last executing test programs: 5.089995691s ago: executing program 2 (id=2252): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x11, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10062) write$cgroup_subtree(r2, &(0x7f0000000000), 0x15) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r3 = socket$kcm(0x28, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2160) 4.788755798s ago: executing program 2 (id=2255): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x6) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="282000000007000071114f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x9, 0x6, 0x4, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x3d2, 0x6, 0xfc4, 0x601, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r0}, 0x18) 4.28088565s ago: executing program 2 (id=2257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="7eec78b0b71938c6c25e445814dafc02f610d27e1b", @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[{0x2, 0x5, 0x8, 0xc}], 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="190000000400000008000000fdffffff00000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000080000008000"/26], 0x50) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x48120000, &(0x7f0000000180)="324d94539a893152f81dfec805802392eba92c2a10c9a72f8b94d3ea8c187a140db30fddc5a8b1a6b6ec124418fedc1fd4a838ab3d52e2aa5eb6359b8ae64dfc9d6aa3165efb1bcbaaa9be078bcf692ef9b782f37a8e77a1ee01a6fe26fd21b1e66dbea45fd637c31f015b881c658711744ab1c40bf45a0d2997bb0e6328949683fd74c572673f378f10281590e1a3029e6b2b8047e3fac5c940e738a6a7ebec", 0xa0, 0x0, &(0x7f0000000280), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000040)) socket$kcm(0x10, 0x400000002, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x200000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x411186fb}, 0x0, 0x0, 0xffffffffffffffff, 0x5) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="330000000220", @ANYRES32=r2, @ANYRES32=r3], 0x20) 2.98299609s ago: executing program 3 (id=2268): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="760a0000020081000000000000000000192cabc1e17842000000000000000000000000000000bf00"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800000000000000000000006100960c8d2362eaa88b588ed4d647d6fb077b6bb6cffe65bf7135ff2a6254c071ec70cc32ca1c95914accce31b526d95369801c7c1dde282e5042cd3ffe5f905c5ad10bf6a910dca0c5ea83b61a4f3393dd6044995f8183742b528d7528922e1a16d620d5792eb45d800ae503922cdeb00649a2be71b2727569af11960bd88e6bb20ced6955d16a67d6f0f237a8720e8ea875b9b5f9431e55"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x7e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) close(r7) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r5, r4, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="3800000000200000000000008300000085000000a200000095000000000000002d2c4f3ed84a5277f7e8642891111e97b48eff69d4960595f0ad6131a60548f5c7642623a9e712c8656ed02247bcaa2225d5a0d3a0ddc4d78d1d49567ddc70a3b14790fa18cd0b576377b4d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) 2.319359565s ago: executing program 3 (id=2270): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f0000000780)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8949, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@ll={0x11, 0x4, r1, 0x1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011", 0x17}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x647, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x4, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000001140)='GPL\x00', 0x6, 0x0, &(0x7f0000001440), 0x40f00, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000014c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[r3, r5, r7, r8, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x4, 0x6, 0xc}], 0x10, 0x800}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f00)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) 2.092488461s ago: executing program 2 (id=2272): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40000022) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x429}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x9) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x12021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f8484300", 0x16}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9febbe6d9d59ea736390000024000000240000000700000003000000020000840100000003000000030000000100000006000007fb39cd22fd5d624b51616600000000"], &(0x7f0000000300)=""/175, 0x43, 0xaf, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xbf9, 0x49e, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x9) 2.092285921s ago: executing program 4 (id=2273): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x28) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='%@*\x00') r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3bc6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@generic={0x0, 0x1, 0x5, 0x9, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)}, 0x4080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) unlink(&(0x7f0000000200)='./cgroup\x00') 1.829767947s ago: executing program 0 (id=2274): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.644977042s ago: executing program 1 (id=2275): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10042) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/4055, 0xfd7}], 0x1}, 0x13100) 1.595817582s ago: executing program 4 (id=2276): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext, 0x8080, 0x0, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x11, 0x68, &(0x7f0000000100), 0x120) close(r1) socket$kcm(0x25, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000800000040000000030000004100", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000007c05b39041e382d6000000000000000000000000000000001f56bf1dc16eeb873058a9d0e479c64ac5011e3082284020bab83cfc4a1bada400ea6123941ec5a6593ee6a07b03ee1b7ffb7f160c20e782"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r3}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070002000000", 0x8}], 0x1}, 0x1) openat$cgroup_ro(r4, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="140000004f007f049e", 0x9}, {&(0x7f00000001c0)="78cafcdda10aa200c63701", 0xb}], 0x2}, 0x0) 1.470444995s ago: executing program 0 (id=2277): socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x844) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002e27c8f2efa4ff60e8bc6fdb965300"/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) close(r0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 1.293013799s ago: executing program 1 (id=2278): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x70, 0x9, 0xb, 0x0, 0x0, 0x7fffffff, 0x4000, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x11000, 0x2, @perf_bp={0x0, 0xd}, 0x2, 0x8, 0xb, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 1.243921991s ago: executing program 3 (id=2279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x8ab3}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f96b24fc60050011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x48810) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x0, 0x0, 0xc}, {0x200, 0x2000, 0x7}, {0xfffffc00, 0x4, 0x10402, 0x6}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90924fc60100004000a000400053582c137153e37000c", 0x26}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRESOCT=r3, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x15) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 1.173675542s ago: executing program 1 (id=2280): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="760a0000020081000000000000000000192cabc1e17842000000000000000000000000000000bf00"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800000000000000000000006100960c8d2362eaa88b588ed4d647d6fb077b6bb6cffe65bf7135ff2a6254c071ec70cc32ca1c95914accce31b526d95369801c7c1dde282e5042cd3ffe5f905c5ad10bf6a910dca0c5ea83b61a4f3393dd6044995f8183742b528d7528922e1a16d620d5792eb45d800ae503922cdeb00649a2be71b2727569af11960bd88e6bb20ced6955d16a67d6f0f237a8720e8ea875b9b5f9431e55"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x7e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) close(r7) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r5, r4, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="3800000000200000000000008300000085000000a200000095000000000000002d2c4f3ed84a5277f7e8642891111e97b48eff69d4960595f0ad6131a60548f5c7642623a9e712c8656ed02247bcaa2225d5a0d3a0ddc4d78d1d49567ddc70a3b14790fa18cd0b576377b4d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) 1.100913264s ago: executing program 4 (id=2281): socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x844) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r4, r2, 0x4}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002e27c8f2efa4ff60e8bc6fdb965300"/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) close(r0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 901.315309ms ago: executing program 0 (id=2282): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800001804000000080000000000000001"], 0x40) 805.187601ms ago: executing program 1 (id=2283): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000800"], 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000007900480000000000180000000000000000000000000000009500000000000000440a0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x1c}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x28, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x72, &(0x7f0000000440)=""/114, 0x41100, 0x5e, '\x00', r4, @flow_dissector, r0, 0x8, &(0x7f00000005c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x2, 0x10000, 0x2}, 0x10, r5, r0, 0x7, &(0x7f0000000680)=[r1, r1], &(0x7f00000006c0)=[{0x1, 0x5, 0xf, 0x7}, {0x0, 0x2, 0xe, 0xb}, {0x5, 0x1, 0x1, 0x7}, {0x3, 0x3, 0x2, 0x2}, {0x1, 0x5, 0xa, 0x6}, {0x5, 0x3, 0x2, 0xa}, {0x0, 0x1, 0x6, 0xb}], 0x10, 0x200}, 0x94) 720.323323ms ago: executing program 4 (id=2284): write$cgroup_pid(0xffffffffffffffff, &(0x7f00000010c0), 0x12) r0 = socket$kcm(0x21, 0x2, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@ll={0x11, 0x4, r1, 0x1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1, 0xffffffffffffffff}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011", 0x17}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x647, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x4, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x4b}]}, &(0x7f0000001140)='GPL\x00', 0x6, 0x0, &(0x7f0000001440), 0x40f00, 0x10, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000014c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001680)=[r3, r5, r7, r8, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x4, 0x6, 0xc}], 0x10, 0x800}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f00)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x3000000, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x3e}, 0x28) 696.106224ms ago: executing program 0 (id=2285): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) socket$kcm(0xf, 0x3, 0x2) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x61, 0x30, 0x30, 0x30, 0x30]}}, &(0x7f00000000c0)=""/13, 0x1f, 0xd, 0x1, 0x5}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x0, 0xd, 0x2, 0x7, 0xffffffffffffffff, 0xfffffffffffffff0}, @generic={0x78, 0x8, 0x4, 0xfff7, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000400)='GPL\x00', 0xffff, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xd, 0x8001, 0xb}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000640)=[r2, r5], &(0x7f0000000680)=[{0x5, 0x4, 0x6, 0x6}], 0x10, 0x1000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b37, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x88}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 695.181284ms ago: executing program 2 (id=2286): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x28) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}]}]}}}], 0x40}, 0x200040c4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='%@*\x00') r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x0, 0x44}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3bc6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@generic={0x0, 0x1, 0x5, 0x9, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)}, 0x4080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) unlink(&(0x7f0000000200)='./cgroup\x00') 584.869976ms ago: executing program 3 (id=2287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 484.902598ms ago: executing program 1 (id=2288): r0 = socket$kcm(0x28, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2160) 442.354119ms ago: executing program 4 (id=2289): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104102, 0xac4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="ba6c003473ba0000000000000003e4"], 0x0, 0x3ff}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x300c, 0x0, 0x0, 0x9, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000180)="2cbd805c9fd340ee696918dc6afb", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) setsockopt$sock_attach_bpf(r0, 0x6, 0x16, &(0x7f0000000200), 0x4) r3 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada401af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8, @ANYRES32, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r5], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb011794ee000000000000005892222c2ad8f4c857ea280000002800000006000000040000000000000e03000051a9854200000000000c020000000000000000a2e0e7e6dc"], 0x0, 0x46}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) gettid() 321.459982ms ago: executing program 3 (id=2290): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x70, 0x9, 0xb, 0x0, 0x0, 0x7fffffff, 0x4000, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x11000, 0x2, @perf_bp={0x0, 0xd}, 0x2, 0x8, 0xb, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 252.830374ms ago: executing program 0 (id=2291): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r3, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, 0x0, &(0x7f0000000780)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8949, &(0x7f0000001740)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x88j\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xf6\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe\x8f$\xd0qx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r2, 0xffffffffffffffff}, 0x4) close(r7) perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000030000000800"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', r5, r4, 0x5, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="3800000000200000000000008300000085000000a200000095000000000000002d2c4f3ed84a5277f7e8642891111e97b48eff69d4960595f0ad6131a60548f5c7642623a9e712c8656ed02247bcaa2225d5a0d3a0ddc4d78d1d49567ddc70a3b14790fa18cd0b576377b4d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r9, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) 1.487029ms ago: executing program 2 (id=2294): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x96, 0xe, 0x4, 0xa, 0x0, 0x7, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3, 0x9}, 0x201, 0xd76ff82, 0x2, 0x8, 0x1, 0xffffffff, 0x8, 0x0, 0xcd, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f0000000580)={0x1, 0x80, 0x5, 0x55, 0x8, 0xf8, 0x0, 0x20000000000, 0x180, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x5ea753a634361a3a}, 0x10000, 0x4, 0x9, 0x5, 0x853, 0x5, 0x9, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x10, r0, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000900bbbbbbbbbbbbaaaaaaaaaabb3dd4e472216caaaaaaaaaaaa0180c2000084ffffffffffffffffffffffffaaaaaaaaaabb000000000000"]) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x4, 0xe, 0x8c, 0x1, 0x0, 0x80000000, 0x1280, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x100502, 0x0, 0x176, 0x8, 0x8000, 0x2, 0x7, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x3) 0s ago: executing program 3 (id=2295): socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x844) r0 = socket$kcm(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r4, r2, 0x4}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000002e27c8f2efa4ff60e8bc6fdb965300"/34], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) close(r0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) kernel console output (not intermixed with test programs): nvalid length. [ 216.421412][ T6684] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 216.432074][ T6676] __nla_validate_parse: 4 callbacks suppressed [ 216.432091][ T6676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.748'. [ 216.456397][ T6682] netlink: 'syz.2.739': attribute type 3 has an invalid length. [ 216.465176][ T6684] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.741'. [ 216.477230][ T6682] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.739'. [ 216.481396][ T6678] netlink: 'syz.2.739': attribute type 3 has an invalid length. [ 216.571477][ T6678] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.739'. [ 216.751053][ T6691] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 216.770113][ T6691] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.743'. [ 216.951387][ T6699] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 217.090521][ T6699] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 217.192928][ T6704] netlink: 'syz.0.747': attribute type 3 has an invalid length. [ 217.246166][ T6704] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.747'. [ 217.704862][ T6719] netlink: 'syz.0.752': attribute type 3 has an invalid length. [ 217.728670][ T6716] netlink: 'syz.0.752': attribute type 3 has an invalid length. [ 217.771113][ T6717] netlink: 'syz.2.750': attribute type 4 has an invalid length. [ 217.791066][ T6719] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.752'. [ 217.804584][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.750'. [ 217.832109][ T6716] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.752'. [ 218.180404][ T6730] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.755'. [ 219.059232][ T6743] delete_channel: