last executing test programs: 4.580075661s ago: executing program 1 (id=2882): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.365825958s ago: executing program 1 (id=2884): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20) recvmsg$kcm(r0, 0x0, 0x80) (async) recvmsg$kcm(r0, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 4.220856693s ago: executing program 0 (id=2885): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c6394f90424fc602f1a09000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.965579041s ago: executing program 0 (id=2888): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) socketpair(0x6, 0x3, 0x2, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000540)={r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)="d8000000240081064e81f782db44b9040a0208000300000000000100f1ffffff020014260360160cac08da30399d11540e120800280024000000a80009001100014003000000036010fab94dcf5c0461c1ff7f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dc81ed0bffece0b42a9ecbee5de6ccd40dd60100ef3d93452a92954b43370e97011d65966a41", 0xd8}], 0x1}, 0x4004000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1700000054009155090893b31b71a54a07"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000600)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e9ff0fdb4260df018b89c40ebb373b294cf0dddf299a24f4be2569b9ab7c61b4e7fd393a7d22c80fc", 0x53}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 3.559113594s ago: executing program 3 (id=2891): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 3.481837426s ago: executing program 0 (id=2893): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a104000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f02f839e0ff008001fffffe1ffff8100632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 3.299423083s ago: executing program 1 (id=2895): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.260207534s ago: executing program 3 (id=2896): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116600000000008510006402000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073116600000000008510006402000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000001161118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x25, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(0xffffffffffffffff) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c04a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(0x3) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000340)="2243113151ebdc"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000340)="2243113151ebdc"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000000e000000720800ff000000006600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getpid() (async) r3 = getpid() write$cgroup_pid(r2, &(0x7f00000003c0)=r3, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffbfe}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) recvmsg$unix(r4, &(0x7f0000000880)={&(0x7f00000000c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000500)=""/175, 0xaf}, {&(0x7f00000005c0)=""/103, 0x67}, {&(0x7f0000000640)=""/183, 0xb7}], 0x6, &(0x7f0000000780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x1) 3.054541891s ago: executing program 1 (id=2897): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.865807677s ago: executing program 0 (id=2898): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4) sendmsg$tipc(r1, &(0x7f0000000900)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x2}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000080)="d5cfa4fbe12bff29c85e7402ef03257584aea5557d84805a81dd1aaabe510eeeeef9204661ed89787a907a334ae018972fe643fdb9d25dc4e7f887fc77903067e5008952c30a88", 0x47}, {&(0x7f0000000180)="cffd475b3ec08cadca93d5148a83045a613aa0e13c098d11b783ec5cbbb5f741a479dd21a7cd9df53f4495faf686e03fe2986fd1712ffecdde46c49f6b2e1b97e9ff830ab24bd471681979c95c2f7f0caedaaa42f97680", 0x57}, {&(0x7f0000000240)="3644133bed4cbeef8b4308220e533dcc9419225a4d02b9c011c27f59d108f8070a5de18e8b194a589e01e2cb77ba402ba1ee9760a9630f2e28d747901b30661e9b92d5b34aba7bed2b53854fa3b6645f4a4491c02827acb773d13581f5a41aadc32b532419341f0b5cef3e3b5cf1c1452e49819d36edb166d3dd574eaff90a3e20da6f041605aa0b08580d2606227ede70627f7a94f7ba32953211083660afe08531a4fdb72b6a5b", 0xa8}, {&(0x7f0000000500)="2aad763296858817ce49bb6da73fa950545558d19cce65284a6ed50da6fcf888973664eb5b32fa5501b61ee6598d4115d6a0af0c4b6c206d5f06740b335cde21455c6bab558ddc04d7c99100ca079209cfbd891cab920b25b3c8c3d07e9b64bd9133d2ca708d3001b4c2be56f514d3d47d1f1e0fce7be6aa98a481b2f52262f5bd4b9f83e944f50bea1fe3c130290d5db656f21fb635ab56c6e5a5041286b4ec7bca13dfc8d8ebb9806f7503277777dd4c37e5b6207b198be374921ef409cf1e4fb72228df1ffdc8fbabc67357365f97534297e2b9dc0f9112fe550a91aecd8e0d44c7fbef6bec242a2b", 0xea}, {&(0x7f0000000600)="136ea4c857c66a82611feec3bf9216f2bf703e168ef222d10acca1258c8b2deddeff03c0f9527113c284b2df2cbebd5dab641ed502fbae4f214fbfaa27897fcbf70be7779156ab4d48bc73cf913051303aa6d845bde4acc51ecae554578e7183c38c460746e6be6e60162ad52f988f48264653967d881df2bf1d8e290e2afd715fd86d4aa3ea55b6cd49e5f9f666373317bba172725f62a4c8726d8ad8871922c79391f38a2ae54789b024278109e2453bdc593127be0c997f92dad6d3947fae5480", 0xc2}], 0x5, &(0x7f0000000800)="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", 0xfe}, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0x1000000000c}, 0xa100, 0xc8, 0x1000003, 0x3, 0xfffffffffffffffc, 0x2, 0x20, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5", 0x5f}, {&(0x7f0000000780)="6144c338abfb60e94f608498bd0e32960c945aed3bc143d3f34fdbc3a3105cce44aa66696ef36edf4b8c25d7b3c8c3043d7f8028d026744b475b8bdd6abc194e74e30f789f6aa9fb3f91c2834187309b03813bd071b84dc58d6fb09360a845326960d8415c09d1d96109006569d7f5a557e906c41bb3910b63", 0x79}], 0x2, 0x0, 0x0, 0x2663}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00000009000100053582c137153e3702480180000c0000d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000009905000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r9, 0x0, 0x1ba8847c99}, 0x38) recvmsg$unix(r7, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 2.556540547s ago: executing program 1 (id=2899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00b9560300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00b9560300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20) 2.556208987s ago: executing program 3 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x41c000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'pimreg1\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 2.109822131s ago: executing program 0 (id=2901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000a00000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000e4ff"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa6) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x6, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0x2, 0x8}, 0x10, r7, 0x0, 0x4, &(0x7f0000000700)=[r3, r8, r0, r0, r3], &(0x7f0000000740)=[{0x3, 0x1, 0x5, 0x7}, {0x3, 0x2, 0xc, 0x3}, {0x5, 0x1, 0x8, 0x4}, {0x1, 0x2, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84c184ffff"], 0xffdd) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) 2.109318991s ago: executing program 4 (id=2902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f00000000c0), 0x0, 0x9fdb99d92c17744e, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="7afc5d080800000000030095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000240)=0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r7, 0x2, 0x8}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r1, 0xe, 0x0, 0x92e, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) gettid() bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0f0000003a200000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="7fcd6ec4a89a6563fad8bb52a62cb3b817bda584d9", @ANYRES64=r8], 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f00000000c0), 0x0, 0x9fdb99d92c17744e, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000600)="7afc5d080800000000030095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) (async) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000240)=0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r7, 0x2, 0x8}, 0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map=r1, 0xe, 0x0, 0x92e, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) (async) gettid() (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0f0000003a200000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="7fcd6ec4a89a6563fad8bb52a62cb3b817bda584d9", @ANYRES64=r8], 0x20) (async) 1.755040203s ago: executing program 2 (id=2903): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000380)=@in={0x2, 