last executing test programs: 3.771863995s ago: executing program 0 (id=1196): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000020, 0x12504, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x4, 0xfffffffb}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="f4000900062b3c252001001000000000dc8b850f238466cc00007a000000ad6e518184620200d6ad", 0x28}], 0x1}, 0x0) 3.60152135s ago: executing program 0 (id=1198): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0xc7c}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xd, 0x7, 0x6, 0x0, 0x7}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xe, 0x4d5, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x5}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xa, 0xffffffffffffffff, 0x4}, 0x38) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0xeb, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, 0x0}, 0x20000001) 3.515558028s ago: executing program 2 (id=1199): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000010000000000000000000000850000007b0000009500000000000000"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d0e, 0x80218, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f7, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r0, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x8000) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26100000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="250a00180000000000000000000000000000009500000000000000000000000000000000000000005b6af9b6fc5f31ec1064820f85da10c4c1d89668b7f72173508452c06b134e06f32b5c76c7260eda787b4584b2bee86cf1a95a726b317873f0418e9768d254334e661bcae284cf05d24abe00fc9319013fa746cd2751aba6c87c3961f646a723e4b55e2a006a8ef88505c5f7070dd3a97fc83c48c44ff6a676559932938f3b9d5a455f7c28c4a1abc21a7eaf83143dd024c31692bc8b3ce6f575c81d35b49a56a8337acc656e1b87c9956c6be93c9263c07c10b8daaf04958c523b88b87c9376512304f2823fcbd0810b38f9384b6c"], &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 2.737933737s ago: executing program 0 (id=1200): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x20, 0x2, 0x0, 0x20000000002, 0x521a9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, 0x0, 0x12) 2.663206474s ago: executing program 3 (id=1201): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.546686654s ago: executing program 1 (id=1202): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 2.416387235s ago: executing program 0 (id=1203): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x4479}, 0x0, 0xf, r1, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x29, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f5, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="0200004dcb4d0fd5271117bdf1447800002d85041b824ea973bc7795"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000380)={&(0x7f00000000c0)=@file={0x75cb31a95be5206e, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="9150252ff8", 0x5}, {&(0x7f0000000980)="5ff06d167e8d5dd83528f4650064dcc98c6c76090abc6e8efccbb90a6a2322c4f6a40a29349ca69be62dca4f8d45e9c1a862585bf1ba80da3c6eaa2c89ded6d5b0c2c39e1434a35c8e8f3cf03eaccdb3c28627c779c1941fbb2d72cada8802d40f6d379573c73c046d9df4c75ec9c664bfae24661e82aece75c9178cb58c7c6464784b563b98c19384434d553f02a25e1ae09ce294d80613d7960f81383d52a8a8432b0063bb212ba9202cbc94a1ae38", 0xfffffe3a}], 0x2, 0x0, 0x0, 0x2000040}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="051a23ff6a0489673fa7a9b3d91305000000"], &(0x7f0000000540)='syzkaller\x00', 0xa, 0x9c, &(0x7f00000008c0)=""/156, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0x5, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, 0x1, r9], 0x0, 0x10, 0x9}, 0x94) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}, 0x0) 2.398541087s ago: executing program 3 (id=1204): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff000000000400000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)={[{0x2b, 'memory'}, {0x0, 'cpu'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2b, 'cpu'}]}, 0x24) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) 2.36789639s ago: executing program 1 (id=1205): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x7, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x5, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3}, 0xc6d0, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x5edf, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x23, 0x0, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be", 0x0, 0x104, 0xa000000, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a000000000000611158000000000000000000"], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r3) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffa}, 0x10098, 0xca, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x44, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0], 0x0, 0xb9, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', r4, r7, 0x5, 0x4, 0x2}, 0x50) 2.237132951s ago: executing program 2 (id=1206): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000020, 0x12504, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x4, 0xfffffffb}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="f4000900062b3c252001001000000000dc8b850f238466cc00007a000000ad6e518184620200d6ad", 0x28}], 0x1}, 0x0) 2.063782077s ago: executing program 3 (id=1207): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 1.990213213s ago: executing program 2 (id=1208): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x80000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x4, 0x80, 0x10, 0x0, 0xe8, 0x81, 0x0, 0x4, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x5, @perf_config_ext={0x1c, 0x7fffffffffffffff}, 0x80, 0x100000000, 0xfffffffa, 0x7, 0x9, 0x80000000, 0x0, 0x0, 0x10001, 0x0, 0x7fffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x3ff, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x7, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 1.886531512s ago: executing program 0 (id=1209): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50}, 0x20000042) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) close(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x10, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0x400b, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4044890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) 1.715657867s ago: executing program 2 (id=1210): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.658458472s ago: executing program 3 (id=1211): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x13, 0x20, 0x2, 0x0, 0x20000000002, 0x521a9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, 0x0, 0x12) 1.310676373s ago: executing program 0 (id=1212): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xb125, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) syz_clone(0x10000000, &(0x7f0000001340)="8b0773cda2f846a143357b193dceb6ec9c315bedd436e5cba50f4ffeebfcab792b324a9b9154eb394544d6730036e91867395f2100993a43fd1f5bd4caba274f38e94c5b96d5e0d70631c126a793b21c3f189d6cb2455ded1dc9a65e7694f54c3ed4446e4db191f4ba800b3200958e", 0x6f, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000a40)) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x9, 0xff, 0x0, 0x91, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x40, 0x3, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0xd, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0xf}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x85, &(0x7f0000000580)=r4, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8916, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.240514669s ago: executing program 1 (id=1213): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 1.24034708s ago: executing program 3 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 1.171899176s ago: executing program 2 (id=1215): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff0000000004000000850000003600000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)={[{0x2b, 'memory'}, {0x0, 'cpu'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2b, 'cpu'}]}, 0x24) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) 1.156763857s ago: executing program 1 (id=1216): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000000020, 0x12504, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x4, 0xfffffffb}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000440)="f4000900062b3c252001001000000000dc8b850f238466cc00007a000000ad6e518184620200d6ad", 0x28}], 0x1}, 0x0) 960.131104ms ago: executing program 1 (id=1217): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xd, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000, 0x400000, 0x0, 0x2, 0x0, 0x0, 0x4479}, 0x0, 0xf, r1, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x29, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f5, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="0200004dcb4d0fd5271117bdf1447800002d85041b824ea973bc7795"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000380)={&(0x7f00000000c0)=@file={0x75cb31a95be5206e, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000040)="9150252ff8", 0x5}, {&(0x7f0000000980)="5ff06d167e8d5dd83528f4650064dcc98c6c76090abc6e8efccbb90a6a2322c4f6a40a29349ca69be62dca4f8d45e9c1a862585bf1ba80da3c6eaa2c89ded6d5b0c2c39e1434a35c8e8f3cf03eaccdb3c28627c779c1941fbb2d72cada8802d40f6d379573c73c046d9df4c75ec9c664bfae24661e82aece75c9178cb58c7c6464784b563b98c19384434d553f02a25e1ae09ce294d80613d7960f81383d52a8a8432b0063bb212ba9202cbc94a1ae38", 0xfffffe3a}], 0x2, 0x0, 0x0, 0x2000040}, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="051a23ff6a0489673fa7a9b3d91305000000"], &(0x7f0000000540)='syzkaller\x00', 0xa, 0x9c, &(0x7f00000008c0)=""/156, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0x5, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, r3, 0xffffffffffffffff, 0x1, 0x1, r9], 0x0, 0x10, 0x9}, 0x94) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f00000003c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}, 0x0) 569.063329ms ago: executing program 2 (id=1218): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x29, 0x1, 0x0, 0x3, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c25000000e2ff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb00000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='h', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x1d881) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="17", 0x1}], 0x1}, 0x80) close(r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r4, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}, {&(0x7f0000000840)="8b21d06e63d07cc621eeb4ff8a2ff102097f5b4ed824c9086032b2a75406a773f19c51be4a495f183f79bb6ba923225452f241e39ecaabc1de4d871c1d7adee8252bf8d90999f5dc1c1a44a482410c70223736912f6fb6033b54253d335b8a516edcd028a9dc1374011df0ec4d59247ba82282e52f1659f3d956d3c60ea717cb093cc1053b1a6ae36e9fb46b52f259b34ec127b0bea62c8f38ad16bec8eac099a739e026ae", 0xa5}, {&(0x7f0000000b40)="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", 0x1000}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x4000}], 0x1}, 0x40012100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000080)=@base={0x1c, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) close(r0) 452.478589ms ago: executing program 3 (id=1219): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 0s ago: executing program 1 (id=1220): r0 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001000)={r3}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000001dc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x66, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000c00)=[{}], 0x8, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)="b67c1efce257a805dcbf6f01ac0a19e40c9e91b56f0ea0bf6f4dff6fac462329019f41c3cc6c973704b64e9bbb89bff295fc84232588269790c4da6d90fe399f079a04b40bb71bacb6da339a55cf4b294bf8026a9c5670f31d724a1de906d944db8a107c0b9c14473df8952b0113ecabd1b0f80e6d823945587a1bcdc708d8c2c562d4637f918730a8f0a6da971821aa7acc1e59df6a9f6da2d73399238455ef6d30390b014871f6cbe316a7b50082ec94cadaa7de0083c23f210db667fb19540e340ee493205c5dc82335af174dac08d9f29a9099a022a93082a2339f5b5ade7e167a8b5c04221ac885367b5f498bb06ef2f08254275c", 0xf7}, {&(0x7f0000000380)="129d3e4db4d87f75beea6b499e879cf2ce07e99b9944bb570a3301072c533019a0a2026ed661edba20fa51bc3993d0546251e9a1e7095c1b7a882042936a7992197524d34b2019d94f9148f61fe78002c206fd5ef6065a0a4c62f72ce9eda773c223ba9f4a99dcec11f9d818f0b31808b67cad9ddf63f1d538d433e289471519d4c7e38603ab68", 0x87}, {&(0x7f0000000440)="26318b0465c4466d01d1838a0a09fc9c67f26d1748ba50273788b2996c65fefce788c92f55f3ae9ae8c00cebbc1e5566392d3b0459610f58f1b8812a70a5e10ce2af5d554fac5824e59bcbaed432286621cdfb48357f57ee216bbee7c87fb48abadf98a2185552f251202a653116e5b7dc1758a052257314ce503628e9f65fba801428a83198fa32c4d1fb9a89451b8eaaf9272835091d2304ce023b3b947a722dcda865466ca736ca86", 0xaa}, {&(0x7f0000000580)="2f4f65cc336910c0d42798c024b6eb5fedf47f68eda882c3c40bd4e91c698afafc02e8a3739671d26ff1cd584456ac8379062ebaa031c6ad16746e2ed48457386ea1800878d85f00177862c3d0c7e10333980540ca198efd64b58f50a27898a7edf913334dc81bc83f32d66c3b718b250ebe07", 0x73}, {&(0x7f0000000600)="23f17b54a6f683b2fe916ecf9a53587be7a1a01198a1c204e775cc9b60034e7579fdee8d116cde6353db69b44e8f1bf5b5d06b791f2cbe5e9110a896a7f7a8fea438dc5aef07421538b4e6d994f55a4c3b794bef7577a60f97956a21e6ff4e0e238369cd2814503ccaf2c49d3dba03d668c93e4f622edd2509cf9729aeaf0756ef4b6bb83570b1d6dc2ed52513134f77d9e8e99f47912564edb8eebaab69", 0x9e}, {&(0x7f0000000100)="96f75086e14cd425de4f7049a7c47b4c09d66249219ef4e9ffb9e66d3142fb3364a177db69f28911048ead0736e6f461df", 0x31}, {&(0x7f00000006c0)="dd043571125868f33c420ba9b463696104aad923fd7ebcb948d334932017dad9639cc39272f67f42095235481d8b462f356242cc957171b5343d704696b39f0f45411c8eeaa368a7b3430b93ef571dbe358125f6bcaea1cf438d958a93d1b671977089cc29c913db801a205a7a16d87bf1af48699b0d44", 0x77}], 0x7, &(0x7f0000001040)=ANY=[@ANYBLOB="14000000000000000000000001000000ff01000000000000880000000000000000000000070000000712a22e28e6d8358391cbb6ead15b143a52019404000001072b720a010101e00000010a0101027f000001ffffffff0a010101e00000010000000000000000ffffffff830b85ac1414bbe000000244281560000000d60000aa0f000000090000010000000b4b000000040000000300000335020009ba00001c000000000000000000000008000000553a3fe66cdc1eb05297765320002584a4e5d1e6110a24", @ANYRES32=r4, @ANYBLOB="7f0000010a010100000000001400000000000000000000000100000005000000000000001400000000000000000000000100000000040000000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="ac1414aa0a010101000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ffffffffffffffff00000000110000000000000000000000010000001400000000000000"], 0x148}, 0x44801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040)=r9, 0x3b) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x18, 0x9ac, 0xb9, 0x9, 0x60008, 0xffffffffffffffff, 0x4, '\x00', r5, r9, 0x4, 0x1, 0x2}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0500000004000000070000007f00000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000349015f81f3b675cd2d40000000000dda8c408c96330d62e7a6132c858c52fe1ca201ae81e381655ea967dd6e72cbd65643058cb700aefcd370e9b581f5b287b8b7ec34e2bf44206e48dd0332dbd908b8da419be5bb9684a90a7ff829db11f18fb8625c51b871559fdc8d314b91996c965d480ffba2b5f6f77938b9b6b4a6bfa1742ed188b1524d7b0c5c8b81276b1fe2cf8263ad900"/163], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r11, &(0x7f0000000200), 0x0}, 0x20) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xe6, @remote, 0x4}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000240)="0c51cc427940f77c533af535e09482c64906beb093e44d67c87d2392ad8c49d976687464050feba816", 0x29}, {&(0x7f0000000280)="d26250e3dc26bccce0a7cdf9c570ef44b38cb8359000956af45049b06a4a4292237a43609d749545488d5734c6876ec25c863ed02f962fb9af2fbc526396a0c76de0696f7c2b4a813d9a19f3ee20e07fed56da82a592159a62ebe816c4d6f5a123a019f8b51a628452b23b802d8faea25412fd5c278deb69d7e2426895c1fd6906561704841bbecedb54611e588cd666c11b2de1917bae1ae97aa57080b6e0be97f81be7b93ed375da5a75f9eeb68140a7ada28f3895340f7adff363b4be8223fa7955e7f0a94fe021994cefe615a5c1782a010b7ad91360c186e4bc32a01517c378786c52cd92", 0xe7}, {&(0x7f0000000dc0)="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", 0x1000}, {&(0x7f0000000580)="98bd57cd58a469d2ef550346755ceb22e5f77cb124530e7aaec243c081336f75c18addfa6d48d49ef91e0c618ec7ec1008c79f8245991b4e202485e125822ee4113319e9f284c35d7940750c1c2319b462e1c9798578c8f1b853a17ecd09364ff4796f1b351bbaa0778c443000755c030cfc4314e7aada9434544121c920e39eb9a121c56747220ee3e6665b46b3142ec20a2108fea0f17190ec15281914658fcbeefbaf6ebcf849fd338c94bc58256410fdcf129fdf429fa02ab07431", 0xbd}, {&(0x7f0000000740)="2ee6bbf502b868dba2db16aeac50d4779ff55ee706fd25cea400d4ecb577bde26da1a8384fe4c44aded2d95864c98ebd70c0fc30a93442d9e7c86813aaac9f11f61864b17f0b91d163c576832ee76c959c76ce82313c8cfc32807f81c9ae7ed5402aec738e379a5694e4ddd63f029515", 0x70}, {&(0x7f00000007c0)="434b324e4faa4c05d0ba990c6bfb9b747d254d4fbb8ec159aee920f821f9860bb4ec461b444c606f84fcc4ac548471cd1f358c63ce1bdfc6a2d59f417c3c43eeb12a7c0705dfb39ed901449f899afad78cf9ea9a537dd7172002b124a1e45af1a2d8dd28d1bc271695c43e0f17868bb6de740ff6a3dec69fdb1e1a2e9f3db91b3a9ec50193175ccf98464085ad70e2613397b205e98bbd80c4d7968e119124885a6ceba360d9e116547063333cc76166bc5b9e4f37005e40370613619b2da78ac4c91ada17b0bcab8a3119936b6986e525", 