no stack [ 220.496049][ T6782] FAULT_INJECTION: forcing a failure. [ 220.496049][ T6782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.520122][ T6782] CPU: 1 PID: 6782 Comm: syz.4.775 Not tainted syzkaller #0 [ 220.527860][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 220.538336][ T6782] Call Trace: [ 220.541852][ T6782] [ 220.545016][ T6782] dump_stack_lvl+0x188/0x24e [ 220.549883][ T6782] ? show_regs_print_info+0x12/0x12 [ 220.555779][ T6782] ? load_image+0x410/0x410 [ 220.560497][ T6782] ? __lock_acquire+0x7c40/0x7c40 [ 220.566206][ T6782] should_fail_ex+0x390/0x4c0 [ 220.572161][ T6782] _copy_from_user+0x2c/0x170 [ 220.578318][ T6782] ____sys_sendmsg+0x31a/0x9a0 [ 220.583697][ T6782] ? __sys_sendmsg_sock+0x30/0x30 [ 220.589310][ T6782] ? __import_iovec+0x306/0x510 [ 220.594644][ T6782] ? import_iovec+0x6f/0xa0 [ 220.599327][ T6782] ___sys_sendmsg+0x2a2/0x360 [ 220.604791][ T6782] ? __sys_sendmsg+0x2a0/0x2a0 [ 220.609842][ T6782] ? __lock_acquire+0x7c40/0x7c40 [ 220.615237][ T6782] __se_sys_sendmsg+0x1c3/0x2b0 [ 220.620363][ T6782] ? __x64_sys_sendmsg+0x80/0x80 [ 220.626117][ T6782] ? lockdep_hardirqs_on+0x94/0x140 [ 220.631649][ T6782] do_syscall_64+0x4c/0xa0 [ 220.636320][ T6782] ? clear_bhb_loop+0x60/0xb0 [ 220.641583][ T6782] ? clear_bhb_loop+0x60/0xb0 [ 220.646601][ T6782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.653438][ T6782] RIP: 0033:0x7f5d73b9e159 [ 220.658011][ T6782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.678405][ T6782] RSP: 002b:00007f5d74a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.687319][ T6782] RAX: ffffffffffffffda RBX: 00007f5d73e25fa0 RCX: 00007f5d73b9e159 [ 220.697320][ T6782] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 220.706573][ T6782] RBP: 00007f5d74a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 220.715931][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.725265][ T6782] R13: 00007f5d73e26038 R14: 00007f5d73e25fa0 R15: 00007ffec64b8178 [ 220.734624][ T6782] [ 220.777662][ T6780] device wlan1 entered promiscuous mode [ 221.601216][ T6810] validate_nla: 10 callbacks suppressed [ 221.601238][ T6810] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 221.633398][ T6810] __nla_validate_parse: 9 callbacks suppressed [ 221.633415][ T6810] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.785'. [ 222.440039][ T6825] netlink: 'syz.1.789': attribute type 4 has an invalid length. [ 222.482018][ T6825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.789'. [ 223.001240][ T6839] netlink: 'syz.3.795': attribute type 2 has an invalid length. [ 223.055858][ T6839] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.795'. [ 223.404789][ T6856] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 223.419185][ T6856] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.799'. [ 223.609411][ T6858] netlink: 'syz.0.800': attribute type 29 has an invalid length. [ 223.675079][ T6858] netlink: 'syz.0.800': attribute type 29 has an invalid length. [ 223.719181][ T6859] netlink: 'syz.0.800': attribute type 21 has an invalid length. [ 223.748115][ T6862] FAULT_INJECTION: forcing a failure. [ 223.748115][ T6862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.783522][ T6862] CPU: 0 PID: 6862 Comm: syz.3.802 Not tainted syzkaller #0 [ 223.791349][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.802171][ T6862] Call Trace: [ 223.805518][ T6862] [ 223.808600][ T6862] dump_stack_lvl+0x188/0x24e [ 223.813536][ T6862] ? show_regs_print_info+0x12/0x12 [ 223.819002][ T6862] ? load_image+0x410/0x410 [ 223.824052][ T6862] ? __lock_acquire+0x7c40/0x7c40 [ 223.829248][ T6862] should_fail_ex+0x390/0x4c0 [ 223.834377][ T6862] _copy_from_user+0x2c/0x170 [ 223.839213][ T6862] sctp_setsockopt+0x19a/0xf90 [ 223.844139][ T6862] ? sock_common_recvmsg+0x190/0x190 [ 223.849595][ T6862] __sys_setsockopt+0x2bf/0x3d0 [ 223.854841][ T6862] __x64_sys_setsockopt+0xb1/0xc0 [ 223.860127][ T6862] do_syscall_64+0x4c/0xa0 [ 223.864617][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 223.869788][ T6862] ? clear_bhb_loop+0x60/0xb0 [ 223.874615][ T6862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.880658][ T6862] RIP: 0033:0x7f298ed9e159 [ 223.885398][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.905583][ T6862] RSP: 002b:00007f298fbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.914237][ T6862] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e159 [ 223.922544][ T6862] RDX: 0000000000000025 RSI: 0000000000000084 RDI: 0000000000000006 [ 223.930752][ T6862] RBP: 00007f298fbf9090 R08: 0000000020000010 R09: 0000000000000000 [ 223.938878][ T6862] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.946912][ T6862] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd529ff768 [ 223.955054][ T6862] [ 224.297318][ T6875] netlink: 'syz.2.806': attribute type 4 has an invalid length. [ 224.335366][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.806'. [ 224.362522][ T6866] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 224.413297][ T6866] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.803'. [ 225.110925][ T6905] FAULT_INJECTION: forcing a failure. [ 225.110925][ T6905] name failslab, interval 1, probability 0, space 0, times 0 [ 225.137830][ T6907] netlink: 64 bytes leftover after parsing attributes in process `syz.2.816'. [ 225.183513][ T6905] CPU: 1 PID: 6905 Comm: syz.3.815 Not tainted syzkaller #0 [ 225.191257][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.202329][ T6905] Call Trace: [ 225.205852][ T6905] [ 225.208865][ T6905] dump_stack_lvl+0x188/0x24e [ 225.213629][ T6905] ? show_regs_print_info+0x12/0x12 [ 225.218981][ T6905] ? load_image+0x410/0x410 [ 225.223575][ T6905] ? __might_sleep+0xd0/0xd0 [ 225.228422][ T6905] ? __lock_acquire+0x7c40/0x7c40 [ 225.233910][ T6905] should_fail_ex+0x390/0x4c0 [ 225.238761][ T6905] should_failslab+0x5/0x20 [ 225.243580][ T6905] slab_pre_alloc_hook+0x59/0x300 [ 225.248823][ T6905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 225.255149][ T6905] kmem_cache_alloc_node+0x5a/0x310 [ 225.260409][ T6905] ? dup_task_struct+0x57/0x700 [ 225.265410][ T6905] dup_task_struct+0x57/0x700 [ 225.270327][ T6905] copy_process+0x621/0x4070 [ 225.275295][ T6905] ? idle_dummy+0x10/0x10 [ 225.279964][ T6905] kernel_clone+0x24b/0x900 [ 225.284625][ T6905] ? create_io_thread+0x170/0x170 [ 225.290065][ T6905] ? irqentry_enter+0x33/0x50 [ 225.294817][ T6905] __x64_sys_clone+0x1a7/0x220 [ 225.299820][ T6905] ? __ia32_sys_vfork+0x140/0x140 [ 225.304954][ T6905] ? syscall_enter_from_user_mode+0x2a/0x80 [ 225.311086][ T6905] do_syscall_64+0x4c/0xa0 [ 225.315655][ T6905] ? clear_bhb_loop+0x60/0xb0 [ 225.320494][ T6905] ? clear_bhb_loop+0x60/0xb0 [ 225.325248][ T6905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.331408][ T6905] RIP: 0033:0x7f298ed9e159 [ 225.336070][ T6905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.357310][ T6905] RSP: 002b:00007f298fbf8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 225.366329][ T6905] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e159 [ 225.374706][ T6905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000009900000 [ 225.382819][ T6905] RBP: 00007f298fbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 225.392316][ T6905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 225.400611][ T6905] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd529ff768 [ 225.409133][ T6905] [ 225.895095][ T6916] netlink: 'syz.1.820': attribute type 4 has an invalid length. [ 225.904543][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.820'. [ 226.379496][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.391948][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.601300][ T6937] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.826'. [ 226.718854][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.728752][ T6933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.741231][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.750080][ T6933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.288480][ T6933] team0: Port device bridge0 added [ 227.360071][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 227.438551][ T26] audit: type=1800 audit(1788908477.063:2): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.826" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 227.439085][ T6959] netlink: 152 bytes leftover after parsing attributes in process `syz.3.831'. [ 227.462069][ T6937] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 227.579274][ T6961] validate_nla: 1 callbacks suppressed [ 227.579900][ T6961] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 227.608549][ T6937] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 227.620842][ T6937] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 227.647698][ T6953] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 227.656890][ T6953] netlink: 55 bytes leftover after parsing attributes in process `syz.3.831'. [ 227.669365][ T6961] netlink: 'syz.1.834': attribute type 3 has an invalid length. [ 227.689358][ T6961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.834'. [ 227.993017][ T6968] netlink: 'syz.0.835': attribute type 4 has an invalid length. [ 228.041654][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.835'. [ 228.065614][ T6972] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 228.076150][ T6971] netlink: 'syz.2.836': attribute type 3 has an invalid length. [ 228.076186][ T6972] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.836'. [ 228.101297][ T6971] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.836'. [ 228.369336][ T6980] netlink: 'syz.3.840': attribute type 1 has an invalid length. [ 228.436901][ T6980] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.840'. [ 228.785948][ T6992] netlink: 'syz.4.842': attribute type 8 has an invalid length. [ 228.808850][ T6992] netlink: 156 bytes leftover after parsing attributes in process `syz.4.842'. [ 228.851007][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.842'. [ 228.919370][ T6995] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 230.662149][ T7022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.179989][ T7031] netlink: 'syz.4.856': attribute type 10 has an invalid length. [ 231.250026][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.259022][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.271500][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.280113][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.546939][ T7036] netlink: 'syz.0.857': attribute type 3 has an invalid length. [ 231.689385][ T7031] team0: Port device bridge0 added [ 231.862129][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.545116][ T7031] syz.4.856 (7031) used greatest stack depth: 17280 bytes left [ 232.634754][ T7054] __nla_validate_parse: 5 callbacks suppressed [ 232.634776][ T7054] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.861'. [ 233.233009][ T7073] validate_nla: 1 callbacks suppressed [ 233.233026][ T7073] netlink: 'syz.1.867': attribute type 4 has an invalid length. [ 233.298284][ T7073] netlink: 132 bytes leftover after parsing attributes in process `syz.1.867'. [ 233.974687][ T7083] netlink: 'syz.1.872': attribute type 3 has an invalid length. [ 233.987518][ T7083] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.872'. [ 234.047386][ T7086] netlink: 'syz.1.872': attribute type 3 has an invalid length. [ 234.096275][ T7086] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.872'. [ 234.115491][ T7088] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.873'. [ 234.218394][ T7092] netlink: 'syz.0.876': attribute type 10 has an invalid length. [ 234.267937][ T7092] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.276795][ T7092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.287939][ T7092] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.295935][ T7092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.412051][ T7104] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.876'. [ 234.442389][ T7092] team0: Port device bridge0 added [ 234.581726][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.135334][ T7150] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 238.295316][ T7150] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.890'. [ 238.711998][ T7167] netlink: 'syz.3.894': attribute type 10 has an invalid length. [ 238.757015][ T7167] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.778571][ T7167] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.842355][ T7171] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.894'. [ 239.223617][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.238549][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.260327][ T7167] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.272903][ T7167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.750217][ T7167] team0: Port device bridge0 added [ 239.977166][ T7175] netlink: 'syz.2.896': attribute type 3 has an invalid length. [ 240.033789][ T7175] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.896'. [ 240.138870][ T7178] netlink: 'syz.3.897': attribute type 3 has an invalid length. [ 240.232278][ T7178] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.897'. [ 240.268757][ T7180] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 240.349994][ T7180] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.898'. [ 241.426258][ T7200] netlink: 'syz.1.903': attribute type 4 has an invalid length. [ 241.470227][ T7200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.903'. [ 242.284101][ T7216] netlink: 'syz.1.911': attribute type 3 has an invalid length. [ 242.429090][ T7216] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.911'. [ 243.012458][ T7229] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 243.133624][ T7229] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.913'. [ 243.726556][ T7232] netlink: 'syz.4.914': attribute type 3 has an invalid length. [ 243.907809][ T7232] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.914'. [ 246.169569][ T7255] netlink: 'syz.4.921': attribute type 4 has an invalid length. [ 246.303444][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.4.921'. [ 247.518108][ T7265] netlink: 'syz.4.925': attribute type 3 has an invalid length. [ 247.588465][ T7265] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.925'. [ 247.869310][ T7271] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 248.118948][ T7271] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.926'. [ 248.435810][ T7279] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 248.472362][ T7277] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 248.493829][ T7279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.928'. [ 248.510133][ T7277] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.928'. [ 249.639096][ T7292] netlink: 'syz.1.931': attribute type 3 has an invalid length. [ 249.673335][ T7292] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.931'. [ 250.596702][ T7312] netlink: 'syz.1.941': attribute type 1 has an invalid length. [ 250.770148][ T7312] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.941'. [ 251.690256][ T7329] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 251.771127][ T7325] netlink: 'syz.2.943': attribute type 3 has an invalid length. [ 251.863996][ T7329] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.943'. [ 251.971901][ T7330] netlink: 'syz.4.944': attribute type 10 has an invalid length. [ 252.035359][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.057538][ T7325] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.943'. [ 252.109117][ T7330] device bridge_slave_1 left promiscuous mode [ 252.116165][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.255097][ T7340] netlink: 'syz.0.946': attribute type 3 has an invalid length. [ 252.530353][ T7336] netlink: 'syz.0.946': attribute type 3 has an invalid length. [ 252.583341][ T7336] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.946'. [ 252.634707][ T7340] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.946'. [ 252.744811][ T7346] netlink: 'syz.3.948': attribute type 3 has an invalid length. [ 252.799738][ T7346] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.948'. [ 253.727647][ T7353] device syzkaller0 entered promiscuous mode [ 254.061523][ T7369] netlink: 'syz.3.955': attribute type 1 has an invalid length. [ 254.140325][ T7369] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.955'. [ 256.043972][ T7385] netlink: 'syz.0.962': attribute type 3 has an invalid length. [ 256.052966][ T7385] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.962'. [ 256.083544][ T7386] netlink: 'syz.0.962': attribute type 3 has an invalid length. [ 256.092206][ T7386] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.962'. [ 257.619612][ T7390] netlink: 'syz.1.963': attribute type 3 has an invalid length. [ 257.649613][ T7390] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.963'. [ 258.001488][ T7399] netlink: 'syz.4.977': attribute type 3 has an invalid length. [ 258.079490][ T7399] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.977'. [ 258.099537][ T7407] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 258.164764][ T7402] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 258.368028][ T7407] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.969'. [ 258.464684][ T7402] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.969'. [ 259.477725][ T7423] netlink: 'syz.1.974': attribute type 1 has an invalid length. [ 259.549149][ T7423] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.974'. [ 260.691116][ T7443] netlink: 'syz.2.979': attribute type 3 has an invalid length. [ 260.725796][ T7443] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.979'. [ 260.974339][ T7449] netlink: 6 bytes leftover after parsing attributes in process `syz.3.981'. [ 261.000780][ T7449] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 261.070219][ T7449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.602430][ T7455] netlink: 'syz.3.983': attribute type 3 has an invalid length. [ 261.631944][ T7455] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.983'. [ 261.645475][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.652034][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.823540][ T7462] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 261.877734][ T7462] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.986'. [ 262.062486][ T7469] netlink: 'syz.3.988': attribute type 11 has an invalid length. [ 262.086857][ T7469] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.988'. [ 262.100966][ T7469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.934008][ T7485] netlink: 6 bytes leftover after parsing attributes in process `syz.1.995'. [ 262.975690][ T7485] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.082465][ T7485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.542432][ T7501] netlink: 'syz.3.999': attribute type 3 has an invalid length. [ 263.551238][ T7501] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.999'. [ 265.855631][ T7509] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 265.983367][ T7509] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1003'. [ 266.697275][ T7531] netlink: 'syz.4.1012': attribute type 3 has an invalid length. [ 266.713022][ T7531] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1012'. [ 266.851977][ T7532] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1011'. [ 267.537696][ T7555] netlink: 'syz.4.1018': attribute type 1 has an invalid length. [ 267.587338][ T7555] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1018'. [ 267.700607][ T7558] device sit0 entered promiscuous mode [ 268.091376][ T7568] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 268.153608][ T7568] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1025'. [ 268.439006][ T7572] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1027'. [ 268.949275][ T7592] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 268.957866][ T7592] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1033'. [ 269.389477][ T7599] device syzkaller0 entered promiscuous mode [ 269.522403][ T7603] netlink: 'syz.4.1037': attribute type 27 has an invalid length. [ 269.694715][ T7611] netlink: 'syz.1.1040': attribute type 3 has an invalid length. [ 269.707431][ T7611] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1040'. [ 269.751881][ T7603] bond0: (slave bond_slave_0): Releasing backup interface [ 269.871306][ T7602] netlink: 'syz.4.1037': attribute type 21 has an invalid length. [ 269.883810][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1037'. [ 270.133077][ T7623] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 270.181957][ T7620] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1042'. [ 270.194454][ T7623] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1045'. [ 270.316242][ T7624] device syzkaller0 entered promiscuous mode [ 270.361804][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.825078][ T7647] netlink: 'syz.2.1051': attribute type 16 has an invalid length. [ 272.853685][ T7647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1051'. [ 273.138916][ T7660] netlink: 'syz.4.1055': attribute type 3 has an invalid length. [ 273.167835][ T7660] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1055'. [ 273.785198][ T7676] netlink: 'syz.1.1060': attribute type 1 has an invalid length. [ 273.948049][ T7676] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1060'. [ 274.122381][ T7685] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1064'. [ 274.424344][ T7690] netlink: 'syz.4.1064': attribute type 19 has an invalid length. [ 274.488945][ T7692] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 274.502285][ T7690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1064'. [ 274.532640][ T7692] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1075'. [ 275.261784][ T7709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1066'. [ 275.287964][ T7708] FAULT_INJECTION: forcing a failure. [ 275.287964][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.398236][ T7708] CPU: 0 PID: 7708 Comm: syz.0.1067 Not tainted syzkaller #0 [ 275.406074][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.414947][ T7698] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1066'. [ 275.416268][ T7708] Call Trace: [ 275.416279][ T7708] [ 275.416289][ T7708] dump_stack_lvl+0x188/0x24e [ 275.416333][ T7708] ? show_regs_print_info+0x12/0x12 [ 275.416367][ T7708] ? load_image+0x410/0x410 [ 275.447012][ T7708] ? __lock_acquire+0x7c40/0x7c40 [ 275.452556][ T7708] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 275.458528][ T7708] should_fail_ex+0x390/0x4c0 [ 275.463497][ T7708] _copy_from_user+0x2c/0x170 [ 275.468337][ T7708] ___sys_sendmsg+0x1c3/0x360 [ 275.473814][ T7708] ? __sys_sendmsg+0x2a0/0x2a0 [ 275.479101][ T7708] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 275.485443][ T7708] __se_sys_sendmsg+0x1c3/0x2b0 [ 275.490568][ T7708] ? __x64_sys_sendmsg+0x80/0x80 [ 275.496029][ T7708] ? syscall_enter_from_user_mode+0x2a/0x80 [ 275.502210][ T7708] do_syscall_64+0x4c/0xa0 [ 275.506853][ T7708] ? clear_bhb_loop+0x60/0xb0 [ 275.511741][ T7708] ? clear_bhb_loop+0x60/0xb0 [ 275.516495][ T7708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.522473][ T7708] RIP: 0033:0x7f61df79e159 [ 275.527482][ T7708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.547414][ T7708] RSP: 002b:00007f61e0651028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.555934][ T7708] RAX: ffffffffffffffda RBX: 00007f61dfa26180 RCX: 00007f61df79e159 [ 275.564142][ T7708] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 275.572307][ T7708] RBP: 00007f61e0651090 R08: 0000000000000000 R09: 0000000000000000 [ 275.580027][ T7698] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.580664][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.580686][ T7708] R13: 00007f61dfa26218 R14: 00007f61dfa26180 R15: 00007ffe63f72278 [ 275.580719][ T7708] [ 275.736410][ T7700] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1067'. [ 275.775901][ T7700] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.885145][ T7720] netlink: 'syz.4.1071': attribute type 3 has an invalid length. [ 275.900867][ T6645] bridge0: port 3(team0) entered disabled state [ 275.919332][ T7720] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1071'. [ 276.310251][ T7732] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 276.925911][ T7747] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 277.828396][ T7773] netlink: 'syz.3.1092': attribute type 3 has an invalid length. [ 277.900650][ T7773] __nla_validate_parse: 6 callbacks suppressed [ 277.900668][ T7773] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1092'. [ 280.146056][ T7821] netlink: 'syz.0.1105': attribute type 16 has an invalid length. [ 280.162530][ T7821] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1105'. [ 280.371510][ T7824] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 280.402380][ T7824] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1108'. [ 281.354919][ T7845] netlink: 'syz.1.1117': attribute type 3 has an invalid length. [ 281.454654][ T7845] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1117'. [ 281.833456][ T7856] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 281.874380][ T7856] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1120'. [ 282.270106][ T7865] netlink: 'syz.4.1122': attribute type 2 has an invalid length. [ 282.331101][ T7860] netlink: 'syz.0.1121': attribute type 10 has an invalid length. [ 282.462436][ T7874] netlink: 'syz.1.1124': attribute type 3 has an invalid length. [ 282.491502][ T7874] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1124'. [ 282.560145][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.591182][ T7860] team0: Port device bond0 added [ 282.618935][ T7876] netlink: 'syz.2.1125': attribute type 10 has an invalid length. [ 282.683972][ T7876] team0: Device bond0 is up. Set it down before adding it as a team port [ 283.295141][ T7890] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1131'. [ 283.324329][ T7890] device hsr_slave_0 left promiscuous mode [ 283.350587][ T7890] device hsr_slave_1 left promiscuous mode [ 283.651345][ T7897] netlink: 'syz.3.1134': attribute type 3 has an invalid length. [ 283.704881][ T7897] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1134'. [ 284.966387][ T7913] netlink: 'syz.4.1139': attribute type 3 has an invalid length. [ 285.002510][ T7913] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1139'. [ 285.291766][ T7925] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1145'. [ 285.544840][ T7936] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1146'. [ 285.625682][ T7934] delete_channel: no stack [ 285.655448][ T7936] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 286.190599][ T7944] netlink: 'syz.0.1149': attribute type 2 has an invalid length. [ 286.209493][ T7944] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.1149'. [ 286.779558][ T7960] netlink: 'syz.4.1155': attribute type 21 has an invalid length. [ 287.280076][ T7978] FAULT_INJECTION: forcing a failure. [ 287.280076][ T7978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.305667][ T7978] CPU: 1 PID: 7978 Comm: syz.1.1161 Not tainted syzkaller #0 [ 287.313298][ T7978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.324127][ T7978] Call Trace: [ 287.328174][ T7978] [ 287.331261][ T7978] dump_stack_lvl+0x188/0x24e [ 287.336195][ T7978] ? show_regs_print_info+0x12/0x12 [ 287.341989][ T7978] ? load_image+0x410/0x410 [ 287.346813][ T7978] ? __lock_acquire+0x7c40/0x7c40 [ 287.353110][ T7978] should_fail_ex+0x390/0x4c0 [ 287.357938][ T7978] _copy_from_user+0x2c/0x170 [ 287.362834][ T7978] sctp_setsockopt+0x19a/0xf90 [ 287.367645][ T7978] ? sock_common_recvmsg+0x190/0x190 [ 287.373713][ T7978] __sys_setsockopt+0x2bf/0x3d0 [ 287.378988][ T7978] __x64_sys_setsockopt+0xb1/0xc0 [ 287.384182][ T7978] do_syscall_64+0x4c/0xa0 [ 287.388907][ T7978] ? clear_bhb_loop+0x60/0xb0 [ 287.393715][ T7978] ? clear_bhb_loop+0x60/0xb0 [ 287.398462][ T7978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.404737][ T7978] RIP: 0033:0x7f771639e159 [ 287.409377][ T7978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.430443][ T7978] RSP: 002b:00007f7717291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.439348][ T7978] RAX: ffffffffffffffda RBX: 00007f7716625fa0 RCX: 00007f771639e159 [ 287.447986][ T7978] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 000000000000000a [ 287.456725][ T7978] RBP: 00007f7717291090 R08: 0000000000000010 R09: 0000000000000000 [ 287.465371][ T7978] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.473892][ T7978] R13: 00007f7716626038 R14: 00007f7716625fa0 R15: 00007ffc36794068 [ 287.482406][ T7978] [ 287.768379][ T7989] FAULT_INJECTION: forcing a failure. [ 287.768379][ T7989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.791103][ T7985] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.1164'. [ 287.813450][ T7989] CPU: 0 PID: 7989 Comm: syz.4.1165 Not tainted syzkaller #0 [ 287.821287][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.833270][ T7989] Call Trace: [ 287.837585][ T7989] [ 287.840923][ T7989] dump_stack_lvl+0x188/0x24e [ 287.846047][ T7989] ? show_regs_print_info+0x12/0x12 [ 287.852308][ T7989] ? load_image+0x410/0x410 [ 287.857414][ T7989] ? __might_fault+0xa6/0x120 [ 287.862830][ T7989] should_fail_ex+0x390/0x4c0 [ 287.867813][ T7989] copyin+0x1b/0x120 [ 287.872222][ T7989] _copy_from_iter+0x447/0x1130 [ 287.877503][ T7989] ? copyout_mc+0x110/0x110 [ 287.882329][ T7989] ? __virt_addr_valid+0x188/0x540 [ 287.887958][ T7989] ? __virt_addr_valid+0x188/0x540 [ 287.893516][ T7989] ? __virt_addr_valid+0x467/0x540 [ 287.899574][ T7989] ? __phys_addr_symbol+0x2b/0x70 [ 287.905833][ T7989] ? __check_object_size+0x4f6/0xa70 [ 287.911793][ T7989] netlink_sendmsg+0x755/0xbd0 [ 287.916818][ T7989] ? netlink_getsockopt+0x550/0x550 [ 287.922183][ T7989] ? apparmor_socket_sendmsg+0x8a/0x330 [ 287.928690][ T7989] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.934127][ T7989] ? security_socket_sendmsg+0x7c/0xa0 [ 287.939642][ T7989] ? netlink_getsockopt+0x550/0x550 [ 287.944939][ T7989] ____sys_sendmsg+0x5ed/0x9a0 [ 287.950357][ T7989] ? __sys_sendmsg_sock+0x30/0x30 [ 287.955674][ T7989] ? __import_iovec+0x306/0x510 [ 287.960925][ T7989] ? import_iovec+0x6f/0xa0 [ 287.965687][ T7989] ___sys_sendmsg+0x2a2/0x360 [ 287.970781][ T7989] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.975889][ T7989] ? __lock_acquire+0x7c40/0x7c40 [ 287.981454][ T7989] __se_sys_sendmsg+0x1c3/0x2b0 [ 287.986542][ T7989] ? __x64_sys_sendmsg+0x80/0x80 [ 287.992004][ T7989] ? lockdep_hardirqs_on+0x94/0x140 [ 287.997971][ T7989] do_syscall_64+0x4c/0xa0 [ 288.002895][ T7989] ? clear_bhb_loop+0x60/0xb0 [ 288.007816][ T7989] ? clear_bhb_loop+0x60/0xb0 [ 288.012824][ T7989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.019230][ T7989] RIP: 0033:0x7f5d73b9e159 [ 288.023707][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.044719][ T7989] RSP: 002b:00007f5d74a5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.054259][ T7989] RAX: ffffffffffffffda RBX: 00007f5d73e25fa0 RCX: 00007f5d73b9e159 [ 288.062642][ T7989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 288.071027][ T7989] RBP: 00007f5d74a5f090 R08: 0000000000000000 R09: 0000000000000000 [ 288.079765][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.088341][ T7989] R13: 00007f5d73e26038 R14: 00007f5d73e25fa0 R15: 00007ffec64b8178 [ 288.096712][ T7989] [ 288.829476][ T8013] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1173'. [ 289.652631][ T8032] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1181'. [ 290.561160][ T8051] FAULT_INJECTION: forcing a failure. [ 290.561160][ T8051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.618650][ T8051] CPU: 1 PID: 8051 Comm: syz.2.1186 Not tainted syzkaller #0 [ 290.626780][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.636981][ T8051] Call Trace: [ 290.640302][ T8051] [ 290.643375][ T8051] dump_stack_lvl+0x188/0x24e [ 290.648392][ T8051] ? show_regs_print_info+0x12/0x12 [ 290.653994][ T8051] ? load_image+0x410/0x410 [ 290.658743][ T8051] ? __lock_acquire+0x7c40/0x7c40 [ 290.663923][ T8051] ? snprintf+0xe5/0x140 [ 290.668205][ T8051] should_fail_ex+0x390/0x4c0 [ 290.673016][ T8051] _copy_to_user+0x2c/0x130 [ 290.677649][ T8051] simple_read_from_buffer+0xe3/0x150 [ 290.683432][ T8051] proc_fail_nth_read+0x1a6/0x220 [ 290.688876][ T8051] ? proc_fault_inject_write+0x310/0x310 [ 290.694738][ T8051] ? fsnotify_perm+0x248/0x550 [ 290.699890][ T8051] ? proc_fault_inject_write+0x310/0x310 [ 290.706251][ T8051] vfs_read+0x2db/0x960 [ 290.710800][ T8051] ? kernel_read+0x1e0/0x1e0 [ 290.715758][ T8051] ? __fget_files+0x28/0x460 [ 290.720599][ T8051] ? __fget_files+0x3fc/0x460 [ 290.725764][ T8051] ? __fdget_pos+0x2ae/0x360 [ 290.730689][ T8051] ? ksys_read+0x70/0x260 [ 290.735721][ T8051] ksys_read+0x14d/0x260 [ 290.740037][ T8051] ? vfs_write+0x9a0/0x9a0 [ 290.744517][ T8051] ? lockdep_hardirqs_on+0x94/0x140 [ 290.749887][ T8051] do_syscall_64+0x4c/0xa0 [ 290.754461][ T8051] ? clear_bhb_loop+0x60/0xb0 [ 290.759316][ T8051] ? clear_bhb_loop+0x60/0xb0 [ 290.764382][ T8051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.770395][ T8051] RIP: 0033:0x7fba93f5e98e [ 290.774930][ T8051] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.796353][ T8051] RSP: 002b:00007fba94e26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.804998][ T8051] RAX: ffffffffffffffda RBX: 00007fba94e276c0 RCX: 00007fba93f5e98e [ 290.813531][ T8051] RDX: 000000000000000f RSI: 00007fba94e270a0 RDI: 0000000000000005 [ 290.822635][ T8051] RBP: 00007fba94e27090 R08: 0000000000000000 R09: 0000000000000000 [ 290.831690][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.842154][ T8051] R13: 00007fba94226038 R14: 00007fba94225fa0 R15: 00007ffdc2ba9a28 [ 290.851470][ T8051] [ 292.312627][ T8088] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 292.363545][ T8085] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 292.383269][ T8088] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1198'. [ 292.442723][ T8085] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1197'. [ 292.687358][ T8095] netlink: 'syz.4.1199': attribute type 3 has an invalid length. [ 292.705241][ T8096] netlink: 'syz.1.1200': attribute type 3 has an invalid length. [ 292.723578][ T8095] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1199'. [ 292.745318][ T8096] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1200'. [ 292.769373][ T8098] netlink: 'syz.0.1201': attribute type 3 has an invalid length. [ 292.838860][ T8098] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1201'. [ 294.048527][ T8120] netlink: 'syz.3.1209': attribute type 4 has an invalid length. [ 294.061801][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1209'. [ 294.205919][ T8124] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1210'. [ 294.315808][ T8124] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 294.701556][ T8131] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 294.733384][ T8131] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1213'. [ 294.772306][ T8133] netlink: 'syz.0.1214': attribute type 3 has an invalid length. [ 294.841977][ T8133] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1214'. [ 294.910426][ T8138] FAULT_INJECTION: forcing a failure. [ 294.910426][ T8138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.043821][ T8138] CPU: 1 PID: 8138 Comm: syz.2.1215 Not tainted syzkaller #0 [ 295.052265][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.062921][ T8138] Call Trace: [ 295.066257][ T8138] [ 295.069433][ T8138] dump_stack_lvl+0x188/0x24e [ 295.074369][ T8138] ? show_regs_print_info+0x12/0x12 [ 295.079732][ T8138] ? load_image+0x410/0x410 [ 295.084313][ T8138] ? __lock_acquire+0x7c40/0x7c40 [ 295.089415][ T8138] should_fail_ex+0x390/0x4c0 [ 295.094178][ T8138] _copy_from_user+0x2c/0x170 [ 295.098929][ T8138] ___sys_sendmsg+0x1c3/0x360 [ 295.103692][ T8138] ? __sys_sendmsg+0x2a0/0x2a0 [ 295.108991][ T8138] ? __lock_acquire+0x7c40/0x7c40 [ 295.114278][ T8138] __se_sys_sendmsg+0x1c3/0x2b0 [ 295.119183][ T8138] ? __x64_sys_sendmsg+0x80/0x80 [ 295.124470][ T8138] ? lockdep_hardirqs_on+0x94/0x140 [ 295.130116][ T8138] do_syscall_64+0x4c/0xa0 [ 295.135186][ T8138] ? clear_bhb_loop+0x60/0xb0 [ 295.140148][ T8138] ? clear_bhb_loop+0x60/0xb0 [ 295.145251][ T8138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.151404][ T8138] RIP: 0033:0x7fba93f9e159 [ 295.156309][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.176662][ T8138] RSP: 002b:00007fba94e06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.185291][ T8138] RAX: ffffffffffffffda RBX: 00007fba94226090 RCX: 00007fba93f9e159 [ 295.193396][ T8138] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 295.201518][ T8138] RBP: 00007fba94e06090 R08: 0000000000000000 R09: 0000000000000000 [ 295.209702][ T8138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.217728][ T8138] R13: 00007fba94226128 R14: 00007fba94226090 R15: 00007ffdc2ba9a28 [ 295.226407][ T8138] [ 295.712972][ T8155] netlink: 'syz.1.1220': attribute type 3 has an invalid length. [ 295.750610][ T8155] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1220'. [ 295.792936][ T8158] netlink: 'syz.1.1220': attribute type 3 has an invalid length. [ 295.866347][ T8158] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1220'. [ 296.099538][ T8164] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1223'. [ 296.846155][ T8178] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1228'. [ 297.238803][ T8187] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1230'. [ 297.977747][ T8204] validate_nla: 6 callbacks suppressed [ 297.977767][ T8204] netlink: 'syz.0.1235': attribute type 2 has an invalid length. [ 297.993567][ T8204] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 298.039029][ T8204] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.1235'. [ 298.238133][ T8210] netlink: 'syz.4.1236': attribute type 4 has an invalid length. [ 298.637857][ T8222] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 299.263403][ T8235] netlink: 'syz.3.1246': attribute type 3 has an invalid length. [ 299.272048][ T8235] __nla_validate_parse: 3 callbacks suppressed [ 299.272064][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1246'. [ 299.885483][ T8249] netlink: 'syz.0.1251': attribute type 4 has an invalid length. [ 299.919995][ T8249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1251'. [ 300.226413][ T8260] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 300.243364][ T8260] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1255'. [ 300.990048][ T8275] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 301.045119][ T8275] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1269'. [ 301.325452][ T8284] netlink: 'syz.2.1260': attribute type 2 has an invalid length. [ 301.762396][ T8290] netlink: 'syz.0.1263': attribute type 4 has an invalid length. [ 301.792971][ T8290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1263'. [ 302.269558][ T8309] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1268'. [ 302.454305][ T8312] device macvlan0 entered promiscuous mode [ 302.851797][ T8312] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 302.868619][ T8323] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1274'. [ 303.124440][ T8329] validate_nla: 3 callbacks suppressed [ 303.124463][ T8329] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 303.191742][ T8329] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1276'. [ 303.666943][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1281'. [ 303.718019][ T8341] netlink: 'syz.1.1280': attribute type 4 has an invalid length. [ 303.729712][ T8341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1280'. [ 303.792659][ T8345] netlink: 'syz.3.1283': attribute type 3 has an invalid length. [ 303.855875][ T8349] netlink: 'syz.3.1283': attribute type 3 has an invalid length. [ 304.019972][ T8350] netlink: 'syz.2.1282': attribute type 25 has an invalid length. [ 304.116909][ T8350] netlink: 'syz.2.1282': attribute type 29 has an invalid length. [ 305.893391][ T8372] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 305.913628][ T8372] device macvlan0 entered promiscuous mode [ 305.952743][ T8376] netlink: 'syz.3.1292': attribute type 3 has an invalid length. [ 305.962181][ T8376] __nla_validate_parse: 3 callbacks suppressed [ 305.962199][ T8376] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1292'. [ 306.022501][ T8372] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 306.667471][ T8387] netlink: 'syz.2.1294': attribute type 4 has an invalid length. [ 306.713750][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1294'. [ 306.867050][ T8390] netlink: 'syz.4.1296': attribute type 4 has an invalid length. [ 306.901797][ T8390] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1296'. [ 307.511793][ T8411] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1312'. [ 307.545342][ T8412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 307.873887][ T8420] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1303'. [ 307.950201][ T8420] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1303'. [ 307.987678][ T8426] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1305'. [ 308.510170][ T8435] validate_nla: 5 callbacks suppressed [ 308.510192][ T8435] netlink: 'syz.3.1308': attribute type 4 has an invalid length. [ 308.561732][ T8437] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 308.585174][ T8435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1308'. [ 309.705497][ T8460] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 309.739838][ T8460] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1317'. [ 309.776386][ T8462] netlink: 'syz.4.1318': attribute type 1 has an invalid length. [ 310.272112][ T8474] netlink: 'syz.2.1321': attribute type 3 has an invalid length. [ 310.776276][ T8488] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 310.799423][ T8489] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 312.157069][ T8515] netlink: 'syz.3.1337': attribute type 3 has an invalid length. [ 312.193528][ T8515] __nla_validate_parse: 4 callbacks suppressed [ 312.193548][ T8515] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1337'. [ 312.321488][ T8520] netlink: 'syz.0.1339': attribute type 4 has an invalid length. [ 312.334552][ T8520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1339'. [ 313.284009][ T8527] netlink: 'syz.0.1342': attribute type 25 has an invalid length. [ 313.372916][ T8530] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1342'. [ 313.470309][ T8529] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1343'. [ 314.031919][ T8555] validate_nla: 1 callbacks suppressed [ 314.031942][ T8555] netlink: 'syz.0.1351': attribute type 3 has an invalid length. [ 314.075103][ T8555] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1351'. [ 314.386289][ T8562] netlink: 'syz.4.1352': attribute type 4 has an invalid length. [ 314.435154][ T8562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1352'. [ 314.802501][ T8568] netlink: 'syz.1.1354': attribute type 4 has an invalid length. [ 314.827061][ T8568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1354'. [ 315.073311][ T8577] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.346536][ T8583] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1360'. [ 315.465527][ T8587] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.1363'. [ 315.494693][ T8589] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1363'. [ 315.592787][ T8587] netlink: zone id is out of range [ 315.637391][ T8589] openvswitch: netlink: Flow key attr not present in new flow. [ 315.641366][ T8587] netlink: zone id is out of range [ 315.984734][ T8599] netlink: 'syz.4.1365': attribute type 3 has an invalid length. [ 316.562136][ T8611] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 317.128338][ T8622] device bridge_slave_0 left promiscuous mode [ 317.188641][ T8622] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.401930][ T8622] team0: Port device bridge0 removed [ 318.228089][ T8654] __nla_validate_parse: 3 callbacks suppressed [ 318.228130][ T8654] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1380'. [ 318.505450][ T8661] netlink: 'syz.4.1383': attribute type 10 has an invalid length. [ 318.557070][ T8661] netlink: 'syz.4.1383': attribute type 19 has an invalid length. [ 318.678932][ T8661] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1383'. [ 318.730621][ T8669] netlink: 'syz.3.1395': attribute type 4 has an invalid length. [ 318.749655][ T8669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1395'. [ 319.718594][ T8684] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 319.763530][ T8684] syzkaller1: linktype set to 825 [ 320.839069][ T8709] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 320.855589][ T8709] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1398'. [ 321.241890][ T8713] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 321.282421][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 321.301235][ T8715] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1400'. [ 321.429607][ T8721] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 321.504516][ T8721] netlink: 'syz.4.1402': attribute type 29 has an invalid length. [ 321.749003][ T8729] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 321.781726][ T8729] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1405'. [ 322.149319][ T8741] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 322.162463][ T8741] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1410'. [ 322.769302][ T8760] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 322.800190][ T8758] netlink: 'syz.2.1415': attribute type 4 has an invalid length. [ 322.820845][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1415'. [ 323.086181][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.092902][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.505602][ T8780] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 323.543320][ T8780] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1424'. [ 323.628086][ T8785] netlink: 'syz.0.1426': attribute type 3 has an invalid length. [ 323.642030][ T8784] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1426'. [ 323.676752][ T8782] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1425'. [ 323.706893][ T8785] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1426'. [ 323.718778][ T8787] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1425'. [ 324.973545][ T8801] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1427'. [ 325.338401][ T8806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1429'. [ 325.662815][ T8813] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1432'. [ 326.199173][ T8821] validate_nla: 5 callbacks suppressed [ 326.199195][ T8821] netlink: 'syz.0.1437': attribute type 6 has an invalid length. [ 326.258468][ T8821] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1437'. [ 326.358829][ T8826] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 326.396576][ T8826] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1438'. [ 326.960698][ T8834] netlink: 'syz.2.1439': attribute type 10 has an invalid length. [ 326.991998][ T8833] netlink: 'syz.1.1441': attribute type 3 has an invalid length. [ 327.014897][ T8837] netlink: 'syz.1.1441': attribute type 3 has an invalid length. [ 327.435485][ T8843] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 328.073154][ T8851] netlink: 'syz.1.1446': attribute type 4 has an invalid length. [ 329.243738][ T8855] __nla_validate_parse: 8 callbacks suppressed [ 329.243761][ T8855] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1447'. [ 329.525723][ T8860] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 329.537420][ T8860] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1450'. [ 329.575474][ T8864] FAULT_INJECTION: forcing a failure. [ 329.575474][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 329.628006][ T8864] CPU: 1 PID: 8864 Comm: syz.3.1448 Not tainted syzkaller #0 [ 329.635830][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.646634][ T8864] Call Trace: [ 329.650318][ T8864] [ 329.653300][ T8864] dump_stack_lvl+0x188/0x24e [ 329.658243][ T8864] ? show_regs_print_info+0x12/0x12 [ 329.663511][ T8864] ? load_image+0x410/0x410 [ 329.668266][ T8864] ? __might_sleep+0xd0/0xd0 [ 329.673083][ T8864] ? __lock_acquire+0x7c40/0x7c40 [ 329.678174][ T8864] should_fail_ex+0x390/0x4c0 [ 329.683111][ T8864] should_failslab+0x5/0x20 [ 329.687700][ T8864] slab_pre_alloc_hook+0x59/0x300 [ 329.692800][ T8864] ? __lock_acquire+0x138a/0x7c40 [ 329.698087][ T8864] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 329.704489][ T8864] __kmem_cache_alloc_node+0x4f/0x270 [ 329.709934][ T8864] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 329.715895][ T8864] __kmalloc+0xa3/0x240 [ 329.720123][ T8864] tomoyo_realpath_from_path+0xe2/0x5c0 [ 329.725751][ T8864] ? tomoyo_domain+0xd2/0x120 [ 329.730593][ T8864] ? tomoyo_path_number_perm+0x205/0x650 [ 329.736364][ T8864] tomoyo_path_number_perm+0x22f/0x650 [ 329.742196][ T8864] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 329.747842][ T8864] ? common_file_perm+0x171/0x1c0 [ 329.753389][ T8864] ? __fget_files+0x28/0x460 [ 329.758149][ T8864] security_file_ioctl+0x6c/0xa0 [ 329.763365][ T8864] __se_sys_ioctl+0x48/0x170 [ 329.768034][ T8864] do_syscall_64+0x4c/0xa0 [ 329.773020][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 329.777842][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 329.782746][ T8864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.789980][ T8864] RIP: 0033:0x7f298ed9e159 [ 329.795394][ T8864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.818994][ T8864] RSP: 002b:00007f298fbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.827903][ T8864] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e159 [ 329.836621][ T8864] RDX: 0000200000000b00 RSI: 00000000000089a0 RDI: 0000000000000006 [ 329.846505][ T8864] RBP: 00007f298fbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 329.854889][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.863599][ T8864] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd529ff768 [ 329.872262][ T8864] [ 329.911678][ T8864] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.971713][ T8872] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1448'. [ 329.997123][ T8873] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 330.469564][ T8884] netlink: 'syz.2.1455': attribute type 3 has an invalid length. [ 330.521682][ T8883] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1454'. [ 330.546776][ T8881] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1455'. [ 330.676002][ T8884] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1455'. [ 331.011326][ T8893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1459'. [ 331.351192][ T8904] validate_nla: 5 callbacks suppressed [ 331.351219][ T8904] netlink: 'syz.4.1462': attribute type 1 has an invalid length. [ 331.403353][ T8904] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1462'. [ 331.718205][ T8909] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 331.757606][ T8909] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1473'. [ 331.942918][ T8913] netlink: 'syz.2.1464': attribute type 6 has an invalid length. [ 331.975218][ T8913] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1464'. [ 332.020576][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.029455][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.892040][ T8935] netlink: 'syz.3.1472': attribute type 3 has an invalid length. [ 333.608220][ T8948] netlink: 'syz.3.1479': attribute type 1 has an invalid length. [ 335.599801][ T8981] __nla_validate_parse: 2 callbacks suppressed [ 335.599844][ T8981] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1491'. [ 336.136705][ T8982] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 336.153268][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1489'. [ 336.185335][ T8988] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1492'. [ 336.551213][ T8994] netlink: 'syz.3.1495': attribute type 6 has an invalid length. [ 336.601790][ T8994] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1495'. [ 336.635240][ T9000] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.1496'. [ 336.721238][ T6647] tipc: Subscription rejected, illegal request [ 336.931592][ T9003] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1496'. [ 336.954771][ T9000] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.1496'. [ 337.014112][ T9010] netlink: 'syz.4.1498': attribute type 7 has an invalid length. [ 337.029132][ T9010] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1498'. [ 337.043706][ T9013] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1500'. [ 338.852520][ T9016] bond0: (slave macvlan0): Releasing backup interface [ 338.904947][ T9066] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 339.169375][ T9074] FAULT_INJECTION: forcing a failure. [ 339.169375][ T9074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.258088][ T9074] CPU: 1 PID: 9074 Comm: syz.1.1505 Not tainted syzkaller #0 [ 339.266366][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.276839][ T9074] Call Trace: [ 339.280191][ T9074] [ 339.283364][ T9074] dump_stack_lvl+0x188/0x24e [ 339.288225][ T9074] ? show_regs_print_info+0x12/0x12 [ 339.293773][ T9074] ? load_image+0x410/0x410 [ 339.298446][ T9074] ? __lock_acquire+0x7c40/0x7c40 [ 339.305303][ T9074] should_fail_ex+0x390/0x4c0 [ 339.310067][ T9074] _copy_from_user+0x2c/0x170 [ 339.315084][ T9074] __sys_bpf+0x2ea/0x780 [ 339.319775][ T9074] ? bpf_link_show_fdinfo+0x380/0x380 [ 339.325904][ T9074] ? lock_chain_count+0x20/0x20 [ 339.331214][ T9074] __x64_sys_bpf+0x78/0x90 [ 339.336161][ T9074] do_syscall_64+0x4c/0xa0 [ 339.340754][ T9074] ? clear_bhb_loop+0x60/0xb0 [ 339.345680][ T9074] ? clear_bhb_loop+0x60/0xb0 [ 339.350959][ T9074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.358554][ T9074] RIP: 0033:0x7f771639e159 [ 339.363690][ T9074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.383626][ T9074] RSP: 002b:00007f7717291028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.392766][ T9074] RAX: ffffffffffffffda RBX: 00007f7716625fa0 RCX: 00007f771639e159 [ 339.401511][ T9074] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 339.412108][ T9074] RBP: 00007f7717291090 R08: 0000000000000000 R09: 0000000000000000 [ 339.420742][ T9074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.429303][ T9074] R13: 00007f7716626038 R14: 00007f7716625fa0 R15: 00007ffc36794068 [ 339.437709][ T9074] [ 339.456233][ T9068] netlink: 60935 bytes leftover after parsing attributes in process `syz.4.1503'. [ 339.574197][ T9078] netlink: 'syz.2.1507': attribute type 21 has an invalid length. [ 340.119262][ T9097] netlink: 'syz.1.1514': attribute type 3 has an invalid length. [ 340.441189][ T9107] netlink: 'syz.0.1529': attribute type 3 has an invalid length. [ 340.468228][ T9106] netlink: 'syz.4.1518': attribute type 2 has an invalid length. [ 340.603767][ T9111] netlink: 'syz.1.1519': attribute type 6 has an invalid length. [ 340.645864][ T9111] __nla_validate_parse: 6 callbacks suppressed [ 340.645917][ T9111] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1519'. [ 340.670077][ T9106] netlink: 'syz.4.1518': attribute type 29 has an invalid length. [ 340.889893][ T9106] netlink: 'syz.4.1518': attribute type 29 has an invalid length. [ 340.908441][ T9114] netlink: 'syz.4.1518': attribute type 29 has an invalid length. [ 341.401841][ T9121] netlink: 60935 bytes leftover after parsing attributes in process `syz.4.1522'. [ 341.426248][ T9121] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1522'. [ 341.453381][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 341.479497][ T9126] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1524'. [ 341.676396][ T9133] validate_nla: 1 callbacks suppressed [ 341.676417][ T9133] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 341.712868][ T9133] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1525'. [ 342.378005][ T9146] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1531'. [ 342.407316][ T9145] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.1531'. [ 342.435497][ T9145] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.1531'. [ 342.435996][ T9149] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 342.456240][ T9150] FAULT_INJECTION: forcing a failure. [ 342.456240][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.486511][ T9150] CPU: 0 PID: 9150 Comm: syz.3.1533 Not tainted syzkaller #0 [ 342.487569][ T6642] tipc: Subscription rejected, illegal request [ 342.494417][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.494440][ T9150] Call Trace: [ 342.494451][ T9150] [ 342.494464][ T9150] dump_stack_lvl+0x188/0x24e [ 342.494520][ T9150] ? show_regs_print_info+0x12/0x12 [ 342.528168][ T9150] ? load_image+0x410/0x410 [ 342.529356][ T9149] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1532'. [ 342.534024][ T9150] ? __lock_acquire+0x7c40/0x7c40 [ 342.534089][ T9150] should_fail_ex+0x390/0x4c0 [ 342.534140][ T9150] _copy_from_user+0x2c/0x170 [ 342.534179][ T9150] sk_setsockopt+0x2d9/0x29a0 [ 342.534236][ T9150] ? sockopt_capable+0x60/0x60 [ 342.534280][ T9150] ? aa_sk_perm+0x81f/0x950 [ 342.534332][ T9150] ? aa_af_perm+0x340/0x340 [ 342.578592][ T9150] ? __fget_files+0x3fc/0x460 [ 342.583387][ T9150] ? aa_sock_opt_perm+0x74/0x100 [ 342.588501][ T9150] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 342.594212][ T9150] ? security_socket_setsockopt+0x7a/0xa0 [ 342.600552][ T9150] __sys_setsockopt+0x2f6/0x3d0 [ 342.605485][ T9150] __x64_sys_setsockopt+0xb1/0xc0 [ 342.610670][ T9150] do_syscall_64+0x4c/0xa0 [ 342.615520][ T9150] ? clear_bhb_loop+0x60/0xb0 [ 342.620441][ T9150] ? clear_bhb_loop+0x60/0xb0 [ 342.625394][ T9150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.631462][ T9150] RIP: 0033:0x7f298ed9e159 [ 342.635945][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.656398][ T9150] RSP: 002b:00007f298fbf9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.665562][ T9150] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e159 [ 342.674108][ T9150] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 000000000000000e [ 342.682581][ T9150] RBP: 00007f298fbf9090 R08: 0000000000000004 R09: 0000000000000000 [ 342.691917][ T9150] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 342.700030][ T9150] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd529ff768 [ 342.708462][ T9150] [ 342.880105][ T9158] netlink: 'syz.4.1535': attribute type 3 has an invalid length. [ 342.930374][ T9159] netlink: 'syz.4.1535': attribute type 3 has an invalid length. [ 343.418262][ T9166] netlink: 'syz.0.1539': attribute type 1 has an invalid length. [ 344.123888][ T9181] netlink: 'syz.3.1543': attribute type 10 has an invalid length. [ 344.276044][ T9181] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.337207][ T9181] bond0: (slave team0): Enslaving as an active interface with an up link [ 344.590285][ T9192] netlink: 'syz.2.1548': attribute type 3 has an invalid length. [ 344.872880][ T6645] tipc: Subscription rejected, illegal request [ 345.231582][ T9200] FAULT_INJECTION: forcing a failure. [ 345.231582][ T9200] name failslab, interval 1, probability 0, space 0, times 0 [ 345.245045][ T9200] CPU: 0 PID: 9200 Comm: syz.0.1549 Not tainted syzkaller #0 [ 345.252654][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.262944][ T9200] Call Trace: [ 345.266342][ T9200] [ 345.269454][ T9200] dump_stack_lvl+0x188/0x24e [ 345.274372][ T9200] ? show_regs_print_info+0x12/0x12 [ 345.279652][ T9200] ? load_image+0x410/0x410 [ 345.284752][ T9200] should_fail_ex+0x390/0x4c0 [ 345.289669][ T9200] should_failslab+0x5/0x20 [ 345.294463][ T9200] slab_pre_alloc_hook+0x59/0x300 [ 345.299647][ T9200] kmem_cache_alloc+0x56/0x2f0 [ 345.304441][ T9200] ? sctp_get_port_local+0x69b/0x1500 [ 345.309968][ T9200] sctp_get_port_local+0x69b/0x1500 [ 345.315298][ T9200] ? __lock_acquire+0x7c40/0x7c40 [ 345.320499][ T9200] ? sctp_do_bind+0x8f0/0x8f0 [ 345.325301][ T9200] ? sctp_bind_addr_match+0x2c/0x2a0 [ 345.331069][ T9200] sctp_do_bind+0x4c0/0x8f0 [ 345.335712][ T9200] sctp_connect_new_asoc+0x266/0x6a0 [ 345.341389][ T9200] ? __sctp_connect+0xd80/0xd80 [ 345.346461][ T9200] ? __local_bh_enable_ip+0x136/0x1c0 [ 345.352682][ T9200] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 345.359077][ T9200] ? security_sctp_bind_connect+0x85/0xb0 [ 345.365352][ T9200] sctp_sendmsg+0x1686/0x2940 [ 345.370089][ T9200] ? sctp_getsockopt+0x8a0/0x8a0 [ 345.375156][ T9200] ? __lock_acquire+0x7c40/0x7c40 [ 345.380394][ T9200] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 345.387249][ T9200] ? aa_sock_msg_perm+0x94/0x150 [ 345.392673][ T9200] ? inet_sendmsg+0xca/0x2a0 [ 345.397746][ T9200] ? inet_send_prepare+0x250/0x250 [ 345.403331][ T9200] ____sys_sendmsg+0x5ed/0x9a0 [ 345.408318][ T9200] ? __sys_sendmsg_sock+0x30/0x30 [ 345.413672][ T9200] ? __import_iovec+0x306/0x510 [ 345.419038][ T9200] ? import_iovec+0x6f/0xa0 [ 345.423588][ T9200] ___sys_sendmsg+0x2a2/0x360 [ 345.428433][ T9200] ? __sys_sendmsg+0x2a0/0x2a0 [ 345.433514][ T9200] ? __lock_acquire+0x7c40/0x7c40 [ 345.438786][ T9200] __se_sys_sendmsg+0x1c3/0x2b0 [ 345.443871][ T9200] ? __x64_sys_sendmsg+0x80/0x80 [ 345.449048][ T9200] ? lockdep_hardirqs_on+0x94/0x140 [ 345.454374][ T9200] do_syscall_64+0x4c/0xa0 [ 345.459186][ T9200] ? clear_bhb_loop+0x60/0xb0 [ 345.464497][ T9200] ? clear_bhb_loop+0x60/0xb0 [ 345.469300][ T9200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.475357][ T9200] RIP: 0033:0x7f61df79e159 [ 345.479913][ T9200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.499685][ T9200] RSP: 002b:00007f61e0693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.509227][ T9200] RAX: ffffffffffffffda RBX: 00007f61dfa25fa0 RCX: 00007f61df79e159 [ 345.517760][ T9200] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 345.525850][ T9200] RBP: 00007f61e0693090 R08: 0000000000000000 R09: 0000000000000000 [ 345.533954][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.542230][ T9200] R13: 00007f61dfa26038 R14: 00007f61dfa25fa0 R15: 00007ffe63f72278 [ 345.550277][ T9200] [ 345.583255][ T9202] netlink: 'syz.3.1550': attribute type 1 has an invalid length. [ 345.651700][ T9183] bond0: (slave macvlan0): Releasing backup interface [ 345.709599][ T9194] __nla_validate_parse: 10 callbacks suppressed [ 345.709724][ T9194] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.1547'. [ 345.733389][ T9197] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1547'. [ 346.132181][ T9214] netlink: 'syz.4.1554': attribute type 3 has an invalid length. [ 346.135720][ T9215] netlink: 'syz.4.1554': attribute type 3 has an invalid length. [ 346.202120][ T9214] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1554'. [ 346.295513][ T9215] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1554'. [ 346.482722][ T9227] netlink: 60935 bytes leftover after parsing attributes in process `syz.0.1556'. [ 346.526197][ T9227] netlink: 802 bytes leftover after parsing attributes in process `syz.0.1556'. [ 346.557423][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 347.002485][ T9237] netlink: 'syz.0.1561': attribute type 3 has an invalid length. [ 347.049439][ T9237] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1561'. [ 347.124605][ T9241] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 347.161073][ T9241] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1563'. [ 347.432079][ T9250] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 347.448639][ T4288] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 347.451642][ T9250] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1568'. [ 347.556641][ T9250] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 347.590334][ T9250] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 347.653874][ T9252] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 348.274432][ T9274] FAULT_INJECTION: forcing a failure. [ 348.274432][ T9274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.306059][ T9276] netlink: 'syz.0.1578': attribute type 3 has an invalid length. [ 348.388682][ T9274] CPU: 1 PID: 9274 Comm: syz.1.1579 Not tainted syzkaller #0 [ 348.396346][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.407164][ T9274] Call Trace: [ 348.410586][ T9274] [ 348.413796][ T9274] dump_stack_lvl+0x188/0x24e [ 348.418724][ T9274] ? show_regs_print_info+0x12/0x12 [ 348.424350][ T9274] ? load_image+0x410/0x410 [ 348.429104][ T9274] ? ___ratelimit+0x1/0x610 [ 348.433671][ T9274] should_fail_ex+0x390/0x4c0 [ 348.438770][ T9274] _copy_to_user+0x2c/0x130 [ 348.444417][ T9274] simple_read_from_buffer+0xe3/0x150 [ 348.450204][ T9274] proc_fail_nth_read+0x1a6/0x220 [ 348.455408][ T9274] ? proc_fault_inject_write+0x310/0x310 [ 348.461205][ T9274] ? proc_fault_inject_write+0x310/0x310 [ 348.467577][ T9274] vfs_read+0x2db/0x960 [ 348.472069][ T9274] ? kernel_read+0x1e0/0x1e0 [ 348.476876][ T9274] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.483072][ T9274] ? lockdep_hardirqs_on+0x94/0x140 [ 348.488488][ T9274] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.495671][ T9274] ksys_read+0x14d/0x260 [ 348.500334][ T9274] ? vfs_write+0x9a0/0x9a0 [ 348.505157][ T9274] ? syscall_enter_from_user_mode+0x2a/0x80 [ 348.511186][ T9274] do_syscall_64+0x4c/0xa0 [ 348.515902][ T9274] ? clear_bhb_loop+0x60/0xb0 [ 348.521055][ T9274] ? clear_bhb_loop+0x60/0xb0 [ 348.525865][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.531884][ T9274] RIP: 0033:0x7f771635e98e [ 348.536342][ T9274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.556707][ T9274] RSP: 002b:00007f7717290fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.565334][ T9274] RAX: ffffffffffffffda RBX: 00007f77172916c0 RCX: 00007f771635e98e [ 348.573812][ T9274] RDX: 000000000000000f RSI: 00007f77172910a0 RDI: 0000000000000007 [ 348.582250][ T9274] RBP: 00007f7717291090 R08: 0000000000000000 R09: 0000000000000000 [ 348.590537][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.598923][ T9274] R13: 00007f7716626038 R14: 00007f7716625fa0 R15: 00007ffc36794068 [ 348.607385][ T9274] [ 349.483333][ T4288] Bluetooth: hci2: command 0x2016 tx timeout [ 349.746354][ T9291] device sit0 entered promiscuous mode [ 350.587215][ T9319] netlink: 'syz.1.1592': attribute type 3 has an invalid length. [ 351.107436][ T9332] netlink: 'syz.0.1597': attribute type 7 has an invalid length. [ 352.313859][ T9356] __nla_validate_parse: 2 callbacks suppressed [ 352.313882][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1604'. [ 352.400848][ T9356] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1604'. [ 352.468050][ T9356] tc_dump_action: action bad kind [ 352.524901][ T9352] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1610'. [ 352.552425][ T9360] netlink: 'syz.3.1604': attribute type 10 has an invalid length. [ 352.565926][ T9360] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1604'. [ 352.807980][ T9368] netlink: 'syz.3.1606': attribute type 3 has an invalid length. [ 352.834432][ T9368] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1606'. [ 353.106703][ T9373] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 353.132257][ T9373] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1609'. [ 353.375669][ T9381] device syzkaller0 entered promiscuous mode [ 353.401573][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1612'. [ 353.757854][ T9388] netlink: 60935 bytes leftover after parsing attributes in process `syz.2.1614'. [ 353.779947][ T9388] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1614'. [ 353.820389][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 353.842222][ T9395] netlink: 'syz.4.1615': attribute type 10 has an invalid length. [ 354.430103][ T9414] netlink: 'syz.2.1622': attribute type 3 has an invalid length. [ 354.910796][ T9412] netlink: 'syz.4.1623': attribute type 1 has an invalid length. [ 355.945330][ T9451] netlink: 'syz.1.1637': attribute type 3 has an invalid length. [ 357.682691][ T9484] __nla_validate_parse: 9 callbacks suppressed [ 357.682737][ T9484] netlink: 60935 bytes leftover after parsing attributes in process `syz.3.1648'. [ 357.715465][ T9484] netlink: 802 bytes leftover after parsing attributes in process `syz.3.1648'. [ 357.765095][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1648'. [ 358.221581][ T9501] netlink: 'syz.3.1652': attribute type 3 has an invalid length. [ 358.230012][ T9501] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1652'. [ 358.642577][ T9506] netlink: 'syz.1.1654': attribute type 3 has an invalid length. [ 358.659793][ T9506] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1654'. [ 360.557211][ T9533] netlink: 60935 bytes leftover after parsing attributes in process `syz.4.1663'. [ 360.577666][ T9539] netlink: 'syz.1.1665': attribute type 3 has an invalid length. [ 360.594727][ T9533] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1663'. [ 360.643603][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1663'. [ 360.665807][ T9539] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1665'. [ 361.389665][ T9555] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 361.436152][ T9555] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 361.529209][ T9566] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 362.064768][ T9572] netlink: 'syz.3.1676': attribute type 3 has an invalid length. [ 362.073935][ T9572] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1676'. [ 362.157242][ T9576] netlink: 'syz.3.1676': attribute type 3 has an invalid length. [ 363.059818][ T9591] __nla_validate_parse: 1 callbacks suppressed [ 363.059858][ T9591] netlink: 60935 bytes leftover after parsing attributes in process `syz.2.1682'. [ 363.112382][ T9591] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1682'. [ 363.143711][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1682'. [ 363.188493][ T9597] netlink: 'syz.1.1684': attribute type 3 has an invalid length. [ 363.209385][ T9597] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1684'. [ 363.600315][ T9606] netlink: 'syz.4.1686': attribute type 21 has an invalid length. [ 364.498607][ T9624] device syzkaller0 entered promiscuous mode [ 365.015015][ T9632] netlink: 'syz.4.1695': attribute type 3 has an invalid length. [ 365.068621][ T9634] netlink: 'syz.4.1695': attribute type 3 has an invalid length. [ 365.085283][ T9634] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1695'. [ 365.104040][ T9632] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1695'. [ 366.061548][ T9653] netlink: 'syz.0.1700': attribute type 3 has an invalid length. [ 366.102200][ T9653] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1700'. [ 369.033365][ T9658] netlink: 60935 bytes leftover after parsing attributes in process `syz.1.1701'. [ 369.042718][ T9658] netlink: 802 bytes leftover after parsing attributes in process `syz.1.1701'. [ 369.062919][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 369.286969][ T9667] netlink: 'syz.2.1714': attribute type 3 has an invalid length. [ 369.345112][ T9667] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1714'. [ 369.447260][ T9671] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 369.461084][ T9671] netlink: 'syz.1.1706': attribute type 3 has an invalid length. [ 369.475882][ T9671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1706'. [ 369.544108][ T9671] netlink: 'syz.1.1706': attribute type 3 has an invalid length. [ 369.643307][ T9671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1706'. [ 370.711074][ T9693] netlink: 