0xffc0, @local}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea36539331eeb4e2bc14cabe82fac5ff1c16ff8375592aaff29a5716ac84baf343f45d95f6b1c38e9cf345f95faa148e05132a8ee3b4e28d0ec", 0xa7}], 0x2, &(0x7f0000000980)=[{0x70, 0x104, 0x1, "acbd909210f760ebb8f9595549e4ad4944c08ff0a0a4ffb761f14297c3d753b9fc30f68651deea0800ce22102b945edd392745712c8119ca58a2d40b217fdeb08f72959665eb2773ea91b066f738607edf00382910eac94f18537f8472"}, {0x38, 0xff, 0x52a, "847e0a25f0cd19e17c0b28f5c1d950dbaefdcb6b72d3ed17fea18b8f133e1b2aa57f"}, {0x58, 0x114, 0xe2, "3b04b927554d8353a9541dc36413f166d4762e975494bc7223897535c5b363e1e070d235add0df8c9b85ef01e2b6c1858a96cb6d5ce09c4dfc8682b3021d0bdd8b0b4ff547"}, {0x10, 0x88, 0x2}, {0xb8, 0x2, 0x7671, "8c26973fb63decf76c9d2a0c38a1f416ff73a94c1ccc468b351a86b1510fe51dabec16c803c1c884e122c3ffa56c311194237a19f80d230c6c65f0acb051ff3878e7ca4d42087975fda7af20191f315f19fed47c5156f67cfc0c306f6b8d27494412058b16c58ac80132c30d1048f8bb5ffe16510a3a35f87943ce3971ec7d30abe31fd09f56aaf5a26939b6d30d0417b7f8fd9151426d0f7397b802b239993db541975e1a30ae3e"}], 0x1c8}, 0x4040845) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="6b000000000000002900000002000000ff0275b0a6d8dba1c08100000000000000007f0000010800000007000000000000991150bef221978756640000001c000000000000eaf2062375fc00000000160800", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0x6b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="feffff7f0000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1.624895067s ago: executing program 2 (id=2904): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffff6a, 0x1c, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000000000}, 0x10c002, 0xac5d, 0x0, 0x7, 0x996, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000533318ab67de68a89a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, 0x0, 0x404c1c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f0655847e089061416e0885a0400008100000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}, {&(0x7f0000001100)="1fa77f9ea9cb88b023c9323cd949e675399c327110e535e4aba7ceac50399a9f628a2934194b6949cb0dbdcf3b", 0x2d}], 0x2}, 0x0) 1.576965848s ago: executing program 4 (id=2905): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000955017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.477902962s ago: executing program 4 (id=2906): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$inet(r0, 0x0, 0xc000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x41}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd5}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.030817306s ago: executing program 3 (id=2907): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 1.006678957s ago: executing program 4 (id=2908): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c00000000006113780000000000bfa000000000000007000000ee0016055e03010000000000250500d00000000069163e0000000000bf07000000000000260507000fff0720670600003f000000140600000ee6ffd0bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.005917657s ago: executing program 2 (id=2909): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x38}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 899.507371ms ago: executing program 3 (id=2910): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[], 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000500)={r0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000780), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x44081) 899.147311ms ago: executing program 1 (id=2911): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 826.500043ms ago: executing program 4 (id=2912): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 824.810373ms ago: executing program 0 (id=2913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x2, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x114101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000100ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 640.077499ms ago: executing program 2 (id=2914): r0 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000010000000000000000000000071103b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) 572.949281ms ago: executing program 3 (id=2915): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000020, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x7602, 0x8004, 0x0, 0x9, 0x0, 0x0, 0x1000}, 0x0, 0x5, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) 279.152351ms ago: executing program 2 (id=2916): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000380)=@in={0x2, 0xffc0, @local}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea36539331eeb4e2bc14cabe82fac5ff1c16ff8375592aaff29a5716ac84baf343f45d95f6b1c38e9cf345f95faa148e05132a8ee3b4e28d0ec", 0xa7}], 0x2, &(0x7f0000000980)=[{0x70, 0x104, 0x1, "acbd909210f760ebb8f9595549e4ad4944c08ff0a0a4ffb761f14297c3d753b9fc30f68651deea0800ce22102b945edd392745712c8119ca58a2d40b217fdeb08f72959665eb2773ea91b066f738607edf00382910eac94f18537f8472"}, {0x38, 0xff, 0x52a, "847e0a25f0cd19e17c0b28f5c1d950dbaefdcb6b72d3ed17fea18b8f133e1b2aa57f"}, {0x58, 0x114, 0xe2, "3b04b927554d8353a9541dc36413f166d4762e975494bc7223897535c5b363e1e070d235add0df8c9b85ef01e2b6c1858a96cb6d5ce09c4dfc8682b3021d0bdd8b0b4ff547"}, {0x10, 0x88, 0x2}, {0xb8, 0x2, 0x7671, "8c26973fb63decf76c9d2a0c38a1f416ff73a94c1ccc468b351a86b1510fe51dabec16c803c1c884e122c3ffa56c311194237a19f80d230c6c65f0acb051ff3878e7ca4d42087975fda7af20191f315f19fed47c5156f67cfc0c306f6b8d27494412058b16c58ac80132c30d1048f8bb5ffe16510a3a35f87943ce3971ec7d30abe31fd09f56aaf5a26939b6d30d0417b7f8fd9151426d0f7397b802b239993db541975e1a30ae3e"}], 0x1c8}, 0x4040845) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="6b000000000000002900000002000000ff0275b0a6d8dba1c08100000000000000007f0000010800000007000000000000991150bef221978756640000001c000000000000eaf2062375fc00000000160800", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0x6b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="ffffff800000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 75.163168ms ago: executing program 4 (id=2917): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 2 (id=2918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x41c000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'pimreg1\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x3ff, 0x2, 0xfffffffb, 0x6800, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) kernel console output (not intermixed with test programs): 00000038 RSI: 0000200000000440 RDI: 000000000000001b [ 193.672400][ T7250] RBP: 00007f986cf7a090 R08: 0000000000000000 R09: 0000000000000000 [ 193.680370][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.688349][ T7250] R13: 00007f986c416038 R14: 00007f986c415fa0 R15: 00007ffe5fe11908 [ 193.696359][ T7250] [ 194.019010][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.025475][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.127293][ T7276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1053'. [ 202.089285][ T7336] netlink: 'syz.3.1075': attribute type 10 has an invalid length. [ 202.114285][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1075'. [ 202.248883][ T7344] netlink: 'syz.1.1088': attribute type 2 has an invalid length. [ 202.267849][ T7344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1088'. [ 205.219572][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1093'. [ 205.496162][ T7395] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.1097'. [ 205.496655][ T7394] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1095'. [ 205.541840][ T7395] netlink: zone id is out of range [ 205.547672][ T7395] netlink: zone id is out of range [ 205.569538][ T7395] netlink: zone id is out of range [ 205.580083][ T7395] netlink: zone id is out of range [ 205.591000][ T7395] netlink: zone id is out of range [ 205.606455][ T7395] netlink: zone id is out of range [ 205.632667][ T7395] netlink: zone id is out of range [ 205.658230][ T7395] netlink: zone id is out of range [ 205.677473][ T7395] netlink: zone id is out of range [ 205.698373][ T7395] netlink: zone id is out of range [ 205.980742][ T7413] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1104'. [ 206.989456][ T7443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1113'. [ 207.927617][ T7457] netlink: 'syz.2.1117': attribute type 2 has an invalid length. [ 207.974842][ T7456] netlink: 'syz.2.1117': attribute type 11 has an invalid length. [ 207.983291][ T7456] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1117'. [ 208.037673][ T7456] netlink: 'syz.2.1117': attribute type 3 has an invalid length. [ 208.161042][ T7456] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1117'. [ 208.272318][ T7455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.347143][ T7462] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1118'. [ 209.174717][ T7490] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1128'. [ 209.266856][ T7488] netlink: 'syz.0.1128': attribute type 17 has an invalid length. [ 209.295396][ T7488] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1128'. [ 209.449643][ T4280] Bluetooth: hci4: Malformed LE Event: 0x0d [ 210.679231][ T7540] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1148'. [ 210.806694][ T7548] netlink: 'syz.2.1148': attribute type 17 has an invalid length. [ 210.899771][ T7548] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1148'. [ 211.017864][ T7548] net_ratelimit: 3545 callbacks suppressed [ 211.017884][ T7548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.118851][ T7562] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1155'. [ 211.284284][ T7567] FAULT_INJECTION: forcing a failure. [ 211.284284][ T7567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.365379][ T7567] CPU: 0 PID: 7567 Comm: syz.1.1157 Not tainted syzkaller #0 [ 211.372800][ T7567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.382870][ T7567] Call Trace: [ 211.386161][ T7567] [ 211.389109][ T7567] dump_stack_lvl+0x188/0x24e [ 211.393811][ T7567] ? show_regs_print_info+0x12/0x12 [ 211.399029][ T7567] ? load_image+0x400/0x400 [ 211.403559][ T7567] ? __lock_acquire+0x7d10/0x7d10 [ 211.408608][ T7567] ? __virt_addr_valid+0x188/0x540 [ 211.413755][ T7567] should_fail_ex+0x399/0x4d0 [ 211.418455][ T7567] _copy_from_user+0x2c/0x170 [ 211.423153][ T7567] btf_new_fd+0x324/0x780 [ 211.427508][ T7567] __sys_bpf+0x612/0x780 [ 211.431774][ T7567] ? bpf_link_show_fdinfo+0x380/0x380 [ 211.437180][ T7567] ? lock_chain_count+0x20/0x20 [ 211.442062][ T7567] __x64_sys_bpf+0x78/0x90 [ 211.446507][ T7567] do_syscall_64+0x4c/0xa0 [ 211.450932][ T7567] ? clear_bhb_loop+0x60/0xb0 [ 211.455619][ T7567] ? clear_bhb_loop+0x60/0xb0 [ 211.460297][ T7567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.466189][ T7567] RIP: 0033:0x7ff9eb39ce59 [ 211.470600][ T7567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.490203][ T7567] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.498614][ T7567] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 211.506587][ T7567] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 211.514567][ T7567] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.522535][ T7567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.530497][ T7567] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 211.538478][ T7567] [ 211.797096][ T7579] FAULT_INJECTION: forcing a failure. [ 211.797096][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.817319][ T7579] CPU: 1 PID: 7579 Comm: syz.4.1163 Not tainted syzkaller #0 [ 211.824725][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.834791][ T7579] Call Trace: [ 211.838078][ T7579] [ 211.841020][ T7579] dump_stack_lvl+0x188/0x24e [ 211.845717][ T7579] ? show_regs_print_info+0x12/0x12 [ 211.850929][ T7579] ? load_image+0x400/0x400 [ 211.855442][ T7579] ? __lock_acquire+0x7d10/0x7d10 [ 211.860485][ T7579] should_fail_ex+0x399/0x4d0 [ 211.865177][ T7579] _copy_from_user+0x2c/0x170 [ 211.869876][ T7579] __sys_bpf+0x2ea/0x780 [ 211.874144][ T7579] ? bpf_link_show_fdinfo+0x380/0x380 [ 211.879544][ T7579] ? lock_chain_count+0x20/0x20 [ 211.884419][ T7579] __x64_sys_bpf+0x78/0x90 [ 211.888850][ T7579] do_syscall_64+0x4c/0xa0 [ 211.893285][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 211.897978][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 211.902674][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.908582][ T7579] RIP: 0033:0x7f986c19ce59 [ 211.913014][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.932626][ T7579] RSP: 002b:00007f986cf7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.941031][ T7579] RAX: ffffffffffffffda RBX: 00007f986c415fa0 RCX: 00007f986c19ce59 [ 211.948990][ T7579] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 211.956951][ T7579] RBP: 00007f986cf7a090 R08: 0000000000000000 R09: 0000000000000000 [ 211.964915][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.972876][ T7579] R13: 00007f986c416038 R14: 00007f986c415fa0 R15: 00007ffe5fe11908 [ 211.980854][ T7579] [ 212.024337][ T7581] device syzkaller0 entered promiscuous mode [ 212.138697][ T7586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1166'. [ 213.777746][ T7588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1168'. [ 213.787605][ T7586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1166'. [ 214.029433][ T7622] FAULT_INJECTION: forcing a failure. [ 214.029433][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.071109][ T7622] CPU: 0 PID: 7622 Comm: syz.1.1179 Not tainted syzkaller #0 [ 214.078528][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 214.088587][ T7622] Call Trace: [ 214.091864][ T7622] [ 214.094787][ T7622] dump_stack_lvl+0x188/0x24e [ 214.099457][ T7622] ? show_regs_print_info+0x12/0x12 [ 214.104645][ T7622] ? load_image+0x400/0x400 [ 214.109141][ T7622] ? __lock_acquire+0x7d10/0x7d10 [ 214.114166][ T7622] should_fail_ex+0x399/0x4d0 [ 214.118834][ T7622] _copy_to_user+0x2c/0x130 [ 214.123333][ T7622] bpf_verifier_vlog+0x172/0x390 [ 214.128270][ T7622] __btf_verifier_log+0xdf/0x130 [ 214.133207][ T7622] ? btf_check_sec_info+0x350/0x350 [ 214.138398][ T7622] ? __virt_addr_valid+0x188/0x540 [ 214.143501][ T7622] ? btf_parse_hdr+0x1e0/0x7e0 [ 214.148257][ T7622] btf_parse_hdr+0x358/0x7e0 [ 214.152841][ T7622] btf_new_fd+0x3c6/0x780 [ 214.157167][ T7622] __sys_bpf+0x612/0x780 [ 214.161404][ T7622] ? bpf_link_show_fdinfo+0x380/0x380 [ 214.166779][ T7622] ? lock_chain_count+0x20/0x20 [ 214.171627][ T7622] __x64_sys_bpf+0x78/0x90 [ 214.176034][ T7622] do_syscall_64+0x4c/0xa0 [ 214.180437][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 214.185106][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 214.189777][ T7622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.195677][ T7622] RIP: 0033:0x7ff9eb39ce59 [ 214.200102][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.219712][ T7622] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.228121][ T7622] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 214.236085][ T7622] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 214.244048][ T7622] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.252009][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.259968][ T7622] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 214.267945][ T7622] [ 214.372104][ T7631] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 214.377969][ T7631] syzkaller1: owner set to 0 [ 214.412705][ T7631] syzkaller1: tun_chr_ioctl cmd 1074025676 [ 214.443574][ T7631] syzkaller1: owner set to 0 [ 214.559252][ T7618] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1178'. [ 214.648997][ T7637] netlink: 'syz.3.1178': attribute type 17 has an invalid length. [ 214.743578][ T7637] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1178'. [ 214.773737][ T7637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.261631][ T7668] tap0: tun_chr_ioctl cmd 1074025677 [ 215.267153][ T7668] tap0: linktype set to 6 [ 215.431202][ T7679] FAULT_INJECTION: forcing a failure. [ 215.431202][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.473808][ T7679] CPU: 1 PID: 7679 Comm: syz.2.1199 Not tainted syzkaller #0 [ 215.481228][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.491295][ T7679] Call Trace: [ 215.494585][ T7679] [ 215.497532][ T7679] dump_stack_lvl+0x188/0x24e [ 215.502226][ T7679] ? show_regs_print_info+0x12/0x12 [ 215.507439][ T7679] ? load_image+0x400/0x400 [ 215.511960][ T7679] ? __lock_acquire+0x7d10/0x7d10 [ 215.517004][ T7679] should_fail_ex+0x399/0x4d0 [ 215.521694][ T7679] _copy_to_user+0x2c/0x130 [ 215.526219][ T7679] bpf_verifier_vlog+0x172/0x390 [ 215.531178][ T7679] __btf_verifier_log+0xdf/0x130 [ 215.536142][ T7679] ? btf_check_sec_info+0x350/0x350 [ 215.541363][ T7679] ? __virt_addr_valid+0x188/0x540 [ 215.546492][ T7679] ? btf_parse_hdr+0x1e0/0x7e0 [ 215.551273][ T7679] btf_parse_hdr+0x384/0x7e0 [ 215.555880][ T7679] btf_new_fd+0x3c6/0x780 [ 215.560225][ T7679] __sys_bpf+0x612/0x780 [ 215.564482][ T7679] ? bpf_link_show_fdinfo+0x380/0x380 [ 215.569880][ T7679] ? lock_chain_count+0x20/0x20 [ 215.574748][ T7679] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 215.580748][ T7679] __x64_sys_bpf+0x78/0x90 [ 215.585181][ T7679] do_syscall_64+0x4c/0xa0 [ 215.589605][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 215.594297][ T7679] ? clear_bhb_loop+0x60/0xb0 [ 