] IPv6: NLM_F_CREATE should be set when creating new route [ 515.977803][T14271] IPv6: NLM_F_CREATE should be set when creating new route [ 515.996483][T14269] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2830'. [ 516.058784][T14269] bridge0: port 1(dummy0) entered disabled state [ 516.106005][T14269] bridge0: port 1(dummy0) entered disabled state [ 516.145438][T14279] FAULT_INJECTION: forcing a failure. [ 516.145438][T14279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.159525][T14279] CPU: 0 PID: 14279 Comm: syz.1.2833 Not tainted syzkaller #0 [ 516.167034][T14279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 516.177118][T14279] Call Trace: [ 516.180422][T14279] [ 516.183417][T14279] dump_stack_lvl+0x18c/0x250 [ 516.188157][T14279] ? show_regs_print_info+0x20/0x20 [ 516.193394][T14279] ? load_image+0x420/0x420 [ 516.197947][T14279] ? __lock_acquire+0x7d80/0x7d80 [ 516.203014][T14279] ? snprintf+0xe9/0x140 [ 516.207317][T14279] should_fail_ex+0x394/0x4c0 [ 516.212084][T14279] _copy_to_user+0x2f/0xa0 [ 516.216541][T14279] simple_read_from_buffer+0xe7/0x150 [ 516.222048][T14279] proc_fail_nth_read+0x1e8/0x260 [ 516.227123][T14279] ? proc_fault_inject_write+0x360/0x360 [ 516.232804][T14279] ? fsnotify_perm+0x271/0x5e0 [ 516.237610][T14279] ? proc_fault_inject_write+0x360/0x360 [ 516.243295][T14279] vfs_read+0x298/0x990 [ 516.247541][T14279] ? kernel_read+0x1e0/0x1e0 [ 516.252171][T14279] ? __fget_files+0x28/0x460 [ 516.256804][T14279] ? __fget_files+0x3fc/0x460 [ 516.261546][T14279] ? __fdget_pos+0x2a3/0x330 [ 516.266181][T14279] ? ksys_read+0x74/0x260 [ 516.270558][T14279] ksys_read+0x151/0x260 [ 516.274853][T14279] ? vfs_write+0x9a0/0x9a0 [ 516.279320][T14279] ? lockdep_hardirqs_on+0x98/0x150 [ 516.284571][T14279] do_syscall_64+0x55/0xb0 [ 516.289025][T14279] ? clear_bhb_loop+0x40/0x90 [ 516.293721][T14279] ? clear_bhb_loop+0x40/0x90 [ 516.298420][T14279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.304331][T14279] RIP: 0033:0x7fd1c9b5e84e [ 516.308767][T14279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.328399][T14279] RSP: 002b:00007fd1caa7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.336833][T14279] RAX: ffffffffffffffda RBX: 00007fd1caa7b6c0 RCX: 00007fd1c9b5e84e [ 516.344825][T14279] RDX: 000000000000000f RSI: 00007fd1caa7b0a0 RDI: 0000000000000005 [ 516.352811][T14279] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 516.360796][T14279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.368802][T14279] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 516.376833][T14279] [ 516.906613][T14302] bridge0: port 4(syz_tun) entered blocking state [ 516.915230][T14302] bridge0: port 4(syz_tun) entered disabled state [ 516.923876][T14302] syz_tun: entered allmulticast mode [ 516.940839][T14302] syz_tun: entered promiscuous mode [ 516.955772][T14302] bridge0: port 4(syz_tun) entered blocking state [ 516.962363][T14302] bridge0: port 4(syz_tun) entered forwarding state [ 517.029320][T14305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2843'. [ 517.240413][T14310] syzkaller0: entered promiscuous mode [ 517.249598][T14310] syzkaller0: entered allmulticast mode [ 517.424526][T14312] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2845'. [ 517.706992][T14318] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2848'. [ 517.778775][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2852'. [ 517.793776][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2852'. [ 517.805062][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2852'. [ 517.894457][T14330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2852'. [ 517.911667][T14327] can: request_module (can-proto-0) failed. [ 518.094154][T14335] FAULT_INJECTION: forcing a failure. [ 518.094154][T14335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.134237][T14335] CPU: 0 PID: 14335 Comm: syz.1.2854 Not tainted syzkaller #0 [ 518.141764][T14335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.151858][T14335] Call Trace: [ 518.155173][T14335] [ 518.158137][T14335] dump_stack_lvl+0x18c/0x250 [ 518.162942][T14335] ? show_regs_print_info+0x20/0x20 [ 518.168170][T14335] ? load_image+0x420/0x420 [ 518.172715][T14335] ? __might_fault+0xaa/0x120 [ 518.177436][T14335] ? __lock_acquire+0x7d80/0x7d80 [ 518.182491][T14335] ? __virt_addr_valid+0x10c/0x380 [ 518.187667][T14335] should_fail_ex+0x394/0x4c0 [ 518.192491][T14335] _copy_from_user+0x2f/0xe0 [ 518.197131][T14335] generic_map_update_batch+0x58c/0x800 [ 518.202749][T14335] ? rcu_read_unlock+0xa0/0xa0 [ 518.207546][T14335] ? __fdget+0x180/0x210 [ 518.211823][T14335] ? rcu_read_unlock+0xa0/0xa0 [ 518.216622][T14335] bpf_map_do_batch+0x3f2/0x600 [ 518.221592][T14335] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 518.228152][T14335] __sys_bpf+0x381/0x890 [ 518.232442][T14335] ? bpf_link_show_fdinfo+0x390/0x390 [ 518.237857][T14335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.244064][T14335] __x64_sys_bpf+0x7c/0x90 [ 518.248517][T14335] do_syscall_64+0x55/0xb0 [ 518.252964][T14335] ? clear_bhb_loop+0x40/0x90 [ 518.257671][T14335] ? clear_bhb_loop+0x40/0x90 [ 518.262392][T14335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.268332][T14335] RIP: 0033:0x7fd1c9b9e019 [ 518.272791][T14335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.292463][T14335] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.300919][T14335] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 518.308927][T14335] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 518.316925][T14335] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 518.324929][T14335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.332930][T14335] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 518.340951][T14335] [ 518.414159][T14339] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2856'. [ 518.916433][T14356] netlink: 'syz.1.2863': attribute type 1 has an invalid length. [ 518.933522][T14356] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 518.943252][T14356] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 518.954749][T14356] netlink: 'syz.1.2863': attribute type 3 has an invalid length. [ 518.963162][T14356] netlink: 'syz.1.2863': attribute type 4 has an invalid length. [ 518.975375][T14356] netlink: 'syz.1.2863': attribute type 5 has an invalid length. [ 520.873285][T14367] validate_nla: 6 callbacks suppressed [ 520.873296][T14367] netlink: 'syz.1.2865': attribute type 4 has an invalid length. [ 520.886620][T14367] __nla_validate_parse: 1 callbacks suppressed [ 520.886633][T14367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2865'. [ 520.902066][T14367] .`: renamed from bond0 (while UP) [ 520.924101][T14373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2867'. [ 521.576413][T14401] sit0: entered allmulticast mode [ 521.699460][T14398] netlink: 'syz.3.2875': attribute type 2 has an invalid length. [ 521.727068][T14403] sit0: entered promiscuous mode [ 521.769059][T14398] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2875'. [ 522.410577][T14408] netlink: 'syz.0.2878': attribute type 4 has an invalid length. [ 522.426796][T14408] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2878'. [ 522.450251][T14408] .`: renamed from bond0 (while UP) [ 523.033786][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 523.261352][T14434] netlink: 'syz.2.2888': attribute type 2 has an invalid length. [ 523.280127][T14434] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2888'. [ 523.328284][T14438] netlink: 'syz.1.2889': attribute type 10 has an invalid length. [ 523.350330][T14438] veth1_macvtap: left promiscuous mode [ 524.117532][T14467] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2900'. [ 524.253683][T14471] netlink: 'syz.0.2901': attribute type 2 has an invalid length. [ 524.276216][T14471] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2901'. [ 524.790994][T14498] netlink: 'syz.2.2914': attribute type 15 has an invalid length. [ 524.798889][T14498] netlink: 'syz.2.2914': attribute type 7 has an invalid length. [ 524.833991][T14498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2914'. [ 525.564393][T14530] netlink: 'syz.2.2925': attribute type 21 has an invalid length. [ 525.575809][T14530] IPv6: NLM_F_CREATE should be specified when creating new route [ 525.586097][T14530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.593381][T14530] IPv6: NLM_F_CREATE should be set when creating new route [ 525.600708][T14530] IPv6: NLM_F_CREATE should be set when creating new route [ 525.608079][T14530] IPv6: NLM_F_CREATE should be set when creating new route [ 525.687060][T14528] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2924'. [ 525.704385][T14528] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 526.836749][T14554] FAULT_INJECTION: forcing a failure. [ 526.836749][T14554] name failslab, interval 1, probability 0, space 0, times 0 [ 526.866002][T14554] CPU: 0 PID: 14554 Comm: syz.2.2933 Not tainted syzkaller #0 [ 526.873522][T14554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.883610][T14554] Call Trace: [ 526.886917][T14554] [ 526.889879][T14554] dump_stack_lvl+0x18c/0x250 [ 526.894602][T14554] ? show_regs_print_info+0x20/0x20 [ 526.899841][T14554] ? load_image+0x420/0x420 [ 526.904390][T14554] ? __might_sleep+0xe0/0xe0 [ 526.909021][T14554] ? __lock_acquire+0x7d80/0x7d80 [ 526.914085][T14554] should_fail_ex+0x394/0x4c0 [ 526.918804][T14554] should_failslab+0x9/0x20 [ 526.923347][T14554] slab_pre_alloc_hook+0x59/0x300 [ 526.928416][T14554] ? lockdep_softirqs_off+0x440/0x440 [ 526.933833][T14554] kmem_cache_alloc+0x5a/0x2c0 [ 526.938646][T14554] ? security_inode_alloc+0x34/0x110 [ 526.943996][T14554] security_inode_alloc+0x34/0x110 [ 526.949141][T14554] inode_init_always+0x914/0xc90 [ 526.954115][T14554] new_inode_pseudo+0x95/0x1d0 [ 526.958924][T14554] __sock_create+0x12d/0x940 [ 526.963557][T14554] ? __might_fault+0xaa/0x120 [ 526.968285][T14554] ? __might_fault+0xc6/0x120 [ 526.973000][T14554] __sys_socketpair+0x1c1/0x550 [ 526.977889][T14554] __x64_sys_socketpair+0x9b/0xb0 [ 526.982956][T14554] do_syscall_64+0x55/0xb0 [ 526.987409][T14554] ? clear_bhb_loop+0x40/0x90 [ 526.992120][T14554] ? clear_bhb_loop+0x40/0x90 [ 526.996838][T14554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.002774][T14554] RIP: 0033:0x7f8f0359e019 [ 527.007221][T14554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.026866][T14554] RSP: 002b:00007f8f04535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 527.035314][T14554] RAX: ffffffffffffffda RBX: 00007f8f03825fa0 RCX: 00007f8f0359e019 [ 527.043317][T14554] RDX: 0000000000000003 RSI: 0000000000000002 RDI: 0000000000000022 [ 527.051317][T14554] RBP: 00007f8f04535090 R08: 0000000000000000 R09: 0000000000000000 [ 527.059315][T14554] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.067312][T14554] R13: 00007f8f03826038 R14: 00007f8f03825fa0 R15: 00007ffecf2315d8 [ 527.075329][T14554] [ 527.108521][T14559] netlink: 'syz.0.2936': attribute type 4 has an invalid length. [ 527.126410][T14559] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2936'. [ 527.152895][T14554] socket: no more sockets [ 527.194499][ T2948] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.497556][T14565] syzkaller0: entered promiscuous mode [ 527.528089][T14565] syzkaller0: entered allmulticast mode [ 527.677001][T14578] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2942'. [ 528.062577][T14581] netlink: 'syz.1.2941': attribute type 10 has an invalid length. [ 528.080148][T14581] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2941'. [ 529.184827][T14561] Bluetooth: hci0: command 0x0406 tx timeout [ 530.547522][T14599] syzkaller0: entered promiscuous mode [ 532.157981][T14614] netlink: 'syz.0.2952': attribute type 5 has an invalid length. [ 532.194421][T14617] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 532.216043][T14617] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 532.822421][T14644] netlink: 'syz.2.2961': attribute type 6 has an invalid length. [ 532.840969][T14644] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2961'. [ 533.004003][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 533.020231][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 533.052528][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 533.075969][T14648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2962'. [ 533.325380][T14659] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 533.363425][T14659] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 534.868503][T14700] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2970'. [ 534.908726][T14700] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 536.149760][T14714] syzkaller0: entered promiscuous mode [ 536.181185][T14714] syzkaller0: entered allmulticast mode [ 538.178382][T14725] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2976'. [ 538.312907][T14725] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2976'. [ 538.458850][T14732] syz.0.2986 (14732) used greatest stack depth: 18760 bytes left [ 538.771459][T14739] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 538.804168][T14739] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 538.869481][T14746] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 538.877649][T14746] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2981'. [ 539.057260][T14750] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.2984'. [ 539.121917][T14752] netlink: 'syz.2.2983': attribute type 21 has an invalid length. [ 539.140088][T14752] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2983'. [ 539.850284][T14772] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 