0xd1}, {&(0x7f0000000380)="cd15890d816ff72bad46f6f140636c2368dbff1853fb2d8a", 0x18}, {&(0x7f0000000a40)="6b1cace385a021b7b9968ab3acb82a28fede6ffe3304b57de20977e293fb75488988a8bfb1c36c2f3b7fe77c4b6d4a0287bf7504d5a747a3e63277d7dd90de5053635956180a9950a7e4e1e8e7924b0022f273430712905e9f48d5451403071a3e5cf9fe1b0124eb152ca1ed54a8513a7d1d261438bb7703b93ca3309635d4fd44e3269b3aa111313432b8def271f84f053c573c01aff780446ce5546a2319add45156586578205b8dd00ea24392a9b4f748de72463a3ecdde49e5ba3447b3b3e9efa18ef987473f3d5c088591f646e86a655d4c0fe0", 0xd6}], 0x8, &(0x7f0000000b40)=[{0x60, 0x103, 0x31c5, "3c5068e2577da3683999840577e4b8f8c6fd3f1c1267599401ecf3f8cc48c643f2adc4a3d0a52a4ec5be721ad2b129a1f6a46e0e4796195ad2614dc2344811d78ed547d306a004bc7178"}], 0x60}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002cb3cd8eec8b54680000"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r10}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) kernel console output (not intermixed with test programs): ttribute type 29 has an invalid length. [ 137.726346][ T6204] FAULT_INJECTION: forcing a failure. [ 137.726346][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 137.753755][ T6204] CPU: 1 PID: 6204 Comm: syz.3.94 Not tainted syzkaller #0 [ 137.761037][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 137.771149][ T6204] Call Trace: [ 137.774470][ T6204] [ 137.777438][ T6204] dump_stack_lvl+0x18c/0x250 [ 137.782185][ T6204] ? show_regs_print_info+0x20/0x20 [ 137.787435][ T6204] ? load_image+0x400/0x400 [ 137.791986][ T6204] ? __might_sleep+0xe0/0xe0 [ 137.796630][ T6204] ? __lock_acquire+0x7d40/0x7d40 [ 137.801710][ T6204] should_fail_ex+0x39d/0x4d0 [ 137.806456][ T6204] should_failslab+0x9/0x20 [ 137.811018][ T6204] slab_pre_alloc_hook+0x59/0x310 [ 137.816102][ T6204] ? __inet_diag_dump_start+0x8b/0x9f0 [ 137.821625][ T6204] __kmem_cache_alloc_node+0x53/0x250 [ 137.827064][ T6204] ? __inet_diag_dump_start+0x8b/0x9f0 [ 137.832589][ T6204] kmalloc_trace+0x2a/0xe0 [ 137.837079][ T6204] __inet_diag_dump_start+0x8b/0x9f0 [ 137.842433][ T6204] ? netlink_lookup+0x30/0x200 [ 137.847252][ T6204] ? netlink_lookup+0x30/0x200 [ 137.852085][ T6204] __netlink_dump_start+0x4a9/0x810 [ 137.857368][ T6204] inet_diag_handler_cmd+0x1e1/0x2c0 [ 137.862717][ T6204] ? inet_diag_unregister+0xb0/0xb0 [ 137.868064][ T6204] ? inet_diag_handler_get_info+0x7a0/0x7a0 [ 137.874018][ T6204] ? inet_diag_dump_start+0x20/0x20 [ 137.879267][ T6204] ? inet_diag_dump+0x50/0x50 [ 137.884025][ T6204] ? sock_diag_lock_handler+0x19/0x280 [ 137.889623][ T6204] ? sock_diag_lock_handler+0x19/0x280 [ 137.895131][ T6204] ? inet_diag_unregister+0xb0/0xb0 [ 137.900384][ T6204] sock_diag_rcv_msg+0x3d8/0x600 [ 137.905376][ T6204] netlink_rcv_skb+0x241/0x4d0 [ 137.910182][ T6204] ? sock_diag_bind+0xb0/0xb0 [ 137.914910][ T6204] ? netlink_ack+0x1180/0x1180 [ 137.919727][ T6204] ? __lock_acquire+0x7d40/0x7d40 [ 137.924790][ T6204] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.930027][ T6204] sock_diag_rcv+0x2a/0x40 [ 137.934475][ T6204] netlink_unicast+0x751/0x8d0 [ 137.939275][ T6204] netlink_sendmsg+0x8d0/0xbf0 [ 137.944089][ T6204] ? netlink_getsockopt+0x590/0x590 [ 137.949330][ T6204] ? aa_sock_msg_perm+0x94/0x150 [ 137.954300][ T6204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 137.959617][ T6204] ? security_socket_sendmsg+0x80/0xa0 [ 137.965112][ T6204] ? netlink_getsockopt+0x590/0x590 [ 137.970350][ T6204] ____sys_sendmsg+0x5ba/0x960 [ 137.975149][ T6204] ? __asan_memset+0x22/0x40 [ 137.979863][ T6204] ? __sys_sendmsg_sock+0x30/0x30 [ 137.984925][ T6204] ? __import_iovec+0x5f2/0x850 [ 137.989828][ T6204] ? import_iovec+0x73/0xa0 [ 137.994370][ T6204] ___sys_sendmsg+0x2a6/0x360 [ 137.999083][ T6204] ? __sys_sendmsg+0x2a0/0x2a0 [ 138.003901][ T6204] ? trace_call_bpf+0xc3/0x6c0 [ 138.008722][ T6204] __se_sys_sendmsg+0x1c2/0x2b0 [ 138.013603][ T6204] ? __x64_sys_sendmsg+0x80/0x80 [ 138.018584][ T6204] ? lockdep_hardirqs_on+0x98/0x150 [ 138.023894][ T6204] do_syscall_64+0x55/0xa0 [ 138.028354][ T6204] ? clear_bhb_loop+0x40/0x90 [ 138.033054][ T6204] ? clear_bhb_loop+0x40/0x90 [ 138.037762][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.043680][ T6204] RIP: 0033:0x7f3a72d9bf79 [ 138.048120][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.067756][ T6204] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.076208][ T6204] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 138.084210][ T6204] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 138.092205][ T6204] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 138.100201][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.108234][ T6204] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 138.116258][ T6204] [ 142.874955][ T6236] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 142.989626][ T6239] netlink: 'syz.0.104': attribute type 29 has an invalid length. [ 144.792631][ T6236] netlink: 'syz.1.103': attribute type 29 has an invalid length. [ 144.807097][ T6239] netlink: 'syz.0.104': attribute type 29 has an invalid length. [ 145.171690][ T6258] netlink: 'syz.2.108': attribute type 21 has an invalid length. [ 145.191907][ T6258] netlink: 128 bytes leftover after parsing attributes in process `syz.2.108'. [ 145.228986][ T6258] netlink: 'syz.2.108': attribute type 5 has an invalid length. [ 145.250949][ T6258] netlink: 'syz.2.108': attribute type 6 has an invalid length. [ 145.273853][ T6258] netlink: 3 bytes leftover after parsing attributes in process `syz.2.108'. [ 145.341494][ T6265] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.108'. [ 146.168117][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.786375][ T6280] netlink: 'syz.2.114': attribute type 29 has an invalid length. [ 147.822840][ T6280] netlink: 'syz.2.114': attribute type 29 has an invalid length. [ 147.868910][ T6282] netlink: 'syz.2.114': attribute type 29 has an invalid length. [ 148.851916][ T6291] FAULT_INJECTION: forcing a failure. [ 148.851916][ T6291] name failslab, interval 1, probability 0, space 0, times 0 [ 148.865022][ T6291] CPU: 1 PID: 6291 Comm: syz.1.118 Not tainted syzkaller #0 [ 148.872369][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 148.882469][ T6291] Call Trace: [ 148.885782][ T6291] [ 148.888760][ T6291] dump_stack_lvl+0x18c/0x250 [ 148.893494][ T6291] ? show_regs_print_info+0x20/0x20 [ 148.898742][ T6291] ? load_image+0x400/0x400 [ 148.903309][ T6291] should_fail_ex+0x39d/0x4d0 [ 148.908044][ T6291] should_failslab+0x9/0x20 [ 148.912601][ T6291] slab_pre_alloc_hook+0x59/0x310 [ 148.917823][ T6291] kmem_cache_alloc+0x5a/0x2d0 [ 148.922638][ T6291] ? skb_clone+0x1eb/0x370 [ 148.927124][ T6291] skb_clone+0x1eb/0x370 [ 148.931419][ T6291] bpf_clone_redirect+0x167/0x4a0 [ 148.936489][ T6291] ? read_tsc+0x9/0x20 [ 148.940595][ T6291] ? ktime_get+0x24b/0x280 [ 148.945060][ T6291] bpf_prog_2ed4f07f6b249946+0x21/0x25 [ 148.950645][ T6291] bpf_test_run+0x2df/0x870 [ 148.955224][ T6291] ? bpf_test_run+0x174/0x870 [ 148.959948][ T6291] ? convert___skb_to_skb+0x590/0x590 [ 148.965362][ T6291] ? eth_get_headlen+0x210/0x210 [ 148.970350][ T6291] ? slab_build_skb+0x25f/0x3f0 [ 148.975249][ T6291] ? convert___skb_to_skb+0x3d/0x590 [ 148.980579][ T6291] bpf_prog_test_run_skb+0xad2/0x12b0 [ 148.986007][ T6291] ? cpu_online+0x60/0x60 [ 148.990372][ T6291] bpf_prog_test_run+0x321/0x390 [ 148.995361][ T6291] __sys_bpf+0x49d/0x890 [ 148.999654][ T6291] ? bpf_link_show_fdinfo+0x390/0x390 [ 149.005091][ T6291] ? lock_chain_count+0x20/0x20 [ 149.009979][ T6291] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 149.016011][ T6291] __x64_sys_bpf+0x7c/0x90 [ 149.020466][ T6291] do_syscall_64+0x55/0xa0 [ 149.024932][ T6291] ? clear_bhb_loop+0x40/0x90 [ 149.029655][ T6291] ? clear_bhb_loop+0x40/0x90 [ 149.034379][ T6291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.040322][ T6291] RIP: 0033:0x7f4b5719bf79 [ 149.044775][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.064439][ T6291] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 149.072897][ T6291] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 149.080994][ T6291] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 149.089032][ T6291] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 149.097040][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.105054][ T6291] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 149.113084][ T6291] [ 151.144430][ T6306] FAULT_INJECTION: forcing a failure. [ 151.144430][ T6306] name failslab, interval 1, probability 0, space 0, times 0 [ 151.160666][ T6306] CPU: 0 PID: 6306 Comm: syz.2.125 Not tainted syzkaller #0 [ 151.168021][ T6306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.178212][ T6306] Call Trace: [ 151.181540][ T6306] [ 151.184509][ T6306] dump_stack_lvl+0x18c/0x250 [ 151.189248][ T6306] ? show_regs_print_info+0x20/0x20 [ 151.194505][ T6306] ? load_image+0x400/0x400 [ 151.199062][ T6306] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 151.205103][ T6306] ? __asan_memset+0x22/0x40 [ 151.209758][ T6306] should_fail_ex+0x39d/0x4d0 [ 151.214500][ T6306] should_failslab+0x9/0x20 [ 151.219050][ T6306] slab_pre_alloc_hook+0x59/0x310 [ 151.224119][ T6306] kmem_cache_alloc+0x5a/0x2d0 [ 151.228912][ T6306] ? slab_build_skb+0x2b/0x3f0 [ 151.233714][ T6306] slab_build_skb+0x2b/0x3f0 [ 151.238336][ T6306] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 151.243736][ T6306] ? __fget_files+0x28/0x4b0 [ 151.248438][ T6306] ? __fget_files+0x28/0x4b0 [ 151.253051][ T6306] ? __fget_files+0x43d/0x4b0 [ 151.257768][ T6306] ? cpu_online+0x60/0x60 [ 151.262117][ T6306] bpf_prog_test_run+0x321/0x390 [ 151.267087][ T6306] __sys_bpf+0x49d/0x890 [ 151.271357][ T6306] ? bpf_link_show_fdinfo+0x390/0x390 [ 151.276768][ T6306] ? lock_chain_count+0x20/0x20 [ 151.281651][ T6306] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 151.287678][ T6306] __x64_sys_bpf+0x7c/0x90 [ 151.292122][ T6306] do_syscall_64+0x55/0xa0 [ 151.296566][ T6306] ? clear_bhb_loop+0x40/0x90 [ 151.301269][ T6306] ? clear_bhb_loop+0x40/0x90 [ 151.305974][ T6306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.311892][ T6306] RIP: 0033:0x7f1bb5f9bf79 [ 151.316342][ T6306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.335968][ T6306] RSP: 002b:00007f1bb6e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.344414][ T6306] RAX: ffffffffffffffda RBX: 00007f1bb6215fa0 RCX: 00007f1bb5f9bf79 [ 151.352404][ T6306] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 151.360400][ T6306] RBP: 00007f1bb6e70090 R08: 0000000000000000 R09: 0000000000000000 [ 151.368478][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.376469][ T6306] R13: 00007f1bb6216038 R14: 00007f1bb6215fa0 R15: 00007ffc3a6e51b8 [ 151.384473][ T6306] [ 151.401034][ T6311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.124'. [ 151.550001][ T6308] macvlan1: entered promiscuous mode [ 151.563193][ T6308] macvlan1: entered allmulticast mode [ 151.578173][ T6308] veth1_vlan: entered allmulticast mode [ 154.343313][ T6318] netlink: 'syz.2.129': attribute type 29 has an invalid length. [ 154.357372][ T6318] netlink: 'syz.2.129': attribute type 29 has an invalid length. [ 154.370059][ T6318] netlink: 'syz.2.129': attribute type 29 has an invalid length. [ 157.824666][ T5082] Bluetooth: hci0: ISO packet for unknown connection handle 15 [ 161.162433][ T6362] veth1_macvtap: left promiscuous mode [ 161.178262][ T6362] macsec0: entered promiscuous mode [ 161.247707][ T6366] netlink: 'syz.1.145': attribute type 39 has an invalid length. [ 161.359511][ T6368] veth1_macvtap: entered promiscuous mode [ 161.396915][ T6368] macsec0: entered allmulticast mode [ 161.398856][ T6362] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.143'. [ 161.447878][ T6368] veth1_macvtap: entered allmulticast mode [ 164.670350][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 15 [ 164.910258][ T6390] netlink: 'syz.0.151': attribute type 29 has an invalid length. [ 164.945418][ T6390] netlink: 'syz.0.151': attribute type 29 has an invalid length. [ 164.970588][ T6393] netlink: 'syz.0.151': attribute type 29 has an invalid length. [ 164.988716][ T6396] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 165.047227][ T6396] team0: Device hsr_slave_0 failed to register rx_handler [ 168.019200][ T6403] netlink: 'syz.3.152': attribute type 6 has an invalid length. [ 168.032155][ T6403] netlink: 168 bytes leftover after parsing attributes in process `syz.3.152'. [ 168.050299][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.058633][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.105455][ T6408] bridge0: entered allmulticast mode [ 168.131513][ T6399] bridge_slave_1: left allmulticast mode [ 168.148035][ T6399] bridge_slave_1: left promiscuous mode [ 168.159292][ T6412] Driver unsupported XDP return value 0 on prog (id 141) dev N/A, expect packet loss! [ 168.160395][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.189514][ T6399] bridge_slave_0: left allmulticast mode [ 168.195698][ T6399] bridge_slave_0: left promiscuous mode [ 168.201597][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.582987][ T6415] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 168.629008][ T6415] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 168.665225][ T6419] veth1_macvtap: left promiscuous mode [ 168.671069][ T6419] macsec0: entered promiscuous mode [ 168.737766][ T6424] netlink: 'syz.0.155': attribute type 29 has an invalid length. [ 168.749580][ T6417] netlink: 'syz.2.157': attribute type 29 has an invalid length. [ 168.762031][ T6427] veth1_macvtap: entered promiscuous mode [ 168.768758][ T6427] macsec0: entered allmulticast mode [ 168.779003][ T6427] veth1_macvtap: entered allmulticast mode [ 168.793231][ T6417] netlink: 'syz.2.157': attribute type 29 has an invalid length. [ 168.821827][ T6423] syzkaller0: entered promiscuous mode [ 168.838987][ T6423] syzkaller0: entered allmulticast mode [ 168.878926][ T6419] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.158'. [ 168.923840][ T6417] netlink: 'syz.2.157': attribute type 29 has an invalid length. [ 169.277674][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 15 [ 169.859798][ T6445] netlink: 184 bytes leftover after parsing attributes in process `syz.0.166'. [ 170.148934][ T6445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.281804][ T6441] netlink: 'syz.3.164': attribute type 29 has an invalid length. [ 170.313275][ T6441] netlink: 'syz.3.164': attribute type 29 has an invalid length. [ 172.789467][ T6445] syz.0.166 (6445) used greatest stack depth: 19816 bytes left [ 173.093041][ T6453] netlink: 'syz.0.168': attribute type 1 has an invalid length. [ 173.114981][ T6453] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.168'. [ 173.750877][ T6463] veth1_macvtap: left promiscuous mode [ 173.761415][ T6455] netlink: 'syz.2.169': attribute type 29 has an invalid length. [ 173.779010][ T6463] macsec0: entered promiscuous mode [ 173.884622][ T6466] veth1_macvtap: entered promiscuous mode [ 173.890665][ T6466] macsec0: entered allmulticast mode [ 173.917577][ T6466] veth1_macvtap: entered allmulticast mode [ 173.965553][ T6455] netlink: 'syz.2.169': attribute type 29 has an invalid length. [ 173.995081][ T6463] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.170'. [ 174.010257][ T6458] netlink: 'syz.2.169': attribute type 29 has an invalid length. [ 174.335039][ T6481] netlink: 'syz.0.176': attribute type 10 has an invalid length. [ 174.389214][ T6481] team0: Device hsr_slave_0 failed to register rx_handler [ 174.642684][ T6485] netlink: 'syz.0.176': attribute type 6 has an invalid length. [ 174.699258][ T6485] netlink: 168 bytes leftover after parsing attributes in process `syz.0.176'. [ 175.291836][ T6482] netlink: 'syz.1.175': attribute type 29 has an invalid length. [ 177.358753][ T6492] bridge0: port 3(dummy0) entered disabled state [ 177.365406][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.373012][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.398487][ T6492] bridge0: entered allmulticast mode [ 177.425258][ T6481] bridge0: port 3(dummy0) entered disabled state [ 177.442005][ T6481] bridge_slave_1: left allmulticast mode [ 177.454092][ T6481] bridge_slave_1: left promiscuous mode [ 177.460129][ T6481] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.475818][ T6481] bridge_slave_0: left allmulticast mode [ 177.481772][ T6481] bridge_slave_0: left promiscuous mode [ 177.488678][ T6481] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.563737][ T6482] netlink: 'syz.1.175': attribute type 29 has an invalid length. [ 177.817244][ T6501] netlink: 'syz.3.179': attribute type 21 has an invalid length. [ 177.858663][ T6501] netlink: 'syz.3.179': attribute type 19 has an invalid length. [ 177.867920][ T6501] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.179'. [ 