215.598994][ T7679] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.604905][ T7679] RIP: 0033:0x7f9678d9ce59 [ 215.609330][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.628968][ T7679] RSP: 002b:00007f9679bbb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.637403][ T7679] RAX: ffffffffffffffda RBX: 00007f9679015fa0 RCX: 00007f9678d9ce59 [ 215.645390][ T7679] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 215.653376][ T7679] RBP: 00007f9679bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 215.661361][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.669341][ T7679] R13: 00007f9679016038 R14: 00007f9679015fa0 R15: 00007ffd3eb3d188 [ 215.677342][ T7679] [ 216.619934][ T7706] netlink: 'syz.3.1208': attribute type 39 has an invalid length. [ 216.777804][ T7708] netlink: 'syz.4.1207': attribute type 2 has an invalid length. [ 216.788270][ T7712] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1211'. [ 216.813636][ T7713] netlink: 'syz.1.1212': attribute type 21 has an invalid length. [ 217.187116][ T7728] netlink: 'syz.3.1216': attribute type 15 has an invalid length. [ 217.216115][ T7728] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1216'. [ 218.444248][ T7756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1227'. [ 219.742985][ T7791] netlink: 'syz.0.1239': attribute type 2 has an invalid length. [ 219.821290][ T7791] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1239'. [ 220.095300][ T7808] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1244'. [ 221.008381][ T7834] FAULT_INJECTION: forcing a failure. [ 221.008381][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.111098][ T7834] CPU: 0 PID: 7834 Comm: syz.4.1253 Not tainted syzkaller #0 [ 221.118522][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.128590][ T7834] Call Trace: [ 221.131876][ T7834] [ 221.134818][ T7834] dump_stack_lvl+0x188/0x24e [ 221.139512][ T7834] ? show_regs_print_info+0x12/0x12 [ 221.144722][ T7834] ? load_image+0x400/0x400 [ 221.149244][ T7834] ? __lock_acquire+0x7d10/0x7d10 [ 221.154293][ T7834] should_fail_ex+0x399/0x4d0 [ 221.158984][ T7834] _copy_to_user+0x2c/0x130 [ 221.163506][ T7834] bpf_verifier_vlog+0x172/0x390 [ 221.168467][ T7834] __btf_verifier_log+0xdf/0x130 [ 221.173435][ T7834] ? btf_check_sec_info+0x350/0x350 [ 221.178659][ T7834] ? __virt_addr_valid+0x188/0x540 [ 221.183804][ T7834] ? btf_parse_hdr+0x1e0/0x7e0 [ 221.188585][ T7834] btf_parse_hdr+0x406/0x7e0 [ 221.193195][ T7834] btf_new_fd+0x3c6/0x780 [ 221.197549][ T7834] __sys_bpf+0x612/0x780 [ 221.201811][ T7834] ? bpf_link_show_fdinfo+0x380/0x380 [ 221.207218][ T7834] ? lock_chain_count+0x20/0x20 [ 221.212096][ T7834] __x64_sys_bpf+0x78/0x90 [ 221.216532][ T7834] do_syscall_64+0x4c/0xa0 [ 221.220974][ T7834] ? clear_bhb_loop+0x60/0xb0 [ 221.225676][ T7834] ? clear_bhb_loop+0x60/0xb0 [ 221.230375][ T7834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.236284][ T7834] RIP: 0033:0x7f986c19ce59 [ 221.240715][ T7834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.260332][ T7834] RSP: 002b:00007f986cf7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.268760][ T7834] RAX: ffffffffffffffda RBX: 00007f986c415fa0 RCX: 00007f986c19ce59 [ 221.276742][ T7834] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 221.284722][ T7834] RBP: 00007f986cf7a090 R08: 0000000000000000 R09: 0000000000000000 [ 221.292704][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.300686][ T7834] R13: 00007f986c416038 R14: 00007f986c415fa0 R15: 00007ffe5fe11908 [ 221.308682][ T7834] [ 221.375003][ T7836] netlink: 'syz.0.1254': attribute type 16 has an invalid length. [ 221.459911][ T7836] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1254'. [ 222.517262][ T7865] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 222.619407][ T7865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.974634][ T4769] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 224.822299][ T7885] FAULT_INJECTION: forcing a failure. [ 224.822299][ T7885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.870475][ T7885] CPU: 1 PID: 7885 Comm: syz.1.1270 Not tainted syzkaller #0 [ 224.877894][ T7885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.887960][ T7885] Call Trace: [ 224.891250][ T7885] [ 224.894189][ T7885] dump_stack_lvl+0x188/0x24e [ 224.898888][ T7885] ? show_regs_print_info+0x12/0x12 [ 224.904097][ T7885] ? load_image+0x400/0x400 [ 224.908616][ T7885] ? __lock_acquire+0x7d10/0x7d10 [ 224.913661][ T7885] should_fail_ex+0x399/0x4d0 [ 224.918385][ T7885] _copy_to_user+0x2c/0x130 [ 224.922936][ T7885] bpf_verifier_vlog+0x172/0x390 [ 224.927924][ T7885] __btf_verifier_log+0xdf/0x130 [ 224.932917][ T7885] ? btf_check_sec_info+0x350/0x350 [ 224.938156][ T7885] ? __virt_addr_valid+0x188/0x540 [ 224.943286][ T7885] ? btf_parse_hdr+0x1e0/0x7e0 [ 224.948077][ T7885] btf_parse_hdr+0x431/0x7e0 [ 224.952696][ T7885] btf_new_fd+0x3c6/0x780 [ 224.957053][ T7885] __sys_bpf+0x612/0x780 [ 224.961311][ T7885] ? bpf_link_show_fdinfo+0x380/0x380 [ 224.966726][ T7885] ? lock_chain_count+0x20/0x20 [ 224.971611][ T7885] __x64_sys_bpf+0x78/0x90 [ 224.976041][ T7885] do_syscall_64+0x4c/0xa0 [ 224.980459][ T7885] ? clear_bhb_loop+0x60/0xb0 [ 224.985145][ T7885] ? clear_bhb_loop+0x60/0xb0 [ 224.989840][ T7885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.995744][ T7885] RIP: 0033:0x7ff9eb39ce59 [ 225.000167][ T7885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.019780][ T7885] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 225.028200][ T7885] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 225.036180][ T7885] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 225.044155][ T7885] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.052128][ T7885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.060100][ T7885] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 225.068111][ T7885] [ 225.328660][ T7890] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 225.341027][ T7890] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1273'. [ 226.922220][ T7936] FAULT_INJECTION: forcing a failure. [ 226.922220][ T7936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.150356][ T7936] CPU: 0 PID: 7936 Comm: syz.4.1287 Not tainted syzkaller #0 [ 227.157790][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.167862][ T7936] Call Trace: [ 227.171154][ T7936] [ 227.174100][ T7936] dump_stack_lvl+0x188/0x24e [ 227.178803][ T7936] ? show_regs_print_info+0x12/0x12 [ 227.184028][ T7936] ? load_image+0x400/0x400 [ 227.188563][ T7936] ? __lock_acquire+0x7d10/0x7d10 [ 227.193621][ T7936] should_fail_ex+0x399/0x4d0 [ 227.198322][ T7936] _copy_to_user+0x2c/0x130 [ 227.202849][ T7936] bpf_verifier_vlog+0x172/0x390 [ 227.207816][ T7936] __btf_verifier_log+0xdf/0x130 [ 227.212785][ T7936] ? btf_check_sec_info+0x350/0x350 [ 227.218016][ T7936] ? __virt_addr_valid+0x188/0x540 [ 227.223153][ T7936] ? btf_parse_hdr+0x1e0/0x7e0 [ 227.227943][ T7936] btf_parse_hdr+0x45c/0x7e0 [ 227.232570][ T7936] btf_new_fd+0x3c6/0x780 [ 227.236935][ T7936] __sys_bpf+0x612/0x780 [ 227.241212][ T7936] ? bpf_link_show_fdinfo+0x380/0x380 [ 227.246629][ T7936] ? lock_chain_count+0x20/0x20 [ 227.251515][ T7936] __x64_sys_bpf+0x78/0x90 [ 227.255961][ T7936] do_syscall_64+0x4c/0xa0 [ 227.260396][ T7936] ? clear_bhb_loop+0x60/0xb0 [ 227.265102][ T7936] ? clear_bhb_loop+0x60/0xb0 [ 227.269807][ T7936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.275724][ T7936] RIP: 0033:0x7f986c19ce59 [ 227.280156][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.300040][ T7936] RSP: 002b:00007f986cf7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.308472][ T7936] RAX: ffffffffffffffda RBX: 00007f986c415fa0 RCX: 00007f986c19ce59 [ 227.316469][ T7936] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000012 [ 227.324467][ T7936] RBP: 00007f986cf7a090 R08: 0000000000000000 R09: 0000000000000000 [ 227.332474][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.340482][ T7936] R13: 00007f986c416038 R14: 00007f986c415fa0 R15: 00007ffe5fe11908 [ 227.348515][ T7936] [ 230.164252][ T7991] netlink: 'syz.2.1305': attribute type 3 has an invalid length. [ 230.237236][ T7991] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1305'. [ 230.312995][ T7993] netlink: 'syz.3.1308': attribute type 28 has an invalid length. [ 230.349480][ T7993] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1308'. [ 230.398233][ T8001] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1311'. [ 233.777842][ T8039] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1324'. [ 234.108237][ T8051] netlink: 'syz.1.1326': attribute type 2 has an invalid