'syz.1.1712': attribute type 2 has an invalid length. [ 370.762308][ T9696] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1712'. [ 370.845941][ T9699] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 370.888010][ T9702] netlink: 'syz.3.1713': attribute type 3 has an invalid length. [ 370.901330][ T9702] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1713'. [ 370.909160][ T9699] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1713'. [ 370.982403][ T9696] bond0: (slave dummy0): Releasing backup interface [ 371.101052][ T9704] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 371.173038][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.305047][ T9704] device bridge_slave_1 left promiscuous mode [ 371.320724][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.356554][ T9704] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 371.384103][ T9705] netlink: 'syz.1.1712': attribute type 21 has an invalid length. [ 371.445236][ T9705] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1712'. [ 372.210696][ T9728] netlink: 'syz.2.1719': attribute type 3 has an invalid length. [ 375.202194][ T9796] netlink: 'syz.4.1730': attribute type 3 has an invalid length. [ 375.289105][ T9796] __nla_validate_parse: 1 callbacks suppressed [ 375.289146][ T9796] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1730'. [ 375.310716][ T9803] netlink: 'syz.4.1730': attribute type 3 has an invalid length. [ 375.351929][ T9804] netlink: 'syz.3.1732': attribute type 3 has an invalid length. [ 375.378235][ T9804] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1732'. [ 375.572091][ T9803] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1730'. [ 376.089034][ T9819] netlink: 'syz.1.1738': attribute type 10 has an invalid length. [ 377.047632][ T9819] device gre0 entered promiscuous mode [ 377.133489][ T9819] team0: Device gre0 is of different type [ 378.518020][ T9877] netlink: 60935 bytes leftover after parsing attributes in process `syz.2.1743'. [ 378.549170][ T9877] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1743'. [ 378.581623][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 379.042031][ T9890] netlink: 'syz.3.1746': attribute type 3 has an invalid length. [ 379.090287][ T9890] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1746'. [ 379.176926][ T9894] netlink: 60935 bytes leftover after parsing attributes in process `syz.0.1757'. [ 379.296547][ T9894] netlink: 802 bytes leftover after parsing attributes in process `syz.0.1757'. [ 379.333481][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 379.675768][ T9905] FAULT_INJECTION: forcing a failure. [ 379.675768][ T9905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.714307][ T9905] CPU: 1 PID: 9905 Comm: syz.3.1751 Not tainted syzkaller #0 [ 379.722305][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 379.733030][ T9905] Call Trace: [ 379.736453][ T9905] [ 379.739437][ T9905] dump_stack_lvl+0x188/0x24e [ 379.744545][ T9905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 379.751040][ T9905] ? show_regs_print_info+0x12/0x12 [ 379.756410][ T9905] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 379.762771][ T9905] should_fail_ex+0x390/0x4c0 [ 379.768035][ T9905] _copy_from_user+0x2c/0x170 [ 379.773110][ T9905] ___sys_sendmsg+0x1c3/0x360 [ 379.777930][ T9905] ? __sys_sendmsg+0x2a0/0x2a0 [ 379.783042][ T9905] __se_sys_sendmsg+0x1c3/0x2b0 [ 379.788121][ T9905] ? perf_trace_preemptirq_template+0x268/0x320 [ 379.794894][ T9905] ? __x64_sys_sendmsg+0x80/0x80 [ 379.799977][ T9905] ? lockdep_hardirqs_on+0x94/0x140 [ 379.805331][ T9905] do_syscall_64+0x4c/0xa0 [ 379.810182][ T9905] ? clear_bhb_loop+0x60/0xb0 [ 379.815194][ T9905] ? clear_bhb_loop+0x60/0xb0 [ 379.820298][ T9905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.826522][ T9905] RIP: 0033:0x7f298ed9e159 [ 379.831352][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.852054][ T9905] RSP: 002b:00007f298fbf9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.860610][ T9905] RAX: ffffffffffffffda RBX: 00007f298f025fa0 RCX: 00007f298ed9e159 [ 379.868724][ T9905] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000009 [ 379.877291][ T9905] RBP: 00007f298fbf9090 R08: 0000000000000000 R09: 0000000000000000 [ 379.885621][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.894313][ T9905] R13: 00007f298f026038 R14: 00007f298f025fa0 R15: 00007ffd529ff768 [ 379.903305][ T9905] [ 380.884805][ T9920] netlink: 'syz.4.1753': attribute type 21 has an invalid length. [ 381.074459][ T9920] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1753'. [ 381.584851][ T9941] netlink: 'syz.3.1762': attribute type 3 has an invalid length. [ 381.711153][ T9941] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1762'. [ 382.264338][ T9954] netlink: 60935 bytes leftover after parsing attributes in process `syz.1.1763'. [ 382.673545][ T9954] netlink: 802 bytes leftover after parsing attributes in process `syz.1.1763'. [ 382.794767][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1763'. [ 384.252474][ T9990] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 384.274723][ T9990] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1771'. [ 384.595452][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.602220][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.934763][ T9997] netlink: 'syz.1.1773': attribute type 21 has an invalid length. [ 384.980722][ T9999] device syzkaller0 left promiscuous mode [ 385.179858][ T9997] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1773'. [ 385.416249][ T9997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 385.451529][ T9997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.081116][T10019] netlink: 'syz.2.1777': attribute type 3 has an invalid length. [ 386.097132][T10019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1777'. [ 386.138781][T10019] netlink: 'syz.2.1777': attribute type 3 has an invalid length. [ 386.155846][T10019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1777'. [ 387.086656][T10045] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 387.106212][T10045] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1784'. [ 387.681559][T10053] netlink: 'syz.1.1787': attribute type 3 has an invalid length. [ 387.731532][T10053] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1787'. [ 387.966617][T10059] netlink: 'syz.2.1799': attribute type 10 has an invalid length. [ 387.978504][T10059] netlink: 'syz.2.1799': attribute type 25 has an invalid length. [ 388.034524][T10061] netlink: 'syz.3.1789': attribute type 2 has an invalid length. [ 388.087554][T10063] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1789'. [ 388.245317][T10069] netlink: 'syz.1.1792': attribute type 1 has an invalid length. [ 388.298653][T10069] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1792'. [ 388.338816][T10070] netlink: 'syz.3.1789': attribute type 21 has an invalid length. [ 388.381398][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1789'. [ 388.837174][T10084] netlink: 60935 bytes leftover after parsing attributes in process `syz.4.1794'. [ 388.912604][T10085] netlink: 'syz.2.1796': attribute type 3 has an invalid length. [ 388.923447][T10084] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1794'. [ 388.952408][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1794'. [ 390.122721][T10101] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 390.193471][T10101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.505409][T10125] validate_nla: 2 callbacks suppressed [ 391.505559][T10125] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 391.589636][T10125] __nla_validate_parse: 6 callbacks suppressed [ 391.589653][T10125] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1807'. [ 391.826060][T10139] netlink: 'syz.4.1810': attribute type 3 has an invalid length. [ 391.869371][T10139] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1810'. [ 392.081291][T10146] netlink: 'syz.3.1813': attribute type 3 has an invalid length. [ 392.092107][T10147] netlink: 60935 bytes leftover after parsing attributes in process `syz.2.1811'. [ 392.112709][T10146] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1813'. [ 392.159494][T10149] netlink: 'syz.3.1813': attribute type 3 has an invalid length. [ 392.185725][T10147] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1811'. [ 392.200223][T10149] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1813'. [ 392.229630][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 392.738826][T10156] tap0: tun_chr_ioctl cmd 1074025681 [ 393.161971][T10170] netlink: 'syz.4.1818': attribute type 3 has an invalid length. [ 393.199061][T10170] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1818'. [ 393.629951][T10178] netlink: 'syz.3.1822': attribute type 1 has an invalid length. [ 393.638892][T10178] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1822'. [ 393.760188][T10179] netlink: 'syz.4.1821': attribute type 21 has an invalid length. [ 394.037765][T10184] netlink: 'syz.2.1825': attribute type 3 has an invalid length. [ 394.059168][T10176] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1821'. [ 394.147985][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 394.269904][T10176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.493658][T10194] netlink: 'syz.3.1826': attribute type 39 has an invalid length. [ 394.588697][T10194] bond0: (slave syz_tun): Releasing backup interface [ 395.275001][T10210] netlink: 'syz.2.1830': attribute type 3 has an invalid length. [ 395.284934][T10202] tap0: tun_chr_ioctl cmd 1074025681 [ 396.341074][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.464325][T10224] device bridge_slave_1 left promiscuous mode [ 396.510699][T10224] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.711794][T10224] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 396.986871][T10241] validate_nla: 2 callbacks suppressed [ 396.986892][T10241] netlink: 'syz.2.1849': attribute type 3 has an invalid length. [ 397.064833][T10241] __nla_validate_parse: 6 callbacks suppressed [ 397.064852][T10241] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1849'. [ 397.178947][T10250] FAULT_INJECTION: forcing a failure. [ 397.178947][T10250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.243971][T10250] CPU: 0 PID: 10250 Comm: syz.1.1841 Not tainted syzkaller #0 [ 397.252066][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.262438][T10250] Call Trace: [ 397.265762][T10250] [ 397.268735][T10250] dump_stack_lvl+0x188/0x24e [ 397.273660][T10250] ? show_regs_print_info+0x12/0x12 [ 397.279104][T10250] ? load_image+0x410/0x410 [ 397.283669][T10250] ? __lock_acquire+0x7c40/0x7c40 [ 397.288770][T10250] ? __might_fault+0x4e/0x120 [ 397.293595][T10250] should_fail_ex+0x390/0x4c0 [ 397.298432][T10250] _copy_from_user+0x2c/0x170 [ 397.303334][T10250] ___sys_sendmsg+0x1c3/0x360 [ 397.308185][T10250] ? __sys_sendmsg+0x2a0/0x2a0 [ 397.313128][T10250] ? ktime_get+0x7b/0x270 [ 397.317698][T10250] __se_sys_sendmsg+0x1c3/0x2b0 [ 397.322591][T10250] ? ct_nmi_exit+0x145/0x1c0 [ 397.327216][T10250] ? __x64_sys_sendmsg+0x80/0x80 [ 397.332247][T10250] ? lockdep_hardirqs_on+0x94/0x140 [ 397.337959][T10250] do_syscall_64+0x4c/0xa0 [ 397.342535][T10250] ? clear_bhb_loop+0x60/0xb0 [ 397.347274][T10250] ? clear_bhb_loop+0x60/0xb0 [ 397.352183][T10250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.358727][T10250] RIP: 0033:0x7f771639e159 [ 397.363178][T10250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.384410][T10250] RSP: 002b:00007f7717291028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.393345][T10250] RAX: ffffffffffffffda RBX: 00007f7716625fa0 RCX: 00007f771639e159 [ 397.401614][T10250] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006 [ 397.409637][T10250] RBP: 00007f7717291090 R08: 0000000000000000 R09: 0000000000000000 [ 397.417918][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.426365][T10250] R13: 00007f7716626038 R14: 00007f7716625fa0 R15: 00007ffc36794068 [ 397.435003][T10250] [ 398.193412][T10261] netlink: 60935 bytes leftover after parsing attributes in process `syz.4.1846'. [ 398.211660][T10261] netlink: 802 bytes leftover after parsing attributes in process `syz.4.1846'. [ 398.232247][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 398.246211][T10263] netlink: 'syz.0.1845': attribute type 3 has an invalid length. [ 398.266625][T10263] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1845'. [ 398.429514][T10275] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 398.466814][T10275] syzkaller1: linktype set to 825 [ 398.736867][T10284] netlink: 60935 bytes leftover after parsing attributes in process `syz.2.1860'. [ 398.817264][T10284] netlink: 802 bytes leftover after parsing attributes in process `syz.2.1860'. [ 398.920200][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 399.706183][T10297] netlink: 'syz.4.1855': attribute type 3 has an invalid length. [ 399.756475][T10297] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1855'. [ 401.022198][T10325] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 401.042430][T10325] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1868'. [ 401.049649][T10327] netlink: 'syz.0.1869': attribute type 2 has an invalid length. [ 401.285284][T10332] netlink: 'syz.1.1871': attribute type 3 has an invalid length. [ 401.465286][T10335] netlink: 'syz.0.1872': attribute type 10 has an invalid length. [ 401.542401][T10341] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 402.048907][T10336] netlink: 'syz.4.1873': attribute type 10 has an invalid length. [ 402.192533][T10336] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 402.415322][T10357] __nla_validate_parse: 6 callbacks suppressed [ 402.415344][T10357] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1878'. [ 402.441069][T10354] netlink: 'syz.0.1878': attribute type 8 has an invalid length. [ 402.495227][T10354] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1878'. [ 402.639768][T10362] netlink: 'syz.4.1882': attribute type 3 has an invalid length. [ 402.663537][T10362] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1882'. [ 402.994461][T10374] netlink: 'syz.3.1887': attribute type 3 has an invalid length. [ 403.019781][T10374] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1887'. [ 403.347848][T10386] netlink: 'syz.4.1891': attribute type 1 has an invalid length. [ 403.396928][T10386] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1891'. [ 404.187087][T10416] netlink: 'syz.2.1900': attribute type 3 has an invalid length. [ 404.205102][T10416] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1900'. [ 406.353693][T10398] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 406.390316][T10398] device bridge_slave_1 left promiscuous mode [ 406.397251][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.414188][T10398] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 406.661009][T10427] netlink: 'syz.1.1901': attribute type 3 has an invalid length. [ 406.708181][T10427] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1901'. [ 406.897247][T10433] device veth1_macvtap left promiscuous mode [ 406.916331][T10436] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 406.934283][T10437] device veth1_macvtap entered promiscuous mode [ 406.970982][T10437] device macsec0 entered promiscuous mode [ 407.032473][T10436] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1907'. [ 407.227252][T10443] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1905'. [ 407.987633][T10459] netlink: 'syz.4.1911': attribute type 3 has an invalid length. [ 407.990353][T10462] netlink: 'syz.4.1911': attribute type 3 has an invalid length. [ 408.080863][T10459] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1911'. [ 408.100863][T10460] netlink: 'syz.2.1912': attribute type 8 has an invalid length. [ 408.126381][T10467] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1912'. [ 408.139360][T10466] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 408.197285][T10460] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1912'. [ 408.212698][T10462] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1911'. [ 408.296469][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.404301][T10466] device bridge_slave_1 left promiscuous mode [ 408.421906][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.496310][T10466] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 408.537354][T10472] netlink: 60935 bytes leftover after parsing attributes in process `syz.1.1914'. [ 408.563370][T10472] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1914'. [ 408.575763][T10480] netlink: 'syz.3.1916': attribute type 16 has an invalid length. [ 408.594447][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 408.615642][T10480] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1916'. [ 408.998485][T10484] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1918'. [ 409.201609][T10498] netlink: 'syz.4.1922': attribute type 1 has an invalid length. [ 409.210702][T10498] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1922'. [ 410.058352][T10510] sctp: [Deprecated]: syz.3.1927 (pid 10510) Use of int in maxseg socket option. [ 410.058352][T10510] Use struct sctp_assoc_value instead [ 410.217334][T10520] netlink: 'syz.4.1928': attribute type 8 has an invalid length. [ 410.782274][T10533] netlink: 'syz.2.1934': attribute type 1 has an invalid length. [ 411.038348][T10534] delete_channel: no stack [ 411.240543][T10545] netlink: 'syz.2.1939': attribute type 10 has an invalid length. [ 411.263545][T10545] team0: Device bond0 is up. Set it down before adding it as a team port [ 412.095612][T10568] netlink: 'syz.3.1944': attribute type 3 has an invalid length. [ 414.812719][T10574] netlink: 'syz.0.1947': attribute type 3 has an invalid length. [ 414.884282][T10574] __nla_validate_parse: 6 callbacks suppressed [ 414.884301][T10574] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1947'. [ 