177.969837][ T6511] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 177.996693][ T6504] FAULT_INJECTION: forcing a failure. [ 177.996693][ T6504] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.033712][ T6504] CPU: 1 PID: 6504 Comm: syz.0.181 Not tainted syzkaller #0 [ 178.041075][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.051154][ T6504] Call Trace: [ 178.054469][ T6504] [ 178.057460][ T6504] dump_stack_lvl+0x18c/0x250 [ 178.062173][ T6504] ? show_regs_print_info+0x20/0x20 [ 178.067458][ T6504] ? load_image+0x400/0x400 [ 178.071990][ T6504] ? __might_fault+0xaa/0x120 [ 178.076700][ T6504] ? __lock_acquire+0x7d40/0x7d40 [ 178.081743][ T6504] ? tomoyo_path_number_perm+0x5b4/0x620 [ 178.087409][ T6504] should_fail_ex+0x39d/0x4d0 [ 178.092126][ T6504] _copy_from_user+0x2f/0xe0 [ 178.096755][ T6504] wext_handle_ioctl+0xc8/0x1d0 [ 178.101644][ T6504] ? call_commit_handler+0xf0/0xf0 [ 178.106806][ T6504] sock_ioctl+0x15d/0x7e0 [ 178.111163][ T6504] ? sock_poll+0x3e0/0x3e0 [ 178.115607][ T6504] ? bpf_lsm_file_ioctl+0x9/0x10 [ 178.120566][ T6504] ? security_file_ioctl+0x80/0xa0 [ 178.125709][ T6504] ? sock_poll+0x3e0/0x3e0 [ 178.130145][ T6504] __se_sys_ioctl+0xfd/0x170 [ 178.134768][ T6504] do_syscall_64+0x55/0xa0 [ 178.139217][ T6504] ? clear_bhb_loop+0x40/0x90 [ 178.143923][ T6504] ? clear_bhb_loop+0x40/0x90 [ 178.148624][ T6504] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.154547][ T6504] RIP: 0033:0x7f3dd879bf79 [ 178.159071][ T6504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.178703][ T6504] RSP: 002b:00007f3dd96e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.187152][ T6504] RAX: ffffffffffffffda RBX: 00007f3dd8a15fa0 RCX: 00007f3dd879bf79 [ 178.195150][ T6504] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 000000000000000d [ 178.203150][ T6504] RBP: 00007f3dd96e9090 R08: 0000000000000000 R09: 0000000000000000 [ 178.211143][ T6504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.219134][ T6504] R13: 00007f3dd8a16038 R14: 00007f3dd8a15fa0 R15: 00007fff87230ea8 [ 178.227147][ T6504] [ 178.731705][ T6513] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 178.778030][ T6513] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 178.841445][ T6525] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 181.954978][ T6543] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 183.075375][ T6582] netlink: 'syz.3.203': attribute type 9 has an invalid length. [ 183.103223][ T6582] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.203'. [ 183.223501][ T6581] netlink: 'syz.3.203': attribute type 9 has an invalid length. [ 183.240656][ T6581] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.203'. [ 186.764773][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 187.498683][ T6684] netlink: 3 bytes leftover after parsing attributes in process `syz.1.212'. [ 187.763465][ T6686] netlink: 208092 bytes leftover after parsing attributes in process `syz.2.213'. [ 187.827680][ T6694] FAULT_INJECTION: forcing a failure. [ 187.827680][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.844043][ T6686] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 187.861895][ T6694] CPU: 1 PID: 6694 Comm: syz.3.217 Not tainted syzkaller #0 [ 187.869259][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.879361][ T6694] Call Trace: [ 187.882692][ T6694] [ 187.885673][ T6694] dump_stack_lvl+0x18c/0x250 [ 187.890419][ T6694] ? show_regs_print_info+0x20/0x20 [ 187.895681][ T6694] ? load_image+0x400/0x400 [ 187.900248][ T6694] ? __lock_acquire+0x7d40/0x7d40 [ 187.905328][ T6694] ? snprintf+0xe9/0x140 [ 187.909621][ T6694] should_fail_ex+0x39d/0x4d0 [ 187.914363][ T6694] _copy_to_user+0x2f/0xa0 [ 187.918844][ T6694] simple_read_from_buffer+0xe7/0x150 [ 187.924317][ T6694] proc_fail_nth_read+0x1e8/0x260 [ 187.929412][ T6694] ? proc_fault_inject_write+0x360/0x360 [ 187.935197][ T6694] ? fsnotify_perm+0x271/0x5e0 [ 187.940018][ T6694] ? proc_fault_inject_write+0x360/0x360 [ 187.945713][ T6694] vfs_read+0x28b/0x970 [ 187.949939][ T6694] ? kernel_read+0x1e0/0x1e0 [ 187.954585][ T6694] ? __fget_files+0x28/0x4b0 [ 187.959230][ T6694] ? __fget_files+0x28/0x4b0 [ 187.963898][ T6694] ? __fget_files+0x43d/0x4b0 [ 187.968634][ T6694] ? __fdget_pos+0x2a3/0x330 [ 187.973274][ T6694] ? ksys_read+0x75/0x260 [ 187.977663][ T6694] ksys_read+0x150/0x260 [ 187.981966][ T6694] ? vfs_write+0x990/0x990 [ 187.986434][ T6694] ? lockdep_hardirqs_on+0x98/0x150 [ 187.991718][ T6694] do_syscall_64+0x55/0xa0 [ 187.996194][ T6694] ? clear_bhb_loop+0x40/0x90 [ 188.000927][ T6694] ? clear_bhb_loop+0x40/0x90 [ 188.005654][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.011593][ T6694] RIP: 0033:0x7f3a72d5c84e [ 188.016053][ T6694] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.035726][ T6694] RSP: 002b:00007f3a73d4afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.044645][ T6694] RAX: ffffffffffffffda RBX: 00007f3a73d4b6c0 RCX: 00007f3a72d5c84e [ 188.052674][ T6694] RDX: 000000000000000f RSI: 00007f3a73d4b0a0 RDI: 0000000000000006 [ 188.060701][ T6694] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 188.068734][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.076756][ T6694] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 188.084842][ T6694] [ 188.090630][ T6686] netlink: 'syz.2.213': attribute type 2 has an invalid length. [ 188.101192][ T6686] netlink: 'syz.2.213': attribute type 3 has an invalid length. [ 188.114188][ T6686] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 190.874094][ T6701] netlink: 'syz.3.218': attribute type 39 has an invalid length. [ 190.992490][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 191.177516][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.221'. [ 191.283061][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.223'. [ 194.592697][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.599437][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.969971][ T6728] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 195.979876][ T6728] netlink: 164 bytes leftover after parsing attributes in process `syz.0.226'. [ 195.994107][ T6730] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 196.070220][ T6733] netlink: 'syz.2.229': attribute type 22 has an invalid length. [ 196.084727][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 196.255360][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 196.387083][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 196.587946][ T6739] netlink: 'syz.0.232': attribute type 9 has an invalid length. [ 196.603359][ T6739] netlink: 187720 bytes leftover after parsing attributes in process `syz.0.232'. [ 197.415303][ T6753] netlink: 160 bytes leftover after parsing attributes in process `syz.3.235'. [ 198.075109][ T6766] netlink: 'syz.0.239': attribute type 10 has an invalid length. [ 200.671427][ T6766] team0: Port device syz_tun added [ 200.769607][ T6772] netlink: 40115 bytes leftover after parsing attributes in process `syz.3.240'. [ 201.055629][ T6780] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 201.104783][ T6780] netlink: 164 bytes leftover after parsing attributes in process `syz.1.241'. [ 201.161449][ T6786] FAULT_INJECTION: forcing a failure. [ 201.161449][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.253760][ T6786] CPU: 0 PID: 6786 Comm: syz.3.244 Not tainted syzkaller #0 [ 201.261211][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.271304][ T6786] Call Trace: [ 201.274636][ T6786] [ 201.277608][ T6786] dump_stack_lvl+0x18c/0x250 [ 201.282351][ T6786] ? show_regs_print_info+0x20/0x20 [ 201.287615][ T6786] ? load_image+0x400/0x400 [ 201.292182][ T6786] ? __might_fault+0xaa/0x120 [ 201.296917][ T6786] ? __lock_acquire+0x7d40/0x7d40 [ 201.302003][ T6786] should_fail_ex+0x39d/0x4d0 [ 201.306754][ T6786] _copy_from_user+0x2f/0xe0 [ 201.311435][ T6786] __sys_bpf+0x23e/0x890 [ 201.315737][ T6786] ? bpf_link_show_fdinfo+0x390/0x390 [ 201.321174][ T6786] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 201.327396][ T6786] __x64_sys_bpf+0x7c/0x90 [ 201.331871][ T6786] do_syscall_64+0x55/0xa0 [ 201.336340][ T6786] ? clear_bhb_loop+0x40/0x90 [ 201.341051][ T6786] ? clear_bhb_loop+0x40/0x90 [ 201.345763][ T6786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.351689][ T6786] RIP: 0033:0x7f3a72d9bf79 [ 201.356139][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.375773][ T6786] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.384224][ T6786] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 201.392218][ T6786] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 201.400240][ T6786] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.408230][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.416227][ T6786] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 201.424239][ T6786] [ 204.694121][ T6805] netlink: 'syz.2.250': attribute type 10 has an invalid length. [ 207.525327][ T6805] team0: Port device syz_tun added [ 208.932010][ T6847] FAULT_INJECTION: forcing a failure. [ 208.932010][ T6847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.984016][ T6847] CPU: 0 PID: 6847 Comm: syz.0.262 Not tainted syzkaller #0 [ 208.991469][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.001568][ T6847] Call Trace: [ 209.004870][ T6847] [ 209.007838][ T6847] dump_stack_lvl+0x18c/0x250 [ 209.012556][ T6847] ? show_regs_print_info+0x20/0x20 [ 209.017792][ T6847] ? load_image+0x400/0x400 [ 209.022331][ T6847] ? __lock_acquire+0x7d40/0x7d40 [ 209.027390][ T6847] ? snprintf+0xe9/0x140 [ 209.031665][ T6847] should_fail_ex+0x39d/0x4d0 [ 209.036378][ T6847] _copy_to_user+0x2f/0xa0 [ 209.040830][ T6847] simple_read_from_buffer+0xe7/0x150 [ 209.046251][ T6847] proc_fail_nth_read+0x1e8/0x260 [ 209.051310][ T6847] ? proc_fault_inject_write+0x360/0x360 [ 209.056973][ T6847] ? fsnotify_perm+0x271/0x5e0 [ 209.061775][ T6847] ? proc_fault_inject_write+0x360/0x360 [ 209.067445][ T6847] vfs_read+0x28b/0x970 [ 209.071638][ T6847] ? kernel_read+0x1e0/0x1e0 [ 209.076258][ T6847] ? __fget_files+0x28/0x4b0 [ 209.080878][ T6847] ? __fget_files+0x28/0x4b0 [ 209.085517][ T6847] ? __fget_files+0x43d/0x4b0 [ 209.090234][ T6847] ? __fdget_pos+0x2a3/0x330 [ 209.094871][ T6847] ? ksys_read+0x75/0x260 [ 209.099247][ T6847] ksys_read+0x150/0x260 [ 209.103533][ T6847] ? vfs_write+0x990/0x990 [ 209.107990][ T6847] ? lockdep_hardirqs_on+0x98/0x150 [ 209.113215][ T6847] do_syscall_64+0x55/0xa0 [ 209.117662][ T6847] ? clear_bhb_loop+0x40/0x90 [ 209.122394][ T6847] ? clear_bhb_loop+0x40/0x90 [ 209.127108][ T6847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.133040][ T6847] RIP: 0033:0x7f3dd875c84e [ 209.137483][ T6847] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.157113][ T6847] RSP: 002b:00007f3dd96e8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.165553][ T6847] RAX: ffffffffffffffda RBX: 00007f3dd96e96c0 RCX: 00007f3dd875c84e [ 209.173551][ T6847] RDX: 000000000000000f RSI: 00007f3dd96e90a0 RDI: 0000000000000006 [ 209.181559][ T6847] RBP: 00007f3dd96e9090 R08: 0000000000000000 R09: 0000000000000000 [ 209.189550][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.197571][ T6847] R13: 00007f3dd8a16038 R14: 00007f3dd8a15fa0 R15: 00007fff87230ea8 [ 209.205578][ T6847] [ 212.028127][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 212.028164][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.034345][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 212.041865][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 213.161813][ T6895] netlink: 'syz.1.274': attribute type 27 has an invalid length. [ 213.264053][ T6895] netlink: 164 bytes leftover after parsing attributes in process `syz.1.274'. [ 213.388617][ T6892] netlink: 'syz.1.274': attribute type 33 has an invalid length. [ 213.403895][ T6892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'. [ 222.993979][ T6976] Dead loop on virtual device ip6_vti0, fix it urgently! [ 225.083167][ T7017] netlink: 'syz.1.310': attribute type 2 has an invalid length. [ 225.091080][ T7017] netlink: 164 bytes leftover after parsing attributes in process `syz.1.310'. [ 228.600923][ T7050] FAULT_INJECTION: forcing a failure. [ 228.600923][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 228.647675][ T7050] CPU: 1 PID: 7050 Comm: syz.0.319 Not tainted syzkaller #0 [ 228.655048][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 228.665160][ T7050] Call Trace: [ 228.668480][ T7050] [ 228.671459][ T7050] dump_stack_lvl+0x18c/0x250 [ 228.676198][ T7050] ? show_regs_print_info+0x20/0x20 [ 228.681453][ T7050] ? load_image+0x400/0x400 [ 228.686004][ T7050] ? __might_sleep+0xe0/0xe0 [ 228.690644][ T7050] ? __lock_acquire+0x7d40/0x7d40 [ 228.695723][ T7050] ? perf_trace_preemptirq_template+0x269/0x330 [ 228.702026][ T7050] should_fail_ex+0x39d/0x4d0 [ 228.706767][ T7050] should_failslab+0x9/0x20 [ 228.711322][ T7050] slab_pre_alloc_hook+0x59/0x310 [ 228.716399][ T7050] ? lock_chain_count+0x20/0x20 [ 228.721290][ T7050] ? sk_prot_alloc+0xe7/0x210 [ 228.726021][ T7050] ? sk_prot_alloc+0xe7/0x210 [ 228.730742][ T7050] __kmem_cache_alloc_node+0x53/0x250 [ 228.736188][ T7050] ? sk_prot_alloc+0xe7/0x210 [ 228.740923][ T7050] __kmalloc+0xa4/0x230 [ 228.745141][ T7050] sk_prot_alloc+0xe7/0x210 [ 228.749701][ T7050] ? sk_alloc+0x24/0x360 [ 228.753995][ T7050] sk_alloc+0x3a/0x360 [ 228.758111][ T7050] ? bpf_ctx_init+0x163/0x1a0 [ 228.762829][ T7050] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 228.768433][ T7050] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 228.773857][ T7050] ? __fget_files+0x28/0x4b0 [ 228.778496][ T7050] ? __fget_files+0x28/0x4b0 [ 228.783132][ T7050] ? __fget_files+0x43d/0x4b0 [ 228.787876][ T7050] ? cpu_online+0x60/0x60 [ 228.792265][ T7050] bpf_prog_test_run+0x321/0x390 [ 228.797269][ T7050] __sys_bpf+0x49d/0x890 [ 228.801557][ T7050] ? bpf_link_show_fdinfo+0x390/0x390 [ 228.806992][ T7050] ? lock_chain_count+0x20/0x20 [ 228.811891][ T7050] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 228.817926][ T7050] __x64_sys_bpf+0x7c/0x90 [ 228.822395][ T7050] do_syscall_64+0x55/0xa0 [ 228.826862][ T7050] ? clear_bhb_loop+0x40/0x90 [ 228.831583][ T7050] ? clear_bhb_loop+0x40/0x90 [ 228.836311][ T7050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 228.842306][ T7050] RIP: 0033:0x7f3dd879bf79 [ 228.846766][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.866423][ T7050] RSP: 002b:00007f3dd96e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.874893][ T7050] RAX: ffffffffffffffda RBX: 00007f3dd8a15fa0 RCX: 00007f3dd879bf79 [ 228.882912][ T7050] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 228.890935][ T7050] RBP: 00007f3dd96e9090 R08: 0000000000000000 R09: 0000000000000000 [ 228.898953][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.906973][ T7050] R13: 00007f3dd8a16038 R14: 00007f3dd8a15fa0 R15: 00007fff87230ea8 [ 228.915008][ T7050] [ 229.270177][ T7062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.324'. [ 230.917184][ T7101] netlink: 'syz.1.334': attribute type 3 has an invalid length. [ 230.934060][ T7101] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.334'. [ 231.196779][ T7105] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.335'. [ 231.389834][ T7107] delete_channel: no stack [ 231.407021][ T7107] delete_channel: no stack [ 232.632396][ T7138] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 233.025656][ T7142] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 235.326679][ T7160] FAULT_INJECTION: forcing a failure. [ 235.326679][ T7160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.377335][ T7160] CPU: 0 PID: 7160 Comm: syz.2.355 Not tainted syzkaller #0 [ 235.384710][ T7160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.394821][ T7160] Call Trace: [ 235.398138][ T7160] [ 235.401103][ T7160] dump_stack_lvl+0x18c/0x250 [ 235.406196][ T7160] ? show_regs_print_info+0x20/0x20 [ 235.411460][ T7160] ? load_image+0x400/0x400 [ 235.416030][ T7160] ? __might_fault+0xaa/0x120 [ 235.420764][ T7160] ? __lock_acquire+0x7d40/0x7d40 [ 235.425864][ T7160] should_fail_ex+0x39d/0x4d0 [ 235.430617][ T7160] _copy_from_user+0x2f/0xe0 [ 235.435270][ T7160] ___sys_sendmsg+0x1c7/0x360 [ 235.440041][ T7160] ? get_pid_task+0x20/0x1e0 [ 235.444702][ T7160] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.449543][ T7160] ? __lock_acquire+0x7d40/0x7d40 [ 235.454659][ T7160] __se_sys_sendmsg+0x1c2/0x2b0 [ 235.459572][ T7160] ? __x64_sys_sendmsg+0x80/0x80 [ 235.464583][ T7160] ? lockdep_hardirqs_on+0x98/0x150 [ 235.469844][ T7160] do_syscall_64+0x55/0xa0 [ 235.474322][ T7160] ? clear_bhb_loop+0x40/0x90 [ 235.479033][ T7160] ? clear_bhb_loop+0x40/0x90 [ 235.483750][ T7160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.489781][ T7160] RIP: 0033:0x7f1bb5f9bf79 [ 235.494237][ T7160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.513891][ T7160] RSP: 002b:00007f1bb6e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.522346][ T7160] RAX: ffffffffffffffda RBX: 00007f1bb6215fa0 RCX: 00007f1bb5f9bf79 [ 235.530347][ T7160] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 235.538349][ T7160] RBP: 00007f1bb6e70090 R08: 0000000000000000 R09: 0000000000000000 [ 235.546356][ T7160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.554378][ T7160] R13: 00007f1bb6216038 R14: 00007f1bb6215fa0 R15: 00007ffc3a6e51b8 [ 235.562489][ T7160] [ 235.880671][ T7177] netlink: 'syz.0.360': attribute type 10 has an invalid length. [ 243.715046][ T5774] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 244.133306][ T5774] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 244.233428][ T5082] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 246.184264][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 246.353849][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 247.220288][ T5082] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 247.734882][ T7299] netlink: 'syz.1.399': attribute type 3 has an invalid length. [ 247.822858][ T7299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.399'. [ 248.113783][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.402'. [ 248.139655][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.402'. [ 248.338932][ T7308] netlink: 60 bytes leftover after parsing attributes in process `syz.3.402'. [ 248.603911][ T7316] netlink: 'syz.0.404': attribute type 11 has an invalid length. [ 250.832682][ T7332] vlan0: entered allmulticast mode [ 250.853357][ T7332] veth0_vlan: entered allmulticast mode [ 251.182152][ T7348] netlink: 'syz.0.413': attribute type 7 has an invalid length. [ 251.196907][ T7348] netlink: 140 bytes leftover after parsing attributes in process `syz.0.413'. [ 254.167807][ T7349] syz.3.414 (7349) used greatest stack depth: 19432 bytes left [ 254.984928][ T7363] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.419'. [ 255.235190][ T7373] FAULT_INJECTION: forcing a failure. [ 255.235190][ T7373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.262690][ T7373] CPU: 0 PID: 7373 Comm: syz.1.423 Not tainted syzkaller #0 [ 255.270056][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.280199][ T7373] Call Trace: [ 255.283535][ T7373] [ 255.286522][ T7373] dump_stack_lvl+0x18c/0x250 [ 255.291268][ T7373] ? show_regs_print_info+0x20/0x20 [ 255.296528][ T7373] ? load_image+0x400/0x400 [ 255.301093][ T7373] ? __might_fault+0xaa/0x120 [ 255.305829][ T7373] ? __lock_acquire+0x7d40/0x7d40 [ 255.310925][ T7373] should_fail_ex+0x39d/0x4d0 [ 255.315669][ T7373] _copy_from_user+0x2f/0xe0 [ 255.320318][ T7373] ___sys_sendmsg+0x1c7/0x360 [ 255.325064][ T7373] ? get_pid_task+0x20/0x1e0 [ 255.329738][ T7373] ? __sys_sendmsg+0x2a0/0x2a0 [ 255.334615][ T7373] ? __lock_acquire+0x7d40/0x7d40 [ 255.339715][ T7373] __se_sys_sendmsg+0x1c2/0x2b0 [ 255.344589][ T7373] ? __x64_sys_sendmsg+0x80/0x80 [ 255.349562][ T7373] ? lockdep_hardirqs_on+0x98/0x150 [ 255.354794][ T7373] do_syscall_64+0x55/0xa0 [ 255.359232][ T7373] ? clear_bhb_loop+0x40/0x90 [ 255.363958][ T7373] ? clear_bhb_loop+0x40/0x90 [ 255.368672][ T7373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.374581][ T7373] RIP: 0033:0x7f4b5719bf79 [ 255.379002][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.398632][ T7373] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.407065][ T7373] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 255.415069][ T7373] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000004 [ 255.423048][ T7373] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 255.431029][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.439015][ T7373] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 255.447102][ T7373] [ 256.217276][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.234188][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.191163][ T7408] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.434'. [ 259.662054][ T7424] netlink: 'syz.3.437': attribute type 7 has an invalid length. [ 259.725778][ T7417] can: request_module (can-proto-0) failed. [ 259.985777][ T7429] netlink: 'syz.3.437': attribute type 10 has an invalid length. [ 263.057645][ T7447] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.445'. [ 263.106337][ T7447] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 263.522332][ T7454] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.446'. [ 271.361591][ T7518] Dead loop on virtual device ip6_vti0, fix it urgently! [ 271.845469][ T7525] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.466'. [ 273.468960][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.475'. [ 273.494750][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.475'. [ 273.539217][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.475'. [ 273.559895][ T7555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.475'. [ 273.586789][ T7557] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 273.937096][ T7564] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.479'. [ 276.969938][ T7577] delete_channel: no stack [ 277.074791][ T7587] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 277.232016][ T7591] netlink: 'syz.0.486': attribute type 7 has an invalid length. [ 277.388956][ T7585] can: request_module (can-proto-0) failed. [ 277.504906][ T7593] netlink: 'syz.0.486': attribute type 10 has an invalid length. [ 277.933140][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.489'. [ 277.997597][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.489'. [ 278.112466][ T7602] netlink: 60 bytes leftover after parsing attributes in process `syz.0.489'. [ 278.135532][ T7605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.489'. [ 278.211478][ T7609] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.494'. [ 278.388486][ T7612] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 278.625063][ T7622] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 279.238033][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 279.266013][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 279.314844][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 279.384918][ T7636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 279.622138][ T7641] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 279.938066][ T7651] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.510'. [ 280.623436][ T7666] netlink: 'syz.3.518': attribute type 10 has an invalid length. [ 281.139995][ T7679] netlink: 'syz.3.521': attribute type 9 has an invalid length. [ 281.683963][ T7677] netlink: 'syz.3.521': attribute type 9 has an invalid length. [ 281.693225][ T7679] syz.3.521 (7679) used greatest stack depth: 18472 bytes left [ 281.709324][ T7691] FAULT_INJECTION: forcing a failure. [ 281.709324][ T7691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.771622][ T7691] CPU: 0 PID: 7691 Comm: syz.1.526 Not tainted syzkaller #0 [ 281.779008][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.789118][ T7691] Call Trace: [ 281.792445][ T7691] [ 281.795423][ T7691] dump_stack_lvl+0x18c/0x250 [ 281.800170][ T7691] ? show_regs_print_info+0x20/0x20 [ 281.805425][ T7691] ? load_image+0x400/0x400 [ 281.809977][ T7691] ? __lock_acquire+0x7d40/0x7d40 [ 281.815077][ T7691] should_fail_ex+0x39d/0x4d0 [ 281.819822][ T7691] prepare_alloc_pages+0x1e2/0x5f0 [ 281.825009][ T7691] __alloc_pages+0x134/0x460 [ 281.829647][ T7691] ? zone_statistics+0x170/0x170 [ 281.834648][ T7691] ? alloc_pages+0x4dc/0x740 [ 281.839281][ T7691] ? do_raw_spin_unlock+0x121/0x230 [ 281.844537][ T7691] __get_free_pages+0xc/0x30 [ 281.849170][ T7691] kasan_populate_vmalloc_pte+0x35/0x100 [ 281.854881][ T7691] __apply_to_page_range+0x860/0xdd0 [ 281.860240][ T7691] ? kasan_populate_vmalloc+0x70/0x70 [ 281.865674][ T7691] ? apply_to_page_range+0x50/0x50 [ 281.870850][ T7691] ? do_raw_spin_unlock+0x121/0x230 [ 281.876107][ T7691] alloc_vmap_area+0x1d0c/0x1e30 [ 281.881126][ T7691] ? vm_map_ram+0xcb0/0xcb0 [ 281.885691][ T7691] ? rcu_is_watching+0x15/0xb0 [ 281.890517][ T7691] __get_vm_area_node+0x162/0x370 [ 281.895619][ T7691] __vmalloc_node_range+0x36e/0x1330 [ 281.900962][ T7691] ? dev_map_alloc+0x1f6/0x4c0 [ 281.905805][ T7691] ? free_vm_area+0x50/0x50 [ 281.910365][ T7691] ? rcu_is_watching+0x15/0xb0 [ 281.915185][ T7691] ? bpf_map_area_alloc+0x5e/0x110 [ 281.920364][ T7691] bpf_map_area_alloc+0xf1/0x110 [ 281.925363][ T7691] ? dev_map_alloc+0x1f6/0x4c0 [ 281.930175][ T7691] dev_map_alloc+0x1f6/0x4c0 [ 281.934822][ T7691] map_create+0x877/0x12f0 [ 281.939297][ T7691] ? bpf_lsm_bpf+0x9/0x10 [ 281.943696][ T7691] __sys_bpf+0x651/0x890 [ 281.948007][ T7691] ? bpf_link_show_fdinfo+0x390/0x390 [ 281.953451][ T7691] ? lock_chain_count+0x20/0x20 [ 281.958407][ T7691] __x64_sys_bpf+0x7c/0x90 [ 281.962876][ T7691] do_syscall_64+0x55/0xa0 [ 281.967342][ T7691] ? clear_bhb_loop+0x40/0x90 [ 281.972089][ T7691] ? clear_bhb_loop+0x40/0x90 [ 281.976813][ T7691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.982755][ T7691] RIP: 0033:0x7f4b5719bf79 [ 281.987296][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.006945][ T7691] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.015416][ T7691] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 282.023431][ T7691] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 282.031432][ T7691] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 282.039438][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.047446][ T7691] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 282.055467][ T7691] [ 282.617637][ T7702] netlink: 'syz.0.530': attribute type 10 has an invalid length. [ 282.876764][ T7706] FAULT_INJECTION: forcing a failure. [ 282.876764][ T7706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.890336][ T7706] CPU: 1 PID: 7706 Comm: syz.3.532 Not tainted syzkaller #0 [ 282.897683][ T7706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.907793][ T7706] Call Trace: [ 282.911142][ T7706] [ 282.914116][ T7706] dump_stack_lvl+0x18c/0x250 [ 282.918855][ T7706] ? show_regs_print_info+0x20/0x20 [ 282.924116][ T7706] ? load_image+0x400/0x400 [ 282.928681][ T7706] ? __might_fault+0xaa/0x120 [ 282.933415][ T7706] ? __lock_acquire+0x7d40/0x7d40 [ 282.938495][ T7706] should_fail_ex+0x39d/0x4d0 [ 282.943237][ T7706] _copy_to_user+0x2f/0xa0 [ 282.947711][ T7706] bpf_test_finish+0x4e7/0x650 [ 282.952528][ T7706] ? convert___skb_to_skb+0x590/0x590 [ 282.957969][ T7706] ? convert_skb_to___skb+0x420/0x420 [ 282.963412][ T7706] ? slab_build_skb+0x25f/0x3f0 [ 282.968326][ T7706] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 282.973767][ T7706] ? cpu_online+0x60/0x60 [ 282.978152][ T7706] bpf_prog_test_run+0x321/0x390 [ 282.983151][ T7706] __sys_bpf+0x49d/0x890 [ 282.987458][ T7706] ? bpf_link_show_fdinfo+0x390/0x390 [ 282.992937][ T7706] ? lock_chain_count+0x20/0x20 [ 282.997868][ T7706] __x64_sys_bpf+0x7c/0x90 [ 283.002433][ T7706] do_syscall_64+0x55/0xa0 [ 283.006916][ T7706] ? clear_bhb_loop+0x40/0x90 [ 283.011652][ T7706] ? clear_bhb_loop+0x40/0x90 [ 283.016394][ T7706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.022339][ T7706] RIP: 0033:0x7f3a72d9bf79 [ 283.026807][ T7706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.046559][ T7706] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.055114][ T7706] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 283.063146][ T7706] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 283.071253][ T7706] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.079277][ T7706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.087299][ T7706] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 283.095336][ T7706] [ 283.459184][ T7715] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 283.488018][ T7715] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 283.599015][ T7721] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 283.636899][ T7725] __nla_validate_parse: 8 callbacks suppressed [ 283.636914][ T7725] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.540'. [ 283.703850][ T7718] delete_channel: no stack [ 283.887193][ T7733] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 284.894820][ T7759] FAULT_INJECTION: forcing a failure. [ 284.894820][ T7759] name failslab, interval 1, probability 0, space 0, times 0 [ 284.964885][ T7759] CPU: 1 PID: 7759 Comm: syz.0.552 Not tainted syzkaller #0 [ 284.972348][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.982477][ T7759] Call Trace: [ 284.985799][ T7759] [ 284.988767][ T7759] dump_stack_lvl+0x18c/0x250 [ 284.993517][ T7759] ? show_regs_print_info+0x20/0x20 [ 284.998782][ T7759] ? load_image+0x400/0x400 [ 285.003345][ T7759] ? __might_sleep+0xe0/0xe0 [ 285.008025][ T7759] ? __lock_acquire+0x7d40/0x7d40 [ 285.013115][ T7759] should_fail_ex+0x39d/0x4d0 [ 285.017863][ T7759] should_failslab+0x9/0x20 [ 285.020355][ T7753] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 285.022402][ T7759] slab_pre_alloc_hook+0x59/0x310 [ 285.035280][ T7759] ? register_netdevice+0x573/0x1bb0 [ 285.040624][ T7759] __kmem_cache_alloc_node+0x53/0x250 [ 285.046066][ T7759] ? register_netdevice+0x573/0x1bb0 [ 285.051422][ T7759] kmalloc_trace+0x2a/0xe0 [ 285.055907][ T7759] register_netdevice+0x573/0x1bb0 [ 285.061170][ T7759] ? netif_stacked_transfer_operstate+0x210/0x210 [ 285.067637][ T7759] ? __lock_acquire+0x7d40/0x7d40 [ 285.072718][ T7759] ? net_generic+0x1e/0x240 [ 285.077312][ T7759] vti6_tnl_create2+0x80/0x140 [ 285.082135][ T7759] vti6_locate+0x682/0x770 [ 285.086605][ T7759] ? vti6_parm_from_user+0x250/0x250 [ 285.091934][ T7759] ? __might_fault+0xaa/0x120 [ 285.096635][ T7759] ? __might_fault+0xc6/0x120 [ 285.101332][ T7759] ? __might_fault+0xaa/0x120 [ 285.106124][ T7759] ? vti6_siocdevprivate+0x696/0xa90 [ 285.111448][ T7759] vti6_siocdevprivate+0x6ba/0xa90 [ 285.116685][ T7759] ? vti6_tnl_xmit+0x1910/0x1910 [ 285.121655][ T7759] ? __mutex_lock+0x315/0xcc0 [ 285.126370][ T7759] ? dev_ioctl+0x83c/0x1140 [ 285.130913][ T7759] ? dev_ifsioc+0x958/0xc40 [ 285.135450][ T7759] dev_ioctl+0x84c/0x1140 [ 285.139809][ T7759] sock_ioctl+0x74c/0x7e0 [ 285.144165][ T7759] ? sock_poll+0x3e0/0x3e0 [ 285.148646][ T7759] ? bpf_lsm_file_ioctl+0x9/0x10 [ 285.153611][ T7759] ? security_file_ioctl+0x80/0xa0 [ 285.158760][ T7759] ? sock_poll+0x3e0/0x3e0 [ 285.163202][ T7759] __se_sys_ioctl+0xfd/0x170 [ 285.167830][ T7759] do_syscall_64+0x55/0xa0 [ 285.172278][ T7759] ? clear_bhb_loop+0x40/0x90 [ 285.176979][ T7759] ? clear_bhb_loop+0x40/0x90 [ 285.181774][ T7759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.187690][ T7759] RIP: 0033:0x7f3dd879bf79 [ 285.192128][ T7759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.211799][ T7759] RSP: 002b:00007f3dd96e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.220246][ T7759] RAX: ffffffffffffffda RBX: 00007f3dd8a15fa0 RCX: 00007f3dd879bf79 [ 285.228329][ T7759] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 285.236328][ T7759] RBP: 00007f3dd96e9090 R08: 0000000000000000 R09: 0000000000000000 [ 285.244321][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 285.252312][ T7759] R13: 00007f3dd8a16038 R14: 00007f3dd8a15fa0 R15: 00007fff87230ea8 [ 285.260322][ T7759] [ 285.343592][ T7753] netlink: 'syz.3.550': attribute type 29 has an invalid length. [ 285.615178][ T7775] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 285.931892][ T7773] syz.2.556: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 286.208788][ T7773] CPU: 1 PID: 7773 Comm: syz.2.556 Not tainted syzkaller #0 [ 286.216195][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 286.226305][ T7773] Call Trace: [ 286.229653][ T7773] [ 286.232646][ T7773] dump_stack_lvl+0x18c/0x250 [ 286.237429][ T7773] ? show_regs_print_info+0x20/0x20 [ 286.242802][ T7773] ? load_image+0x400/0x400 [ 286.247423][ T7773] ? __rcu_read_unlock+0x7c/0xd0 [ 286.252425][ T7773] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 286.258909][ T7773] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 286.265486][ T7773] warn_alloc+0x246/0x340 [ 286.269892][ T7773] ? stack_trace_save+0xaa/0x100 [ 286.274903][ T7773] ? zone_watermark_ok_safe+0x230/0x230 [ 286.280523][ T7773] ? kasan_set_track+0x5f/0x70 [ 286.285350][ T7773] ? kasan_set_track+0x4e/0x70 [ 286.290180][ T7773] ? __kasan_kmalloc+0x8f/0xa0 [ 286.295002][ T7773] ? xsk_init_queue+0xad/0x100 [ 286.299830][ T7773] ? xsk_setsockopt+0x4e5/0x760 [ 286.304755][ T7773] ? do_sock_setsockopt+0x175/0x1a0 [ 286.310033][ T7773] ? __x64_sys_setsockopt+0x182/0x200 [ 286.315491][ T7773] __vmalloc_node_range+0x126/0x1330 [ 286.320888][ T7773] ? free_vm_area+0x50/0x50 [ 286.325520][ T7773] vmalloc_user+0x74/0x80 [ 286.329932][ T7773] ? xskq_create+0xbf/0x170 [ 286.334502][ T7773] xskq_create+0xbf/0x170 [ 286.338900][ T7773] xsk_init_queue+0xad/0x100 [ 286.343555][ T7773] xsk_setsockopt+0x4e5/0x760 [ 286.348293][ T7773] ? xsk_poll+0x680/0x680 [ 286.352674][ T7773] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.358893][ T7773] ? xsk_poll+0x680/0x680 [ 286.363290][ T7773] ? do_sock_setsockopt+0x15e/0x1a0 [ 286.368560][ T7773] ? xsk_poll+0x680/0x680 [ 286.372948][ T7773] do_sock_setsockopt+0x175/0x1a0 [ 286.378035][ T7773] ? __fdget+0x180/0x210 [ 286.382363][ T7773] __x64_sys_setsockopt+0x182/0x200 [ 286.387656][ T7773] do_syscall_64+0x55/0xa0 [ 286.392130][ T7773] ? clear_bhb_loop+0x40/0x90 [ 286.396859][ T7773] ? clear_bhb_loop+0x40/0x90 [ 286.401599][ T7773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.407569][ T7773] RIP: 0033:0x7f1bb5f9bf79 [ 286.412036][ T7773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.431708][ T7773] RSP: 002b:00007f1bb6e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 286.440185][ T7773] RAX: ffffffffffffffda RBX: 00007f1bb6215fa0 RCX: 00007f1bb5f9bf79 [ 286.448223][ T7773] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 286.456249][ T7773] RBP: 00007f1bb60327e0 R08: 0000000000000004 R09: 0000000000000000 [ 286.464282][ T7773] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 286.472401][ T7773] R13: 00007f1bb6216038 R14: 00007f1bb6215fa0 R15: 00007ffc3a6e51b8 [ 286.480461][ T7773] [ 286.499580][ T7778] vcan0: entered allmulticast mode [ 286.508311][ T7773] Mem-Info: [ 286.512720][ T7773] active_anon:5343 inactive_anon:0 isolated_anon:0 [ 286.512720][ T7773] active_file:11552 inactive_file:40005 isolated_file:0 [ 286.512720][ T7773] unevictable:768 dirty:315 writeback:0 [ 286.512720][ T7773] slab_reclaimable:9975 slab_unreclaimable:93013 [ 286.512720][ T7773] mapped:24694 shmem:1361 pagetables:567 [ 286.512720][ T7773] sec_pagetables:0 bounce:0 [ 286.512720][ T7773] kernel_misc_reclaimable:0 [ 286.512720][ T7773] free:1349948 free_pcp:10547 free_cma:0 [ 286.588093][ T7773] Node 0 active_anon:21372kB inactive_anon:0kB active_file:46208kB inactive_file:159820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102776kB dirty:1260kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11632kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no [ 286.623342][ T7773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 286.664614][ T7773] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 286.692444][ T7789] netlink: 'syz.0.563': attribute type 21 has an invalid length. [ 286.693056][ T7789] netlink: 156 bytes leftover after parsing attributes in process `syz.0.563'. [ 286.726007][ T7773] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 286.740872][ T7773] Node 0 DMA32 free:1493448kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21332kB inactive_anon:0kB active_file:46208kB inactive_file:159000kB unevictable:1536kB writepending:1260kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:9584kB free_cma:0kB [ 286.815042][ T7773] lowmem_reserve[]: 0 0 0 0 0 [ 286.822106][ T7773] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 286.879290][ T7773] lowmem_reserve[]: 0 0 0 0 0 [ 286.890288][ T7773] Node 1 Normal free:3889840kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21668kB local_pcp:11584kB free_cma:0kB [ 286.931263][ T7773] lowmem_reserve[]: 0 0 0 0 0 [ 286.939474][ T7773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.979954][ T7797] netlink: 'syz.1.564': attribute type 10 has an invalid length. [ 286.993888][ T7799] FAULT_INJECTION: forcing a failure. [ 286.993888][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.007831][ T7799] CPU: 1 PID: 7799 Comm: syz.3.565 Not tainted syzkaller #0 [ 287.015184][ T7799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 287.025309][ T7799] Call Trace: [ 287.028632][ T7799] [ 287.030593][ T7773] Node 0 [ 287.031585][ T7799] dump_stack_lvl+0x18c/0x250 [ 287.031628][ T7799] ? show_regs_print_info+0x20/0x20 [ 287.031659][ T7799] ? load_image+0x400/0x400 [ 287.031688][ T7799] ? __lock_acquire+0x7d40/0x7d40 [ 287.031713][ T7799] ? __virt_addr_valid+0x18c/0x540 [ 287.031747][ T7799] should_fail_ex+0x39d/0x4d0 [ 287.031784][ T7799] _copy_to_user+0x2f/0xa0 [ 287.035248][ T7773] DMA32: [ 287.039523][ T7799] map_get_next_key+0x4fd/0x620 [ 287.039559][ T7799] ? map_get_next_key+0x2d7/0x620 [ 287.039587][ T7799] __sys_bpf+0x715/0x890 [ 287.039613][ T7799] ? bpf_link_show_fdinfo+0x390/0x390 [ 287.039668][ T7799] ? lock_chain_count+0x20/0x20 [ 287.096020][ T7799] __x64_sys_bpf+0x7c/0x90 [ 287.100470][ T7799] do_syscall_64+0x55/0xa0 [ 287.105011][ T7799] ? clear_bhb_loop+0x40/0x90 [ 287.109749][ T7799] ? clear_bhb_loop+0x40/0x90 [ 287.114455][ T7799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.120458][ T7799] RIP: 0033:0x7f3a72d9bf79 [ 287.124895][ T7799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.144537][ T7799] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.152979][ T7799] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 287.161001][ T7799] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 287.168997][ T7799] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 287.176993][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.184984][ T7799] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 287.192990][ T7799] [ 287.203248][ T7773] 1454*4kB (UME) 1028*8kB (UM) 1101*16kB (UME) 319*32kB (UME) 404*64kB (UM) 68*128kB (UME) 23*256kB (UM) 8*512kB (ME) 5*1024kB (UME) 5*2048kB (UME) 339*4096kB (UM) = 1490312kB [ 287.225773][ T7797] syz_tun: entered promiscuous mode [ 287.231556][ T7773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 287.278224][ T7773] Node 1 Normal: 208*4kB (UME) 52*8kB (UME) 41*16kB (UME) 58*32kB (UME) 12*64kB (UE) 6*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889840kB [ 287.308357][ T7797] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 287.338306][ T7773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.383207][ T7773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.421639][ T7773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.442371][ T7773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.452366][ T7773] 52920 total pagecache pages [ 287.457864][ T7773] 0 pages in swap cache [ 287.462075][ T7773] Free swap = 124996kB [ 287.467348][ T7773] Total swap = 124996kB [ 287.471639][ T7773] 2097051 pages RAM [ 287.476110][ T7773] 0 pages HighMem/MovableOnly [ 287.480999][ T7773] 416922 pages reserved [ 287.501352][ T7773] 0 pages cma reserved [ 287.910375][ T7808] netlink: 'syz.2.568': attribute type 29 has an invalid length. [ 287.925936][ T7808] netlink: 'syz.2.568': attribute type 29 has an invalid length. [ 287.964676][ T7808] netlink: 'syz.2.568': attribute type 29 has an invalid length. [ 288.579545][ T7829] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.574'. [ 290.006415][ T7865] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.589'. [ 294.159315][ T7938] delete_channel: no stack [ 294.911179][ T7962] netlink: 'syz.2.618': attribute type 21 has an invalid length. [ 294.949923][ T7962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.618'. [ 296.924087][ T7995] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 297.188117][ T7988] syz.1.626: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 297.310804][ T7988] CPU: 0 PID: 7988 Comm: syz.1.626 Not tainted syzkaller #0 [ 297.318212][ T7988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 297.328341][ T7988] Call Trace: [ 297.331715][ T7988] [ 297.334729][ T7988] dump_stack_lvl+0x18c/0x250 [ 297.339525][ T7988] ? show_regs_print_info+0x20/0x20 [ 297.344821][ T7988] ? load_image+0x400/0x400 [ 297.349425][ T7988] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 297.355933][ T7988] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 297.362526][ T7988] warn_alloc+0x246/0x340 [ 297.366946][ T7988] ? stack_trace_save+0xaa/0x100 [ 297.371984][ T7988] ? zone_watermark_ok_safe+0x230/0x230 [ 297.377655][ T7988] ? kasan_set_track+0x5f/0x70 [ 297.382486][ T7988] ? kasan_set_track+0x4e/0x70 [ 297.387313][ T7988] ? __kasan_kmalloc+0x8f/0xa0 [ 297.392137][ T7988] ? xsk_init_queue+0xad/0x100 [ 297.396953][ T7988] ? xsk_setsockopt+0x4e5/0x760 [ 297.401864][ T7988] ? do_sock_setsockopt+0x175/0x1a0 [ 297.407119][ T7988] ? __x64_sys_setsockopt+0x182/0x200 [ 297.412576][ T7988] __vmalloc_node_range+0x126/0x1330 [ 297.418020][ T7988] ? free_vm_area+0x50/0x50 [ 297.422621][ T7988] vmalloc_user+0x74/0x80 [ 297.427008][ T7988] ? xskq_create+0xbf/0x170 [ 297.431582][ T7988] xskq_create+0xbf/0x170 [ 297.435995][ T7988] xsk_init_queue+0xad/0x100 [ 297.440650][ T7988] xsk_setsockopt+0x4e5/0x760 [ 297.445391][ T7988] ? xsk_poll+0x680/0x680 [ 297.449791][ T7988] ? __fget_files+0x28/0x4b0 [ 297.454443][ T7988] ? __fget_files+0x28/0x4b0 [ 297.459106][ T7988] ? aa_sock_opt_perm+0x74/0x100 [ 297.464123][ T7988] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 297.469743][ T7988] ? security_socket_setsockopt+0x7e/0xa0 [ 297.475599][ T7988] ? xsk_poll+0x680/0x680 [ 297.479998][ T7988] do_sock_setsockopt+0x175/0x1a0 [ 297.485092][ T7988] ? __fdget+0x180/0x210 [ 297.489429][ T7988] __x64_sys_setsockopt+0x182/0x200 [ 297.494716][ T7988] do_syscall_64+0x55/0xa0 [ 297.499199][ T7988] ? clear_bhb_loop+0x40/0x90 [ 297.503940][ T7988] ? clear_bhb_loop+0x40/0x90 [ 297.508695][ T7988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.514672][ T7988] RIP: 0033:0x7f4b5719bf79 [ 297.519157][ T7988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.538825][ T7988] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.547313][ T7988] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 297.555334][ T7988] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 297.563354][ T7988] RBP: 00007f4b572327e0 R08: 0000000000000004 R09: 0000000000000000 [ 297.571372][ T7988] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 297.579391][ T7988] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 297.587494][ T7988] [ 297.731400][ T8004] vcan0: entered allmulticast mode [ 297.879091][ T7988] Mem-Info: [ 297.882511][ T7988] active_anon:5339 inactive_anon:0 isolated_anon:0 [ 297.882511][ T7988] active_file:11552 inactive_file:40011 isolated_file:0 [ 297.882511][ T7988] unevictable:768 dirty:137 writeback:0 [ 297.882511][ T7988] slab_reclaimable:10114 slab_unreclaimable:92743 [ 297.882511][ T7988] mapped:24729 shmem:1361 pagetables:546 [ 297.882511][ T7988] sec_pagetables:0 bounce:0 [ 297.882511][ T7988] kernel_misc_reclaimable:0 [ 297.882511][ T7988] free:1350566 free_pcp:10901 free_cma:0 [ 297.962536][ T7988] Node 0 active_anon:21356kB inactive_anon:0kB active_file:46208kB inactive_file:159844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:548kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11624kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 298.042551][ T7988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 298.084348][ T7988] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.113738][ T7988] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 298.122729][ T7988] Node 0 DMA32 free:1497064kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21440kB inactive_anon:0kB active_file:46208kB inactive_file:159024kB unevictable:1536kB writepending:584kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:20532kB local_pcp:6096kB free_cma:0kB [ 298.162512][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 298.168619][ T7988] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 298.225692][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 298.231540][ T7988] Node 1 Normal free:3889840kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21668kB local_pcp:11584kB free_cma:0kB [ 298.280819][ T7988] lowmem_reserve[]: 0 0 0 0 0 [ 298.311541][ T7988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.376208][ T7988] Node 0 DMA32: 632*4kB (UE) 1293*8kB (UME) 1330*16kB (UM) 590*32kB (UM) 393*64kB (UME) 49*128kB (UME) 24*256kB (UME) 7*512kB (M) 4*1024kB (ME) 5*2048kB (UME) 339*4096kB (UM) = 1497064kB [ 298.444612][ T7988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.473644][ T7988] Node 1 Normal: 208*4kB (UME) 52*8kB (UME) 41*16kB (UME) 58*32kB (UME) 12*64kB (UE) 6*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889840kB [ 298.520378][ T7988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.548458][ T7988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.558902][ T7988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.573870][ T7988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.583245][ T7988] 52940 total pagecache pages [ 298.591690][ T7988] 0 pages in swap cache [ 298.597320][ T7988] Free swap = 124996kB [ 298.601551][ T7988] Total swap = 124996kB [ 298.609727][ T7988] 2097051 pages RAM [ 298.614938][ T7988] 0 pages HighMem/MovableOnly [ 298.619912][ T7988] 416922 pages reserved [ 298.628095][ T7988] 0 pages cma reserved [ 299.778021][ T8060] netlink: 'syz.3.646': attribute type 21 has an invalid length. [ 299.800383][ T8060] netlink: 164 bytes leftover after parsing attributes in process `syz.3.646'. [ 300.877287][ T8065] vcan0: entered allmulticast mode [ 301.257827][ T8087] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.651'. [ 301.860283][ T8104] netlink: 'syz.3.659': attribute type 29 has an invalid length. [ 301.898205][ T8104] netlink: 'syz.3.659': attribute type 29 has an invalid length. [ 301.937415][ T8101] netlink: 'syz.3.659': attribute type 29 has an invalid length. [ 302.039492][ T8101] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.659'. [ 302.113925][ T8101] netlink: zone id is out of range [ 302.126071][ T8101] netlink: zone id is out of range [ 302.156668][ T8101] netlink: zone id is out of range [ 302.167205][ T8101] netlink: zone id is out of range [ 302.182079][ T8101] netlink: zone id is out of range [ 302.213791][ T8101] netlink: zone id is out of range [ 302.219667][ T8101] netlink: zone id is out of range [ 302.231006][ T8101] netlink: zone id is out of range [ 302.240087][ T8101] netlink: zone id is out of range [ 302.246548][ T8101] netlink: zone id is out of range [ 303.143447][ T8154] netlink: 'syz.0.675': attribute type 21 has an invalid length. [ 303.176728][ T8154] netlink: 128 bytes leftover after parsing attributes in process `syz.0.675'. [ 303.195529][ T8154] netlink: 'syz.0.675': attribute type 5 has an invalid length. [ 303.203404][ T8154] netlink: 3 bytes leftover after parsing attributes in process `syz.0.675'. [ 303.473719][ T8166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.680'. [ 303.641079][ T8172] netlink: 'syz.0.681': attribute type 33 has an invalid length. [ 303.683942][ T8172] netlink: 152 bytes leftover after parsing attributes in process `syz.0.681'. [ 303.698038][ T8172] `: renamed from team0 (while UP) [ 303.748455][ T8178] netlink: 'syz.2.680': attribute type 29 has an invalid length. [ 303.863407][ T8159] syzkaller0: entered promiscuous mode [ 303.880549][ T8171] netlink: 'syz.2.680': attribute type 29 has an invalid length. [ 303.903604][ T8159] syzkaller0: entered allmulticast mode [ 303.926383][ T8178] netlink: 'syz.2.680': attribute type 29 has an invalid length. [ 305.695948][ T8166] netlink: 'syz.2.680': attribute type 25 has an invalid length. [ 310.423145][ T8255] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 310.465858][ T8255] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 310.505882][ T8259] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 310.547073][ T8255] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 310.586321][ T8255] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 310.686474][ T8259] netlink: 'syz.3.705': attribute type 29 has an invalid length. [ 311.037332][ T8278] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.082721][ T8278] netlink: 1 bytes leftover after parsing attributes in process `syz.3.710'. [ 311.813879][ T8307] raw_sendmsg: syz.3.720 forgot to set AF_INET. Fix it! [ 311.875314][ T8313] netlink: 'syz.2.722': attribute type 21 has an invalid length. [ 311.888123][ T8313] netlink: 164 bytes leftover after parsing attributes in process `syz.2.722'. [ 312.097722][ T8318] netlink: 6 bytes leftover after parsing attributes in process `syz.3.723'. [ 312.142444][ T8318] net_ratelimit: 27 callbacks suppressed [ 312.142470][ T8318] openvswitch: netlink: Flow actions attr not present in new flow. [ 312.211370][ T8314] syzkaller0: entered promiscuous mode [ 312.217307][ T8314] syzkaller0: entered allmulticast mode [ 312.225130][ T8320] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 312.877238][ T8341] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 314.340315][ T8341] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 314.578924][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 315.707248][ T8376] validate_nla: 7 callbacks suppressed [ 315.707294][ T8376] netlink: 'syz.3.739': attribute type 29 has an invalid length. [ 315.767634][ T8376] netlink: 'syz.3.739': attribute type 29 has an invalid length. [ 315.783880][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 316.270227][ T8405] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.746'. [ 316.281327][ T8405] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.746'. [ 316.298763][ T8403] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.746'. [ 316.346471][ T8405] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.746'. [ 316.504567][ T8396] syzkaller0: entered promiscuous mode [ 316.522119][ T8396] syzkaller0: entered allmulticast mode [ 