539.890111][T14772] syzkaller1: linktype set to 3 [ 540.081538][T14778] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2993'. [ 540.255031][T14779] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2993'. [ 543.037870][T14806] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode [ 543.060268][T14806] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 543.109168][T14810] netlink: 'syz.0.3001': attribute type 21 has an invalid length. [ 543.123816][T14810] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3001'. [ 543.457485][T14819] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3004'. [ 543.585129][T14822] sit0: left promiscuous mode [ 543.611054][T14824] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3004'. [ 543.728527][T14817] sit0: entered promiscuous mode [ 544.247368][T14849] FAULT_INJECTION: forcing a failure. [ 544.247368][T14849] name failslab, interval 1, probability 0, space 0, times 0 [ 544.281483][T14849] CPU: 1 PID: 14849 Comm: syz.0.3011 Not tainted syzkaller #0 [ 544.289004][T14849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 544.299059][T14849] Call Trace: [ 544.302335][T14849] [ 544.305266][T14849] dump_stack_lvl+0x18c/0x250 [ 544.309954][T14849] ? show_regs_print_info+0x20/0x20 [ 544.315152][T14849] ? load_image+0x420/0x420 [ 544.319666][T14849] ? __lock_acquire+0x7d80/0x7d80 [ 544.324706][T14849] ? trace_raw_output_contention_end+0xd0/0xd0 [ 544.330858][T14849] should_fail_ex+0x394/0x4c0 [ 544.335556][T14849] should_failslab+0x9/0x20 [ 544.340094][T14849] slab_pre_alloc_hook+0x59/0x300 [ 544.345150][T14849] ? __inet_diag_dump_start+0x8b/0x9f0 [ 544.350732][T14849] __kmem_cache_alloc_node+0x53/0x250 [ 544.356125][T14849] ? __inet_diag_dump_start+0x8b/0x9f0 [ 544.361613][T14849] kmalloc_trace+0x2a/0xe0 [ 544.366052][T14849] __inet_diag_dump_start+0x8b/0x9f0 [ 544.371344][T14849] ? netlink_lookup+0x30/0x200 [ 544.376136][T14849] ? netlink_lookup+0x30/0x200 [ 544.380921][T14849] __netlink_dump_start+0x43c/0x7a0 [ 544.386132][T14849] inet_diag_handler_cmd+0x1e0/0x2c0 [ 544.391435][T14849] ? sock_diag_lock_handler+0x19/0x280 [ 544.396989][T14849] ? inet_diag_unregister+0xb0/0xb0 [ 544.402208][T14849] ? inet_diag_handler_get_info+0x790/0x790 [ 544.408110][T14849] ? inet_diag_dump_start+0x20/0x20 [ 544.413320][T14849] ? inet_diag_dump+0x50/0x50 [ 544.418020][T14849] ? sock_diag_lock_handler+0x19/0x280 [ 544.423499][T14849] ? inet_diag_unregister+0xb0/0xb0 [ 544.428704][T14849] sock_diag_rcv_msg+0x3d3/0x5f0 [ 544.433659][T14849] netlink_rcv_skb+0x235/0x4c0 [ 544.438439][T14849] ? sock_diag_bind+0xb0/0xb0 [ 544.443144][T14849] ? netlink_ack+0x1160/0x1160 [ 544.447922][T14849] ? __lock_acquire+0x7d80/0x7d80 [ 544.452965][T14849] ? netlink_deliver_tap+0x2e/0x1b0 [ 544.458174][T14849] sock_diag_rcv+0x2a/0x40 [ 544.462617][T14849] netlink_unicast+0x7b1/0x930 [ 544.467429][T14849] netlink_sendmsg+0x8d0/0xbf0 [ 544.472219][T14849] ? netlink_getsockopt+0x590/0x590 [ 544.477439][T14849] ? apparmor_socket_sendmsg+0x8e/0x330 [ 544.483008][T14849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 544.488314][T14849] ? security_socket_sendmsg+0x80/0xa0 [ 544.493783][T14849] ? netlink_getsockopt+0x590/0x590 [ 544.499003][T14849] ____sys_sendmsg+0x61b/0x980 [ 544.503795][T14849] ? __asan_memset+0x22/0x40 [ 544.508406][T14849] ? __sys_sendmsg_sock+0x30/0x30 [ 544.513540][T14849] ? __import_iovec+0x5f2/0x850 [ 544.518423][T14849] ? import_iovec+0x73/0xa0 [ 544.522944][T14849] ___sys_sendmsg+0x2a6/0x360 [ 544.527634][T14849] ? get_pid_task+0x20/0x1e0 [ 544.532244][T14849] ? __sys_sendmsg+0x2b0/0x2b0 [ 544.537036][T14849] ? __lock_acquire+0x7d80/0x7d80 [ 544.542096][T14849] __se_sys_sendmsg+0x1d0/0x2c0 [ 544.546959][T14849] ? __x64_sys_sendmsg+0x80/0x80 [ 544.551920][T14849] ? lockdep_hardirqs_on+0x98/0x150 [ 544.557136][T14849] do_syscall_64+0x55/0xb0 [ 544.561561][T14849] ? clear_bhb_loop+0x40/0x90 [ 544.566246][T14849] ? clear_bhb_loop+0x40/0x90 [ 544.570932][T14849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.576837][T14849] RIP: 0033:0x7f930919e019 [ 544.581265][T14849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.600890][T14849] RSP: 002b:00007f930a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.609322][T14849] RAX: ffffffffffffffda RBX: 00007f9309425fa0 RCX: 00007f930919e019 [ 544.617303][T14849] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 544.625286][T14849] RBP: 00007f930a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 544.633264][T14849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.641242][T14849] R13: 00007f9309426038 R14: 00007f9309425fa0 R15: 00007ffef885ffd8 [ 544.649234][T14849] [ 544.663100][T14561] Bluetooth: hci4: command 0x0406 tx timeout [ 544.779044][T14847] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3010'. [ 544.790896][T14847] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.3010'. [ 545.151479][T14872] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3018'. [ 545.588653][T14889] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.3022'. [ 546.325539][T14917] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3031'. [ 546.514736][T14927] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 546.651719][T14927] geneve1: entered promiscuous mode [ 546.657222][T14927] geneve1: entered allmulticast mode [ 546.671148][T14927] team0: Port device geneve1 added [ 547.111077][T14947] netlink: 'syz.1.3040': attribute type 21 has an invalid length. [ 547.165010][T14950] netlink: 'syz.2.3041': attribute type 10 has an invalid length. [ 547.193413][T14950] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.211739][ T5781] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 547.220593][T14950] bridge_slave_1: left allmulticast mode [ 547.226343][T14950] bridge_slave_1: left promiscuous mode [ 547.233232][T14950] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.245719][T14950] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 547.264430][T14951] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3042'. [ 547.400928][T14955] FAULT_INJECTION: forcing a failure. [ 547.400928][T14955] name failslab, interval 1, probability 0, space 0, times 0 [ 547.424063][T14955] CPU: 1 PID: 14955 Comm: syz.1.3044 Not tainted syzkaller #0 [ 547.431576][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.441654][T14955] Call Trace: [ 547.444964][T14955] [ 547.447918][T14955] dump_stack_lvl+0x18c/0x250 [ 547.452636][T14955] ? show_regs_print_info+0x20/0x20 [ 547.457867][T14955] ? load_image+0x420/0x420 [ 547.462408][T14955] ? __might_sleep+0xe0/0xe0 [ 547.467030][T14955] ? __lock_acquire+0x7d80/0x7d80 [ 547.472091][T14955] should_fail_ex+0x394/0x4c0 [ 547.476790][T14955] should_failslab+0x9/0x20 [ 547.481310][T14955] slab_pre_alloc_hook+0x59/0x300 [ 547.486363][T14955] ? netdevice_event+0x3ab/0x890 [ 547.491392][T14955] __kmem_cache_alloc_node+0x53/0x250 [ 547.496781][T14955] ? netdevice_event+0x3ab/0x890 [ 547.501735][T14955] kmalloc_trace+0x2a/0xe0 [ 547.506171][T14955] netdevice_event+0x3ab/0x890 [ 547.510951][T14955] ? __up_read+0x2b8/0x6b0 [ 547.515372][T14955] ? inet6addr_event+0xd0/0xd0 [ 547.520146][T14955] ? netdevice_event+0x890/0x890 [ 547.525096][T14955] ? add_default_gids+0xe0/0xe0 [ 547.529961][T14955] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 547.536221][T14955] ? enum_all_gids_of_dev_cb+0x290/0x290 [ 547.541882][T14955] ? netdev_upper_walk+0x210/0x210 [ 547.547010][T14955] ? add_default_gids+0xe0/0xe0 [ 547.551885][T14955] notifier_call_chain+0x18f/0x380 [ 547.557016][T14955] dev_set_mac_address+0x38e/0x4d0 [ 547.562141][T14955] ? dev_pre_changeaddr_notify+0x120/0x120 [ 547.567954][T14955] ? down_write+0x16e/0x200 [ 547.572571][T14955] dev_set_mac_address_user+0x31/0x50 [ 547.577959][T14955] dev_ioctl+0x7b4/0x1140 [ 547.582318][T14955] sock_do_ioctl+0x239/0x310 [ 547.586936][T14955] ? sock_show_fdinfo+0xb0/0xb0 [ 547.591816][T14955] sock_ioctl+0x5be/0x7e0 [ 547.596156][T14955] ? sock_poll+0x3e0/0x3e0 [ 547.600598][T14955] ? bpf_lsm_file_ioctl+0x9/0x10 [ 547.605541][T14955] ? security_file_ioctl+0x80/0xa0 [ 547.610663][T14955] ? sock_poll+0x3e0/0x3e0 [ 547.615132][T14955] __se_sys_ioctl+0xfd/0x170 [ 547.619748][T14955] do_syscall_64+0x55/0xb0 [ 547.624185][T14955] ? clear_bhb_loop+0x40/0x90 [ 547.628875][T14955] ? clear_bhb_loop+0x40/0x90 [ 547.633570][T14955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.639483][T14955] RIP: 0033:0x7fd1c9b9e019 [ 547.643907][T14955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.663521][T14955] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.671942][T14955] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 547.679921][T14955] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 547.687911][T14955] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 547.695901][T14955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.703896][T14955] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 547.711886][T14955] [ 548.403661][T14979] tc_dump_action: action bad kind [ 548.566502][T14987] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3055'. [ 548.661859][ T5781] Bluetooth: hci3: unexpected event 0x05 length: 151 > 4 [ 548.906850][T14996] netlink: 'syz.0.3058': attribute type 10 has an invalid length. [ 549.428734][T14996] hsr0: entered promiscuous mode [ 549.450673][T14996] .`: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.486898][T14996] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 549.522593][T14996] .`: (slave hsr0): Error -95 calling set_mac_address [ 549.802502][T15010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'. [ 549.832602][T15010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'. [ 549.872091][T15010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'. [ 549.902996][T15010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3064'. [ 550.068860][T15007] netlink: 'syz.0.3063': attribute type 29 has an invalid length. [ 550.099318][T15018] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 550.099441][T15018] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3065'. [ 550.099529][T15018] netlink: 'syz.3.3065': attribute type 1 has an invalid length. [ 550.177691][T15007] netlink: 'syz.0.3063': attribute type 29 has an invalid length. [ 550.296903][T15020] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3067'. [ 550.378537][T15024] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3069'. [ 550.910307][T15050] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3078'. [ 551.573154][T15069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3085'. [ 551.640684][T15071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.669533][T15097] delete_channel: no stack [ 553.087686][T15113] FAULT_INJECTION: forcing a failure. [ 553.087686][T15113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.113677][T15113] CPU: 0 PID: 15113 Comm: syz.0.3104 Not tainted syzkaller #0 [ 553.121279][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.131356][T15113] Call Trace: [ 553.134650][T15113] [ 553.137589][T15113] dump_stack_lvl+0x18c/0x250 [ 553.142294][T15113] ? show_regs_print_info+0x20/0x20 [ 553.147535][T15113] ? load_image+0x420/0x420 [ 553.152097][T15113] ? __might_fault+0xaa/0x120 [ 553.156849][T15113] should_fail_ex+0x394/0x4c0 [ 553.161560][T15113] copyin+0x1a/0x90 [ 553.165387][T15113] _copy_from_iter+0x3ec/0x1290 [ 553.170259][T15113] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 553.175656][T15113] ? copyout_mc+0x70/0x70 [ 553.180015][T15113] ? __virt_addr_valid+0x10c/0x380 [ 553.185147][T15113] ? __virt_addr_valid+0x10c/0x380 [ 553.190282][T15113] ? __virt_addr_valid+0x10c/0x380 [ 553.195412][T15113] ? __check_object_size+0x4fc/0xa40 [ 553.200737][T15113] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 553.206487][T15113] ? dev_get_by_index+0x22/0x2d0 [ 553.211485][T15113] ? skb_put+0x112/0x210 [ 553.215763][T15113] packet_sendmsg+0x345e/0x4c70 [ 553.220675][T15113] ? set_user_nice+0x620/0xb20 [ 553.225467][T15113] ? aa_sk_perm+0x83c/0x970 [ 553.230030][T15113] ? packet_getsockopt+0xad0/0xad0 [ 553.235161][T15113] ? tomoyo_write_file+0x1d0/0xc50 [ 553.240293][T15113] ? aa_sock_msg_perm+0x94/0x150 [ 553.245276][T15113] ? apparmor_socket_sendmsg+0x8e/0x330 [ 553.250832][T15113] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 553.256130][T15113] ? security_socket_sendmsg+0x80/0xa0 [ 553.261594][T15113] ? packet_getsockopt+0xad0/0xad0 [ 553.266719][T15113] ____sys_sendmsg+0x61b/0x980 [ 553.271496][T15113] ? __asan_memset+0x22/0x40 [ 553.276098][T15113] ? __sys_sendmsg_sock+0x30/0x30 [ 553.281150][T15113] ? __import_iovec+0x3fa/0x850 [ 553.286043][T15113] ? import_iovec+0x73/0xa0 [ 553.290572][T15113] ___sys_sendmsg+0x2a6/0x360 [ 553.295271][T15113] ? get_pid_task+0x20/0x1e0 [ 553.299901][T15113] ? __sys_sendmsg+0x2b0/0x2b0 [ 553.304713][T15113] ? __lock_acquire+0x7d80/0x7d80 [ 553.309785][T15113] __se_sys_sendmsg+0x1d0/0x2c0 [ 553.314651][T15113] ? __x64_sys_sendmsg+0x80/0x80 [ 553.319695][T15113] ? lockdep_hardirqs_on+0x98/0x150 [ 553.324929][T15113] do_syscall_64+0x55/0xb0 [ 553.329355][T15113] ? clear_bhb_loop+0x40/0x90 [ 553.334043][T15113] ? clear_bhb_loop+0x40/0x90 [ 553.338735][T15113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.344641][T15113] RIP: 0033:0x7f930919e019 [ 553.349087][T15113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.368719][T15113] RSP: 002b:00007f930a0cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.377163][T15113] RAX: ffffffffffffffda RBX: 00007f9309425fa0 RCX: 00007f930919e019 [ 553.385146][T15113] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 553.393138][T15113] RBP: 00007f930a0cd090 R08: 0000000000000000 