length. [ 234.157240][ T8051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1326'. [ 234.470922][ T8062] netlink: 'syz.3.1331': attribute type 3 has an invalid length. [ 234.492530][ T8063] netlink: 'syz.2.1330': attribute type 21 has an invalid length. [ 234.532796][ T8062] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1331'. [ 234.594741][ T8063] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 234.624562][ T8064] netlink: 'syz.3.1331': attribute type 21 has an invalid length. [ 234.669265][ T8064] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1331'. [ 234.689602][ T8064] netlink: 'syz.3.1331': attribute type 4 has an invalid length. [ 234.747364][ T8064] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1331'. [ 235.285160][ T8087] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1340'. [ 239.881031][ T8158] FAULT_INJECTION: forcing a failure. [ 239.881031][ T8158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.031138][ T8158] CPU: 0 PID: 8158 Comm: syz.0.1364 Not tainted syzkaller #0 [ 240.038562][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.048626][ T8158] Call Trace: [ 240.051913][ T8158] [ 240.054865][ T8158] dump_stack_lvl+0x188/0x24e [ 240.059561][ T8158] ? show_regs_print_info+0x12/0x12 [ 240.064768][ T8158] ? load_image+0x400/0x400 [ 240.069288][ T8158] ? __lock_acquire+0x7d10/0x7d10 [ 240.074326][ T8158] ? snprintf+0xe5/0x140 [ 240.078587][ T8158] should_fail_ex+0x399/0x4d0 [ 240.083281][ T8158] _copy_to_user+0x2c/0x130 [ 240.087808][ T8158] simple_read_from_buffer+0xe3/0x150 [ 240.093195][ T8158] proc_fail_nth_read+0x1a6/0x220 [ 240.098233][ T8158] ? proc_fault_inject_write+0x310/0x310 [ 240.103882][ T8158] ? fsnotify_perm+0x248/0x550 [ 240.108664][ T8158] ? proc_fault_inject_write+0x310/0x310 [ 240.114310][ T8158] vfs_read+0x2de/0xa00 [ 240.118491][ T8158] ? kernel_read+0x1e0/0x1e0 [ 240.123105][ T8158] ? __fget_files+0x28/0x4b0 [ 240.127706][ T8158] ? __fget_files+0x28/0x4b0 [ 240.132310][ T8158] ? __fget_files+0x43d/0x4b0 [ 240.137005][ T8158] ? __fdget_pos+0x2ae/0x360 [ 240.141606][ T8158] ? ksys_read+0x71/0x250 [ 240.145951][ T8158] ksys_read+0x14c/0x250 [ 240.150212][ T8158] ? vfs_write+0xa30/0xa30 [ 240.154647][ T8158] ? lockdep_hardirqs_on+0x94/0x140 [ 240.159865][ T8158] do_syscall_64+0x4c/0xa0 [ 240.164290][ T8158] ? clear_bhb_loop+0x60/0xb0 [ 240.168979][ T8158] ? clear_bhb_loop+0x60/0xb0 [ 240.173672][ T8158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.179587][ T8158] RIP: 0033:0x7f2b0515d68e [ 240.184018][ T8158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.203636][ T8158] RSP: 002b:00007f2b0613bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.212060][ T8158] RAX: ffffffffffffffda RBX: 00007f2b0613c6c0 RCX: 00007f2b0515d68e [ 240.220040][ T8158] RDX: 000000000000000f RSI: 00007f2b0613c0a0 RDI: 0000000000000003 [ 240.228021][ T8158] RBP: 00007f2b0613c090 R08: 0000000000000000 R09: 0000000000000000 [ 240.236005][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.243986][ T8158] R13: 00007f2b05416038 R14: 00007f2b05415fa0 R15: 00007fff4a985d08 [ 240.251989][ T8158] [ 242.708667][ T8184] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1374'. [ 244.748236][ T8230] netlink: 'syz.2.1391': attribute type 10 has an invalid length. [ 244.790874][ T8230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1391'. [ 244.823420][ T8230] bridge0: port 3(team0) entered disabled state [ 244.848223][ T8230] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 244.890694][ T8228] netlink: 'syz.3.1389': attribute type 7 has an invalid length. [ 245.181875][ T8242] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1395'. [ 245.240532][ T8242] device hsr_slave_0 left promiscuous mode [ 245.806602][ T8251] netlink: 'syz.0.1397': attribute type 3 has an invalid length. [ 245.832532][ T8251] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1397'. [ 246.378868][ T8267] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 246.411055][ T8267] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'. [ 246.461851][ T8267] bridge0: port 3(team0) entered disabled state [ 246.480699][ T8267] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.890954][ T8299] netlink: 'syz.1.1415': attribute type 3 has an invalid length. [ 247.900534][ T8299] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1415'. [ 250.933955][ T8376] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 251.122147][ T8376] device geneve1 entered promiscuous mode [ 251.132913][ T8376] team0: Port device geneve1 added [ 251.171276][ T8377] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 252.184880][ T8413] netlink: 'syz.4.1455': attribute type 3 has an invalid length. [ 252.211712][ T8413] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1455'. [ 252.326364][ T8419] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 252.341557][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1457'. [ 253.544250][ T8455] netlink: 'syz.1.1471': attribute type 5 has an invalid length. [ 254.119197][ T8471] netlink: 'syz.1.1478': attribute type 10 has an invalid length. [ 254.145365][ T8471] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.192323][ T8471] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.219351][ T8471] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.258808][ T8471] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.273350][ T8471] device geneve0 entered promiscuous mode [ 254.621324][ T8484] netlink: 'syz.3.1484': attribute type 153 has an invalid length. [ 254.658708][ T8484] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.1484'. [ 254.697190][ T8484] raw_sendmsg: syz.3.1484 forgot to set AF_INET. Fix it! [ 254.715343][ T8487] netlink: 'syz.3.1484': attribute type 153 has an invalid length. [ 254.734303][ T8487] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.1484'. [ 255.021423][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1488'. [ 255.179774][ T8506] netlink: 'syz.2.1491': attribute type 21 has an invalid length. [ 255.248069][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 255.902430][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.908772][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.583373][ T8526] netlink: 'syz.3.1498': attribute type 21 has an invalid length. [ 257.065382][ T8540] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 257.108177][ T8540] device macvlan0 entered promiscuous mode [ 257.166146][ T8540] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 257.517611][ T8558] netlink: 'syz.2.1507': attribute type 21 has an invalid length. [ 257.870205][ T7034] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.333361][ T8584] netlink: 'syz.1.1520': attribute type 1 has an invalid length. [ 260.468850][ T8634] netlink: 'syz.1.1537': attribute type 21 has an invalid length. [ 260.478454][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1537'. [ 260.546107][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 260.591142][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 260.720943][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 260.811390][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 260.820683][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 260.962778][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 261.021059][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 261.057863][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1540'. [ 261.076316][ T8633] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1536'. [ 261.340521][ T8652] netlink: 'syz.0.1543': attribute type 5 has an invalid length. [ 262.598960][ T8690] netlink: 'syz.3.1556': attribute type 21 has an invalid length. [ 264.590292][ T8758] syz.4.1579 (8758) used obsolete PPPIOCDETACH ioctl [ 264.953574][ T8783] device syzkaller0 entered promiscuous mode [ 265.119619][ T8778] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 265.139581][ T8778] device netdevsim0 entered promiscuous mode [ 267.938089][ T8801] netlink: 'syz.3.1591': attribute type 10 has an invalid length. [ 267.946117][ T8801] __nla_validate_parse: 1 callbacks suppressed [ 267.946125][ T8801] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1591'. [ 267.966343][ T8801] device bond0 entered promiscuous mode [ 267.976411][ T8801] device bond_slave_0 entered promiscuous mode [ 268.013640][ T8801] device bond_slave_1 entered promiscuous mode [ 268.020151][ T8801] bridge0: port 4(bond0) entered blocking state [ 268.027390][ T8801] bridge0: port 4(bond0) entered disabled state [ 268.038368][ T8801] bridge0: port 4(bond0) entered blocking state [ 268.044749][ T8801] bridge0: port 4(bond0) entered