415.045488][T10579] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 415.063013][T10579] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1949'. [ 415.459716][T10590] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1955'. [ 415.516378][T10592] netlink: 'syz.1.1956': attribute type 3 has an invalid length. [ 415.541446][T10595] netlink: 'syz.1.1956': attribute type 3 has an invalid length. [ 415.553378][T10592] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1956'. [ 415.710787][T10595] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1956'. [ 415.875056][T10600] netlink: 'syz.0.1958': attribute type 27 has an invalid length. [ 415.903507][T10600] netlink: 'syz.0.1958': attribute type 3 has an invalid length. [ 415.911762][T10600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1958'. [ 416.062496][T10601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1957'. [ 416.708584][T10622] netlink: 'syz.1.1965': attribute type 1 has an invalid length. [ 416.720847][T10624] netlink: 'syz.2.1966': attribute type 3 has an invalid length. [ 416.739267][T10622] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1965'. [ 416.758247][T10624] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1966'. [ 416.917377][T10627] netlink: 'syz.3.1967': attribute type 10 has an invalid length. [ 416.974301][T10627] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1967'. [ 417.099049][T10635] device lo entered promiscuous mode [ 417.139920][T10635] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 417.560576][T10643] netlink: 'syz.2.1971': attribute type 2 has an invalid length. [ 417.699943][T10656] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 417.740230][T10656] CPU: 0 PID: 10656 Comm: syz.1.1974 Not tainted syzkaller #0 [ 417.747898][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.758459][T10656] Call Trace: [ 417.761810][T10656] [ 417.764980][T10656] dump_stack_lvl+0x188/0x24e [ 417.770021][T10656] ? show_regs_print_info+0x12/0x12 [ 417.775395][T10656] ? load_image+0x410/0x410 [ 417.780090][T10656] sysfs_warn_dup+0x8a/0xa0 [ 417.784774][T10656] sysfs_do_create_link_sd+0xc0/0x110 [ 417.790449][T10656] device_add+0x83b/0x1050 [ 417.795174][T10656] wiphy_register+0x1d8b/0x2aa0 [ 417.800407][T10656] ? cfg80211_event_work+0x40/0x40 [ 417.805870][T10656] ? minstrel_ht_alloc+0x894/0xa20 [ 417.811718][T10656] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 417.818161][T10656] ieee80211_register_hw+0x2d48/0x39f0 [ 417.824074][T10656] ? ieee80211_register_hw+0xee1/0x39f0 [ 417.829865][T10656] ? ieee80211_register_hw+0xee1/0x39f0 [ 417.835906][T10656] ? ieee80211_tasklet_handler+0x20/0x20 [ 417.842030][T10656] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 417.848089][T10656] ? __debug_object_init+0xed/0x440 [ 417.853455][T10656] ? memset+0x1e/0x40 [ 417.858104][T10656] ? __hrtimer_init+0x189/0x270 [ 417.863313][T10656] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 417.869471][T10656] ? memcpy+0x3c/0x60 [ 417.873618][T10656] hwsim_new_radio_nl+0xab7/0xc90 [ 417.878700][T10656] genl_family_rcv_msg_doit+0x22f/0x350 [ 417.884468][T10656] ? end_current_label_crit_section+0x170/0x170 [ 417.891130][T10656] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 417.897159][T10656] ? bpf_lsm_capable+0x5/0x10 [ 417.901937][T10656] ? security_capable+0x85/0xb0 [ 417.907053][T10656] genl_rcv_msg+0x601/0x790 [ 417.911599][T10656] ? genl_bind+0x360/0x360 [ 417.916232][T10656] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 417.922793][T10656] netlink_rcv_skb+0x1ef/0x440 [ 417.927601][T10656] ? genl_bind+0x360/0x360 [ 417.932247][T10656] ? netlink_ack+0x1160/0x1160 [ 417.937237][T10656] ? down_read+0x1a8/0x2d0 [ 417.941792][T10656] genl_rcv+0x24/0x40 [ 417.945811][T10656] netlink_unicast+0x7ad/0x920 [ 417.950629][T10656] netlink_sendmsg+0x8ad/0xbd0 [ 417.955539][T10656] ? netlink_getsockopt+0x550/0x550 [ 417.961121][T10656] ? apparmor_socket_sendmsg+0x8a/0x330 [ 417.967124][T10656] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 417.972559][T10656] ? security_socket_sendmsg+0x7c/0xa0 [ 417.978149][T10656] ? netlink_getsockopt+0x550/0x550 [ 417.983646][T10656] ____sys_sendmsg+0x5ed/0x9a0 [ 417.988552][T10656] ? __sys_sendmsg_sock+0x30/0x30 [ 417.993704][T10656] ? __import_iovec+0x306/0x510 [ 417.998799][T10656] ? import_iovec+0x6f/0xa0 [ 418.003534][T10656] ___sys_sendmsg+0x2a2/0x360 [ 418.008496][T10656] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.013586][T10656] __se_sys_sendmsg+0x1c3/0x2b0 [ 418.018775][T10656] ? __x64_sys_sendmsg+0x80/0x80 [ 418.023885][T10656] ? lockdep_hardirqs_on+0x94/0x140 [ 418.029145][T10656] do_syscall_64+0x4c/0xa0 [ 418.033786][T10656] ? clear_bhb_loop+0x60/0xb0 [ 418.038503][T10656] ? clear_bhb_loop+0x60/0xb0 [ 418.043404][T10656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.049431][T10656] RIP: 0033:0x7f771639e159 [ 418.053883][T10656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.074054][T10656] RSP: 002b:00007f771724f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.082681][T10656] RAX: ffffffffffffffda RBX: 00007f7716626180 RCX: 00007f771639e159 [ 418.091309][T10656] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 418.099668][T10656] RBP: 00007f771643503b R08: 0000000000000000 R09: 0000000000000000 [ 418.107944][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.116135][T10656] R13: 00007f7716626218 R14: 00007f7716626180 R15: 00007ffc36794068 [ 418.124953][T10656] [ 419.157271][T10686] delete_channel: no stack [ 419.202278][T10686] delete_channel: no stack [ 419.332761][T10676] delete_channel: no stack [ 419.825568][T10694] FAULT_INJECTION: forcing a failure. [ 419.825568][T10694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.931670][T10694] CPU: 0 PID: 10694 Comm: syz.1.1989 Not tainted syzkaller #0 [ 419.939677][T10694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.950151][T10694] Call Trace: [ 419.953656][T10694] [ 419.956628][T10694] dump_stack_lvl+0x188/0x24e [ 419.961410][T10694] ? show_regs_print_info+0x12/0x12 [ 419.966947][T10694] ? load_image+0x410/0x410 [ 419.971520][T10694] ? __lock_acquire+0x7c40/0x7c40 [ 419.976616][T10694] ? snprintf+0xe5/0x140 [ 419.981033][T10694] should_fail_ex+0x390/0x4c0 [ 419.986178][T10694] _copy_to_user+0x2c/0x130 [ 419.990755][T10694] simple_read_from_buffer+0xe3/0x150 [ 419.996382][T10694] proc_fail_nth_read+0x1a6/0x220 [ 420.001742][T10694] ? proc_fault_inject_write+0x310/0x310 [ 420.007536][T10694] ? fsnotify_perm+0x248/0x550 [ 420.012551][T10694] ? proc_fault_inject_write+0x310/0x310 [ 420.018355][T10694] vfs_read+0x2db/0x960 [ 420.022725][T10694] ? kernel_read+0x1e0/0x1e0 [ 420.027480][T10694] ? __fget_files+0x28/0x460 [ 420.032882][T10694] ? __fget_files+0x3fc/0x460 [ 420.037993][T10694] ? __fdget_pos+0x2ae/0x360 [ 420.042919][T10694] ? ksys_read+0x70/0x260 [ 420.047336][T10694] ksys_read+0x14d/0x260 [ 420.051917][T10694] ? vfs_write+0x9a0/0x9a0 [ 420.056491][T10694] ? lockdep_hardirqs_on+0x94/0x140 [ 420.061762][T10694] do_syscall_64+0x4c/0xa0 [ 420.066420][T10694] ? clear_bhb_loop+0x60/0xb0 [ 420.071220][T10694] ? clear_bhb_loop+0x60/0xb0 [ 420.076060][T10694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.082113][T10694] RIP: 0033:0x7f771635e98e [ 420.086868][T10694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.106997][T10694] RSP: 002b:00007f7717290fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.115754][T10694] RAX: ffffffffffffffda RBX: 00007f77172916c0 RCX: 00007f771635e98e [ 420.124421][T10694] RDX: 000000000000000f RSI: 00007f77172910a0 RDI: 000000000000000b [ 420.132719][T10694] RBP: 00007f7717291090 R08: 0000000000000000 R09: 0000000000000000 [ 420.141465][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.149770][T10694] R13: 00007f7716626038 R14: 00007f7716625fa0 R15: 00007ffc36794068 [ 420.157816][T10694] [ 420.205260][T10703] validate_nla: 2 callbacks suppressed [ 420.205281][T10703] netlink: 'syz.0.1992': attribute type 3 has an invalid length. [ 420.324138][T10703] __nla_validate_parse: 5 callbacks suppressed [ 420.324160][T10703] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1992'. [ 420.442800][T10710] netlink: 'syz.4.1995': attribute type 1 has an invalid length. [ 420.458922][T10710] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1995'. [ 421.328914][T10733] netlink: 'syz.3.2004': attribute type 27 has an invalid length. [ 421.347995][T10733] netlink: 'syz.3.2004': attribute type 3 has an invalid length. [ 421.368655][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2004'. [ 421.920700][T10747] Dead loop on virtual device ip6_vti0, fix it urgently! [ 421.960288][T10751] netlink: 'syz.4.2008': attribute type 1 has an invalid length. [ 422.017481][T10751] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2008'. [ 422.091184][T10754] netlink: 'syz.1.2009': attribute type 3 has an invalid length. [ 422.175306][T10754] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2009'. [ 423.007706][T10776] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 423.060389][T10776] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2018'. [ 423.082481][T10777] netlink: 'syz.3.2018': attribute type 3 has an invalid length. [ 423.103828][T10777] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2018'. [ 424.118757][T10795] netlink: 'syz.4.2022': attribute type 29 has an invalid length. [ 424.141184][T10795] netlink: 'syz.4.2022': attribute type 29 has an invalid length. [ 424.326443][T10803] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2023'. [ 424.404708][T10806] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2025'. [ 425.151110][T10818] netlink: 61739 bytes leftover after parsing attributes in process `syz.4.2034'. [ 425.219107][T10823] validate_nla: 4 callbacks suppressed [ 425.219148][T10823] netlink: 'syz.1.2035': attribute type 3 has an invalid length. [ 425.638637][T10837] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 425.667815][T10837] __nla_validate_parse: 3 callbacks suppressed [ 425.667835][T10837] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2039'. [ 426.090917][T10844] netlink: 'syz.0.2042': attribute type 1 has an invalid length. [ 426.143299][T10844] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2042'. [ 427.661185][T10872] netlink: 61739 bytes leftover after parsing attributes in process `syz.0.2049'. [ 427.714488][T10872] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.2049'. [ 428.107627][T10885] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 428.120117][T10884] netlink: 'syz.0.2054': attribute type 3 has an invalid length. [ 428.156183][T10885] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2055'. [ 428.176119][T10888] netlink: 'syz.0.2054': attribute type 3 has an invalid length. [ 428.197954][T10884] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2054'. [ 428.241667][T10888] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2054'. [ 430.097517][T10925] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 430.132735][T10925] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2068'. [ 430.371902][T10932] netlink: 'syz.0.2071': attribute type 3 has an invalid length. [ 430.445113][T10932] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2071'. [ 430.494809][T10933] netlink: 'syz.0.2071': attribute type 3 has an invalid length. [ 430.560104][T10933] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2071'. [ 430.667128][T10943] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 430.764393][T10943] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2083'. [ 431.957653][T10975] netlink: 61739 bytes leftover after parsing attributes in process `syz.2.2082'. [ 432.049627][T10975] netlink: 3068 bytes leftover after parsing attributes in process `syz.2.2082'. [ 432.066473][T10977] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 432.083255][T10977] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2087'. [ 432.490978][T10994] netlink: 'syz.2.2091': attribute type 3 has an invalid length. [ 432.528844][T10994] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2091'. [ 432.571513][T10999] netlink: 'syz.2.2091': attribute type 3 has an invalid length. [ 432.617276][T10999] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2091'. [ 433.508391][T11024] netlink: 'syz.2.2102': attribute type 1 has an invalid length. [ 433.527957][T11024] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2102'. [ 435.150584][T11051] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 435.195108][T11055] netlink: 'syz.1.2112': attribute type 3 has an invalid length. [ 435.205756][T11057] netlink: 'syz.1.2112': attribute type 3 has an invalid length. [ 435.213872][T11051] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2110'. [ 435.248664][T11055] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2112'. [ 435.286232][T11057] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2112'. [ 435.509288][T11068] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 436.026872][ T6642] tipc: Subscription rejected, illegal request [ 436.107647][T11080] netlink: 'syz.0.2118': attribute type 10 has an invalid length. [ 436.324452][T11080] device veth0_vlan left promiscuous mode [ 436.415550][T11080] device veth0_vlan entered promiscuous mode [ 436.458909][T11080] team0: Device veth0_vlan failed to register rx_handler [ 437.291519][T11104] netlink: 'syz.3.2125': attribute type 4 has an invalid length. [ 437.352187][T11104] __nla_validate_parse: 1 callbacks suppressed [ 437.352228][T11104] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2125'. [ 437.749279][T11117] netlink: 'syz.2.2130': attribute type 3 has an invalid length. [ 437.789098][T11117] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2130'. [ 437.824894][T11121] netlink: 'syz.2.2130': attribute type 3 has an invalid length. [ 437.903187][T11121] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2130'. [ 439.745183][T11163] netlink: 'syz.1.2144': attribute type 9 has an invalid length. [ 439.805211][T11163] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2144'. [ 440.059045][T11169] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2146'. [ 440.087538][T11174] netlink: 'syz.2.2145': attribute type 10 has an invalid length. [ 440.156151][T11174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2145'. [ 440.218115][T11174] device ipvlan1 entered promiscuous mode [ 440.302969][T11174] bridge0: port 2(ipvlan1) entered blocking state [ 440.333665][T11174] bridge0: port 2(ipvlan1) entered disabled state [ 440.362385][T11174] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 440.390765][T11182] netlink: 'syz.1.2149': attribute type 2 has an invalid length. [ 440.650717][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.158350][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.291933][T11248] netlink: 'syz.4.2168': attribute type 3 has an invalid length. [ 443.294957][T11249] netlink: 'syz.4.2168': attribute type 3 has an invalid length. [ 443.362345][T11248] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2168'. [ 443.398999][T11249] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2168'. [ 443.451215][T11251] netlink: 'syz.2.2170': attribute type 3 has an invalid length. [ 443.479242][T11256] netlink: 'syz.0.2171': attribute type 12 has an invalid length. [ 443.488232][T11251] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2170'. [ 443.502926][T11257] netlink: 'syz.2.2170': attribute type 3 has an invalid length. [ 443.527636][T11256] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2171'. [ 443.540816][T11257] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2170'. [ 443.613627][T11262] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2172'. [ 443.686189][T11262] bond0: (slave bond_slave_0): Releasing backup interface [ 443.798135][T11262] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 443.819569][T11261] netlink: 'syz.3.2173': attribute type 10 has an invalid length. [ 444.455162][T11261] team0: Device wg1 is of different type [ 445.088234][T11286] FAULT_INJECTION: forcing a failure. [ 445.088234][T11286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.109235][T11286] CPU: 0 PID: 11286 Comm: syz.0.2182 Not tainted syzkaller #0 [ 445.116810][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.127091][T11286] Call Trace: [ 445.130512][T11286] [ 445.133489][T11286] dump_stack_lvl+0x188/0x24e [ 445.138240][T11286] ? show_regs_print_info+0x12/0x12 [ 445.143518][T11286] ? load_image+0x410/0x410 [ 445.148806][T11286] ? __lock_acquire+0x7c40/0x7c40 [ 445.154005][T11286] should_fail_ex+0x390/0x4c0 [ 445.158749][T11286] _copy_from_user+0x2c/0x170 [ 445.163492][T11286] __sys_bpf+0x2ea/0x780 [ 445.167900][T11286] ? bpf_link_show_fdinfo+0x380/0x380 [ 445.173443][T11286] ? lock_chain_count+0x20/0x20 [ 445.178461][T11286] __x64_sys_bpf+0x78/0x90 [ 445.182939][T11286] do_syscall_64+0x4c/0xa0 [ 445.187422][T11286] ? clear_bhb_loop+0x60/0xb0 [ 445.192181][T11286] ? clear_bhb_loop+0x60/0xb0 [ 445.196933][T11286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.203353][T11286] RIP: 0033:0x7f61df79e159 [ 445.207843][T11286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.227961][T11286] RSP: 002b:00007f61e0693028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.236450][T11286] RAX: ffffffffffffffda RBX: 00007f61dfa25fa0 RCX: 00007f61df79e159 [ 445.244767][T11286] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 445.252887][T11286] RBP: 00007f61e0693090 R08: 0000000000000000 R09: 0000000000000000 [ 445.260916][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.269118][T11286] R13: 00007f61dfa26038 R14: 00007f61dfa25fa0 R15: 00007ffe63f72278 [ 445.277383][T11286] [ 445.856875][T11298] netlink: 'syz.2.2187': attribute type 3 has an invalid length. [ 445.875931][T11301] netlink: 'syz.2.2187': attribute type 3 has an invalid length. [ 445.913455][T11301] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2187'. [ 445.923186][T11298] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2187'. [ 