R09: 0000000000000000 [ 553.401124][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.409105][T15113] R13: 00007f9309426038 R14: 00007f9309425fa0 R15: 00007ffef885ffd8 [ 553.417104][T15113] [ 553.962706][T15129] __nla_validate_parse: 10 callbacks suppressed [ 553.962722][T15129] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3109'. [ 554.631603][T15150] netlink: 'syz.1.3114': attribute type 1 has an invalid length. [ 554.673067][T15150] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3114'. [ 554.745094][T15150] netlink: 'syz.1.3114': attribute type 1 has an invalid length. [ 555.145270][T15157] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3118'. [ 555.380609][T15162] FAULT_INJECTION: forcing a failure. [ 555.380609][T15162] name failslab, interval 1, probability 0, space 0, times 0 [ 555.393517][T15162] CPU: 0 PID: 15162 Comm: syz.3.3119 Not tainted syzkaller #0 [ 555.401030][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 555.411111][T15162] Call Trace: [ 555.414408][T15162] [ 555.417352][T15162] dump_stack_lvl+0x18c/0x250 [ 555.422051][T15162] ? sctp_sendmsg+0x1519/0x27b0 [ 555.426917][T15162] ? ___sys_sendmsg+0x2a6/0x360 [ 555.431798][T15162] ? show_regs_print_info+0x20/0x20 [ 555.437015][T15162] ? load_image+0x420/0x420 [ 555.441569][T15162] should_fail_ex+0x394/0x4c0 [ 555.446274][T15162] should_failslab+0x9/0x20 [ 555.450824][T15162] slab_pre_alloc_hook+0x59/0x300 [ 555.455879][T15162] ? sctp_add_bind_addr+0x8c/0x360 [ 555.461012][T15162] __kmem_cache_alloc_node+0x53/0x250 [ 555.466408][T15162] ? sctp_add_bind_addr+0x8c/0x360 [ 555.471552][T15162] kmalloc_trace+0x2a/0xe0 [ 555.476008][T15162] sctp_add_bind_addr+0x8c/0x360 [ 555.480975][T15162] sctp_copy_local_addr_list+0x31b/0x4e0 [ 555.486634][T15162] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 555.492378][T15162] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 555.498472][T15162] ? sctp_v6_is_any+0x64/0x70 [ 555.503254][T15162] ? sctp_copy_one_addr+0x8c/0x350 [ 555.508394][T15162] sctp_bind_addr_copy+0xb3/0x3c0 [ 555.513443][T15162] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 555.519809][T15162] sctp_connect_new_asoc+0x2f9/0x6a0 [ 555.525130][T15162] ? __sctp_connect+0xd80/0xd80 [ 555.530011][T15162] ? __local_bh_enable_ip+0x13a/0x1c0 [ 555.535437][T15162] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 555.541019][T15162] ? security_sctp_bind_connect+0x89/0xb0 [ 555.546771][T15162] sctp_sendmsg+0x1519/0x27b0 [ 555.551498][T15162] ? sctp_getsockopt+0xb60/0xb60 [ 555.556475][T15162] ? aa_af_perm+0x330/0x330 [ 555.561019][T15162] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 555.567474][T15162] ? sock_rps_record_flow+0x19/0x3f0 [ 555.572796][T15162] ? inet_sendmsg+0xce/0x2a0 [ 555.577428][T15162] ? inet_send_prepare+0x250/0x250 [ 555.582578][T15162] ____sys_sendmsg+0x61b/0x980 [ 555.587381][T15162] ? __asan_memset+0x22/0x40 [ 555.592007][T15162] ? __sys_sendmsg_sock+0x30/0x30 [ 555.597062][T15162] ? __import_iovec+0x5f2/0x850 [ 555.601958][T15162] ? import_iovec+0x73/0xa0 [ 555.606505][T15162] ___sys_sendmsg+0x2a6/0x360 [ 555.611224][T15162] ? __sys_sendmsg+0x2b0/0x2b0 [ 555.616053][T15162] ? __lock_acquire+0x7d80/0x7d80 [ 555.621166][T15162] __se_sys_sendmsg+0x1d0/0x2c0 [ 555.626079][T15162] ? __x64_sys_sendmsg+0x80/0x80 [ 555.631074][T15162] ? lockdep_hardirqs_on+0x98/0x150 [ 555.636324][T15162] do_syscall_64+0x55/0xb0 [ 555.640779][T15162] ? clear_bhb_loop+0x40/0x90 [ 555.645495][T15162] ? clear_bhb_loop+0x40/0x90 [ 555.650213][T15162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 555.656150][T15162] RIP: 0033:0x7fd87699e019 [ 555.660649][T15162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.680293][T15162] RSP: 002b:00007fd8778ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.688732][T15162] RAX: ffffffffffffffda RBX: 00007fd876c25fa0 RCX: 00007fd87699e019 [ 555.696735][T15162] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 555.704737][T15162] RBP: 00007fd8778ac090 R08: 0000000000000000 R09: 0000000000000000 [ 555.712731][T15162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.720727][T15162] R13: 00007fd876c26038 R14: 00007fd876c25fa0 R15: 00007fff17eb5388 [ 555.728772][T15162] [ 555.981043][T15170] netlink: 'syz.2.3122': attribute type 3 has an invalid length. [ 555.990975][T15170] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3122'. [ 556.334142][T15182] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 556.418831][T15182] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3126'. [ 556.510970][T15182] netlink: 'syz.0.3126': attribute type 1 has an invalid length. [ 556.541881][T15184] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3129'. [ 556.877949][T15191] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3131'. [ 556.921430][T15191] netlink: 'syz.2.3131': attribute type 2 has an invalid length. [ 557.152059][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3135'. [ 557.161589][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3135'. [ 557.180674][T15200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3135'. [ 557.338171][T15205] netlink: 'syz.0.3137': attribute type 11 has an invalid length. [ 558.328882][T15234] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 558.341607][T15234] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 559.536371][T15236] __nla_validate_parse: 8 callbacks suppressed [ 559.536389][T15236] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3157'. [ 559.603584][T15236] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 559.622823][T15236] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 560.025283][T15248] mac80211_hwsim hwsim35 .3ãc¤±: renamed from wlan1 (while UP) [ 560.075845][T15256] netlink: 'syz.1.3155': attribute type 7 has an invalid length. [ 560.283591][T15268] netlink: 'syz.1.3160': attribute type 11 has an invalid length. [ 560.305848][T15265] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3161'. [ 560.319162][T15265] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 560.333515][T15265] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 562.629392][T15314] FAULT_INJECTION: forcing a failure. [ 562.629392][T15314] name failslab, interval 1, probability 0, space 0, times 0 [ 562.642526][T15314] CPU: 0 PID: 15314 Comm: syz.1.3175 Not tainted syzkaller #0 [ 562.650022][T15314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.660097][T15314] Call Trace: [ 562.663399][T15314] [ 562.666352][T15314] dump_stack_lvl+0x18c/0x250 [ 562.671087][T15314] ? show_regs_print_info+0x20/0x20 [ 562.676326][T15314] ? load_image+0x420/0x420 [ 562.680889][T15314] should_fail_ex+0x394/0x4c0 [ 562.685613][T15314] should_failslab+0x9/0x20 [ 562.690134][T15314] slab_pre_alloc_hook+0x59/0x300 [ 562.695176][T15314] ? find_exception+0x175/0xa30 [ 562.700128][T15314] kmem_cache_alloc+0x5a/0x2c0 [ 562.704917][T15314] ? dst_alloc+0x105/0x170 [ 562.709378][T15314] dst_alloc+0x105/0x170 [ 562.713634][T15314] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 562.719724][T15314] ? ip_route_output_key_hash+0x13d/0x330 [ 562.725455][T15314] ip_route_output_key_hash+0x1f3/0x330 [ 562.731015][T15314] ? ip_route_input_rcu+0x3120/0x3120 [ 562.736402][T15314] ? __lock_acquire+0x7d80/0x7d80 [ 562.741439][T15314] ip_route_output_flow+0x2a/0x150 [ 562.746558][T15314] ? security_sk_classify_flow+0x7b/0x90 [ 562.752196][T15314] udp_sendmsg+0x160e/0x23d0 [ 562.756817][T15314] ? release_sock+0x2f/0x1c0 [ 562.761429][T15314] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 562.766286][T15314] ? udp_cmsg_send+0x350/0x350 [ 562.771068][T15314] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 562.777060][T15314] ? lock_chain_count+0x20/0x20 [ 562.781920][T15314] ? inet_sendmsg+0x10d/0x2a0 [ 562.786618][T15314] ? __local_bh_enable_ip+0x13a/0x1c0 [ 562.791996][T15314] ? _local_bh_enable+0xa0/0xa0 [ 562.796863][T15314] ? do_raw_spin_unlock+0x121/0x230 [ 562.802078][T15314] ? inet_sendmsg+0x10d/0x2a0 [ 562.806767][T15314] ? inet_sendmsg+0x10d/0x2a0 [ 562.811456][T15314] ? inet_send_prepare+0x250/0x250 [ 562.816597][T15314] ____sys_sendmsg+0x61b/0x980 [ 562.821378][T15314] ? __asan_memset+0x22/0x40 [ 562.825980][T15314] ? __sys_sendmsg_sock+0x30/0x30 [ 562.831011][T15314] ? __import_iovec+0x3fa/0x850 [ 562.835880][T15314] ? import_iovec+0x73/0xa0 [ 562.840398][T15314] ___sys_sendmsg+0x2a6/0x360 [ 562.845091][T15314] ? get_pid_task+0x20/0x1e0 [ 562.849704][T15314] ? __sys_sendmsg+0x2b0/0x2b0 [ 562.854510][T15314] ? __lock_acquire+0x7d80/0x7d80 [ 562.859569][T15314] __se_sys_sendmsg+0x1d0/0x2c0 [ 562.864449][T15314] ? __x64_sys_sendmsg+0x80/0x80 [ 562.869412][T15314] ? lockdep_hardirqs_on+0x98/0x150 [ 562.874632][T15314] do_syscall_64+0x55/0xb0 [ 562.879063][T15314] ? clear_bhb_loop+0x40/0x90 [ 562.883744][T15314] ? clear_bhb_loop+0x40/0x90 [ 562.888428][T15314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.894344][T15314] RIP: 0033:0x7fd1c9b9e019 [ 562.898764][T15314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.918462][T15314] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.926880][T15314] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 562.934861][T15314] RDX: 0000000024006990 RSI: 0000200000000b40 RDI: 0000000000000003 [ 562.942849][T15314] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 562.950844][T15314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.958835][T15314] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 562.966846][T15314] [ 562.992028][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.998389][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.137608][T15320] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3179'. [ 563.444318][T15331] IPv6: Can't replace route, no match found [ 565.022284][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 565.161785][T15369] netlink: 'syz.1.3193': attribute type 10 has an invalid length. [ 565.169665][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3193'. [ 565.190902][T15369] batman_adv: batadv0: Adding interface: vlan1 [ 565.198029][T15369] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.231265][T15369] batman_adv: batadv0: Interface activated: vlan1 [ 565.397917][T15373] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3195'. [ 565.413486][T15375] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3196'. [ 565.432073][T15373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 565.468252][T15378] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3197'. [ 565.476947][T15375] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3196'. [ 565.700919][T15386] netlink: 'syz.0.3201': attribute type 10 has an invalid length. [ 565.708795][T15386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3201'. [ 565.725272][T15386] batman_adv: batadv0: Adding interface: vlan1 [ 565.733532][T15386] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.760395][T15386] batman_adv: batadv0: Interface activated: vlan1 [ 565.771622][T15388] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3202'. [ 566.186650][T15399] FAULT_INJECTION: forcing a failure. [ 566.186650][T15399] name failslab, interval 1, probability 0, space 0, times 0 [ 566.217364][T15399] CPU: 0 PID: 15399 Comm: syz.3.3206 Not tainted syzkaller #0 [ 566.224907][T15399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.235017][T15399] Call Trace: [ 566.238347][T15399] [ 566.241334][T15399] dump_stack_lvl+0x18c/0x250 [ 566.246088][T15399] ? show_regs_print_info+0x20/0x20 [ 566.251349][T15399] ? load_image+0x420/0x420 [ 566.255935][T15399] ? __might_sleep+0xe0/0xe0 [ 566.260588][T15399] ? __lock_acquire+0x7d80/0x7d80 [ 566.265702][T15399] should_fail_ex+0x394/0x4c0 [ 566.270467][T15399] should_failslab+0x9/0x20 [ 566.275038][T15399] slab_pre_alloc_hook+0x59/0x300 [ 566.280141][T15399] ? prepend_path+0x8a7/0x950 [ 566.284872][T15399] ? tomoyo_encode+0x2ad/0x570 [ 566.289704][T15399] ? tomoyo_encode+0x2ad/0x570 [ 566.294527][T15399] __kmem_cache_alloc_node+0x53/0x250 [ 566.299976][T15399] ? tomoyo_encode+0x2ad/0x570 [ 566.304800][T15399] __kmalloc+0xa7/0x240 [ 566.309044][T15399] tomoyo_encode+0x2ad/0x570 [ 566.313729][T15399] tomoyo_realpath_from_path+0x57c/0x5c0 [ 566.319444][T15399] ? tomoyo_domain+0xd6/0x120 [ 566.324219][T15399] tomoyo_path_number_perm+0x248/0x5e0 [ 566.329742][T15399] ? tomoyo_path_number_perm+0x217/0x5e0 [ 566.335440][T15399] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 566.340956][T15399] ? __d_add+0x4b6/0x7e0 [ 566.345309][T15399] ? __lock_acquire+0x7d80/0x7d80 [ 566.350466][T15399] ? current_check_access_path+0x3b4/0x480 [ 566.356343][T15399] ? lookup_one_qstr_excl+0x120/0x250 [ 566.361781][T15399] tomoyo_path_mkdir+0xb1/0xf0 [ 566.366617][T15399] ? tomoyo_path_unlink+0xf0/0xf0 [ 566.371721][T15399] ? kern_path_create+0x50/0x50 [ 566.376649][T15399] security_path_mkdir+0xe4/0x140 [ 566.381744][T15399] do_mkdirat+0x162/0x450 [ 566.386137][T15399] ? vfs_mkdir+0x470/0x470 [ 566.390655][T15399] __x64_sys_mkdirat+0x89/0xa0 [ 566.395505][T15399] do_syscall_64+0x55/0xb0 [ 566.399969][T15399] ? clear_bhb_loop+0x40/0x90 [ 566.404707][T15399] ? clear_bhb_loop+0x40/0x90 [ 566.409459][T15399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.415400][T15399] RIP: 0033:0x7fd87699e019 [ 566.419879][T15399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.439540][T15399] RSP: 002b:00007fd8778ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 566.448013][T15399] RAX: ffffffffffffffda RBX: 00007fd876c25fa0 RCX: 00007fd87699e019 [ 566.456041][T15399] RDX: 00000000000001ff RSI: 0000200000000340 RDI: 000000000000000b [ 566.464093][T15399] RBP: 00007fd8778ac090 R08: 0000000000000000 R09: 0000000000000000 [ 