forwarding state [ 268.070901][ T8806] netlink: 'syz.2.1595': attribute type 21 has an invalid length. [ 268.078799][ T8806] netlink: 'syz.2.1595': attribute type 6 has an invalid length. [ 268.107428][ T8806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1595'. [ 268.130250][ T8813] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 268.206036][ T8821] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 268.553728][ T8836] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1606'. [ 269.180576][ T8846] delete_channel: no stack [ 269.609887][ T8878] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 269.644949][ T8878] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1618'. [ 270.189278][ T8892] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1623'. [ 270.515655][ T8907] netlink: 'syz.3.1630': attribute type 21 has an invalid length. [ 270.538675][ T8907] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.510398][ T8957] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 271.539581][ T8957] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1645'. [ 271.573676][ T8957] device bond0 entered promiscuous mode [ 271.579407][ T8957] device bond_slave_0 entered promiscuous mode [ 271.622735][ T8957] device bond_slave_1 entered promiscuous mode [ 271.641159][ T8957] bridge0: port 3(bond0) entered blocking state [ 271.651593][ T8957] bridge0: port 3(bond0) entered disabled state [ 271.683082][ T8957] bridge0: port 3(bond0) entered blocking state [ 271.689742][ T8957] bridge0: port 3(bond0) entered forwarding state [ 274.421590][ T8993] device syzkaller0 entered promiscuous mode [ 274.441362][ T9004] netlink: 'syz.3.1662': attribute type 10 has an invalid length. [ 274.488968][ T9004] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1662'. [ 274.519497][ T8996] netlink: 'syz.2.1660': attribute type 27 has an invalid length. [ 278.382506][ T9037] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1672'. [ 279.791678][ T9052] netlink: 'syz.4.1677': attribute type 10 has an invalid length. [ 279.858022][ T9052] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1677'. [ 279.898033][ T9052] device bond0 entered promiscuous mode [ 279.918247][ T9052] device bond_slave_0 entered promiscuous mode [ 279.941611][ T9052] device bond_slave_1 entered promiscuous mode [ 279.980476][ T9052] device batadv_slave_0 entered promiscuous mode [ 280.016791][ T9052] bridge0: port 3(bond0) entered blocking state [ 280.061167][ T9052] bridge0: port 3(bond0) entered disabled state [ 280.115885][ T9052] bridge0: port 3(bond0) entered blocking state [ 280.122641][ T9052] bridge0: port 3(bond0) entered forwarding state [ 281.741459][ T9110] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1699'. [ 282.007717][ T9122] netlink: 'syz.1.1701': attribute type 29 has an invalid length. [ 284.786530][ T9122] netlink: 'syz.1.1701': attribute type 29 has an invalid length. [ 284.815520][ T9124] netlink: 'syz.1.1701': attribute type 29 has an invalid length. [ 284.836383][ T9127] netlink: 'syz.1.1701': attribute type 29 has an invalid length. [ 285.445571][ T9155] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1714'. [ 286.017041][ T9177] IPv6: Can't replace route, no match found [ 286.304455][ T9183] netlink: 'syz.0.1723': attribute type 10 has an invalid length. [ 286.351158][ T9183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.504115][ T9183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.563284][ T9183] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 286.918828][ T9198] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1729'. [ 288.799473][ T9253] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1751'. [ 288.999196][ T7034] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.375710][ T9294] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1763'. [ 292.214092][ T9329] netlink: 'syz.4.1776': attribute type 4 has an invalid length. [ 292.225499][ T9329] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1776'. [ 293.448325][ T9362] syz.1.1788[9362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.448430][ T9362] syz.1.1788[9362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 293.469643][ T9362] netlink: 'syz.1.1788': attribute type 39 has an invalid length. [ 293.843721][ T9365] netlink: 'syz.0.1789': attribute type 21 has an invalid length. [ 293.864729][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 297.095659][ T9457] device syzkaller0 entered promiscuous mode [ 301.151096][ T9524] netlink: 'syz.0.1850': attribute type 4 has an invalid length. [ 301.181956][ T9524] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1850'. [ 301.260530][ T9524] !: renamed from bond0 [ 301.525451][ T9544] netlink: 'syz.3.1855': attribute type 2 has an invalid length. [ 302.143847][ T9565] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 302.166525][ T9565] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1862'. [ 302.892919][ T9579] device syzkaller0 entered promiscuous mode [ 302.935874][ T9585] netlink: 'syz.2.1866': attribute type 10 has an invalid length. [ 302.959841][ T9585] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1866'. [ 303.378138][ T4280] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 303.385729][ T4280] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 306.240471][ T9594] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1871'. [ 306.260831][ T9610] netlink: 'syz.4.1876': attribute type 10 has an invalid length. [ 306.269573][ T9610] device team0 left promiscuous mode [ 306.282940][ T9610] device team_slave_0 left promiscuous mode [ 306.288989][ T9610] device team_slave_1 left promiscuous mode [ 306.367047][ T9610] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.386899][ T9610] device team0 entered promiscuous mode [ 306.406429][ T9610] device team_slave_0 entered promiscuous mode [ 306.450943][ T9610] device team_slave_1 entered promiscuous mode [ 306.458037][ T9610] bond0: (slave team0): Enslaving as an active interface with an up link [ 308.008817][ T9651] device sit0 entered promiscuous mode [ 308.942779][ T9694] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 309.097409][ T9702] netlink: 'syz.4.1909': attribute type 12 has an invalid length. [ 310.769544][ T9752] netlink: 'syz.0.1927': attribute type 21 has an invalid length. [ 310.819622][ T9752] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1927'. [ 310.861106][ T9752] netlink: 'syz.0.1927': attribute type 5 has an invalid length. [ 310.868861][ T9752] netlink: 'syz.0.1927': attribute type 6 has an invalid length. [ 310.885748][ T9752] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1927'. [ 311.612972][ T4769] wlan1: Trigger new scan to find an IBSS to join [ 311.660496][ T9778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1935'. [ 312.270409][ T9791] netlink: 'syz.0.1940': attribute type 7 has an invalid length. [ 312.431745][ T9791] netlink: 188488 bytes leftover after parsing attributes in process `syz.0.1940'. [ 313.372513][ T9831] delete_channel: no stack [ 313.394039][ T9835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1955'. [ 313.417945][ T9835] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1955'. [ 314.236947][ T9857] netlink: 'syz.1.1963': attribute type 10 has an invalid length. [ 314.504845][ T9859] device syzkaller0 entered promiscuous mode [ 314.575583][ T7034] wlan1: Trigger new scan to find an IBSS to join [ 314.875205][ T9879] netlink: 'syz.4.1969': attribute type 1 has an invalid length. [ 314.892606][ T9879] netlink: 12415 bytes leftover after parsing attributes in process `syz.4.1969'. [ 316.896492][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.902868][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.616936][ T4757] wlan1: Trigger new scan to find an IBSS to join [ 317.885093][ T9884] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 317.893011][ T9884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 317.902314][ T9896] netlink: 'syz.3.1975': attribute type 21 has an invalid length. [ 317.910352][ T9896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1975'. [ 317.977104][ T9919] netlink: 'syz.4.1982': attribute type 21 has an invalid length. [ 318.059985][ T9936] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 318.082866][ T9936] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1987'. [ 318.532178][ T4757] wlan1: Creating new IBSS network, BSSID 3a:d6:ca:14:71:41 [ 318.548192][ T9949] netlink: 'syz.1.1993': attribute type 10 has an invalid length. [ 318.609480][ T9949] device macvlan0 entered promiscuous mode [ 319.095664][ T9960] netlink: 'syz.3.1997': attribute