445.965595][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.972274][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.362628][T11308] netlink: 'syz.0.2190': attribute type 3 has an invalid length. [ 446.417497][T11307] netlink: 'syz.0.2190': attribute type 3 has an invalid length. [ 446.497591][T11308] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2190'. [ 446.561295][T11307] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2190'. [ 448.212844][T11350] Dead loop on virtual device ip6_vti0, fix it urgently! [ 448.735763][T11356] __nla_validate_parse: 3 callbacks suppressed [ 448.735833][T11356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2206'. [ 448.789638][T11356] bond0: (slave bond_slave_0): Releasing backup interface [ 448.948008][T11356] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 449.953657][T11379] validate_nla: 2 callbacks suppressed [ 449.953726][T11379] netlink: 'syz.4.2212': attribute type 3 has an invalid length. [ 449.992243][T11379] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2212'. [ 450.035688][T11384] netlink: 'syz.4.2212': attribute type 3 has an invalid length. [ 450.096925][T11384] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2212'. [ 451.025193][T11407] netlink: 'syz.1.2219': attribute type 3 has an invalid length. [ 451.052866][T11407] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2219'. [ 451.085900][T11410] netlink: 'syz.1.2219': attribute type 3 has an invalid length. [ 451.106449][T11410] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2219'. [ 452.354249][T11436] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 452.631768][T11436] team0: Device wg1 is of different type [ 452.826220][T11441] netlink: 60935 bytes leftover after parsing attributes in process `syz.1.2229'. [ 452.867731][T11441] netlink: 802 bytes leftover after parsing attributes in process `syz.1.2229'. [ 452.914701][T11441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2229'. [ 453.345545][T11454] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2235'. [ 453.404641][T11458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2235'. [ 453.555851][T11454] netlink: 'syz.4.2235': attribute type 10 has an invalid length. [ 454.526095][T11475] netlink: 'syz.4.2242': attribute type 16 has an invalid length. [ 454.534902][T11475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2242'. [ 454.612046][T11476] netlink: 'syz.4.2242': attribute type 2 has an invalid length. [ 454.761505][T11476] netlink: 'syz.4.2242': attribute type 1 has an invalid length. [ 454.805531][T11476] netlink: 'syz.4.2242': attribute type 4 has an invalid length. [ 454.849974][T11476] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.2242'. [ 455.448133][T11496] netlink: 60935 bytes leftover after parsing attributes in process `syz.0.2247'. [ 455.559234][T11496] netlink: 802 bytes leftover after parsing attributes in process `syz.0.2247'. [ 455.583863][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 456.137918][T11515] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2253'. [ 456.245189][T11515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2253'. [ 456.327182][T11515] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 456.574137][T11526] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2256'. [ 456.802672][T11532] netlink: 'syz.3.2260': attribute type 10 has an invalid length. [ 456.831846][T11532] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2260'. [ 458.327956][T11549] device wg2 entered promiscuous mode [ 459.408714][T11583] netlink: 'syz.4.2276': attribute type 1 has an invalid length. [ 459.446876][T11583] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2276'. [ 459.922681][T11593] netlink: 60935 bytes leftover after parsing attributes in process `syz.3.2279'. [ 459.964176][T11593] netlink: 802 bytes leftover after parsing attributes in process `syz.3.2279'. [ 460.016588][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 460.965088][T11623] ================================================================== [ 460.973893][T11623] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 460.982145][T11623] Write of size 80 at addr ffff88807d581b90 by task syz.1.2292/11623 [ 460.991167][T11623] [ 460.993785][T11623] CPU: 1 PID: 11623 Comm: syz.1.2292 Not tainted syzkaller #0 [ 461.001792][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.012522][T11623] Call Trace: [ 461.016036][T11623] [ 461.019099][T11623] dump_stack_lvl+0x188/0x24e [ 461.023863][T11623] ? __lock_acquire+0x7c40/0x7c40 [ 461.029228][T11623] ? show_regs_print_info+0x12/0x12 [ 461.034583][T11623] ? load_image+0x410/0x410 [ 461.039688][T11623] ? __virt_addr_valid+0x467/0x540 [ 461.044969][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.050245][T11623] print_report+0xa8/0x210 [ 461.055466][T11623] kasan_report+0x10b/0x140 [ 461.060303][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.065704][T11623] kasan_check_range+0x235/0x290 [ 461.071061][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.076289][T11623] memcpy+0x3c/0x60 [ 461.080253][T11623] __bpf_get_stackid+0x6c9/0x920 [ 461.085446][T11623] bpf_get_stackid_pe+0x33f/0x400 [ 461.090658][T11623] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 461.096208][T11623] bpf_overflow_handler+0x50b/0x790 [ 461.101502][T11623] ? bpf_overflow_handler+0xd9/0x790 [ 461.107002][T11623] ? perf_swevent_overflow+0x230/0x230 [ 461.112508][T11623] ? ct_irq_exit_irqson+0x113/0x170 [ 461.117747][T11623] ? perf_trace_lock_acquire+0x101/0x3f0 [ 461.123513][T11623] ? __perf_event_account_interrupt+0x187/0x280 [ 461.129838][T11623] __perf_event_overflow+0x457/0x630 [ 461.135289][T11623] perf_swevent_event+0x315/0x570 [ 461.140545][T11623] ? perf_tp_event+0xc10/0xc10 [ 461.145448][T11623] ___perf_sw_event+0x498/0x6d0 [ 461.150348][T11623] ? ___perf_sw_event+0x184/0x6d0 [ 461.155508][T11623] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 461.162505][T11623] ? mark_lock+0x94/0x320 [ 461.166968][T11623] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 461.172998][T11623] ? lock_chain_count+0x20/0x20 [ 461.177910][T11623] __perf_sw_event+0x135/0x260 [ 461.183093][T11623] do_user_addr_fault+0x497/0xb20 [ 461.188286][T11623] ? trace_hardirqs_off_finish+0x86/0x180 [ 461.194154][T11623] exc_page_fault+0x60/0x100 [ 461.199064][T11623] asm_exc_page_fault+0x22/0x30 [ 461.204246][T11623] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 461.211213][T11623] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 461.232007][T11623] RSP: 0018:ffffc9000554f788 EFLAGS: 00050206 [ 461.238404][T11623] RAX: ffffffff8413ef01 RBX: 0000000000033fe0 RCX: 0000000000031020 [ 461.246495][T11623] RDX: 0000000000033fe0 RSI: 0000200000003000 RDI: ffffc900055c3fc0 [ 461.254603][T11623] RBP: 0000000000000000 R08: ffffc900055f4fdf R09: 1ffff92000abe9fb [ 461.262824][T11623] R10: dffffc0000000000 R11: fffff52000abe9fc R12: 00007ffffffcb020 [ 461.270931][T11623] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc900055c1000 [ 461.279034][T11623] ? copyin+0x21/0x120 [ 461.283366][T11623] copyin+0xe7/0x120 [ 461.287569][T11623] _copy_from_iter+0x447/0x1130 [ 461.292812][T11623] ? copyout_mc+0x110/0x110 [ 461.297443][T11623] ? do_raw_spin_unlock+0x11d/0x230 [ 461.302678][T11623] ? _raw_spin_unlock+0x24/0x40 [ 461.307914][T11623] ? find_vmap_area+0xf8/0x110 [ 461.312979][T11623] ? __phys_addr_symbol+0x2b/0x70 [ 461.318052][T11623] ? __check_object_size+0x4f6/0xa70 [ 461.323816][T11623] netlink_sendmsg+0x755/0xbd0 [ 461.328856][T11623] ? netlink_getsockopt+0x550/0x550 [ 461.334528][T11623] ? apparmor_socket_sendmsg+0x8a/0x330 [ 461.340219][T11623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 461.346341][T11623] ? security_socket_sendmsg+0x7c/0xa0 [ 461.351846][T11623] ? netlink_getsockopt+0x550/0x550 [ 461.357336][T11623] ____sys_sendmsg+0x5ed/0x9a0 [ 461.362438][T11623] ? __sys_sendmsg_sock+0x30/0x30 [ 461.367594][T11623] ? __import_iovec+0x306/0x510 [ 461.372683][T11623] ? import_iovec+0x6f/0xa0 [ 461.377230][T11623] ___sys_sendmsg+0x2a2/0x360 [ 461.382089][T11623] ? __sys_sendmsg+0x2a0/0x2a0 [ 461.387035][T11623] __se_sys_sendmsg+0x1c3/0x2b0 [ 461.392122][T11623] ? __x64_sys_sendmsg+0x80/0x80 [ 461.397376][T11623] ? lockdep_hardirqs_on+0x94/0x140 [ 461.402958][T11623] do_syscall_64+0x4c/0xa0 [ 461.407426][T11623] ? clear_bhb_loop+0x60/0xb0 [ 461.412582][T11623] ? clear_bhb_loop+0x60/0xb0 [ 461.417397][T11623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.423340][T11623] RIP: 0033:0x7f771639e159 [ 461.427916][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.448444][T11623] RSP: 002b:00007f7717270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.457064][T11623] RAX: ffffffffffffffda RBX: 00007f7716626090 RCX: 00007f771639e159 [ 461.465162][T11623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 461.473626][T11623] RBP: 00007f771643503b R08: 0000000000000000 R09: 0000000000000000 [ 461.481891][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.490067][T11623] R13: 00007f7716626128 R14: 00007f7716626090 R15: 00007ffc36794068 [ 461.498353][T11623] [ 461.501486][T11623] [ 461.503945][T11623] Allocated by task 11623: [ 461.508645][T11623] kasan_set_track+0x4b/0x70 [ 461.513272][T11623] __kasan_kmalloc+0x8e/0xa0 [ 461.518020][T11623] __kmalloc_node+0xb2/0x240 [ 461.522847][T11623] bpf_map_area_alloc+0x47/0xe0 [ 461.527729][T11623] prealloc_elems_and_freelist+0x86/0x1c0 [ 461.533509][T11623] stack_map_alloc+0x386/0x510 [ 461.538428][T11623] map_create+0x524/0xff0 [ 461.542845][T11623] __sys_bpf+0x38b/0x780 [ 461.547224][T11623] __x64_sys_bpf+0x78/0x90 [ 461.551778][T11623] do_syscall_64+0x4c/0xa0 [ 461.556231][T11623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.562274][T11623] [ 461.564794][T11623] The buggy address belongs to the object at ffff88807d581b80 [ 461.564794][T11623] which belongs to the cache kmalloc-cg-64 of size 64 [ 461.579312][T11623] The buggy address is located 16 bytes inside of [ 461.579312][T11623] 64-byte region [ffff88807d581b80, ffff88807d581bc0) [ 461.593074][T11623] [ 461.595437][T11623] The buggy address belongs to the physical page: [ 461.601964][T11623] page:ffffea0001f56040 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807d581880 pfn:0x7d581 [ 461.613449][T11623] memcg:ffff888078e0ea01 [ 461.617710][T11623] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 461.625404][T11623] raw: 00fff00000000200 ffffea0000b82d80 dead000000000007 ffff888017442780 [ 461.634104][T11623] raw: ffff88807d581880 000000008020001a 00000001ffffffff ffff888078e0ea01 [ 461.642804][T11623] page dumped because: kasan: bad access detected [ 461.649342][T11623] page_owner tracks the page as allocated [ 461.655082][T11623] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 8430, tgid 8428 (syz.1.1307), ts 308074283740, free_ts 308035692295 [ 461.675098][T11623] post_alloc_hook+0x173/0x1a0 [ 461.679987][T11623] get_page_from_freelist+0x206b/0x2180 [ 461.685706][T11623] __alloc_pages+0x1ec/0x4f0 [ 461.690512][T11623] alloc_slab_page+0x5d/0x180 [ 461.695222][T11623] new_slab+0x87/0x2d0 [ 461.699319][T11623] ___slab_alloc+0xbc5/0x1240 [ 461.704114][T11623] __kmem_cache_alloc_node+0x126/0x270 [ 461.709605][T11623] __kmalloc_node+0xa2/0x240 [ 461.714421][T11623] bpf_map_kmalloc_node+0xb8/0x1a0 [ 461.719837][T11623] trie_update_elem+0x16c/0xd40 [ 461.724892][T11623] bpf_map_update_value+0x59d/0x670 [ 461.730179][T11623] generic_map_update_batch+0x52e/0x7f0 [ 461.735859][T11623] bpf_map_do_batch+0x475/0x5f0 [ 461.740834][T11623] __sys_bpf+0x6f7/0x780 [ 461.745137][T11623] __x64_sys_bpf+0x78/0x90 [ 461.749589][T11623] do_syscall_64+0x4c/0xa0 [ 461.754324][T11623] page last free stack trace: [ 461.759197][T11623] free_unref_page_prepare+0x8e5/0x9e0 [ 461.765215][T11623] free_unref_page+0x2e/0x3f0 [ 461.770296][T11623] __vunmap+0x874/0xa40 [ 461.774660][T11623] free_work+0x56/0x80 [ 461.778843][T11623] process_one_work+0x8ab/0x1160 [ 461.784264][T11623] worker_thread+0xaf5/0x12a0 [ 461.789315][T11623] kthread+0x29d/0x330 [ 461.793532][T11623] ret_from_fork+0x1f/0x30 [ 461.798002][T11623] [ 461.800342][T11623] Memory state around the buggy address: [ 461.806019][T11623] ffff88807d581a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 461.814197][T11623] ffff88807d581b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 461.822727][T11623] >ffff88807d581b80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 461.831089][T11623] ^ [ 461.836581][T11623] ffff88807d581c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 461.844755][T11623] ffff88807d581c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 461.852943][T11623] ================================================================== [ 461.861226][T11623] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 461.868618][T11623] CPU: 1 PID: 11623 Comm: syz.1.2292 Not tainted syzkaller #0 [ 461.876101][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.886270][T11623] Call Trace: [ 461.889582][T11623] [ 461.892641][T11623] dump_stack_lvl+0x188/0x24e [ 461.897413][T11623] ? memcpy+0x3c/0x60 [ 461.901422][T11623] ? show_regs_print_info+0x12/0x12 [ 461.906682][T11623] ? load_image+0x410/0x410 [ 461.911228][T11623] panic+0x2d3/0x710 [ 461.915263][T11623] ? bpf_jit_dump+0xd0/0xd0 [ 461.919799][T11623] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 461.925988][T11623] ? _raw_spin_unlock+0x40/0x40 [ 461.931170][T11623] ? print_memory_metadata+0x314/0x400 [ 461.936859][T11623] check_panic_on_warn+0x80/0xa0 [ 461.942183][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.947713][T11623] end_report+0x66/0x110 [ 461.951993][T11623] kasan_report+0x118/0x140 [ 461.956551][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.961871][T11623] kasan_check_range+0x235/0x290 [ 461.967021][T11623] ? __bpf_get_stackid+0x6c9/0x920 [ 461.972257][T11623] memcpy+0x3c/0x60 [ 461.976096][T11623] __bpf_get_stackid+0x6c9/0x920 [ 461.981153][T11623] bpf_get_stackid_pe+0x33f/0x400 [ 461.986479][T11623] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 461.991962][T11623] bpf_overflow_handler+0x50b/0x790 [ 461.997191][T11623] ? bpf_overflow_handler+0xd9/0x790 [ 462.002516][T11623] ? perf_swevent_overflow+0x230/0x230 [ 462.008004][T11623] ? ct_irq_exit_irqson+0x113/0x170 [ 462.013314][T11623] ? perf_trace_lock_acquire+0x101/0x3f0 [ 462.018978][T11623] ? __perf_event_account_interrupt+0x187/0x280 [ 462.025260][T11623] __perf_event_overflow+0x457/0x630 [ 462.030758][T11623] perf_swevent_event+0x315/0x570 [ 462.035912][T11623] ? perf_tp_event+0xc10/0xc10 [ 462.041426][T11623] ___perf_sw_event+0x498/0x6d0 [ 462.046326][T11623] ? ___perf_sw_event+0x184/0x6d0 [ 462.051477][T11623] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 462.058020][T11623] ? mark_lock+0x94/0x320 [ 462.062423][T11623] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 462.068754][T11623] ? lock_chain_count+0x20/0x20 [ 462.074086][T11623] __perf_sw_event+0x135/0x260 [ 462.078986][T11623] do_user_addr_fault+0x497/0xb20 [ 462.084054][T11623] ? trace_hardirqs_off_finish+0x86/0x180 [ 462.089842][T11623] exc_page_fault+0x60/0x100 [ 462.094485][T11623] asm_exc_page_fault+0x22/0x30 [ 462.099565][T11623] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 462.106341][T11623] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 462.126417][T11623] RSP: 0018:ffffc9000554f788 EFLAGS: 00050206 [ 462.132618][T11623] RAX: ffffffff8413ef01 RBX: 0000000000033fe0 RCX: 0000000000031020 [ 462.140711][T11623] RDX: 0000000000033fe0 RSI: 0000200000003000 RDI: ffffc900055c3fc0 [ 462.148799][T11623] RBP: 0000000000000000 R08: ffffc900055f4fdf R09: 1ffff92000abe9fb [ 462.156891][T11623] R10: dffffc0000000000 R11: fffff52000abe9fc R12: 00007ffffffcb020 [ 462.165443][T11623] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc900055c1000 [ 462.173714][T11623] ? copyin+0x21/0x120 [ 462.177826][T11623] copyin+0xe7/0x120 [ 462.181757][T11623] _copy_from_iter+0x447/0x1130 [ 462.186729][T11623] ? copyout_mc+0x110/0x110 [ 462.191259][T11623] ? do_raw_spin_unlock+0x11d/0x230 [ 462.196601][T11623] ? _raw_spin_unlock+0x24/0x40 [ 462.201685][T11623] ? find_vmap_area+0xf8/0x110 [ 462.206683][T11623] ? __phys_addr_symbol+0x2b/0x70 [ 462.211761][T11623] ? __check_object_size+0x4f6/0xa70 [ 462.217083][T11623] netlink_sendmsg+0x755/0xbd0 [ 462.221884][T11623] ? netlink_getsockopt+0x550/0x550 [ 462.227108][T11623] ? apparmor_socket_sendmsg+0x8a/0x330 [ 462.232727][T11623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 462.238222][T11623] ? security_socket_sendmsg+0x7c/0xa0 [ 462.243806][T11623] ? netlink_getsockopt+0x550/0x550 [ 462.249381][T11623] ____sys_sendmsg+0x5ed/0x9a0 [ 462.254280][T11623] ? __sys_sendmsg_sock+0x30/0x30 [ 462.259343][T11623] ? __import_iovec+0x306/0x510 [ 462.264510][T11623] ? import_iovec+0x6f/0xa0 [ 462.269229][T11623] ___sys_sendmsg+0x2a2/0x360 [ 462.274070][T11623] ? __sys_sendmsg+0x2a0/0x2a0 [ 462.279341][T11623] __se_sys_sendmsg+0x1c3/0x2b0 [ 462.284327][T11623] ? __x64_sys_sendmsg+0x80/0x80 [ 462.289508][T11623] ? lockdep_hardirqs_on+0x94/0x140 [ 462.294747][T11623] do_syscall_64+0x4c/0xa0 [ 462.299215][T11623] ? clear_bhb_loop+0x60/0xb0 [ 462.304017][T11623] ? clear_bhb_loop+0x60/0xb0 [ 462.308768][T11623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.314776][T11623] RIP: 0033:0x7f771639e159 [ 462.319331][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.340372][T11623] RSP: 002b:00007f7717270028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.349083][T11623] RAX: ffffffffffffffda RBX: 00007f7716626090 RCX: 00007f771639e159 [ 462.357127][T11623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 462.365385][T11623] RBP: 00007f771643503b R08: 0000000000000000 R09: 0000000000000000 [ 462.373472][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.381648][T11623] R13: 00007f7716626128 R14: 00007f7716626090 R15: 00007ffc36794068 [ 462.390285][T11623] [ 462.393767][T11623] Kernel Offset: disabled [ 462.398575][T11623] Rebooting in 86400 seconds..