566.472111][T15399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.480151][T15399] R13: 00007fd876c26038 R14: 00007fd876c25fa0 R15: 00007fff17eb5388 [ 566.488230][T15399] [ 566.510133][T15399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.695605][T15405] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3207'. [ 566.828390][T15411] netlink: 'syz.3.3209': attribute type 27 has an invalid length. [ 566.842324][T15411] netlink: 'syz.3.3209': attribute type 3 has an invalid length. [ 566.851615][T15411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3209'. [ 567.042674][T15420] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3213'. [ 567.052927][T15420] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 567.065583][T15420] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 567.236037][T15427] FAULT_INJECTION: forcing a failure. [ 567.236037][T15427] name failslab, interval 1, probability 0, space 0, times 0 [ 567.249163][T15427] CPU: 1 PID: 15427 Comm: syz.1.3218 Not tainted syzkaller #0 [ 567.256655][T15427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.266743][T15427] Call Trace: [ 567.270040][T15427] [ 567.272990][T15427] dump_stack_lvl+0x18c/0x250 [ 567.277714][T15427] ? show_regs_print_info+0x20/0x20 [ 567.282936][T15427] ? load_image+0x420/0x420 [ 567.287474][T15427] ? __might_sleep+0xe0/0xe0 [ 567.292102][T15427] ? __lock_acquire+0x7d80/0x7d80 [ 567.297156][T15427] should_fail_ex+0x394/0x4c0 [ 567.301872][T15427] should_failslab+0x9/0x20 [ 567.306405][T15427] slab_pre_alloc_hook+0x59/0x300 [ 567.311448][T15427] ? rcu_is_watching+0x15/0xb0 [ 567.316229][T15427] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 567.322486][T15427] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 567.328744][T15427] __kmem_cache_alloc_node+0x53/0x250 [ 567.334146][T15427] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 567.340398][T15427] __kmalloc+0xa7/0x240 [ 567.344598][T15427] ? __netlink_dump_start+0xf4/0x7a0 [ 567.349893][T15427] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 567.355985][T15427] genl_start+0x180/0x6c0 [ 567.360334][T15427] __netlink_dump_start+0x43c/0x7a0 [ 567.365564][T15427] genl_family_rcv_msg_dumpit+0x214/0x310 [ 567.371299][T15427] ? genl_rcv_msg+0x7a0/0x7a0 [ 567.375989][T15427] ? genl_get_cmd+0x693/0x930 [ 567.380699][T15427] ? genl_family_rcv_msg_doit+0x310/0x310 [ 567.386446][T15427] ? genl_start+0x6c0/0x6c0 [ 567.390963][T15427] ? genl_dumpit+0x1a0/0x1a0 [ 567.395572][T15427] genl_rcv_msg+0x5de/0x7a0 [ 567.400089][T15427] ? genl_bind+0x360/0x360 [ 567.404512][T15427] ? ethnl_default_doit+0xba0/0xba0 [ 567.409781][T15427] ? ethnl_default_start+0x560/0x560 [ 567.415068][T15427] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 567.420447][T15427] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 567.426185][T15427] netlink_rcv_skb+0x235/0x4c0 [ 567.430959][T15427] ? genl_bind+0x360/0x360 [ 567.435390][T15427] ? netlink_ack+0x1160/0x1160 [ 567.440168][T15427] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 567.446337][T15427] ? down_read+0x1ac/0x2e0 [ 567.450772][T15427] genl_rcv+0x28/0x40 [ 567.454767][T15427] netlink_unicast+0x7b1/0x930 [ 567.459550][T15427] netlink_sendmsg+0x8d0/0xbf0 [ 567.464338][T15427] ? netlink_getsockopt+0x590/0x590 [ 567.469554][T15427] ? apparmor_socket_sendmsg+0x8e/0x330 [ 567.475122][T15427] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 567.480415][T15427] ? security_socket_sendmsg+0x80/0xa0 [ 567.485882][T15427] ? netlink_getsockopt+0x590/0x590 [ 567.491091][T15427] ____sys_sendmsg+0x61b/0x980 [ 567.495869][T15427] ? lockdep_hardirqs_on+0x98/0x150 [ 567.501118][T15427] ? __asan_memset+0x22/0x40 [ 567.505736][T15427] ? __sys_sendmsg_sock+0x30/0x30 [ 567.510775][T15427] ? __import_iovec+0x5f2/0x850 [ 567.515652][T15427] ? import_iovec+0x73/0xa0 [ 567.520173][T15427] ___sys_sendmsg+0x2a6/0x360 [ 567.524878][T15427] ? __sys_sendmsg+0x2b0/0x2b0 [ 567.529695][T15427] ? ktime_get+0x7f/0x280 [ 567.534060][T15427] __se_sys_sendmsg+0x1d0/0x2c0 [ 567.538920][T15427] ? perf_trace_preemptirq_template+0x269/0x330 [ 567.545181][T15427] ? __x64_sys_sendmsg+0x80/0x80 [ 567.550138][T15427] ? lockdep_hardirqs_on+0x98/0x150 [ 567.555358][T15427] do_syscall_64+0x55/0xb0 [ 567.559780][T15427] ? clear_bhb_loop+0x40/0x90 [ 567.564467][T15427] ? clear_bhb_loop+0x40/0x90 [ 567.569155][T15427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.575055][T15427] RIP: 0033:0x7fd1c9b9e019 [ 567.579483][T15427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.599103][T15427] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.607523][T15427] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 567.615503][T15427] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 567.623479][T15427] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 567.631465][T15427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.639449][T15427] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 567.647442][T15427] [ 568.117663][T15444] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 568.130073][T15444] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 568.250852][T15447] netlink: 'syz.0.3226': attribute type 6 has an invalid length. [ 568.306601][T15447] netlink: 'syz.0.3226': attribute type 10 has an invalid length. [ 568.325374][T15447] bridge0: port 3(team0) entered disabled state [ 569.990491][T15483] FAULT_INJECTION: forcing a failure. [ 569.990491][T15483] name failslab, interval 1, probability 0, space 0, times 0 [ 570.004008][T15483] CPU: 1 PID: 15483 Comm: syz.3.3238 Not tainted syzkaller #0 [ 570.011503][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 570.021665][T15483] Call Trace: [ 570.025011][T15483] [ 570.027969][T15483] dump_stack_lvl+0x18c/0x250 [ 570.032678][T15483] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 570.038864][T15483] ? show_regs_print_info+0x20/0x20 [ 570.044115][T15483] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 570.050326][T15483] should_fail_ex+0x394/0x4c0 [ 570.055063][T15483] should_failslab+0x9/0x20 [ 570.059601][T15483] slab_pre_alloc_hook+0x59/0x300 [ 570.064685][T15483] ? kvmalloc_node+0x70/0x180 [ 570.069397][T15483] ? kvmalloc_node+0x70/0x180 [ 570.074121][T15483] __kmem_cache_alloc_node+0x53/0x250 [ 570.079550][T15483] ? kvmalloc_node+0x70/0x180 [ 570.084273][T15483] __kmalloc_node+0xa6/0x240 [ 570.088921][T15483] kvmalloc_node+0x70/0x180 [ 570.093446][T15483] page_pool_create+0x1eb/0x5c0 [ 570.098345][T15483] bpf_test_run_xdp_live+0x203/0x1b30 [ 570.103734][T15483] ? 0xffffffffa0004740 [ 570.107894][T15483] ? 0xffffffffa0004740 [ 570.112053][T15483] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 570.117960][T15483] ? xdp_convert_md_to_buff+0x330/0x330 [ 570.123552][T15483] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 570.129816][T15483] ? _copy_from_user+0xa5/0xe0 [ 570.134606][T15483] ? bpf_test_init+0x119/0x140 [ 570.139386][T15483] ? xdp_convert_md_to_buff+0x5b/0x330 [ 570.144862][T15483] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 570.150259][T15483] ? __lock_acquire+0x7d80/0x7d80 [ 570.155320][T15483] ? dev_put+0x80/0x80 [ 570.159407][T15483] ? dev_put+0x80/0x80 [ 570.163490][T15483] bpf_prog_test_run+0x31f/0x390 [ 570.168438][T15483] __sys_bpf+0x49d/0x890 [ 570.172699][T15483] ? bpf_link_show_fdinfo+0x390/0x390 [ 570.178100][T15483] ? lock_chain_count+0x20/0x20 [ 570.182970][T15483] __x64_sys_bpf+0x7c/0x90 [ 570.187402][T15483] do_syscall_64+0x55/0xb0 [ 570.191833][T15483] ? clear_bhb_loop+0x40/0x90 [ 570.196543][T15483] ? clear_bhb_loop+0x40/0x90 [ 570.201242][T15483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.207153][T15483] RIP: 0033:0x7fd87699e019 [ 570.211600][T15483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.231237][T15483] RSP: 002b:00007fd8778ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 570.239665][T15483] RAX: ffffffffffffffda RBX: 00007fd876c25fa0 RCX: 00007fd87699e019 [ 570.247645][T15483] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 570.255631][T15483] RBP: 00007fd8778ac090 R08: 0000000000000000 R09: 0000000000000000 [ 570.263630][T15483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.271618][T15483] R13: 00007fd876c26038 R14: 00007fd876c25fa0 R15: 00007fff17eb5388 [ 570.279611][T15483] [ 570.291386][T15483] page_pool_create() gave up with errno -12 [ 570.411506][T15491] __nla_validate_parse: 11 callbacks suppressed [ 570.411522][T15491] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3241'. [ 570.480180][T15493] netlink: 'syz.1.3242': attribute type 21 has an invalid length. [ 570.488071][T15493] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3242'. [ 570.658302][T15496] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3243'. [ 570.820877][T15502] netlink: 'syz.3.3246': attribute type 3 has an invalid length. [ 570.839009][T15502] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.3246'. [ 571.049755][T15510] netlink: 'syz.1.3250': attribute type 2 has an invalid length. [ 571.057479][T15511] netlink: 'syz.2.3249': attribute type 6 has an invalid length. [ 571.057682][T15511] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3249'. [ 571.081978][T15510] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 571.091202][T15510] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3250'. [ 571.265775][T15511] netlink: 'syz.2.3249': attribute type 10 has an invalid length. [ 571.281262][T15511] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3249'. [ 571.318298][T15511] bridge0: port 3(team0) entered disabled state [ 571.477198][T15528] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3254'. [ 571.557745][T15534] netlink: 'syz.3.3257': attribute type 19 has an invalid length. [ 571.589605][T15534] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3257'. [ 571.635807][T15534] netlink: zone id is out of range [ 571.652899][T15534] netlink: set zone limit has 8 unknown bytes [ 572.071204][T15558] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3265'. [ 572.279826][T15564] netlink: 'syz.3.3266': attribute type 6 has an invalid length. [ 572.366908][T15570] netlink: 'syz.3.3266': attribute type 10 has an invalid length. [ 572.484059][T15574] netlink: 'syz.2.3270': attribute type 3 has an invalid length. [ 573.191265][ T49] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 573.908594][T15621] syz_tun: entered promiscuous mode [ 573.942597][T15621] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 574.095875][T15625] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 574.108367][T15625] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 574.635159][T15641] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 574.647164][T15641] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 574.919528][T15651] FAULT_INJECTION: forcing a failure. [ 574.919528][T15651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.966110][T15651] CPU: 1 PID: 15651 Comm: syz.3.3297 Not tainted syzkaller #0 [ 574.973622][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 574.983697][T15651] Call Trace: [ 574.986989][T15651] [ 574.989927][T15651] dump_stack_lvl+0x18c/0x250 [ 574.994628][T15651] ? show_regs_print_info+0x20/0x20 [ 574.999837][T15651] ? load_image+0x420/0x420 [ 575.004359][T15651] ? __lock_acquire+0x7d80/0x7d80 [ 575.009396][T15651] should_fail_ex+0x394/0x4c0 [ 575.014086][T15651] prepare_alloc_pages+0x1e1/0x5b0 [ 575.019217][T15651] __alloc_pages+0x134/0x460 [ 575.023819][T15651] ? zone_statistics+0x170/0x170 [ 575.028765][T15651] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 575.034499][T15651] ? lock_chain_count+0x20/0x20 [ 575.039363][T15651] __folio_alloc+0x10/0x20 [ 575.043792][T15651] vma_alloc_folio+0x474/0x8f0 [ 575.048570][T15651] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 575.054393][T15651] shmem_alloc_folio+0x1a9/0x2a0 [ 575.059344][T15651] ? percpu_counter_add_batch+0x252/0x2a0 [ 575.065081][T15651] ? folio_put+0xd0/0xd0 [ 575.069337][T15651] ? percpu_counter_add_batch+0x25c/0x2a0 [ 575.075081][T15651] ? __vm_enough_memory+0x11a/0x370 [ 575.080297][T15651] ? shmem_inode_acct_block+0x35e/0x460 [ 575.085864][T15651] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 575.091600][T15651] ? put_swap_device+0x230/0x230 [ 575.096547][T15651] ? filemap_get_entry+0xce/0x3f0 [ 575.101582][T15651] ? xas_load+0x11d/0x140 [ 575.105918][T15651] ? filemap_get_entry+0xce/0x3f0 [ 575.110951][T15651] ? filemap_get_entry+0xce/0x3f0 [ 575.115996][T15651] ? filemap_get_entry+0x375/0x3f0 [ 575.121121][T15651] ? page_cache_prev_miss+0x390/0x390 [ 575.126505][T15651] ? mark_lock+0x94/0x320 [ 575.130857][T15651] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 575.136852][T15651] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 575.144070][T15651] ? lock_chain_count+0x20/0x20 [ 575.148947][T15651] shmem_get_folio_gfp+0xe1d/0x2b40 [ 575.154188][T15651] shmem_write_begin+0xf2/0x430 [ 575.159060][T15651] generic_perform_write+0x2fe/0x5c0 [ 575.164374][T15651] ? generic_file_direct_write+0x3e0/0x3e0 [ 575.170196][T15651] ? down_write+0x16e/0x200 [ 575.174726][T15651] ? file_update_time+0x98/0x1a0 [ 575.179682][T15651] shmem_file_write_iter+0xfb/0x120 [ 575.184907][T15651] vfs_write+0x474/0x9a0 [ 575.189189][T15651] ? file_end_write+0x250/0x250 [ 575.194061][T15651] ? __fget_files+0x3fc/0x460 [ 575.198759][T15651] ? __fdget_pos+0x2a3/0x330 [ 575.203385][T15651] ? ksys_write+0x74/0x260 [ 575.207821][T15651] ksys_write+0x151/0x260 [ 575.212168][T15651] ? __ia32_sys_read+0x90/0x90 [ 575.216958][T15651] ? lockdep_hardirqs_on+0x98/0x150 [ 575.222178][T15651] do_syscall_64+0x55/0xb0 [ 575.226605][T15651] ? clear_bhb_loop+0x40/0x90 [ 575.231299][T15651] ? clear_bhb_loop+0x40/0x90 [ 575.235991][T15651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.241891][T15651] RIP: 0033:0x7fd87699e019 [ 575.246342][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.265967][T15651] RSP: 002b:00007fd8778ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.274389][T15651] RAX: ffffffffffffffda RBX: 00007fd876c25fa0 RCX: 00007fd87699e019 [ 575.282372][T15651] RDX: 00000000fffffe51 RSI: 0000200000000180 RDI: 0000000000000006 [ 575.290350][T15651] RBP: 00007fd8778ac090 R08: 0000000000000000 R09: 0000000000000000 [ 575.298324][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.306298][T15651] R13: 00007fd876c26038 R14: 00007fd876c25fa0 R15: 00007fff17eb5388 [ 575.314292][T15651] [ 575.532704][T15659] __nla_validate_parse: 15 callbacks suppressed [ 575.532722][T15659] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3299'. [ 575.554502][T15661] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3300'. [ 575.747559][T15664] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3300'. [ 576.062387][T15682] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3306'. [ 576.072522][T15679] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3306'. [ 576.316444][T15691] cgroup: fork rejected by pids controller in /syz0 [ 576.372426][T15695] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3310'. [ 576.534957][T15799] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3312'. [ 576.595015][T15799] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3312'. [ 576.658446][T13131] bridge0: port 4(syz_tun) entered disabled state [ 576.688616][T13131] syz_tun (unregistering): left allmulticast mode [ 576.709859][T13131] syz_tun (unregistering): left promiscuous mode [ 576.716400][T13131] bridge0: port 4(syz_tun) entered disabled state [ 576.754995][T15803] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3314'. [ 576.770826][T15806] lo: entered allmulticast mode [ 576.793610][T15806] lo: entered promiscuous mode [ 576.798623][T15806] lo: left allmulticast mode [ 576.884590][T10194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.975684][T15807] syzkaller0: entered promiscuous mode [ 576.984439][T15807] syzkaller0: entered allmulticast mode [ 577.033425][T10194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.432838][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 577.441867][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 577.449478][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 577.469633][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 577.499214][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 577.509766][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 578.782253][T10194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.798005][T15820] validate_nla: 3 callbacks suppressed [ 578.798018][T15820] netlink: 'syz.1.3319': attribute type 10 has an invalid length. [ 578.812522][T15820] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 578.944484][T10194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.981656][T15831] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3320'. [ 579.005129][T15835] netlink: 'syz.1.3322': attribute type 21 has an invalid length. [ 579.487481][T15814] chnl_net:caif_netlink_parms(): no params data found [ 579.580068][ T5781] Bluetooth: hci1: command tx timeout [ 579.848517][T15876] FAULT_INJECTION: forcing a failure. [ 579.848517][T15876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.892389][T15876] CPU: 1 PID: 15876 Comm: syz.2.3330 Not tainted syzkaller #0 [ 579.899904][T15876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.909970][T15876] Call Trace: [ 579.913252][T15876] [ 579.916197][T15876] dump_stack_lvl+0x18c/0x250 [ 579.920900][T15876] ? show_regs_print_info+0x20/0x20 [ 579.926111][T15876] ? load_image+0x420/0x420 [ 579.930633][T15876] ? __might_fault+0xaa/0x120 [ 579.935324][T15876] ? __lock_acquire+0x7d80/0x7d80 [ 579.940365][T15876] ? __virt_addr_valid+0x10c/0x380 [ 579.945487][T15876] should_fail_ex+0x394/0x4c0 [ 579.950192][T15876] _copy_from_user+0x2f/0xe0 [ 579.954802][T15876] generic_map_update_batch+0x58c/0x800 [ 579.960365][T15876] ? rcu_read_unlock+0xa0/0xa0 [ 579.965144][T15876] ? __fdget+0x180/0x210 [ 579.969406][T15876] ? rcu_read_unlock+0xa0/0xa0 [ 579.974177][T15876] bpf_map_do_batch+0x3f2/0x600 [ 579.979036][T15876] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 579.985552][T15876] __sys_bpf+0x381/0x890 [ 579.989802][T15876] ? read_tsc+0x9/0x20 [ 579.993882][T15876] ? bpf_link_show_fdinfo+0x390/0x390 [ 579.999278][T15876] ? lock_chain_count+0x20/0x20 [ 580.004155][T15876] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 580.010155][T15876] __x64_sys_bpf+0x7c/0x90 [ 580.014591][T15876] do_syscall_64+0x55/0xb0 [ 580.019018][T15876] ? clear_bhb_loop+0x40/0x90 [ 580.023701][T15876] ? clear_bhb_loop+0x40/0x90 [ 580.028391][T15876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.034316][T15876] RIP: 0033:0x7f8f0359e019 [ 580.038739][T15876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.058370][T15876] RSP: 002b:00007f8f04514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.066795][T15876] RAX: ffffffffffffffda RBX: 00007f8f03826090 RCX: 00007f8f0359e019 [ 580.074774][T15876] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 580.082760][T15876] RBP: 00007f8f04514090 R08: 0000000000000000 R09: 0000000000000000 [ 580.090741][T15876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 580.098729][T15876] R13: 00007f8f03826128 R14: 00007f8f03826090 R15: 00007ffecf2315d8 [ 580.106720][T15876] [ 580.187060][T15875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.215713][T15814] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.228114][T15814] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.236716][T15814] bridge_slave_0: entered allmulticast mode [ 580.244475][T15814] bridge_slave_0: entered promiscuous mode [ 580.309256][T15814] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.335490][T15814] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.348654][T15814] bridge_slave_1: entered allmulticast mode [ 580.358236][T15814] bridge_slave_1: entered promiscuous mode [ 580.367880][T15879] delete_channel: no stack [ 580.454278][T15814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.526874][T15814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.674087][T15814] team0: Port device team_slave_0 added [ 580.704831][T15814] team0: Port device team_slave_1 added [ 580.757143][T15901] __nla_validate_parse: 8 callbacks suppressed [ 580.757184][T15901] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3335'. [ 580.796692][T15900] netlink: 'syz.1.3343': attribute type 5 has an invalid length. [ 580.828721][T15814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.840979][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.872574][T15814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.972702][T15904] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3335'. [ 581.108628][T15814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.117488][T15814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.149809][T15814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.258362][T15814] hsr_slave_0: entered promiscuous mode [ 581.266411][T15814] hsr_slave_1: entered promiscuous mode [ 581.316649][T10194] hsr_slave_0: left promiscuous mode [ 581.334445][T10194] hsr_slave_1: left promiscuous mode [ 581.347597][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.369959][T10194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.381162][T10194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.388583][T10194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.429778][T10194] batman_adv: batadv0: Interface deactivated: vlan1 [ 581.449918][T10194] batman_adv: batadv0: Removing interface: vlan1 [ 581.457185][T10194] bridge_slave_1: left allmulticast mode [ 581.469726][T10194] bridge_slave_1: left promiscuous mode [ 581.478435][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.511795][T10194] bridge_slave_0: left allmulticast mode [ 581.517492][T10194] bridge_slave_0: left promiscuous mode [ 581.544935][T15916] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3345'. [ 581.560308][T10194] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.659978][ T5781] Bluetooth: hci1: command tx timeout [ 581.699263][T15925] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3345'. [ 581.771625][T10194] veth1_macvtap: left promiscuous mode [ 581.777200][T10194] veth0_macvtap: left promiscuous mode [ 581.790291][T10194] veth1_vlan: left promiscuous mode [ 581.795989][T10194] veth0_vlan: left promiscuous mode [ 582.476583][T10194] team_slave_1 (unregistering): left promiscuous mode [ 582.485337][T10194] team_slave_1 (unregistering): left allmulticast mode [ 582.495223][T10194] team0 (unregistering): Port device team_slave_1 removed [ 582.530940][T10194] team_slave_0 (unregistering): left promiscuous mode [ 582.537729][T10194] team_slave_0 (unregistering): left allmulticast mode [ 582.546081][T10194] team0 (unregistering): Port device team_slave_0 removed [ 582.584746][T10194] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.629726][T10194] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.894676][T10194] .` (unregistering): Released all slaves [ 582.995756][T15915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3337'. [ 583.011694][T15915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.325052][T15940] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 583.549742][T15945] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3342'. [ 583.739945][ T5781] Bluetooth: hci1: command tx timeout [ 583.754196][T15956] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3346'. [ 583.792538][T15956] bridge_slave_1: default FDB implementation only supports local addresses [ 583.968441][T15968] FAULT_INJECTION: forcing a failure. [ 583.968441][T15968] name failslab, interval 1, probability 0, space 0, times 0 [ 583.981233][T15968] CPU: 0 PID: 15968 Comm: syz.2.3349 Not tainted syzkaller #0 [ 583.988726][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.998811][T15968] Call Trace: [ 584.002122][T15968] [ 584.005072][T15968] dump_stack_lvl+0x18c/0x250 [ 584.009769][T15968] ? show_regs_print_info+0x20/0x20 [ 584.014984][T15968] ? load_image+0x420/0x420 [ 584.019515][T15968] ? netdev_core_pick_tx+0x370/0x370 [ 584.024821][T15968] should_fail_ex+0x394/0x4c0 [ 584.029525][T15968] should_failslab+0x9/0x20 [ 584.034046][T15968] slab_pre_alloc_hook+0x59/0x300 [ 584.039098][T15968] kmem_cache_alloc+0x5a/0x2c0 [ 584.043882][T15968] ? skb_clone+0x1eb/0x370 [ 584.048333][T15968] skb_clone+0x1eb/0x370 [ 584.052598][T15968] bpf_clone_redirect+0x16d/0x4a0 [ 584.057649][T15968] bpf_prog_5e3b4e18def6d727+0x5e/0x63 [ 584.063137][T15968] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 584.069141][T15968] ? __lock_acquire+0x7d80/0x7d80 [ 584.074201][T15968] ? lock_chain_count+0x20/0x20 [ 584.079097][T15968] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 584.085096][T15968] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 584.090407][T15968] ? lock_chain_count+0x20/0x20 [ 584.095284][T15968] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 584.101538][T15968] ? __local_bh_disable_ip+0x108/0x1a0 [ 584.107003][T15968] ? __cant_sleep+0x220/0x220 [ 584.111691][T15968] ? __local_bh_enable_ip+0x13a/0x1c0 [ 584.117079][T15968] ? _local_bh_enable+0xa0/0xa0 [ 584.121939][T15968] ? bpf_test_timer_continue+0x135/0x380 [ 584.127586][T15968] ? bpf_test_run+0x174/0x870 [ 584.132279][T15968] bpf_test_run+0x2df/0x870 [ 584.136824][T15968] ? bpf_test_run+0x174/0x870 [ 584.141569][T15968] ? dst_hold+0x70/0x70 [ 584.145759][T15968] ? __skb_checksum+0x800/0x800 [ 584.150632][T15968] ? convert___skb_to_skb+0x1f9/0x590 [ 584.156028][T15968] ? __asan_memcpy+0x40/0x70 [ 584.160643][T15968] ? convert___skb_to_skb+0x2f6/0x590 [ 584.166029][T15968] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 584.171440][T15968] ? cpu_online+0x60/0x60 [ 584.175788][T15968] bpf_prog_test_run+0x31f/0x390 [ 584.180751][T15968] __sys_bpf+0x49d/0x890 [ 584.185009][T15968] ? read_tsc+0x9/0x20 [ 584.189091][T15968] ? bpf_link_show_fdinfo+0x390/0x390 [ 584.194487][T15968] ? lock_chain_count+0x20/0x20 [ 584.199348][T15968] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 584.205352][T15968] __x64_sys_bpf+0x7c/0x90 [ 584.209785][T15968] do_syscall_64+0x55/0xb0 [ 584.214235][T15968] ? clear_bhb_loop+0x40/0x90 [ 584.218924][T15968] ? clear_bhb_loop+0x40/0x90 [ 584.223617][T15968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.229520][T15968] RIP: 0033:0x7f8f0359e019 [ 584.233946][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.253565][T15968] RSP: 002b:00007f8f04535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.261987][T15968] RAX: ffffffffffffffda RBX: 00007f8f03825fa0 RCX: 00007f8f0359e019 [ 584.269969][T15968] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 584.277951][T15968] RBP: 00007f8f04535090 R08: 0000000000000000 R09: 0000000000000000 [ 584.285929][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.293910][T15968] R13: 00007f8f03826038 R14: 00007f8f03825fa0 R15: 00007ffecf2315d8 [ 584.301907][T15968] [ 584.335939][T15814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 584.442888][T15814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.462454][T15814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.483864][T15814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.664244][T15814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.686043][T15814] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.710603][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.717711][ T8765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.727575][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.734760][ T8765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.783017][T15979] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3351'. [ 584.863587][T15979] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3351'. [ 585.064147][T15985] mac80211_hwsim hwsim28 wlan1: left promiscuous mode [ 585.194312][T15814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.229339][T15991] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3355'. [ 585.364336][T15814] veth0_vlan: entered promiscuous mode [ 585.487072][T15814] veth1_vlan: entered promiscuous mode [ 585.593560][T15814] veth0_macvtap: entered promiscuous mode [ 585.644947][T15814] veth1_macvtap: entered promiscuous mode [ 585.713041][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.746959][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.777770][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.810568][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.821331][ T5781] Bluetooth: hci1: command tx timeout [ 585.859434][T15814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.915767][T16017] __nla_validate_parse: 1 callbacks suppressed [ 585.915793][T16017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3362'. [ 585.966624][T16025] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3363'. [ 585.968056][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.006694][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.027522][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.039524][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.055123][T15814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.066007][T15814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.082993][T15814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.118417][T16025] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3363'. [ 586.135635][T15814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.149394][T15814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.165112][T15814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.175216][T15814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.321284][T10188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.343995][T10188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.434004][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.442114][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.581171][T16042] netlink: 'syz.0.3317': attribute type 10 has an invalid length. [ 586.596443][T16042] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3317'. [ 586.817165][T16051] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 586.918222][T16057] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.3368'. [ 587.390116][T16071] netlink: 'syz.1.3370': attribute type 10 has an invalid length. [ 587.430420][T16071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3370'. [ 587.567330][T16076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3371'. [ 587.750253][T16083] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3373'. [ 587.786996][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3374'. [ 587.796960][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3374'. [ 588.342796][T16100] netlink: 'syz.2.3380': attribute type 3 has an invalid length. [ 588.372273][T16100] C: renamed from team_slave_0 (while UP) [ 588.567896][T16111] netlink: 'syz.2.3382': attribute type 46 has an invalid length. [ 589.632633][T16152] netlink: 'syz.3.3394': attribute type 4 has an invalid length. [ 589.770229][T16152] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 590.090425][T16179] netlink: 'syz.2.3399': attribute type 39 has an invalid length. [ 590.098334][T16179] veth1_vlan: entered allmulticast mode [ 590.841088][T16199] netlink: 'syz.1.3407': attribute type 2 has an invalid length. [ 590.959237][T16202] __nla_validate_parse: 17 callbacks suppressed [ 590.959269][T16202] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3408'. [ 591.422353][T16211] netlink: 'syz.1.3409': attribute type 21 has an invalid length. [ 591.442040][T16211] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3409'. [ 592.127230][T16230] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3416'. [ 592.202590][T16234] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 592.209088][T16234] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 592.463242][T16238] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3419'. [ 592.674991][T16238] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3419'. [ 593.268726][T16253] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3423'. [ 593.586517][T16262] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3427'. [ 593.616369][T16264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3428'. [ 593.688522][T16264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3428'. [ 593.785704][T16272] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3431'. [ 596.035109][T16289] netlink: 'syz.3.3437': attribute type 10 has an invalid length. [ 596.341461][T16289] team0: Device wg1 is of different type [ 596.393548][T16296] __nla_validate_parse: 3 callbacks suppressed [ 596.393564][T16296] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.3439'. [ 596.422130][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3438'. [ 596.513115][T16290] delete_channel: no stack [ 596.823569][T16309] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3443'. [ 596.923247][T16309] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3443'. [ 597.212389][T16320] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3448'. [ 597.496373][T16331] netlink: 'syz.2.3450': attribute type 10 has an invalid length. [ 597.638585][T16333] netlink: 'syz.3.3453': attribute type 28 has an invalid length. [ 597.867292][T16340] netlink: 'syz.2.3456': attribute type 10 has an invalid length. [ 597.908686][T16342] netlink: 'syz.1.3455': attribute type 15 has an invalid length. [ 597.924754][T16342] netlink: 'syz.1.3455': attribute type 7 has an invalid length. [ 597.944879][T16342] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3455'. [ 598.078360][T16343] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3462'. [ 598.096290][T16347] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3457'. [ 598.317128][T16347] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3457'. [ 598.485004][T16347] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3457'. [ 599.039071][T16369] FAULT_INJECTION: forcing a failure. [ 599.039071][T16369] name failslab, interval 1, probability 0, space 0, times 0 [ 599.099691][T16369] CPU: 1 PID: 16369 Comm: syz.1.3463 Not tainted syzkaller #0 [ 599.107222][T16369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.117317][T16369] Call Trace: [ 599.120606][T16369] [ 599.123553][T16369] dump_stack_lvl+0x18c/0x250 [ 599.128248][T16369] ? sctp_sendmsg+0x1519/0x27b0 [ 599.133110][T16369] ? ___sys_sendmsg+0x2a6/0x360 [ 599.138431][T16369] ? show_regs_print_info+0x20/0x20 [ 599.143643][T16369] ? load_image+0x420/0x420 [ 599.148177][T16369] should_fail_ex+0x394/0x4c0 [ 599.152871][T16369] should_failslab+0x9/0x20 [ 599.157394][T16369] slab_pre_alloc_hook+0x59/0x300 [ 599.162433][T16369] ? sctp_add_bind_addr+0x8c/0x360 [ 599.167565][T16369] __kmem_cache_alloc_node+0x53/0x250 [ 599.172959][T16369] ? sctp_add_bind_addr+0x8c/0x360 [ 599.178117][T16369] kmalloc_trace+0x2a/0xe0 [ 599.182576][T16369] sctp_add_bind_addr+0x8c/0x360 [ 599.187536][T16369] sctp_copy_local_addr_list+0x31b/0x4e0 [ 599.193189][T16369] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 599.198923][T16369] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 599.205013][T16369] ? sctp_v4_is_any+0x35/0x60 [ 599.209700][T16369] ? sctp_copy_one_addr+0x8c/0x350 [ 599.214821][T16369] sctp_bind_addr_copy+0xb3/0x3c0 [ 599.219861][T16369] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 599.226210][T16369] sctp_connect_new_asoc+0x2f9/0x6a0 [ 599.231518][T16369] ? __sctp_connect+0xd80/0xd80 [ 599.236398][T16369] ? __local_bh_enable_ip+0x13a/0x1c0 [ 599.241786][T16369] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 599.247344][T16369] ? security_sctp_bind_connect+0x89/0xb0 [ 599.253083][T16369] sctp_sendmsg+0x1519/0x27b0 [ 599.257781][T16369] ? sctp_getsockopt+0xb60/0xb60 [ 599.262748][T16369] ? aa_af_perm+0x330/0x330 [ 599.267289][T16369] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 599.273735][T16369] ? sock_rps_record_flow+0x19/0x3f0 [ 599.279045][T16369] ? inet_sendmsg+0xce/0x2a0 [ 599.283665][T16369] ? inet_send_prepare+0x250/0x250 [ 599.288792][T16369] ____sys_sendmsg+0x61b/0x980 [ 599.293571][T16369] ? __asan_memset+0x22/0x40 [ 599.298190][T16369] ? __sys_sendmsg_sock+0x30/0x30 [ 599.303222][T16369] ? __import_iovec+0x5f2/0x850 [ 599.308093][T16369] ? import_iovec+0x73/0xa0 [ 599.312615][T16369] ___sys_sendmsg+0x2a6/0x360 [ 599.317305][T16369] ? get_pid_task+0x20/0x1e0 [ 599.321937][T16369] ? __sys_sendmsg+0x2b0/0x2b0 [ 599.326728][T16369] ? __lock_acquire+0x7d80/0x7d80 [ 599.331786][T16369] __se_sys_sendmsg+0x1d0/0x2c0 [ 599.336650][T16369] ? perf_trace_preemptirq_template+0x269/0x330 [ 599.342915][T16369] ? __x64_sys_sendmsg+0x80/0x80 [ 599.347890][T16369] ? lockdep_hardirqs_on+0x98/0x150 [ 599.353105][T16369] do_syscall_64+0x55/0xb0 [ 599.357620][T16369] ? clear_bhb_loop+0x40/0x90 [ 599.362314][T16369] ? clear_bhb_loop+0x40/0x90 [ 599.367012][T16369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.372915][T16369] RIP: 0033:0x7fd1c9b9e019 [ 599.377337][T16369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.396952][T16369] RSP: 002b:00007fd1caa7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.405374][T16369] RAX: ffffffffffffffda RBX: 00007fd1c9e25fa0 RCX: 00007fd1c9b9e019 [ 599.413355][T16369] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000016 [ 599.421334][T16369] RBP: 00007fd1caa7b090 R08: 0000000000000000 R09: 0000000000000000 [ 599.429314][T16369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.437288][T16369] R13: 00007fd1c9e26038 R14: 00007fd1c9e25fa0 R15: 00007ffe364d11f8 [ 599.445287][T16369] [ 599.555051][T16378] netlink: 'syz.3.3466': attribute type 15 has an invalid length. [ 599.574033][T16378] netlink: 'syz.3.3466': attribute type 7 has an invalid length. [ 599.930905][T16380] FAULT_INJECTION: forcing a failure. [ 599.930905][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.960465][T16380] CPU: 1 PID: 16380 Comm: syz.0.3467 Not tainted syzkaller #0 [ 599.967988][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.978066][T16380] Call Trace: [ 599.981365][T16380] [ 599.984317][T16380] dump_stack_lvl+0x18c/0x250 [ 599.989036][T16380] ? show_regs_print_info+0x20/0x20 [ 599.994278][T16380] ? load_image+0x420/0x420 [ 599.998822][T16380] ? __might_fault+0xaa/0x120 [ 600.003533][T16380] ? __lock_acquire+0x7d80/0x7d80 [ 600.008584][T16380] ? bpf_percpu_array_update+0xec/0x490 [ 600.014165][T16380] ? __virt_addr_valid+0x10c/0x380 [ 600.019312][T16380] should_fail_ex+0x394/0x4c0 [ 600.024026][T16380] _copy_from_user+0x2f/0xe0 [ 600.028661][T16380] generic_map_update_batch+0x58c/0x800 [ 600.034243][T16380] ? rcu_read_unlock+0xa0/0xa0 [ 600.039039][T16380] ? __fdget+0x180/0x210 [ 600.043316][T16380] ? rcu_read_unlock+0xa0/0xa0 [ 600.048140][T16380] bpf_map_do_batch+0x3f2/0x600 [ 600.053020][T16380] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 600.059559][T16380] __sys_bpf+0x381/0x890 [ 600.063846][T16380] ? bpf_link_show_fdinfo+0x390/0x390 [ 600.069261][T16380] ? lock_chain_count+0x20/0x20 [ 600.074150][T16380] __x64_sys_bpf+0x7c/0x90 [ 600.078599][T16380] do_syscall_64+0x55/0xb0 [ 600.083046][T16380] ? clear_bhb_loop+0x40/0x90 [ 600.087749][T16380] ? clear_bhb_loop+0x40/0x90 [ 600.092457][T16380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.098376][T16380] RIP: 0033:0x7f84cc19e019 [ 600.102814][T16380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.122460][T16380] RSP: 002b:00007f84cd0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 600.130911][T16380] RAX: ffffffffffffffda RBX: 00007f84cc425fa0 RCX: 00007f84cc19e019 [ 600.138907][T16380] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 600.146903][T16380] RBP: 00007f84cd0b3090 R08: 0000000000000000 R09: 0000000000000000 [ 600.154898][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 600.162894][T16380] R13: 00007f84cc426038 R14: 00007f84cc425fa0 R15: 00007ffc3f5e9ba8 [ 600.170905][T16380] [ 601.257990][T16406] syzkaller0: entered promiscuous mode [ 601.301339][T16406] syzkaller0: entered allmulticast mode [ 601.413089][T16413] __nla_validate_parse: 8 callbacks suppressed [ 601.413108][T16413] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3477'. [ 601.452356][T16413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 601.815372][T16421] netlink: 'syz.2.3479': attribute type 3 has an invalid length. [ 601.841055][T16421] netlink: 'syz.2.3479': attribute type 4 has an invalid length. [ 601.867211][T16421] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.3479'. [ 603.654449][T16423] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3480'. [ 603.955537][T16432] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 603.962508][T16432] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 604.576967][T16450] netlink: 'syz.3.3491': attribute type 3 has an invalid length. [ 604.595458][T16450] netlink: 'syz.3.3491': attribute type 4 has an invalid length. [ 604.620291][T16450] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.3491'. [ 604.659755][T16448] syzkaller0: entered promiscuous mode [ 