type 46 has an invalid length. [ 319.520013][ T9979] netlink: 'syz.2.2001': attribute type 21 has an invalid length. [ 319.717294][ T9989] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2002'. [ 320.835328][ T4757] tipc: Subscription rejected, illegal request [ 322.061717][T10043] FAULT_INJECTION: forcing a failure. [ 322.061717][T10043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.109946][T10043] CPU: 0 PID: 10043 Comm: syz.2.2024 Not tainted syzkaller #0 [ 322.117457][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.127515][T10043] Call Trace: [ 322.130795][T10043] [ 322.133722][T10043] dump_stack_lvl+0x188/0x24e [ 322.138398][T10043] ? show_regs_print_info+0x12/0x12 [ 322.143589][T10043] ? load_image+0x400/0x400 [ 322.148091][T10043] ? __lock_acquire+0x7d10/0x7d10 [ 322.153111][T10043] should_fail_ex+0x399/0x4d0 [ 322.157780][T10043] _copy_from_user+0x2c/0x170 [ 322.162452][T10043] ___sys_sendmsg+0x1c3/0x360 [ 322.167125][T10043] ? __sys_sendmsg+0x290/0x290 [ 322.171891][T10043] ? __lock_acquire+0x7d10/0x7d10 [ 322.176925][T10043] __se_sys_sendmsg+0x1bb/0x2a0 [ 322.181769][T10043] ? __x64_sys_sendmsg+0x80/0x80 [ 322.186707][T10043] ? lockdep_hardirqs_on+0x94/0x140 [ 322.191903][T10043] do_syscall_64+0x4c/0xa0 [ 322.196310][T10043] ? clear_bhb_loop+0x60/0xb0 [ 322.200988][T10043] ? clear_bhb_loop+0x60/0xb0 [ 322.205658][T10043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.211547][T10043] RIP: 0033:0x7f9678d9ce59 [ 322.215955][T10043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.235547][T10043] RSP: 002b:00007f9679bbb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.243951][T10043] RAX: ffffffffffffffda RBX: 00007f9679015fa0 RCX: 00007f9678d9ce59 [ 322.251915][T10043] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 322.259875][T10043] RBP: 00007f9679bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 322.267835][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.275794][T10043] R13: 00007f9679016038 R14: 00007f9679015fa0 R15: 00007ffd3eb3d188 [ 322.283771][T10043] [ 324.025205][T10034] netlink: 'syz.1.2018': attribute type 21 has an invalid length. [ 324.045416][T10065] device wlan1 entered promiscuous mode [ 324.210973][T10076] FAULT_INJECTION: forcing a failure. [ 324.210973][T10076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.260460][T10076] CPU: 0 PID: 10076 Comm: syz.3.2036 Not tainted syzkaller #0 [ 324.267964][T10076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.278030][T10076] Call Trace: [ 324.281319][T10076] [ 324.284260][T10076] dump_stack_lvl+0x188/0x24e [ 324.288955][T10076] ? show_regs_print_info+0x12/0x12 [ 324.294169][T10076] ? load_image+0x400/0x400 [ 324.298704][T10076] ? __lock_acquire+0x7d10/0x7d10 [ 324.303754][T10076] should_fail_ex+0x399/0x4d0 [ 324.308440][T10076] _copy_from_user+0x2c/0x170 [ 324.313114][T10076] iovec_from_user+0x143/0x360 [ 324.317874][T10076] __import_iovec+0x6d/0x500 [ 324.322461][T10076] import_iovec+0x6f/0xa0 [ 324.326787][T10076] ___sys_sendmsg+0x252/0x360 [ 324.331473][T10076] ? __sys_sendmsg+0x290/0x290 [ 324.336246][T10076] ? __lock_acquire+0x7d10/0x7d10 [ 324.341280][T10076] __se_sys_sendmsg+0x1bb/0x2a0 [ 324.346123][T10076] ? __x64_sys_sendmsg+0x80/0x80 [ 324.351066][T10076] ? lockdep_hardirqs_on+0x94/0x140 [ 324.356263][T10076] do_syscall_64+0x4c/0xa0 [ 324.360678][T10076] ? clear_bhb_loop+0x60/0xb0 [ 324.365357][T10076] ? clear_bhb_loop+0x60/0xb0 [ 324.370037][T10076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.375931][T10076] RIP: 0033:0x7f8b4ad9ce59 [ 324.380343][T10076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.399940][T10076] RSP: 002b:00007f8b4bbc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.408345][T10076] RAX: ffffffffffffffda RBX: 00007f8b4b015fa0 RCX: 00007f8b4ad9ce59 [ 324.416305][T10076] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 324.424265][T10076] RBP: 00007f8b4bbc2090 R08: 0000000000000000 R09: 0000000000000000 [ 324.432226][T10076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.440187][T10076] R13: 00007f8b4b016038 R14: 00007f8b4b015fa0 R15: 00007ffeb1a94bc8 [ 324.448166][T10076] [ 324.808307][T10097] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.2046'. [ 324.908696][T10097] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2046'. [ 324.925805][T10100] netlink: 'syz.0.2046': attribute type 12 has an invalid length. [ 324.997219][T10100] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2046'. [ 325.380253][T10105] netlink: 'syz.1.2047': attribute type 15 has an invalid length. [ 325.391390][T10105] netlink: 'syz.1.2047': attribute type 7 has an invalid length. [ 326.045417][T10129] FAULT_INJECTION: forcing a failure. [ 326.045417][T10129] name failslab, interval 1, probability 0, space 0, times 0 [ 326.065517][T10129] CPU: 0 PID: 10129 Comm: syz.4.2055 Not tainted syzkaller #0 [ 326.073003][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.083057][T10129] Call Trace: [ 326.086335][T10129] [ 326.089257][T10129] dump_stack_lvl+0x188/0x24e [ 326.093932][T10129] ? show_regs_print_info+0x12/0x12 [ 326.099126][T10129] ? load_image+0x400/0x400 [ 326.103626][T10129] ? __might_sleep+0xd0/0xd0 [ 326.108205][T10129] ? __lock_acquire+0x7d10/0x7d10 [ 326.113226][T10129] should_fail_ex+0x399/0x4d0 [ 326.117902][T10129] should_failslab+0x5/0x20 [ 326.122394][T10129] slab_pre_alloc_hook+0x59/0x310 [ 326.127415][T10129] kmem_cache_alloc_node+0x5a/0x320 [ 326.132602][T10129] ? __alloc_skb+0xfc/0x7e0 [ 326.137102][T10129] __alloc_skb+0xfc/0x7e0 [ 326.141424][T10129] ? netlink_autobind+0xda/0x300 [ 326.146360][T10129] netlink_sendmsg+0x654/0xbd0 [ 326.151121][T10129] ? netlink_getsockopt+0x550/0x550 [ 326.156313][T10129] ? aa_sock_msg_perm+0x94/0x150 [ 326.161242][T10129] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 326.166518][T10129] ? security_socket_sendmsg+0x7c/0xa0 [ 326.171969][T10129] ? netlink_getsockopt+0x550/0x550 [ 326.177158][T10129] ____sys_sendmsg+0x5be/0x970 [ 326.182007][T10129] ? __sys_sendmsg_sock+0x30/0x30 [ 326.187035][T10129] ? __import_iovec+0x315/0x500 [ 326.191896][T10129] ? import_iovec+0x6f/0xa0 [ 326.196394][T10129] ___sys_sendmsg+0x2a2/0x360 [ 326.201070][T10129] ? __sys_sendmsg+0x290/0x290 [ 326.205838][T10129] ? __lock_acquire+0x7d10/0x7d10 [ 326.210880][T10129] __se_sys_sendmsg+0x1bb/0x2a0 [ 326.215731][T10129] ? __x64_sys_sendmsg+0x80/0x80 [ 326.220668][T10129] ? lockdep_hardirqs_on+0x94/0x140 [ 326.225861][T10129] do_syscall_64+0x4c/0xa0 [ 326.230272][T10129] ? clear_bhb_loop+0x60/0xb0 [ 326.234942][T10129] ? clear_bhb_loop+0x60/0xb0 [ 326.239617][T10129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.245508][T10129] RIP: 0033:0x7f986c19ce59 [ 326.249913][T10129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.269510][T10129] RSP: 002b:00007f986cf7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.277919][T10129] RAX: ffffffffffffffda RBX: 00007f986c415fa0 RCX: 00007f986c19ce59 [ 326.285880][T10129] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 326.293838][T10129] RBP: 00007f986cf7a090 R08: 0000000000000000 R09: 0000000000000000 [ 326.301798][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.309759][T10129] R13: 00007f986c416038 R14: 00007f986c415fa0 R15: 00007ffe5fe11908 [ 326.317733][T10129] [ 328.151487][T10160] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2064'. [ 328.319614][T10159] delete_channel: no stack [ 329.106992][T10181] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 329.259772][T10193] netlink: 'syz.4.2076': attribute type 21 has an invalid length. [ 329.274645][T10193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.282074][T10193] IPv6: NLM_F_CREATE should be set when creating new route [ 329.289366][T10193] IPv6: NLM_F_CREATE should be set when creating new route [ 329.296691][T10193] IPv6: NLM_F_CREATE should be set when creating new route [ 330.133762][T10214] FAULT_INJECTION: forcing a failure. [ 330.133762][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.213373][T10214] CPU: 1 PID: 10214 Comm: syz.0.2081 Not tainted syzkaller #0 [ 330.220888][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.230952][T10214] Call Trace: [ 330.234240][T10214] [ 330.237177][T10214] dump_stack_lvl+0x188/0x24e [ 330.241907][T10214] ? show_regs_print_info+0x12/0x12 [ 330.247119][T10214] ? load_image+0x400/0x400 [ 330.251641][T10214] ? __might_fault+0xa6/0x120 [ 330.256340][T10214] should_fail_ex+0x399/0x4d0 [ 330.261038][T10214] copyin+0x1b/0x120 [ 330.264947][T10214] _copy_from_iter+0x447/0x1130 [ 330.269820][T10214] ? copyout_mc+0x110/0x110 [ 330.274333][T10214] ? __virt_addr_valid+0x188/0x540 [ 