316.720285][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 317.488539][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.499536][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.911300][ T8413] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 319.132392][ T8431] syz.2.756 uses obsolete (PF_INET,SOCK_PACKET) [ 319.144111][ T8434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.757'. [ 319.406615][ T8444] netlink: 'syz.3.757': attribute type 29 has an invalid length. [ 319.510647][ T8444] netlink: 'syz.3.757': attribute type 29 has an invalid length. [ 319.606322][ T5774] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 319.783967][ T8434] netlink: 'syz.3.757': attribute type 29 has an invalid length. [ 320.109314][ T8461] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 320.144071][ T8461] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 320.169707][ T8463] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 320.218095][ T8461] netlink: 'syz.1.764': attribute type 29 has an invalid length. [ 323.421742][ T8488] FAULT_INJECTION: forcing a failure. [ 323.421742][ T8488] name failslab, interval 1, probability 0, space 0, times 0 [ 323.443347][ T5082] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 323.453942][ T8488] CPU: 0 PID: 8488 Comm: syz.1.780 Not tainted syzkaller #0 [ 323.461362][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 323.471445][ T8488] Call Trace: [ 323.474766][ T8488] [ 323.477743][ T8488] dump_stack_lvl+0x18c/0x250 [ 323.482482][ T8488] ? show_regs_print_info+0x20/0x20 [ 323.487743][ T8488] ? load_image+0x400/0x400 [ 323.492396][ T8488] ? __might_sleep+0xe0/0xe0 [ 323.497034][ T8488] ? __lock_acquire+0x7d40/0x7d40 [ 323.502097][ T8488] ? perf_trace_lock+0xfc/0x3b0 [ 323.506986][ T8488] should_fail_ex+0x39d/0x4d0 [ 323.511709][ T8488] should_failslab+0x9/0x20 [ 323.516288][ T8488] slab_pre_alloc_hook+0x59/0x310 [ 323.521368][ T8488] kmem_cache_alloc+0x5a/0x2d0 [ 323.526173][ T8488] ? __kernfs_new_node+0xe5/0x810 [ 323.531269][ T8488] __kernfs_new_node+0xe5/0x810 [ 323.536177][ T8488] ? kernfs_add_one+0x14e/0x6b0 [ 323.541082][ T8488] ? __lock_acquire+0x7d40/0x7d40 [ 323.546149][ T8488] ? down_write+0x16e/0x200 [ 323.550704][ T8488] ? kernfs_new_node+0x260/0x260 [ 323.555688][ T8488] ? up_write+0x1c3/0x410 [ 323.560048][ T8488] kernfs_new_node+0x14c/0x260 [ 323.564860][ T8488] __kernfs_create_file+0x4b/0x2e0 [ 323.570035][ T8488] sysfs_add_file_mode_ns+0x238/0x300 [ 323.575551][ T8488] internal_create_group+0x434/0xd10 [ 323.580876][ T8488] ? kernfs_add_one+0x14e/0x6b0 [ 323.585774][ T8488] ? sysfs_create_group+0x20/0x20 [ 323.590823][ T8488] ? up_write+0x1c3/0x410 [ 323.595180][ T8488] sysfs_create_groups+0x59/0x120 [ 323.600234][ T8488] device_add_attrs+0xdf/0x830 [ 323.605046][ T8488] ? device_add_class_symlinks+0x240/0x240 [ 323.610883][ T8488] ? device_add_class_symlinks+0x21f/0x240 [ 323.616719][ T8488] device_add+0x528/0xc20 [ 323.621086][ T8488] ? device_initialize+0x24b/0x440 [ 323.626254][ T8488] netdev_register_kobject+0x188/0x320 [ 323.631745][ T8488] register_netdevice+0x12ee/0x1bb0 [ 323.636993][ T8488] ? kvmalloc_node+0x70/0x180 [ 323.641704][ T8488] ? netif_stacked_transfer_operstate+0x210/0x210 [ 323.648150][ T8488] ? __asan_memset+0x22/0x40 [ 323.652767][ T8488] ? tun_net_initialize+0x1ac/0x480 [ 323.658080][ T8488] ? tun_not_capable+0x1f0/0x1f0 [ 323.663050][ T8488] ? alloc_netdev_mqs+0xc34/0x1040 [ 323.668197][ T8488] tun_set_iff+0x848/0xed0 [ 323.672645][ T8488] __tun_chr_ioctl+0x7ee/0x2000 [ 323.677531][ T8488] ? tun_flow_create+0x310/0x310 [ 323.682535][ T8488] ? bpf_lsm_file_ioctl+0x9/0x10 [ 323.687589][ T8488] ? security_file_ioctl+0x80/0xa0 [ 323.692730][ T8488] ? tun_chr_poll+0x630/0x630 [ 323.697447][ T8488] __se_sys_ioctl+0xfd/0x170 [ 323.702074][ T8488] do_syscall_64+0x55/0xa0 [ 323.706540][ T8488] ? clear_bhb_loop+0x40/0x90 [ 323.711276][ T8488] ? clear_bhb_loop+0x40/0x90 [ 323.715987][ T8488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.721910][ T8488] RIP: 0033:0x7f4b5719bf79 [ 323.726344][ T8488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.745991][ T8488] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.754721][ T8488] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 323.762727][ T8488] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 323.770740][ T8488] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 323.778774][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.786774][ T8488] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 323.794801][ T8488] [ 324.151676][ T8499] validate_nla: 2 callbacks suppressed [ 324.151694][ T8499] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.198512][ T8499] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.385441][ T8499] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.415666][ T8493] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.449722][ T8493] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.591080][ T8499] netlink: 'syz.3.774': attribute type 29 has an invalid length. [ 324.600643][ T8510] netlink: 'syz.2.781': attribute type 21 has an invalid length. [ 324.622753][ T8510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.781'. [ 325.993837][ T8546] FAULT_INJECTION: forcing a failure. [ 325.993837][ T8546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.047730][ T8546] CPU: 1 PID: 8546 Comm: syz.1.792 Not tainted syzkaller #0 [ 326.055107][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.065306][ T8546] Call Trace: [ 326.068647][ T8546] [ 326.071626][ T8546] dump_stack_lvl+0x18c/0x250 [ 326.076383][ T8546] ? show_regs_print_info+0x20/0x20 [ 326.081644][ T8546] ? load_image+0x400/0x400 [ 326.086206][ T8546] ? __might_fault+0xaa/0x120 [ 326.091022][ T8546] ? __lock_acquire+0x7d40/0x7d40 [ 326.096110][ T8546] should_fail_ex+0x39d/0x4d0 [ 326.100853][ T8546] _copy_from_user+0x2f/0xe0 [ 326.105495][ T8546] __sys_bpf+0x23e/0x890 [ 326.109778][ T8546] ? bpf_link_show_fdinfo+0x390/0x390 [ 326.115196][ T8546] ? lock_chain_count+0x20/0x20 [ 326.120168][ T8546] __x64_sys_bpf+0x7c/0x90 [ 326.124612][ T8546] do_syscall_64+0x55/0xa0 [ 326.129069][ T8546] ? clear_bhb_loop+0x40/0x90 [ 326.133771][ T8546] ? clear_bhb_loop+0x40/0x90 [ 326.138472][ T8546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.144394][ T8546] RIP: 0033:0x7f4b5719bf79 [ 326.148831][ T8546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.168468][ T8546] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.176918][ T8546] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 326.184920][ T8546] RDX: 0000000000000022 RSI: 00002000000000c0 RDI: 000000000000000a [ 326.192917][ T8546] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 326.200914][ T8546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.208906][ T8546] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 326.216912][ T8546] [ 326.704521][ T8569] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 331.985381][ T8596] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 332.852351][ T8626] netlink: 'syz.1.821': attribute type 10 has an invalid length. [ 332.893644][ T8626] syz_tun: left promiscuous mode [ 332.939322][ T8626] bond0: (slave syz_tun): Releasing backup interface [ 332.994698][ T8626] team0: Port device syz_tun added [ 334.268527][ T8664] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 334.659279][ T8677] FAULT_INJECTION: forcing a failure. [ 334.659279][ T8677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 334.733044][ T8677] CPU: 0 PID: 8677 Comm: syz.2.839 Not tainted syzkaller #0 [ 334.740422][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 334.750530][ T8677] Call Trace: [ 334.753861][ T8677] [ 334.756840][ T8677] dump_stack_lvl+0x18c/0x250 [ 334.761579][ T8677] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.767803][ T8677] ? show_regs_print_info+0x20/0x20 [ 334.773058][ T8677] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.779283][ T8677] should_fail_ex+0x39d/0x4d0 [ 334.784054][ T8677] prepare_alloc_pages+0x1e2/0x5f0 [ 334.789244][ T8677] __alloc_pages+0x134/0x460 [ 334.793897][ T8677] ? zone_statistics+0x170/0x170 [ 334.798906][ T8677] ? alloc_pages+0x4dc/0x740 [ 334.803547][ T8677] ? do_raw_spin_unlock+0x121/0x230 [ 334.808896][ T8677] __get_free_pages+0xc/0x30 [ 334.813530][ T8677] kasan_populate_vmalloc_pte+0x35/0x100 [ 334.819225][ T8677] __apply_to_page_range+0x860/0xdd0 [ 334.824587][ T8677] ? kasan_populate_vmalloc+0x70/0x70 [ 334.830026][ T8677] ? apply_to_page_range+0x50/0x50 [ 334.835214][ T8677] ? do_raw_spin_unlock+0x121/0x230 [ 334.840484][ T8677] alloc_vmap_area+0x1d0c/0x1e30 [ 334.845496][ T8677] ? vm_map_ram+0xcb0/0xcb0 [ 334.850060][ T8677] ? rcu_is_watching+0x15/0xb0 [ 334.854881][ T8677] __get_vm_area_node+0x162/0x370 [ 334.859975][ T8677] __vmalloc_node_range+0x36e/0x1330 [ 334.865317][ T8677] ? reuseport_array_alloc+0x98/0x120 [ 334.870752][ T8677] ? irqentry_enter+0x37/0x50 [ 334.875486][ T8677] ? end_current_label_crit_section+0x170/0x170 [ 334.881795][ T8677] ? free_vm_area+0x50/0x50 [ 334.886353][ T8677] ? apparmor_capable+0x137/0x1a0 [ 334.891427][ T8677] bpf_map_area_alloc+0xf1/0x110 [ 334.896418][ T8677] ? reuseport_array_alloc+0x98/0x120 [ 334.901843][ T8677] reuseport_array_alloc+0x98/0x120 [ 334.907095][ T8677] map_create+0x877/0x12f0 [ 334.911557][ T8677] ? bpf_lsm_bpf+0x9/0x10 [ 334.915940][ T8677] __sys_bpf+0x651/0x890 [ 334.920235][ T8677] ? bpf_link_show_fdinfo+0x390/0x390 [ 334.925671][ T8677] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.931880][ T8677] __x64_sys_bpf+0x7c/0x90 [ 334.936340][ T8677] do_syscall_64+0x55/0xa0 [ 334.940811][ T8677] ? clear_bhb_loop+0x40/0x90 [ 334.945539][ T8677] ? clear_bhb_loop+0x40/0x90 [ 334.950262][ T8677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.956204][ T8677] RIP: 0033:0x7f1bb5f9bf79 [ 334.960660][ T8677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.980320][ T8677] RSP: 002b:00007f1bb6e70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.988792][ T8677] RAX: ffffffffffffffda RBX: 00007f1bb6215fa0 RCX: 00007f1bb5f9bf79 [ 334.996819][ T8677] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 335.004835][ T8677] RBP: 00007f1bb6e70090 R08: 0000000000000000 R09: 0000000000000000 [ 335.012865][ T8677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.020887][ T8677] R13: 00007f1bb6216038 R14: 00007f1bb6215fa0 R15: 00007ffc3a6e51b8 [ 335.028935][ T8677] [ 335.331651][ T8692] netlink: 'syz.1.844': attribute type 10 has an invalid length. [ 335.515082][ T8699] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.845'. [ 336.181840][ T8720] netlink: 'syz.3.853': attribute type 21 has an invalid length. [ 336.417974][ T8729] netlink: 'syz.2.854': attribute type 10 has an invalid length. [ 336.670551][ T8734] : renamed from veth0_to_bond (while UP) [ 337.646545][ T8765] netlink: 'syz.1.865': attribute type 10 has an invalid length. [ 337.780161][ T8766] bridge0: port 3(dummy0) entered disabled state [ 337.832199][ T8766] bridge_slave_1: left allmulticast mode [ 337.838640][ T8766] bridge_slave_1: left promiscuous mode [ 337.858184][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.891313][ T8766] bridge_slave_0: left allmulticast mode [ 337.903634][ T8766] bridge_slave_0: left promiscuous mode [ 337.924000][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.938145][ T8764] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 338.201975][ T8764] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 338.231745][ T8773] netlink: 'syz.0.866': attribute type 29 has an invalid length. [ 338.601294][ T8791] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.873'. [ 338.845250][ T8801] syz.2.876[8801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.845429][ T8801] syz.2.876[8801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.047149][ T8808] netlink: 'syz.2.876': attribute type 21 has an invalid length. [ 339.947754][ T8812] netlink: 'syz.1.879': attribute type 29 has an invalid length. [ 339.976089][ T8812] netlink: 'syz.1.879': attribute type 29 has an invalid length. [ 340.327912][ T8837] netlink: 156 bytes leftover after parsing attributes in process `syz.1.885'. [ 340.687258][ T8850] FAULT_INJECTION: forcing a failure. [ 340.687258][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 340.700221][ T8850] CPU: 1 PID: 8850 Comm: syz.0.891 Not tainted syzkaller #0 [ 340.707564][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 340.717671][ T8850] Call Trace: [ 340.720995][ T8850] [ 340.723971][ T8850] dump_stack_lvl+0x18c/0x250 [ 340.728717][ T8850] ? show_regs_print_info+0x20/0x20 [ 340.731912][ T8847] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.889'. [ 340.733958][ T8850] ? load_image+0x400/0x400 [ 340.734015][ T8850] ? __might_sleep+0xe0/0xe0 [ 340.734043][ T8850] ? __lock_acquire+0x7d40/0x7d40 [ 340.734073][ T8850] should_fail_ex+0x39d/0x4d0 [ 340.734110][ T8850] should_failslab+0x9/0x20 [ 340.734139][ T8850] slab_pre_alloc_hook+0x59/0x310 [ 340.771785][ T8850] ? tomoyo_encode+0x28b/0x540 [ 340.776591][ T8850] ? tomoyo_encode+0x28b/0x540 [ 340.781380][ T8850] __kmem_cache_alloc_node+0x53/0x250 [ 340.786792][ T8850] ? tomoyo_encode+0x28b/0x540 [ 340.791579][ T8850] __kmalloc+0xa4/0x230 [ 340.795767][ T8850] tomoyo_encode+0x28b/0x540 [ 340.800392][ T8850] tomoyo_realpath_from_path+0x592/0x5d0 [ 340.806075][ T8850] tomoyo_path_number_perm+0x248/0x620 [ 340.811567][ T8850] ? tomoyo_path_number_perm+0x217/0x620 [ 340.817232][ T8850] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 340.822747][ T8850] ? ksys_write+0x1c4/0x260 [ 340.827333][ T8850] ? __fget_files+0x28/0x4b0 [ 340.831955][ T8850] ? __fget_files+0x28/0x4b0 [ 340.836580][ T8850] security_file_ioctl+0x70/0xa0 [ 340.841558][ T8850] __se_sys_ioctl+0x48/0x170 [ 340.846177][ T8850] do_syscall_64+0x55/0xa0 [ 340.850624][ T8850] ? clear_bhb_loop+0x40/0x90 [ 340.855323][ T8850] ? clear_bhb_loop+0x40/0x90 [ 340.860023][ T8850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.865945][ T8850] RIP: 0033:0x7f3dd879bf79 [ 340.870386][ T8850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.890019][ T8850] RSP: 002b:00007f3dd96e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.898461][ T8850] RAX: ffffffffffffffda RBX: 00007f3dd8a15fa0 RCX: 00007f3dd879bf79 [ 340.906462][ T8850] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 340.914549][ T8850] RBP: 00007f3dd96e9090 R08: 0000000000000000 R09: 0000000000000000 [ 340.922543][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.930537][ T8850] R13: 00007f3dd8a16038 R14: 00007f3dd8a15fa0 R15: 00007fff87230ea8 [ 340.938547][ T8850] [ 341.064196][ T8850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 341.517218][ T8865] netlink: 'syz.1.893': attribute type 29 has an invalid length. [ 341.547157][ T8865] netlink: 'syz.1.893': attribute type 29 has an invalid length. [ 341.845657][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 341.918785][ T8877] : renamed from veth0_to_bond (while UP) [ 342.026739][ T8891] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.841201][ T8917] syzkaller0: entered promiscuous mode [ 342.852783][ T8919] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.910'. [ 342.884239][ T8917] syzkaller0: entered allmulticast mode [ 343.026277][ T8915] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 343.072458][ T8915] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 343.087531][ T8915] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 343.276053][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 343.509371][ T8933] : renamed from veth0_to_bond (while UP) [ 343.694075][ T8945] netlink: 'syz.1.920': attribute type 4 has an invalid length. [ 343.711307][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 344.144410][ T8951] netlink: 'syz.1.922': attribute type 29 has an invalid length. [ 344.185340][ T8951] netlink: 'syz.1.922': attribute type 29 has an invalid length. [ 344.227799][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 344.634972][ T8973] syz.0.930[8973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.635131][ T8973] syz.0.930[8973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.667067][ T8976] FAULT_INJECTION: forcing a failure. [ 344.667067][ T8976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.695298][ T8976] CPU: 1 PID: 8976 Comm: syz.3.932 Not tainted syzkaller #0 [ 344.702655][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.712767][ T8976] Call Trace: [ 344.716090][ T8976] [ 344.719073][ T8976] dump_stack_lvl+0x18c/0x250 [ 344.723817][ T8976] ? show_regs_print_info+0x20/0x20 [ 344.729073][ T8976] ? load_image+0x400/0x400 [ 344.733632][ T8976] ? __might_fault+0xaa/0x120 [ 344.738366][ T8976] ? __lock_acquire+0x7d40/0x7d40 [ 344.743448][ T8976] should_fail_ex+0x39d/0x4d0 [ 344.748192][ T8976] _copy_from_iter+0x1d9/0x12e0 [ 344.753097][ T8976] ? rep_movs_alternative+0x4a/0x90 [ 344.758359][ T8976] ? _copy_from_iter+0x24e/0x12e0 [ 344.763474][ T8976] ? __virt_addr_valid+0x18c/0x540 [ 344.768657][ T8976] ? __lock_acquire+0x7d40/0x7d40 [ 344.773734][ T8976] ? copyout_mc+0x70/0x70 [ 344.778123][ T8976] ? copyout_mc+0x70/0x70 [ 344.782499][ T8976] ? __virt_addr_valid+0x18c/0x540 [ 344.787666][ T8976] ? page_copy_sane+0x16a/0x270 [ 344.792575][ T8976] copy_page_from_iter+0x7b/0x100 [ 344.797662][ T8976] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 344.803528][ T8976] tun_get_user+0x15db/0x3ca0 [ 344.808268][ T8976] ? aa_file_perm+0x11b/0xee0 [ 344.813002][ T8976] ? rcu_read_unlock+0xa0/0xa0 [ 344.817829][ T8976] ? tun_get+0x1c/0x2e0 [ 344.822032][ T8976] ? __lock_acquire+0x7d40/0x7d40 [ 344.827112][ T8976] ? tun_get+0x1c/0x2e0 [ 344.831323][ T8976] tun_chr_write_iter+0x119/0x200 [ 344.836405][ T8976] vfs_write+0x46c/0x990 [ 344.840711][ T8976] ? file_end_write+0x250/0x250 [ 344.845616][ T8976] ? __fget_files+0x43d/0x4b0 [ 344.850348][ T8976] ? __fdget_pos+0x1d8/0x330 [ 344.854987][ T8976] ? ksys_write+0x75/0x260 [ 344.859473][ T8976] ksys_write+0x150/0x260 [ 344.863866][ T8976] ? __ia32_sys_read+0x90/0x90 [ 344.868695][ T8976] ? lockdep_hardirqs_on+0x98/0x150 [ 344.873962][ T8976] do_syscall_64+0x55/0xa0 [ 344.878429][ T8976] ? clear_bhb_loop+0x40/0x90 [ 344.883168][ T8976] ? clear_bhb_loop+0x40/0x90 [ 344.887891][ T8976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.893825][ T8976] RIP: 0033:0x7f3a72d9bf79 [ 344.898282][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.917944][ T8976] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.926409][ T8976] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 344.934438][ T8976] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 00000000000000c8 [ 344.942465][ T8976] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.950489][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.958511][ T8976] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 344.966553][ T8976] [ 345.052284][ T8973] netlink: 'syz.0.930': attribute type 21 has an invalid length. [ 346.021003][ T8992] netlink: 'syz.2.935': attribute type 29 has an invalid length. [ 346.046363][ T8992] netlink: 'syz.2.935': attribute type 29 has an invalid length. [ 346.062500][ T8987] netlink: 'syz.2.935': attribute type 29 has an invalid length. [ 346.363403][ T9001] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.941'. [ 346.410421][ T9001] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 346.501289][ T9008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.942'. [ 346.610743][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.651170][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.678721][ T9008] bond0 (unregistering): Released all slaves [ 347.074077][ T9024] syz.3.948[9024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.074490][ T9024] syz.3.948[9024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.519548][ T9044] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.954'. [ 348.636465][ T9044] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 349.240879][ T9047] validate_nla: 7 callbacks suppressed [ 349.240912][ T9047] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 349.283402][ T9047] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 349.314740][ T9059] netlink: 'syz.2.953': attribute type 29 has an invalid length. [ 349.329177][ T5082] Bluetooth: hci3: unexpected subevent 0x0a length: 15 < 30 [ 350.108148][ T9070] netlink: 'syz.1.960': attribute type 29 has an invalid length. [ 350.125924][ T9070] netlink: 'syz.1.960': attribute type 29 has an invalid length. [ 350.888407][ T9086] syz.1.963[9086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.888571][ T9086] syz.1.963[9086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.044835][ T9089] netlink: 'syz.1.963': attribute type 21 has an invalid length. [ 352.402739][ T9113] netlink: 'syz.2.972': attribute type 10 has an invalid length. [ 352.440552][ T9113] bridge0: port 3(dummy0) entered disabled state [ 352.534327][ T9113] dummy0: left allmulticast mode [ 352.567743][ T9113] dummy0: left promiscuous mode [ 352.572982][ T9113] bridge0: port 3(dummy0) entered disabled state [ 352.627343][ T9109] netlink: 'syz.3.971': attribute type 29 has an invalid length. [ 352.668357][ T9113] team0: Port device dummy0 added [ 352.704399][ T9109] netlink: 'syz.3.971': attribute type 29 has an invalid length. [ 352.842702][ T9119] syzkaller0: entered promiscuous mode [ 352.848981][ T9119] syzkaller0: entered allmulticast mode [ 358.181463][ T9155] netlink: 'syz.1.983': attribute type 29 has an invalid length. [ 359.099927][ T9155] netlink: 'syz.1.983': attribute type 29 has an invalid length. [ 359.876800][ T9184] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.991'. [ 360.784622][ T9201] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 361.348528][ T9201] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 361.639177][ T9211] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 361.686921][ T9211] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 361.709962][ T9213] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 361.724258][ T9211] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 361.767827][ T9211] netlink: 'syz.2.997': attribute type 29 has an invalid length. [ 362.304003][ T9229] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 362.393755][ T9228] delete_channel: no stack [ 362.661978][ T9243] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1007'. [ 362.858696][ T9249] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1008'. [ 362.910006][ T9249] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 362.958455][ T9243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.231232][ T9258] syz.1.1011[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.231399][ T9258] syz.1.1011[9258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.245946][ T9259] FAULT_INJECTION: forcing a failure. [ 363.245946][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 363.289469][ T9259] CPU: 0 PID: 9259 Comm: syz.2.1010 Not tainted syzkaller #0 [ 363.296912][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.307108][ T9259] Call Trace: [ 363.310429][ T9259] [ 363.313400][ T9259] dump_stack_lvl+0x18c/0x250 [ 363.318132][ T9259] ? sctp_sendmsg+0x1575/0x28c0 [ 363.323029][ T9259] ? ___sys_sendmsg+0x2a6/0x360 [ 363.327925][ T9259] ? show_regs_print_info+0x20/0x20 [ 363.333177][ T9259] ? load_image+0x400/0x400 [ 363.337759][ T9259] should_fail_ex+0x39d/0x4d0 [ 363.342491][ T9259] should_failslab+0x9/0x20 [ 363.347045][ T9259] slab_pre_alloc_hook+0x59/0x310 [ 363.352121][ T9259] ? sctp_add_bind_addr+0x8c/0x360 [ 363.357286][ T9259] __kmem_cache_alloc_node+0x53/0x250 [ 363.362719][ T9259] ? sctp_add_bind_addr+0x8c/0x360 [ 363.367893][ T9259] kmalloc_trace+0x2a/0xe0 [ 363.372375][ T9259] sctp_add_bind_addr+0x8c/0x360 [ 363.377377][ T9259] sctp_copy_local_addr_list+0x315/0x4f0 [ 363.383074][ T9259] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 363.388851][ T9259] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 363.394981][ T9259] ? sctp_v4_is_any+0x35/0x60 [ 363.399706][ T9259] ? sctp_copy_one_addr+0x8c/0x350 [ 363.404882][ T9259] sctp_bind_addr_copy+0xb3/0x3c0 [ 363.409976][ T9259] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 363.416361][ T9259] sctp_connect_new_asoc+0x2f9/0x6a0 [ 363.421696][ T9259] ? __sctp_connect+0xd80/0xd80 [ 363.426587][ T9259] ? __local_bh_enable_ip+0x13a/0x1c0 [ 363.432008][ T9259] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 363.437600][ T9259] ? security_sctp_bind_connect+0x89/0xb0 [ 363.443349][ T9259] sctp_sendmsg+0x1575/0x28c0 [ 363.448158][ T9259] ? sctp_getsockopt+0xb60/0xb60 [ 363.453120][ T9259] ? aa_sk_perm+0x83c/0x970 [ 363.457665][ T9259] ? aa_af_perm+0x330/0x330 [ 363.462210][ T9259] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 363.468652][ T9259] ? sock_rps_record_flow+0x19/0x3f0 [ 363.473964][ T9259] ? inet_sendmsg+0xe9/0x2f0 [ 363.478579][ T9259] ? inet_send_prepare+0x260/0x260 [ 363.483735][ T9259] ____sys_sendmsg+0x5ba/0x960 [ 363.488541][ T9259] ? __lock_acquire+0x7d40/0x7d40 [ 363.493610][ T9259] ? __asan_memset+0x22/0x40 [ 363.498229][ T9259] ? __sys_sendmsg_sock+0x30/0x30 [ 363.503282][ T9259] ? __import_iovec+0x5f2/0x850 [ 363.508171][ T9259] ? import_iovec+0x73/0xa0 [ 363.512716][ T9259] ___sys_sendmsg+0x2a6/0x360 [ 363.517428][ T9259] ? __sys_sendmsg+0x2a0/0x2a0 [ 363.522254][ T9259] ? trace_call_bpf+0xc3/0x6c0 [ 363.527077][ T9259] __se_sys_sendmsg+0x1c2/0x2b0 [ 363.531990][ T9259] ? __x64_sys_sendmsg+0x80/0x80 [ 363.536972][ T9259] ? lockdep_hardirqs_on+0x98/0x150 [ 363.542203][ T9259] do_syscall_64+0x55/0xa0 [ 363.546649][ T9259] ? clear_bhb_loop+0x40/0x90 [ 363.551359][ T9259] ? clear_bhb_loop+0x40/0x90 [ 363.556069][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.561989][ T9259] RIP: 0033:0x7f1bb5f9bf79 [ 363.566425][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.586091][ T9259] RSP: 002b:00007f1bb6e70028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.594673][ T9259] RAX: ffffffffffffffda RBX: 00007f1bb6215fa0 RCX: 00007f1bb5f9bf79 [ 363.602683][ T9259] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000004 [ 363.610688][ T9259] RBP: 00007f1bb6e70090 R08: 0000000000000000 R09: 0000000000000000 [ 363.618687][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 363.626699][ T9259] R13: 00007f1bb6216038 R14: 00007f1bb6215fa0 R15: 00007ffc3a6e51b8 [ 363.634722][ T9259] [ 363.761418][ T9258] validate_nla: 2 callbacks suppressed [ 363.761454][ T9258] netlink: 'syz.1.1011': attribute type 21 has an invalid length. [ 364.539937][ T9273] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 364.565618][ T9273] bond0: (slave bond_slave_0): Releasing backup interface [ 364.670735][ T9272] delete_channel: no stack [ 364.865345][ T9283] netlink: 'syz.1.1018': attribute type 29 has an invalid length. [ 364.886485][ T9283] netlink: 'syz.1.1018': attribute type 29 has an invalid length. [ 365.237027][ T9294] syzkaller0: entered promiscuous mode [ 365.242581][ T9294] syzkaller0: entered allmulticast mode [ 365.306624][ T9304] syz.1.1026[9304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.306792][ T9304] syz.1.1026[9304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.459510][ T9308] netlink: 'syz.1.1026': attribute type 21 has an invalid length. [ 366.490480][ T9329] netlink: 'syz.0.1031': attribute type 29 has an invalid length. [ 366.840827][ T9321] delete_channel: no stack [ 367.704077][ T9325] netlink: 'syz.1.1029': attribute type 10 has an invalid length. [ 367.725385][ T9325] bond0: (slave bond_slave_0): Releasing backup interface [ 367.756060][ T9329] netlink: 'syz.0.1031': attribute type 29 has an invalid length. [ 367.955851][ T9335] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1032'. [ 368.278400][ T9347] syz.1.1036[9347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.278582][ T9347] syz.1.1036[9347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.385551][ T9343] IPv6: Can't replace route, no match found [ 368.561640][ T9347] netlink: 'syz.1.1036': attribute type 21 has an invalid length. [ 368.929006][ T9363] FAULT_INJECTION: forcing a failure. [ 368.929006][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.965328][ T9363] CPU: 1 PID: 9363 Comm: syz.3.1041 Not tainted syzkaller #0 [ 368.972798][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.982912][ T9363] Call Trace: [ 368.986238][ T9363] [ 368.989211][ T9363] dump_stack_lvl+0x18c/0x250 [ 368.993959][ T9363] ? show_regs_print_info+0x20/0x20 [ 368.999257][ T9363] ? load_image+0x400/0x400 [ 369.003821][ T9363] ? __might_fault+0xaa/0x120 [ 369.008611][ T9363] ? __lock_acquire+0x7d40/0x7d40 [ 369.013712][ T9363] should_fail_ex+0x39d/0x4d0 [ 369.018457][ T9363] _copy_from_user+0x2f/0xe0 [ 369.023104][ T9363] ___sys_sendmsg+0x1c7/0x360 [ 369.027938][ T9363] ? __sys_sendmsg+0x2a0/0x2a0 [ 369.032784][ T9363] ? trace_call_bpf+0xc3/0x6c0 [ 369.037624][ T9363] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 369.043958][ T9363] __se_sys_sendmsg+0x1c2/0x2b0 [ 369.048866][ T9363] ? __x64_sys_sendmsg+0x80/0x80 [ 369.053970][ T9363] ? lockdep_hardirqs_on+0x98/0x150 [ 369.059228][ T9363] do_syscall_64+0x55/0xa0 [ 369.063703][ T9363] ? clear_bhb_loop+0x40/0x90 [ 369.068437][ T9363] ? clear_bhb_loop+0x40/0x90 [ 369.073180][ T9363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.079161][ T9363] RIP: 0033:0x7f3a72d9bf79 [ 369.083627][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.103287][ T9363] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.111844][ T9363] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 369.119869][ T9363] RDX: 0000000020040080 RSI: 0000200000000200 RDI: 0000000000000008 [ 369.127888][ T9363] RBP: 00007f3a73d4b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.135909][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.143935][ T9363] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 369.151967][ T9363] [ 369.386349][ T9375] netlink: 148156 bytes leftover after parsing attributes in process `syz.2.1044'. [ 369.542373][ T9371] netlink: 'syz.1.1043': attribute type 29 has an invalid length. [ 369.561567][ T9371] netlink: 'syz.1.1043': attribute type 29 has an invalid length. [ 369.839897][ T9391] syz.1.1051[9391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.840059][ T9391] syz.1.1051[9391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.961716][ T9391] netlink: 'syz.1.1051': attribute type 21 has an invalid length. [ 370.040099][ T9393] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1052'. [ 370.711857][ T9419] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 370.737084][ T9419] netlink: 'syz.1.1058': attribute type 29 has an invalid length. [ 371.047821][ T9427] syz.1.1064[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.048044][ T9427] syz.1.1064[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 371.178142][ T9427] netlink: 'syz.1.1064': attribute type 21 has an invalid length. [ 371.377484][ T9437] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1066'. [ 371.410657][ T9437] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 371.433549][ T9437] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1066'. [ 371.547378][ T9448] FAULT_INJECTION: forcing a failure. [ 371.547378][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 371.588255][ T9448] CPU: 1 PID: 9448 Comm: syz.1.1069 Not tainted syzkaller #0 [ 371.595716][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 371.605865][ T9448] Call Trace: [ 371.609195][ T9448] [ 371.612180][ T9448] dump_stack_lvl+0x18c/0x250 [ 371.616948][ T9448] ? show_regs_print_info+0x20/0x20 [ 371.622204][ T9448] ? load_image+0x400/0x400 [ 371.626780][ T9448] ? __might_sleep+0xe0/0xe0 [ 371.631429][ T9448] ? __lock_acquire+0x7d40/0x7d40 [ 371.636505][ T9448] should_fail_ex+0x39d/0x4d0 [ 371.641255][ T9448] should_failslab+0x9/0x20 [ 371.645812][ T9448] slab_pre_alloc_hook+0x59/0x310 [ 371.650894][ T9448] ? apparmor_sk_alloc_security+0x77/0x100 [ 371.657198][ T9448] __kmem_cache_alloc_node+0x53/0x250 [ 371.662641][ T9448] ? apparmor_sk_alloc_security+0x77/0x100 [ 371.668603][ T9448] kmalloc_trace+0x2a/0xe0 [ 371.673084][ T9448] apparmor_sk_alloc_security+0x77/0x100 [ 371.678767][ T9448] security_sk_alloc+0x6e/0xa0 [ 371.683704][ T9448] sk_prot_alloc+0x101/0x210 [ 371.688347][ T9448] ? sk_alloc+0x24/0x360 [ 371.692633][ T9448] sk_alloc+0x3a/0x360 [ 371.696749][ T9448] ? _raw_read_unlock_irqrestore+0xc5/0x120 [ 371.702710][ T9448] __netlink_create+0x6c/0x290 [ 371.707536][ T9448] netlink_create+0x3ee/0x5c0 [ 371.712287][ T9448] ? rtnetlink_rcv+0x20/0x20 [ 371.716932][ T9448] __sock_create+0x4a6/0x940 [ 371.721591][ T9448] __sys_socket+0xd7/0x1a0 [ 371.726084][ T9448] __x64_sys_socket+0x7a/0x90 [ 371.730830][ T9448] do_syscall_64+0x55/0xa0 [ 371.735308][ T9448] ? clear_bhb_loop+0x40/0x90 [ 371.740041][ T9448] ? clear_bhb_loop+0x40/0x90 [ 371.744782][ T9448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.750729][ T9448] RIP: 0033:0x7f4b5719bf79 [ 371.755220][ T9448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.774915][ T9448] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 371.783394][ T9448] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 371.791418][ T9448] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 371.799446][ T9448] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 371.807464][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.815480][ T9448] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 371.823515][ T9448] [ 371.851643][ T9452] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1070'. [ 371.863279][ T9452] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1070'. [ 371.949061][ T9451] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1070'. [ 371.963657][ T9451] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1070'. [ 372.192978][ T9457] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 372.224967][ T9457] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 372.277579][ T9463] warn_alloc: 1 callbacks suppressed [ 372.277596][ T9463] syz.3.1074: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 372.345920][ T9465] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1075'. [ 372.360093][ T9463] CPU: 1 PID: 9463 Comm: syz.3.1074 Not tainted syzkaller #0 [ 372.367560][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.377676][ T9463] Call Trace: [ 372.381016][ T9463] [ 372.383994][ T9463] dump_stack_lvl+0x18c/0x250 [ 372.388737][ T9463] ? show_regs_print_info+0x20/0x20 [ 372.393995][ T9463] ? load_image+0x400/0x400 [ 372.398603][ T9463] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.405086][ T9463] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 372.411659][ T9463] warn_alloc+0x246/0x340 [ 372.416072][ T9463] ? stack_trace_save+0xaa/0x100 [ 372.421082][ T9463] ? zone_watermark_ok_safe+0x230/0x230 [ 372.426873][ T9463] ? kasan_set_track+0x5f/0x70 [ 372.431674][ T9463] ? kasan_set_track+0x4e/0x70 [ 372.436471][ T9463] ? __kasan_kmalloc+0x8f/0xa0 [ 372.441285][ T9463] ? xsk_init_queue+0xad/0x100 [ 372.446083][ T9463] ? xsk_setsockopt+0x4e5/0x760 [ 372.450965][ T9463] ? do_sock_setsockopt+0x175/0x1a0 [ 372.456222][ T9463] ? __x64_sys_setsockopt+0x182/0x200 [ 372.461636][ T9463] __vmalloc_node_range+0x126/0x1330 [ 372.467338][ T9463] ? free_vm_area+0x50/0x50 [ 372.471992][ T9463] vmalloc_user+0x74/0x80 [ 372.476385][ T9463] ? xskq_create+0xbf/0x170 [ 372.480931][ T9463] xskq_create+0xbf/0x170 [ 372.485397][ T9463] xsk_init_queue+0xad/0x100 [ 372.490042][ T9463] xsk_setsockopt+0x4e5/0x760 [ 372.494765][ T9463] ? xsk_poll+0x680/0x680 [ 372.499133][ T9463] ? __fget_files+0x28/0x4b0 [ 372.503763][ T9463] ? __fget_files+0x28/0x4b0 [ 372.508393][ T9463] ? aa_sock_opt_perm+0x74/0x100 [ 372.513471][ T9463] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 372.519062][ T9463] ? security_socket_setsockopt+0x7e/0xa0 [ 372.524898][ T9463] ? xsk_poll+0x680/0x680 [ 372.529265][ T9463] do_sock_setsockopt+0x175/0x1a0 [ 372.534332][ T9463] ? __fdget+0x180/0x210 [ 372.538617][ T9463] __x64_sys_setsockopt+0x182/0x200 [ 372.543925][ T9463] do_syscall_64+0x55/0xa0 [ 372.548375][ T9463] ? clear_bhb_loop+0x40/0x90 [ 372.553082][ T9463] ? clear_bhb_loop+0x40/0x90 [ 372.557791][ T9463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.563775][ T9463] RIP: 0033:0x7f3a72d9bf79 [ 372.568255][ T9463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.587933][ T9463] RSP: 002b:00007f3a73d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.596390][ T9463] RAX: ffffffffffffffda RBX: 00007f3a73015fa0 RCX: 00007f3a72d9bf79 [ 372.604395][ T9463] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 372.612393][ T9463] RBP: 00007f3a72e327e0 R08: 0000000000000004 R09: 0000000000000000 [ 372.620389][ T9463] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 372.628391][ T9463] R13: 00007f3a73016038 R14: 00007f3a73015fa0 R15: 00007ffd4e995458 [ 372.636415][ T9463] [ 372.650158][ T9463] Mem-Info: [ 372.653350][ T9463] active_anon:5256 inactive_anon:0 isolated_anon:0 [ 372.653350][ T9463] active_file:11678 inactive_file:40037 isolated_file:0 [ 372.653350][ T9463] unevictable:768 dirty:251 writeback:0 [ 372.653350][ T9463] slab_reclaimable:10323 slab_unreclaimable:94579 [ 372.653350][ T9463] mapped:24807 shmem:1361 pagetables:564 [ 372.653350][ T9463] sec_pagetables:0 bounce:0 [ 372.653350][ T9463] kernel_misc_reclaimable:0 [ 372.653350][ T9463] free:1346852 free_pcp:12568 free_cma:0 [ 372.719553][ T9463] Node 0 active_anon:21024kB inactive_anon:0kB active_file:46712kB inactive_file:159948kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99228kB dirty:1004kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11568kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no [ 372.777380][ T9463] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 372.826474][ T9463] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.859234][ T9463] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 372.871441][ T9463] Node 0 DMA32 free:1482464kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20884kB inactive_anon:0kB active_file:46712kB inactive_file:159128kB unevictable:1536kB writepending:1004kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:29208kB local_pcp:9228kB free_cma:0kB [ 372.910928][ T9463] lowmem_reserve[]: 0 0 0 0 0 [ 372.927781][ T9463] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 372.959581][ T9463] lowmem_reserve[]: 0 0 0 0 0 [ 372.965855][ T9463] Node 1 Normal free:3889840kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21668kB local_pcp:10084kB free_cma:0kB [ 373.002671][ T9463] lowmem_reserve[]: 0 0 0 0 0 [ 373.008773][ T9463] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 373.035763][ T9463] Node 0 DMA32: 1520*4kB (UM) 434*8kB (UME) 1313*16kB (UM) 2372*32kB (UM) 1232*64kB (UM) 304*128kB (UM) 75*256kB (UM) 20*512kB (UME) 8*1024kB (UM) 8*2048kB (UME) 294*4096kB (M) = 1482464kB [ 373.065581][ T9463] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 373.085777][ T9463] Node 1 Normal: 208*4kB (UME) 52*8kB (UME) 41*16kB (UME) 58*32kB (UME) 12*64kB (UE) 6*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889840kB [ 373.110537][ T9463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.129913][ T9463] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.140181][ T9475] syz.2.1078[9475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.140344][ T9475] syz.2.1078[9475] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 373.162892][ T9463] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 373.190135][ T9463] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 373.213985][ T9463] 53076 total pagecache pages [ 373.220326][ T9463] 0 pages in swap cache [ 373.225507][ T9463] Free swap = 124996kB [ 373.229729][ T9463] Total swap = 124996kB [ 373.253555][ T9463] 2097051 pages RAM [ 373.258891][ T9463] 0 pages HighMem/MovableOnly [ 373.264601][ T9463] 416922 pages reserved [ 373.268809][ T9463] 0 pages cma reserved [ 373.289962][ T9475] netlink: 'syz.2.1078': attribute type 21 has an invalid length. [ 375.077159][ T9529] validate_nla: 3 callbacks suppressed [ 375.077196][ T9529] netlink: 'syz.3.1098': attribute type 29 has an invalid length. [ 375.182601][ T9526] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1095'. [ 375.250358][ T9526] openvswitch: netlink: Key type 4112 is out of range max 32 [ 376.242168][ T9529] netlink: 'syz.3.1098': attribute type 29 has an invalid length. [ 377.290193][ T9592] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 377.312133][ T9592] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 377.344843][ T9585] netlink: 'syz.2.1111': attribute type 29 has an invalid length. [ 377.415992][ T9583] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 377.458771][ T9583] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 377.745450][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 378.391372][ T9631] netlink: 'syz.3.1125': attribute type 29 has an invalid length. [ 378.409899][ T9631] netlink: 'syz.3.1125': attribute type 29 has an invalid length. [ 378.917977][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.924596][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.053775][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 379.189813][ T9649] FAULT_INJECTION: forcing a failure. [ 379.189813][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 379.210741][ T9649] CPU: 0 PID: 9649 Comm: syz.1.1132 Not tainted syzkaller #0 [ 379.218201][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.228305][ T9649] Call Trace: [ 379.231646][ T9649] [ 379.234633][ T9649] dump_stack_lvl+0x18c/0x250 [ 379.239393][ T9649] ? show_regs_print_info+0x20/0x20 [ 379.244660][ T9649] ? load_image+0x400/0x400 [ 379.249218][ T9649] ? __might_sleep+0xe0/0xe0 [ 379.253870][ T9649] ? __lock_acquire+0x7d40/0x7d40 [ 379.258964][ T9649] ? lockdep_init_map_type+0x9c/0x8e0 [ 379.264405][ T9649] ? __might_sleep+0xe0/0xe0 [ 379.269059][ T9649] should_fail_ex+0x39d/0x4d0 [ 379.273818][ T9649] should_failslab+0x9/0x20 [ 379.278370][ T9649] slab_pre_alloc_hook+0x59/0x310 [ 379.283526][ T9649] kmem_cache_alloc_lru+0x4d/0x2d0 [ 379.288692][ T9649] ? sock_alloc_inode+0x28/0xc0 [ 379.293617][ T9649] sock_alloc_inode+0x28/0xc0 [ 379.298346][ T9649] ? sockfs_init_fs_context+0xb0/0xb0 [ 379.303764][ T9649] new_inode_pseudo+0x63/0x1d0 [ 379.308582][ T9649] __sock_create+0x12d/0x940 [ 379.313218][ T9649] __sys_socketpair+0x236/0x550 [ 379.318138][ T9649] __x64_sys_socketpair+0x9b/0xb0 [ 379.323204][ T9649] do_syscall_64+0x55/0xa0 [ 379.327737][ T9649] ? clear_bhb_loop+0x40/0x90 [ 379.332439][ T9649] ? clear_bhb_loop+0x40/0x90 [ 379.337151][ T9649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 379.343072][ T9649] RIP: 0033:0x7f4b5719bf79 [ 379.347510][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.367139][ T9649] RSP: 002b:00007f4b58092028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 379.375581][ T9649] RAX: ffffffffffffffda RBX: 00007f4b57415fa0 RCX: 00007f4b5719bf79 [ 379.383587][ T9649] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002a [ 379.391605][ T9649] RBP: 00007f4b58092090 R08: 0000000000000000 R09: 0000000000000000 [ 379.399607][ T9649] R10: 0000200000001440 R11: 0000000000000246 R12: 0000000000000001 [ 379.407606][ T9649] R13: 00007f4b57416038 R14: 00007f4b57415fa0 R15: 00007fff914a1b78 [ 379.415622][ T9649] [ 379.434240][ T9649] socket: no more sockets [ 379.688924][ T9660] syz.1.1135[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 379.689092][ T9660] syz.1.1135[9660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.022035][ T9670] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 380.640966][ T5082] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 380.869777][ T9681] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.044502][ T9693] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 381.298843][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 381.524648][ T9716] syz.0.1157[9716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.524815][ T9716] syz.0.1157[9716] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.060749][ T9719] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 382.388265][ T9727] netlink: 'syz.2.1161': attribute type 10 has an invalid length. [ 382.916157][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 384.746598][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 388.754012][ T9879] syz.3.1207[9879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 388.756342][ T9879] syz.3.1207[9879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.256202][ T9919] syz.3.1219[9919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.272866][ T9919] syz.3.1219[9919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.730450][ T9921] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 390.761539][ T9921] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 390.773241][ T9921] netlink: 'syz.2.1218': attribute type 29 has an invalid length. [ 390.849895][ T9926] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 440.359201][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.371866][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.743439][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 494.750248][ C1] rcu: 1-....: (10497 ticks this GP) idle=b784/1/0x4000000000000000 softirq=29716/29716 fqs=4182 [ 494.761721][ C1] rcu: hardirqs softirqs csw/system [ 494.768242][ C1] rcu: number: 1326720 0 0 [ 494.774676][ C1] rcu: cputime: 18584 33905 67 ==> 52490(ms) [ 494.782488][ C1] rcu: (t=10500 jiffies g=33317 q=1751 ncpus=2) [ 494.788844][ C1] CPU: 1 PID: 9895 Comm: syz.0.1212 Not tainted syzkaller #0 [ 494.796252][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.806326][ C1] RIP: 0010:kmem_cache_alloc_node+0x38/0x320 [ 494.812331][ C1] Code: 48 83 ec 28 89 54 24 04 41 89 f6 49 89 ff 65 48 8b 04 25 28 00 00 00 48 89 44 24 20 48 8b 44 24 58 48 89 44 24 08 44 8b 6f 1c <48> c7 44 24 18 00 00 00 00 48 c7 44 24 10 00 00 00 00 31 db 48 8d [ 494.831977][ C1] RSP: 0018:ffffc900001f08b8 EFLAGS: 00000296 [ 494.838155][ C1] RAX: ffffffff88721573 RBX: 0000000000000000 RCX: ffff88801fee8000 [ 494.846135][ C1] RDX: 00000000ffffffff RSI: 0000000000020820 RDI: ffff88801ea53640 [ 494.854118][ C1] RBP: 00000000ffffffff R08: dffffc0000000000 R09: 1ffffffff2237ea0 [ 494.862100][ C1] R10: dffffc0000000000 R11: fffffbfff2237ea1 R12: 0000000000020820 [ 494.870074][ C1] R13: 00000000000000f0 R14: 0000000000020820 R15: ffff88801ea53640 [ 494.878053][ C1] FS: 00007f3dd96e96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 494.887008][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.893596][ C1] CR2: 0000000100000000 CR3: 00000000253ce000 CR4: 00000000003506e0 [ 494.901576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.909553][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 494.917712][ C1] Call Trace: [ 494.921004][ C1] [ 494.923856][ C1] ? __alloc_skb+0x103/0x2c0 [ 494.928464][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 494.934193][ C1] __alloc_skb+0x103/0x2c0 [ 494.938630][ C1] __netdev_alloc_skb+0x10c/0x500 [ 494.943674][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 494.949665][ C1] ? kmalloc_reserve+0x240/0x240 [ 494.954618][ C1] ? lock_chain_count+0x20/0x20 [ 494.959497][ C1] hsr_init_skb+0xdc/0x580 [ 494.963924][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.970125][ C1] send_hsr_supervision_frame+0x140/0xb90 [ 494.975859][ C1] hsr_announce+0x198/0x350 [ 494.980372][ C1] ? read_lock_is_recursive+0x20/0x20 [ 494.985772][ C1] ? hsr_announce+0x84/0x350 [ 494.990371][ C1] ? hsr_dev_finalize+0x800/0x800 [ 494.995402][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 495.001403][ C1] call_timer_fn+0x189/0x540 [ 495.006005][ C1] ? hsr_dev_finalize+0x800/0x800 [ 495.011047][ C1] ? call_timer_fn+0xd2/0x540 [ 495.015730][ C1] ? __run_timers+0x800/0x800 [ 495.020425][ C1] ? hsr_dev_finalize+0x800/0x800 [ 495.025459][ C1] __run_timers+0x542/0x800 [ 495.029983][ C1] ? detach_timer+0x2b0/0x2b0 [ 495.034681][ C1] run_timer_softirq+0x67/0xf0 [ 495.039543][ C1] handle_softirqs+0x280/0x820 [ 495.044314][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 495.049088][ C1] ? do_softirq+0x1a0/0x1a0 [ 495.053621][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 495.058837][ C1] __irq_exit_rcu+0xd3/0x190 [ 495.063432][ C1] ? irq_exit_rcu+0x20/0x20 [ 495.067945][ C1] irq_exit_rcu+0x9/0x20 [ 495.072208][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 495.077847][ C1] [ 495.080787][ C1] [ 495.083729][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.089712][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 495.095527][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 a3 30 09 e8 8b 22 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 495.115152][ C1] RSP: 0018:ffffc9000d277878 EFLAGS: 00000286 [ 495.121241][ C1] RAX: ff71cb6ff6192500 RBX: 0000000000000000 RCX: ff71cb6ff6192500 [ 495.129219][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 495.137197][ C1] RBP: ffffc9000d2778d0 R08: ffffffff8e8add6f R09: 1ffffffff1d15bad [ 495.145176][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bae R12: ffff88801fee8000 [ 495.153153][ C1] R13: dffffc0000000000 R14: ffff88802fd5da00 R15: ffff8880b8f3cac8 [ 495.161144][ C1] ? finish_task_switch+0x265/0x8f0 [ 495.166365][ C1] __schedule+0x155b/0x45a0 [ 495.170898][ C1] ? lock_chain_count+0x20/0x20 [ 495.175774][ C1] ? asan.module_dtor+0x20/0x20 [ 495.180659][ C1] ? futex_wait_queue+0x9d/0x1b0 [ 495.185608][ C1] ? plist_add+0x3d8/0x490 [ 495.190044][ C1] schedule+0xbd/0x170 [ 495.194126][ C1] ? futex_wait_queue+0x27/0x1b0 [ 495.199092][ C1] futex_wait_queue+0x138/0x1b0 [ 495.203972][ C1] futex_wait+0x1ec/0x5e0 [ 495.208402][ C1] ? futex_wait_setup+0x270/0x270 [ 495.213456][ C1] do_futex+0x2ff/0x3e0 [ 495.217624][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 495.223527][ C1] __se_sys_futex+0x3a9/0x440 [ 495.228218][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 495.232984][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 495.238995][ C1] ? __x64_sys_futex+0x21/0xf0 [ 495.243786][ C1] do_syscall_64+0x55/0xa0 [ 495.248234][ C1] ? clear_bhb_loop+0x40/0x90 [ 495.252917][ C1] ? clear_bhb_loop+0x40/0x90 [ 495.257624][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.263526][ C1] RIP: 0033:0x7f3dd879bf79 [ 495.267976][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.287591][ C1] RSP: 002b:00007f3dd96e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 495.296038][ C1] RAX: ffffffffffffffda RBX: 00007f3dd8a15fa8 RCX: 00007f3dd879bf79 [ 495.304024][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3dd8a15fa8 [ 495.312000][ C1] RBP: 00007f3dd8a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 495.319979][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.327967][ C1] R13: 00007f3dd8a16038 R14: 00007fff87230dc0 R15: 00007fff87230ea8 [ 495.335967][ C1] [ 501.790382][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.801315][ T1278] ieee802154 phy1 wpan1: encryption failed: -22