604.667545][T16448] syzkaller0: entered allmulticast mode [ 605.180473][T10188] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 606.214810][T16463] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3495'. [ 609.364397][T16509] netlink: 'syz.1.3510': attribute type 21 has an invalid length. [ 609.380895][T16509] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3510'. [ 609.722184][T16521] netlink: 'syz.3.3516': attribute type 8 has an invalid length. [ 609.735302][T16518] netlink: 'syz.0.3513': attribute type 21 has an invalid length. [ 609.743422][T16521] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3516'. [ 609.762612][T16520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.775532][T16522] netlink: 'syz.2.3515': attribute type 5 has an invalid length. [ 609.825404][T16518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.832895][T16518] IPv6: NLM_F_CREATE should be set when creating new route [ 609.840480][T16518] IPv6: NLM_F_CREATE should be set when creating new route [ 609.847901][T16518] IPv6: NLM_F_CREATE should be set when creating new route [ 611.028963][T16549] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3525'. [ 611.134417][T16549] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3525'. [ 611.458573][T16554] netlink: 'syz.2.3526': attribute type 6 has an invalid length. [ 611.469057][T16554] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3526'. [ 611.536807][T16558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3529'. [ 611.670939][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 611.718734][T16563] netlink: 'syz.0.3530': attribute type 11 has an invalid length. [ 611.839224][T16571] FAULT_INJECTION: forcing a failure. [ 611.839224][T16571] name failslab, interval 1, probability 0, space 0, times 0 [ 611.852329][T16571] CPU: 1 PID: 16571 Comm: syz.2.3534 Not tainted syzkaller #0 [ 611.859812][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.869881][T16571] Call Trace: [ 611.873166][T16571] [ 611.876114][T16571] dump_stack_lvl+0x18c/0x250 [ 611.880819][T16571] ? show_regs_print_info+0x20/0x20 [ 611.886033][T16571] ? load_image+0x420/0x420 [ 611.890558][T16571] should_fail_ex+0x394/0x4c0 [ 611.895249][T16571] should_failslab+0x9/0x20 [ 611.899765][T16571] slab_pre_alloc_hook+0x59/0x300 [ 611.904814][T16571] kmem_cache_alloc+0x5a/0x2c0 [ 611.909592][T16571] ? radix_tree_node_alloc+0x7e/0x3a0 [ 611.914983][T16571] radix_tree_node_alloc+0x7e/0x3a0 [ 611.920209][T16571] idr_get_free+0x28f/0xa10 [ 611.924735][T16571] idr_alloc_cyclic+0x28a/0x610 [ 611.929678][T16571] ? idr_alloc+0x2e0/0x2e0 [ 611.934105][T16571] ? do_raw_spin_lock+0x11f/0x2b0 [ 611.939151][T16571] ? bpf_map_alloc_id+0x21/0xd0 [ 611.944015][T16571] bpf_map_alloc_id+0x40/0xd0 [ 611.948710][T16571] map_create+0xe24/0x12f0 [ 611.953140][T16571] __sys_bpf+0x651/0x890 [ 611.957390][T16571] ? bpf_link_show_fdinfo+0x390/0x390 [ 611.962784][T16571] ? lock_chain_count+0x20/0x20 [ 611.967665][T16571] __x64_sys_bpf+0x7c/0x90 [ 611.972094][T16571] do_syscall_64+0x55/0xb0 [ 611.976523][T16571] ? clear_bhb_loop+0x40/0x90 [ 611.981224][T16571] ? clear_bhb_loop+0x40/0x90 [ 611.985926][T16571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.991837][T16571] RIP: 0033:0x7f8f0359e019 [ 611.996262][T16571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.015879][T16571] RSP: 002b:00007f8f04535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.024303][T16571] RAX: ffffffffffffffda RBX: 00007f8f03825fa0 RCX: 00007f8f0359e019 [ 612.032281][T16571] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 0000000000000000 [ 612.040264][T16571] RBP: 00007f8f04535090 R08: 0000000000000000 R09: 0000000000000000 [ 612.048254][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.056233][T16571] R13: 00007f8f03826038 R14: 00007f8f03825fa0 R15: 00007ffecf2315d8 [ 612.064235][T16571] [ 612.312612][T16579] netlink: 'syz.3.3537': attribute type 25 has an invalid length. [ 612.337499][T16579] netlink: 'syz.3.3537': attribute type 9 has an invalid length. [ 612.358524][T16579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3537'. [ 612.382498][T16583] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 612.389087][T16583] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 612.604754][T16587] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3538'. [ 612.639180][T16587] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3538'. [ 613.983800][T16644] FAULT_INJECTION: forcing a failure. [ 613.983800][T16644] name failslab, interval 1, probability 0, space 0, times 0 [ 613.996695][T16644] CPU: 0 PID: 16644 Comm: syz.2.3562 Not tainted syzkaller #0 [ 614.004196][T16644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.014282][T16644] Call Trace: [ 614.017613][T16644] [ 614.020598][T16644] dump_stack_lvl+0x18c/0x250 [ 614.025349][T16644] ? show_regs_print_info+0x20/0x20 [ 614.030613][T16644] ? load_image+0x420/0x420 [ 614.035219][T16644] ? skb_network_protocol+0x533/0x790 [ 614.040694][T16644] should_fail_ex+0x394/0x4c0 [ 614.045447][T16644] should_failslab+0x9/0x20 [ 614.050002][T16644] slab_pre_alloc_hook+0x59/0x300 [ 614.055116][T16644] kmem_cache_alloc+0x5a/0x2c0 [ 614.059939][T16644] ? skb_clone+0x1eb/0x370 [ 614.064434][T16644] skb_clone+0x1eb/0x370 [ 614.068728][T16644] ? dev_queue_xmit_nit+0x204/0xba0 [ 614.073994][T16644] dev_queue_xmit_nit+0x23f/0xba0 [ 614.079085][T16644] ? dev_queue_xmit_nit+0x2d/0xba0 [ 614.084284][T16644] dev_hard_start_xmit+0x150/0x790 [ 614.089497][T16644] ? __dev_queue_xmit+0x275/0x3630 [ 614.094673][T16644] __dev_queue_xmit+0x198c/0x3630 [ 614.099769][T16644] ? __dev_queue_xmit+0x275/0x3630 [ 614.105015][T16644] ? netdev_core_pick_tx+0x370/0x370 [ 614.110365][T16644] ? pskb_expand_head+0x17a/0x1150 [ 614.115545][T16644] ? pskb_expand_head+0x17a/0x1150 [ 614.120723][T16644] ? skb_release_data+0x1de/0x7f0 [ 614.125814][T16644] ? __bpf_redirect+0x4d1/0xdf0 [ 614.130715][T16644] __bpf_tx_skb+0x181/0x260 [ 614.135273][T16644] bpf_clone_redirect+0x315/0x4a0 [ 614.140390][T16644] bpf_prog_208b094576c80b22+0x5e/0x63 [ 614.145930][T16644] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 614.151965][T16644] ? __lock_acquire+0x7d80/0x7d80 [ 614.157044][T16644] ? lock_chain_count+0x20/0x20 [ 614.161953][T16644] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 614.168264][T16644] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 614.173598][T16644] ? ktime_get+0x7f/0x280 [ 614.177968][T16644] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 614.184255][T16644] ? ktime_get_real_ts64+0x440/0x440 [ 614.189597][T16644] ? __x64_sys_bpf+0x7c/0x90 [ 614.194273][T16644] ? __local_bh_disable_ip+0x108/0x1a0 [ 614.199767][T16644] ? __cant_sleep+0x220/0x220 [ 614.204486][T16644] ? read_tsc+0x9/0x20 [ 614.208593][T16644] ? ktime_get+0x24b/0x280 [ 614.213070][T16644] ? bpf_test_run+0x174/0x870 [ 614.217806][T16644] bpf_test_run+0x2df/0x870 [ 614.222420][T16644] ? bpf_test_run+0x174/0x870 [ 614.227178][T16644] ? dst_hold+0x70/0x70 [ 614.231403][T16644] ? eth_get_headlen+0x210/0x210 [ 614.236507][T16644] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 614.242019][T16644] ? cpu_online+0x60/0x60 [ 614.246433][T16644] bpf_prog_test_run+0x31f/0x390 [ 614.251444][T16644] __sys_bpf+0x49d/0x890 [ 614.255842][T16644] ? bpf_link_show_fdinfo+0x390/0x390 [ 614.261315][T16644] ? lock_chain_count+0x20/0x20 [ 614.266243][T16644] __x64_sys_bpf+0x7c/0x90 [ 614.270724][T16644] do_syscall_64+0x55/0xb0 [ 614.275181][T16644] ? clear_bhb_loop+0x40/0x90 [ 614.279898][T16644] ? clear_bhb_loop+0x40/0x90 [ 614.284639][T16644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 614.290586][T16644] RIP: 0033:0x7f8f0359e019 [ 614.295052][T16644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.314721][T16644] RSP: 002b:00007f8f04535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.323173][T16644] RAX: ffffffffffffffda RBX: 00007f8f03825fa0 RCX: 00007f8f0359e019 [ 614.331178][T16644] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 614.339200][T16644] RBP: 00007f8f04535090 R08: 0000000000000000 R09: 0000000000000000 [ 614.347210][T16644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.355218][T16644] R13: 00007f8f03826038 R14: 00007f8f03825fa0 R15: 00007ffecf2315d8 [ 614.363269][T16644] [ 614.861608][T16661] FAULT_INJECTION: forcing a failure. [ 614.861608][T16661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.880451][T16661] CPU: 0 PID: 16661 Comm: syz.3.3567 Not tainted syzkaller #0 [ 614.887977][T16661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.898068][T16661] Call Trace: [ 614.901374][T16661] [ 614.904334][T16661] dump_stack_lvl+0x18c/0x250 [ 614.909055][T16661] ? show_regs_print_info+0x20/0x20 [ 614.914278][T16661] ? load_image+0x420/0x420 [ 614.918818][T16661] ? __might_fault+0xaa/0x120 [ 614.923534][T16661] should_fail_ex+0x394/0x4c0 [ 614.928255][T16661] copyin+0x1a/0x90 [ 614.932112][T16661] _copy_from_iter+0x532/0x1290 [ 614.937057][T16661] ? copyout_mc+0x70/0x70 [ 614.941436][T16661] ? __virt_addr_valid+0x10c/0x380 [ 614.946606][T16661] ? __virt_addr_valid+0x10c/0x380 [ 614.951755][T16661] ? __virt_addr_valid+0x10c/0x380 [ 614.956906][T16661] ? __check_object_size+0x4fc/0xa40 [ 614.962220][T16661] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 614.967982][T16661] ? dev_get_by_index+0x22/0x2d0 [ 614.972964][T16661] ? skb_put+0x112/0x210 [ 614.977249][T16661] packet_sendmsg+0x345e/0x4c70 [ 614.982155][T16661] ? set_user_nice+0x620/0xb20 [ 614.986971][T16661] ? aa_sk_perm+0x83c/0x970 [ 614.991508][T16661] ? packet_getsockopt+0xad0/0xad0 [ 614.996640][T16661] ? tomoyo_write_file+0x1d0/0xc50 [ 615.001784][T16661] ? aa_sock_msg_perm+0x94/0x150 [ 615.006753][T16661] ? apparmor_socket_sendmsg+0x8e/0x330 [ 615.012324][T16661] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 615.017643][T16661] ? security_socket_sendmsg+0x80/0xa0 [ 615.023130][T16661] ? packet_getsockopt+0xad0/0xad0 [ 615.028254][T16661] ____sys_sendmsg+0x61b/0x980 [ 615.033050][T16661] ? __asan_memset+0x22/0x40 [ 615.037675][T16661] ? __sys_sendmsg_sock+0x30/0x30 [ 615.042723][T16661] ? __import_iovec+0x3fa/0x850 [ 615.047615][T16661] ? import_iovec+0x73/0xa0 [ 615.052144][T16661] ___sys_sendmsg+0x2a6/0x360 [ 615.056869][T16661] ? get_pid_task+0x20/0x1e0 [ 615.061497][T16661] ? __sys_sendmsg+0x2b0/0x2b0 [ 615.066297][T16661] ? __lock_acquire+0x7d80/0x7d80 [ 615.071361][T16661] __se_sys_sendmsg+0x1d0/0x2c0 [ 615.076233][T16661] ? __x64_sys_sendmsg+0x80/0x80 [ 615.081206][T16661] ? lockdep_hardirqs_on+0x98/0x150 [ 615.086431][T16661] do_syscall_64+0x55/0xb0 [ 615.090867][T16661] ? clear_bhb_loop+0x40/0x90 [ 615.095563][T16661] ? clear_bhb_loop+0x40/0x90 [ 615.100301][T16661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.106223][T16661] RIP: 0033:0x7fd87699e019 [ 615.110653][T16661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.130275][T16661] RSP: 002b:00007fd8778ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.138716][T16661] RAX: ffffffffffffffda RBX: 00007fd876c25fa0 RCX: 00007fd87699e019 [ 615.146723][T16661] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 615.154752][T16661] RBP: 00007fd8778ac090 R08: 0000000000000000 R09: 0000000000000000 [ 615.162746][T16661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.170738][T16661] R13: 00007fd876c26038 R14: 00007fd876c25fa0 R15: 00007fff17eb5388 [ 615.178751][T16661] [ 615.240288][T16667] __nla_validate_parse: 4 callbacks suppressed [ 615.240318][T16667] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3569'. [ 615.312304][T16659] ================================================================== [ 615.320412][T16659] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 615.328256][T16659] Write of size 72 at addr ffff88802f27ea10 by task syz.0.3566/16659 [ 615.336336][T16659] [ 615.338674][T16659] CPU: 1 PID: 16659 Comm: syz.0.3566 Not tainted syzkaller #0 [ 615.346146][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.356215][T16659] Call Trace: [ 615.359519][T16659] [ 615.362471][T16659] dump_stack_lvl+0x18c/0x250 [ 615.367174][T16659] ? read_lock_is_recursive+0x20/0x20 [ 615.372570][T16659] ? show_regs_print_info+0x20/0x20 [ 615.377800][T16659] ? load_image+0x420/0x420 [ 615.382340][T16659] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 615.387835][T16659] ? __virt_addr_valid+0x10c/0x380 [ 615.392976][T16659] ? __virt_addr_valid+0x10c/0x380 [ 615.398107][T16659] ? __virt_addr_valid+0x10c/0x380 [ 615.403230][T16659] print_report+0xa8/0x210 [ 615.407671][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 615.412791][T16659] kasan_report+0x117/0x150 [ 615.417317][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 615.422445][T16659] kasan_check_range+0x241/0x290 [ 615.427390][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 615.432519][T16659] __asan_memcpy+0x40/0x70 [ 615.436955][T16659] __bpf_get_stackid+0x6c7/0x900 [ 615.441942][T16659] bpf_get_stackid_pe+0x343/0x410 [ 615.446992][T16659] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 615.452463][T16659] bpf_overflow_handler+0x1fc/0x510 [ 615.457681][T16659] ? bpf_overflow_handler+0xde/0x510 [ 615.462990][T16659] ? tp_perf_event_destroy+0x20/0x20 [ 615.468304][T16659] ? perf_trace_preemptirq_template+0xac/0x330 [ 615.474482][T16659] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 615.481694][T16659] ? __perf_event_account_interrupt+0x187/0x280 [ 615.487943][T16659] __perf_event_overflow+0x461/0x660 [ 615.493235][T16659] perf_swevent_event+0x319/0x570 [ 615.498287][T16659] ? perf_tp_event+0x1550/0x1550 [ 615.503252][T16659] ? lock_chain_count+0x20/0x20 [ 615.508120][T16659] ___perf_sw_event+0x4ab/0x730 [ 615.512993][T16659] ? ___perf_sw_event+0x19e/0x730 [ 615.518036][T16659] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 615.524461][T16659] ? __lock_acquire+0x1336/0x7d80 [ 615.529503][T16659] ? rep_movs_alternative+0x4a/0x90 [ 615.534740][T16659] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 615.540743][T16659] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 615.547962][T16659] ? lock_chain_count+0x20/0x20 [ 615.552823][T16659] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 615.558745][T16659] __perf_sw_event+0x139/0x270 [ 615.563535][T16659] do_user_addr_fault+0x1242/0x12d0 [ 615.568759][T16659] ? rcu_is_watching+0x15/0xb0 [ 615.573540][T16659] exc_page_fault+0x64/0x100 [ 615.578148][T16659] asm_exc_page_fault+0x26/0x30 [ 615.583003][T16659] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 615.588827][T16659] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 615.608457][T16659] RSP: 0018:ffffc90012b87bd0 EFLAGS: 00050206 [ 615.614544][T16659] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 000000000000036a [ 615.622522][T16659] RDX: 0000000000000001 RSI: 0000200000122000 RDI: ffff8880797f5203 [ 615.630498][T16659] RBP: ffffc90012b87d20 R08: 0000000000000004 R09: 0000000000000005 [ 615.638470][T16659] R10: dffffc0000000000 R11: ffffed100f2feaad R12: 000020000012236a [ 615.646443][T16659] R13: 1ffff92002570fbd R14: ffff8880797f5000 R15: 0000200000121dfd [ 615.654436][T16659] ? rcuref_put_slowpath+0x101/0x150 [ 615.659738][T16659] _copy_from_user+0x8b/0xe0 [ 615.664352][T16659] generic_map_update_batch+0x58c/0x800 [ 615.669913][T16659] ? rcu_read_unlock+0xa0/0xa0 [ 615.674697][T16659] ? __fdget+0x180/0x210 [ 615.678951][T16659] ? rcu_read_unlock+0xa0/0xa0 [ 615.683722][T16659] bpf_map_do_batch+0x3f2/0x600 [ 615.688581][T16659] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 615.695095][T16659] __sys_bpf+0x381/0x890 [ 615.699349][T16659] ? bpf_link_show_fdinfo+0x390/0x390 [ 615.704738][T16659] ? lock_chain_count+0x20/0x20 [ 615.709606][T16659] __x64_sys_bpf+0x7c/0x90 [ 615.714034][T16659] do_syscall_64+0x55/0xb0 [ 615.718461][T16659] ? clear_bhb_loop+0x40/0x90 [ 615.723144][T16659] ? clear_bhb_loop+0x40/0x90 [ 615.727832][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.733728][T16659] RIP: 0033:0x7f84cc19e019 [ 615.738152][T16659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.757764][T16659] RSP: 002b:00007f84cd0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.766201][T16659] RAX: ffffffffffffffda RBX: 00007f84cc425fa0 RCX: 00007f84cc19e019 [ 615.774186][T16659] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 615.782167][T16659] RBP: 00007f84cc23500c R08: 0000000000000000 R09: 0000000000000000 [ 615.790146][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.798121][T16659] R13: 00007f84cc426038 R14: 00007f84cc425fa0 R15: 00007ffc3f5e9ba8 [ 615.806105][T16659] [ 615.809125][T16659] [ 615.811459][T16659] Allocated by task 16659: [ 615.815877][T16659] kasan_set_track+0x4e/0x70 [ 615.820499][T16659] __kasan_kmalloc+0x8f/0xa0 [ 615.825095][T16659] __kmalloc_node+0xb6/0x240 [ 615.829698][T16659] bpf_map_area_alloc+0x5e/0x110 [ 615.834646][T16659] prealloc_elems_and_freelist+0x86/0x1c0 [ 615.840371][T16659] stack_map_alloc+0x32b/0x4b0 [ 615.845150][T16659] map_create+0x877/0x12f0 [ 615.849572][T16659] __sys_bpf+0x651/0x890 [ 615.853814][T16659] __x64_sys_bpf+0x7c/0x90 [ 615.858232][T16659] do_syscall_64+0x55/0xb0 [ 615.862654][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.868560][T16659] [ 615.870892][T16659] Last potentially related work creation: [ 615.876613][T16659] kasan_save_stack+0x3e/0x60 [ 615.881307][T16659] __kasan_record_aux_stack+0xaf/0xc0 [ 615.886691][T16659] call_rcu+0x153/0x900 [ 615.890864][T16659] __nf_register_net_hook+0x787/0x910 [ 615.896252][T16659] nf_register_net_hook+0xb2/0x190 [ 615.901387][T16659] nf_register_net_hooks+0x44/0x1b0 [ 615.906588][T16659] nf_ct_netns_do_get+0x3c0/0x5c0 [ 615.911685][T16659] nf_ct_netns_inet_get+0x1f/0x150 [ 615.916805][T16659] nf_conncount_init+0x127/0x380 [ 615.921830][T16659] ovs_ct_init+0x316/0x490 [ 615.926305][T16659] ovs_init_net+0x1e6/0x250 [ 615.930813][T16659] ops_init+0x391/0x640 [ 615.934972][T16659] setup_net+0x3b6/0xa20 [ 615.939215][T16659] copy_net_ns+0x35e/0x5d0 [ 615.943637][T16659] create_new_namespaces+0x3ce/0x700 [ 615.948931][T16659] unshare_nsproxy_namespaces+0x11a/0x160 [ 615.954655][T16659] ksys_unshare+0x4fa/0x8f0 [ 615.959164][T16659] __x64_sys_unshare+0x38/0x40 [ 615.963931][T16659] do_syscall_64+0x55/0xb0 [ 615.968350][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.974256][T16659] [ 615.976597][T16659] Second to last potentially related work creation: [ 615.983180][T16659] kasan_save_stack+0x3e/0x60 [ 615.987878][T16659] __kasan_record_aux_stack+0xaf/0xc0 [ 615.993291][T16659] call_rcu+0x153/0x900 [ 615.997466][T16659] nf_unregister_net_hooks+0xcb/0x130 [ 616.002858][T16659] nf_defrag_ipv6_disable+0x95/0xe0 [ 616.008126][T16659] nf_ct_netns_put+0x375/0x520 [ 616.012900][T16659] nf_conncount_destroy+0x41/0x150 [ 616.018021][T16659] ovs_ct_exit+0x9c/0x200 [ 616.022360][T16659] ovs_exit_net+0xed/0x7a0 [ 616.026782][T16659] cleanup_net+0x707/0xbb0 [ 616.031204][T16659] process_scheduled_works+0xa60/0x1600 [ 616.036756][T16659] worker_thread+0xa5e/0xfe0 [ 616.041350][T16659] kthread+0x2fa/0x390 [ 616.045425][T16659] ret_from_fork+0x48/0x80 [ 616.049849][T16659] ret_from_fork_asm+0x11/0x20 [ 616.054641][T16659] [ 616.056991][T16659] The buggy address belongs to the object at ffff88802f27ea00 [ 616.056991][T16659] which belongs to the cache kmalloc-cg-64 of size 64 [ 616.071136][T16659] The buggy address is located 16 bytes inside of [ 616.071136][T16659] allocated 40-byte region [ffff88802f27ea00, ffff88802f27ea28) [ 616.085108][T16659] [ 616.087437][T16659] The buggy address belongs to the physical page: [ 616.093856][T16659] page:ffffea0000bc9f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f27e [ 616.104010][T16659] memcg:ffff888077819a01 [ 616.108251][T16659] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 616.115798][T16659] page_type: 0xffffffff() [ 616.120133][T16659] raw: 00fff00000000800 ffff888017c4da00 dead000000000100 dead000000000122 [ 616.128717][T16659] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888077819a01 [ 616.137304][T16659] page dumped because: kasan: bad access detected [ 616.143726][T16659] page_owner tracks the page as allocated [ 616.149440][T16659] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5783, tgid 5783 (syz-executor), ts 384733675650, free_ts 384681547919 [ 616.167859][T16659] post_alloc_hook+0x1c1/0x200 [ 616.172642][T16659] get_page_from_freelist+0x2181/0x22a0 [ 616.178192][T16659] __alloc_pages+0x1f0/0x460 [ 616.182785][T16659] alloc_slab_page+0x5d/0x180 [ 616.187461][T16659] new_slab+0x87/0x2d0 [ 616.191531][T16659] ___slab_alloc+0xc5c/0x12f0 [ 616.196215][T16659] __kmem_cache_alloc_node+0x11f/0x250 [ 616.201691][T16659] kmalloc_trace+0x2a/0xe0 [ 616.206114][T16659] alloc_fdtable+0xca/0x2c0 [ 616.210637][T16659] dup_fd+0x747/0xa20 [ 616.214627][T16659] copy_files+0xaf/0x110 [ 616.218875][T16659] copy_process+0x157d/0x3da0 [ 616.223555][T16659] kernel_clone+0x24b/0x8a0 [ 616.228066][T16659] __x64_sys_clone+0x1b7/0x230 [ 616.232831][T16659] do_syscall_64+0x55/0xb0 [ 616.237249][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.243152][T16659] page last free stack trace: [ 616.247825][T16659] free_unref_page_prepare+0x7d7/0x8f0 [ 616.253304][T16659] free_unref_page_list+0xbe/0x860 [ 616.258420][T16659] release_pages+0x208a/0x2300 [ 616.263189][T16659] tlb_flush_mmu+0x379/0x510 [ 616.267788][T16659] tlb_finish_mmu+0xf4/0x220 [ 616.272384][T16659] exit_mmap+0x428/0xb90 [ 616.276636][T16659] __mmput+0x118/0x3a0 [ 616.280710][T16659] exit_mm+0x23f/0x340 [ 616.284787][T16659] do_exit+0x909/0x2530 [ 616.288955][T16659] do_group_exit+0x22d/0x2f0 [ 616.293553][T16659] __x64_sys_exit_group+0x3f/0x40 [ 616.298597][T16659] do_syscall_64+0x55/0xb0 [ 616.303017][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.308911][T16659] [ 616.311236][T16659] Memory state around the buggy address: [ 616.316885][T16659] ffff88802f27e900: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 616.324952][T16659] ffff88802f27e980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 616.333027][T16659] >ffff88802f27ea00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 616.341083][T16659] ^ [ 616.346454][T16659] ffff88802f27ea80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 616.354513][T16659] ffff88802f27eb00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 616.362573][T16659] ================================================================== [ 616.370637][T16659] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 616.377833][T16659] CPU: 1 PID: 16659 Comm: syz.0.3566 Not tainted syzkaller #0 [ 616.385289][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.395361][T16659] Call Trace: [ 616.398653][T16659] [ 616.401590][T16659] dump_stack_lvl+0x18c/0x250 [ 616.406279][T16659] ? show_regs_print_info+0x20/0x20 [ 616.411490][T16659] ? load_image+0x420/0x420 [ 616.416033][T16659] panic+0x2ca/0x720 [ 616.419941][T16659] ? __lock_acquire+0x7d80/0x7d80 [ 616.424986][T16659] ? bpf_jit_dump+0xd0/0xd0 [ 616.429511][T16659] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 616.435418][T16659] ? _raw_spin_unlock+0x40/0x40 [ 616.440279][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 616.445402][T16659] check_panic_on_warn+0x84/0xa0 [ 616.450350][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 616.455467][T16659] end_report+0x6f/0x130 [ 616.459729][T16659] kasan_report+0x128/0x150 [ 616.464245][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 616.469375][T16659] kasan_check_range+0x241/0x290 [ 616.474325][T16659] ? __bpf_get_stackid+0x6c7/0x900 [ 616.479448][T16659] __asan_memcpy+0x40/0x70 [ 616.483879][T16659] __bpf_get_stackid+0x6c7/0x900 [ 616.488838][T16659] bpf_get_stackid_pe+0x343/0x410 [ 616.493877][T16659] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 616.499341][T16659] bpf_overflow_handler+0x1fc/0x510 [ 616.504554][T16659] ? bpf_overflow_handler+0xde/0x510 [ 616.509849][T16659] ? tp_perf_event_destroy+0x20/0x20 [ 616.515148][T16659] ? perf_trace_preemptirq_template+0xac/0x330 [ 616.521346][T16659] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 616.528558][T16659] ? __perf_event_account_interrupt+0x187/0x280 [ 616.534917][T16659] __perf_event_overflow+0x461/0x660 [ 616.540227][T16659] perf_swevent_event+0x319/0x570 [ 616.545270][T16659] ? perf_tp_event+0x1550/0x1550 [ 616.550222][T16659] ? lock_chain_count+0x20/0x20 [ 616.555093][T16659] ___perf_sw_event+0x4ab/0x730 [ 616.559957][T16659] ? ___perf_sw_event+0x19e/0x730 [ 616.564997][T16659] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 616.571426][T16659] ? __lock_acquire+0x1336/0x7d80 [ 616.576461][T16659] ? rep_movs_alternative+0x4a/0x90 [ 616.581679][T16659] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 616.587687][T16659] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 616.594916][T16659] ? lock_chain_count+0x20/0x20 [ 616.599776][T16659] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 616.605693][T16659] __perf_sw_event+0x139/0x270 [ 616.610476][T16659] do_user_addr_fault+0x1242/0x12d0 [ 616.615695][T16659] ? rcu_is_watching+0x15/0xb0 [ 616.620477][T16659] exc_page_fault+0x64/0x100 [ 616.625086][T16659] asm_exc_page_fault+0x26/0x30 [ 616.629966][T16659] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 616.635786][T16659] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 616.655401][T16659] RSP: 0018:ffffc90012b87bd0 EFLAGS: 00050206 [ 616.661482][T16659] RAX: ffffffff84320801 RBX: 000000000000056d RCX: 000000000000036a [ 616.669485][T16659] RDX: 0000000000000001 RSI: 0000200000122000 RDI: ffff8880797f5203 [ 616.677473][T16659] RBP: ffffc90012b87d20 R08: 0000000000000004 R09: 0000000000000005 [ 616.685468][T16659] R10: dffffc0000000000 R11: ffffed100f2feaad R12: 000020000012236a [ 616.693471][T16659] R13: 1ffff92002570fbd R14: ffff8880797f5000 R15: 0000200000121dfd [ 616.701452][T16659] ? rcuref_put_slowpath+0x101/0x150 [ 616.706752][T16659] _copy_from_user+0x8b/0xe0 [ 616.711356][T16659] generic_map_update_batch+0x58c/0x800 [ 616.716920][T16659] ? rcu_read_unlock+0xa0/0xa0 [ 616.721695][T16659] ? __fdget+0x180/0x210 [ 616.725954][T16659] ? rcu_read_unlock+0xa0/0xa0 [ 616.730727][T16659] bpf_map_do_batch+0x3f2/0x600 [ 616.735593][T16659] ? bpf_lsm_xfrm_policy_delete_security+0x10/0x10 [ 616.742109][T16659] __sys_bpf+0x381/0x890 [ 616.746366][T16659] ? bpf_link_show_fdinfo+0x390/0x390 [ 616.751754][T16659] ? lock_chain_count+0x20/0x20 [ 616.756622][T16659] __x64_sys_bpf+0x7c/0x90 [ 616.761055][T16659] do_syscall_64+0x55/0xb0 [ 616.765477][T16659] ? clear_bhb_loop+0x40/0x90 [ 616.770162][T16659] ? clear_bhb_loop+0x40/0x90 [ 616.774855][T16659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 616.780754][T16659] RIP: 0033:0x7f84cc19e019 [ 616.785179][T16659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.804805][T16659] RSP: 002b:00007f84cd0b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.813242][T16659] RAX: ffffffffffffffda RBX: 00007f84cc425fa0 RCX: 00007f84cc19e019 [ 616.821232][T16659] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 616.829232][T16659] RBP: 00007f84cc23500c R08: 0000000000000000 R09: 0000000000000000 [ 616.837224][T16659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.845247][T16659] R13: 00007f84cc426038 R14: 00007f84cc425fa0 R15: 00007ffc3f5e9ba8 [ 616.853250][T16659] [ 616.856862][T16659] Kernel Offset: disabled [ 616.861193][T16659] Rebooting in 86400 seconds..