330.279446][T10214] ? __virt_addr_valid+0x188/0x540 [ 330.284554][T10214] ? __virt_addr_valid+0x465/0x540 [ 330.289661][T10214] ? __check_object_size+0x500/0xa40 [ 330.294944][T10214] netlink_sendmsg+0x755/0xbd0 [ 330.299708][T10214] ? netlink_getsockopt+0x550/0x550 [ 330.304901][T10214] ? aa_sock_msg_perm+0x94/0x150 [ 330.309830][T10214] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 330.315105][T10214] ? security_socket_sendmsg+0x7c/0xa0 [ 330.320556][T10214] ? netlink_getsockopt+0x550/0x550 [ 330.325744][T10214] ____sys_sendmsg+0x5be/0x970 [ 330.330506][T10214] ? __sys_sendmsg_sock+0x30/0x30 [ 330.335520][T10214] ? __import_iovec+0x315/0x500 [ 330.340366][T10214] ? import_iovec+0x6f/0xa0 [ 330.344862][T10214] ___sys_sendmsg+0x2a2/0x360 [ 330.349534][T10214] ? __sys_sendmsg+0x290/0x290 [ 330.354305][T10214] ? __lock_acquire+0x7d10/0x7d10 [ 330.359343][T10214] __se_sys_sendmsg+0x1bb/0x2a0 [ 330.364187][T10214] ? __x64_sys_sendmsg+0x80/0x80 [ 330.369134][T10214] ? lockdep_hardirqs_on+0x94/0x140 [ 330.374331][T10214] do_syscall_64+0x4c/0xa0 [ 330.378739][T10214] ? clear_bhb_loop+0x60/0xb0 [ 330.383410][T10214] ? clear_bhb_loop+0x60/0xb0 [ 330.388083][T10214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.393972][T10214] RIP: 0033:0x7f2b0519ce59 [ 330.398380][T10214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.417974][T10214] RSP: 002b:00007f2b0613c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.426377][T10214] RAX: ffffffffffffffda RBX: 00007f2b05415fa0 RCX: 00007f2b0519ce59 [ 330.434339][T10214] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 330.442298][T10214] RBP: 00007f2b0613c090 R08: 0000000000000000 R09: 0000000000000000 [ 330.450260][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.458220][T10214] R13: 00007f2b05416038 R14: 00007f2b05415fa0 R15: 00007fff4a985d08 [ 330.466202][T10214] [ 330.492336][T10218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2083'. [ 330.589924][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 330.974357][T10235] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 331.351395][T10248] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2093'. [ 331.367481][T10249] netlink: 103 bytes leftover after parsing attributes in process `syz.4.2094'. [ 331.937913][T10261] FAULT_INJECTION: forcing a failure. [ 331.937913][T10261] name failslab, interval 1, probability 0, space 0, times 0 [ 331.996316][T10263] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.011000][T10261] CPU: 0 PID: 10261 Comm: syz.1.2098 Not tainted syzkaller #0 [ 332.018511][T10261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.028578][T10261] Call Trace: [ 332.031852][T10261] [ 332.034776][T10261] dump_stack_lvl+0x188/0x24e [ 332.039455][T10261] ? show_regs_print_info+0x12/0x12 [ 332.044648][T10261] ? load_image+0x400/0x400 [ 332.049144][T10261] ? perf_trace_lock+0xf8/0x390 [ 332.053993][T10261] ? verify_lock_unused+0x140/0x140 [ 332.059186][T10261] ? perf_trace_lock+0xf8/0x390 [ 332.064030][T10261] should_fail_ex+0x399/0x4d0 [ 332.068701][T10261] should_failslab+0x5/0x20 [ 332.073197][T10261] slab_pre_alloc_hook+0x59/0x310 [ 332.078217][T10261] kmem_cache_alloc+0x56/0x2f0 [ 332.082971][T10261] ? skb_clone+0x1e7/0x370 [ 332.087382][T10261] skb_clone+0x1e7/0x370 [ 332.091617][T10261] __netlink_deliver_tap+0x3ed/0x800 [ 332.096909][T10261] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.102103][T10261] netlink_deliver_tap+0x19c/0x1b0 [ 332.107205][T10261] netlink_unicast+0x728/0x8d0 [ 332.111975][T10261] netlink_sendmsg+0x8ad/0xbd0 [ 332.116738][T10261] ? netlink_getsockopt+0x550/0x550 [ 332.121930][T10261] ? aa_sock_msg_perm+0x94/0x150 [ 332.126863][T10261] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 332.132137][T10261] ? security_socket_sendmsg+0x7c/0xa0 [ 332.137585][T10261] ? netlink_getsockopt+0x550/0x550 [ 332.142777][T10261] ____sys_sendmsg+0x5be/0x970 [ 332.147539][T10261] ? __sys_sendmsg_sock+0x30/0x30 [ 332.152550][T10261] ? __import_iovec+0x315/0x500 [ 332.157399][T10261] ? import_iovec+0x6f/0xa0 [ 332.161901][T10261] ___sys_sendmsg+0x2a2/0x360 [ 332.166576][T10261] ? __sys_sendmsg+0x290/0x290 [ 332.171371][T10261] ? __lock_acquire+0x7d10/0x7d10 [ 332.176433][T10261] __se_sys_sendmsg+0x1bb/0x2a0 [ 332.181293][T10261] ? __x64_sys_sendmsg+0x80/0x80 [ 332.186253][T10261] ? lockdep_hardirqs_on+0x94/0x140 [ 332.191455][T10261] do_syscall_64+0x4c/0xa0 [ 332.195862][T10261] ? clear_bhb_loop+0x60/0xb0 [ 332.200556][T10261] ? clear_bhb_loop+0x60/0xb0 [ 332.205247][T10261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.211151][T10261] RIP: 0033:0x7ff9eb39ce59 [ 332.215568][T10261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.235181][T10261] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.243596][T10261] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 332.251560][T10261] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 332.259543][T10261] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.267516][T10261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.275484][T10261] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 332.283471][T10261] [ 332.523917][T10270] device syzkaller0 entered promiscuous mode [ 332.857886][T10280] FAULT_INJECTION: forcing a failure. [ 332.857886][T10280] name failslab, interval 1, probability 0, space 0, times 0 [ 332.961916][T10280] CPU: 0 PID: 10280 Comm: syz.3.2106 Not tainted syzkaller #0 [ 332.969439][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.979516][T10280] Call Trace: [ 332.982812][T10280] [ 332.985769][T10280] dump_stack_lvl+0x188/0x24e [ 332.990469][T10280] ? show_regs_print_info+0x12/0x12 [ 332.995699][T10280] ? load_image+0x400/0x400 [ 333.000229][T10280] ? __might_sleep+0xd0/0xd0 [ 333.004834][T10280] ? __lock_acquire+0x7d10/0x7d10 [ 333.009887][T10280] should_fail_ex+0x399/0x4d0 [ 333.014586][T10280] should_failslab+0x5/0x20 [ 333.019100][T10280] slab_pre_alloc_hook+0x59/0x310 [ 333.024145][T10280] ? tomoyo_encode+0x27e/0x540 [ 333.028928][T10280] __kmem_cache_alloc_node+0x4f/0x260 [ 333.034325][T10280] ? tomoyo_encode+0x27e/0x540 [ 333.039112][T10280] __kmalloc+0xa0/0x240 [ 333.043293][T10280] tomoyo_encode+0x27e/0x540 [ 333.047910][T10280] tomoyo_realpath_from_path+0x58e/0x5d0 [ 333.053570][T10280] ? tomoyo_path_number_perm+0x205/0x650 [ 333.059240][T10280] tomoyo_path_number_perm+0x22f/0x650 [ 333.064718][T10280] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 333.070178][T10280] ? ksys_write+0x1c0/0x250 [ 333.074684][T10280] ? common_file_perm+0x171/0x1c0 [ 333.079728][T10280] ? __fget_files+0x28/0x4b0 [ 333.084313][T10280] ? __fget_files+0x28/0x4b0 [ 333.088911][T10280] security_file_ioctl+0x6c/0xa0 [ 333.093847][T10280] __se_sys_ioctl+0x48/0x170 [ 333.098437][T10280] do_syscall_64+0x4c/0xa0 [ 333.102847][T10280] ? clear_bhb_loop+0x60/0xb0 [ 333.107522][T10280] ? clear_bhb_loop+0x60/0xb0 [ 333.112195][T10280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.118083][T10280] RIP: 0033:0x7f8b4ad9ce59 [ 333.122492][T10280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.142091][T10280] RSP: 002b:00007f8b4bba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.150495][T10280] RAX: ffffffffffffffda RBX: 00007f8b4b016090 RCX: 00007f8b4ad9ce59 [ 333.158460][T10280] RDX: 00002000000002c0 RSI: 0000000040082406 RDI: 0000000000000006 [ 333.166422][T10280] RBP: 00007f8b4bba1090 R08: 0000000000000000 R09: 0000000000000000 [ 333.174386][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.182349][T10280] R13: 00007f8b4b016128 R14: 00007f8b4b016090 R15: 00007ffeb1a94bc8 [ 333.190328][T10280] [ 333.374772][T10280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 334.370564][T10313] FAULT_INJECTION: forcing a failure. [ 334.370564][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 334.383468][T10313] CPU: 1 PID: 10313 Comm: syz.1.2116 Not tainted syzkaller #0 [ 334.390945][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.401010][T10313] Call Trace: [ 334.404281][T10313] [ 334.407205][T10313] dump_stack_lvl+0x188/0x24e [ 334.411884][T10313] ? show_regs_print_info+0x12/0x12 [ 334.417075][T10313] ? load_image+0x400/0x400 [ 334.421580][T10313] ? skb_network_protocol+0x51b/0x780 [ 334.426952][T10313] should_fail_ex+0x399/0x4d0 [ 334.431635][T10313] should_failslab+0x5/0x20 [ 334.436131][T10313] slab_pre_alloc_hook+0x59/0x310 [ 334.441172][T10313] kmem_cache_alloc+0x56/0x2f0 [ 334.445938][T10313] ? skb_clone+0x1e7/0x370 [ 334.450354][T10313] skb_clone+0x1e7/0x370 [ 334.454593][T10313] ? dev_queue_xmit_nit+0x20e/0xbb0 [ 334.459796][T10313] dev_queue_xmit_nit+0x249/0xbb0 [ 334.464822][T10313] ? dev_queue_xmit_nit+0x29/0xbb0 [ 334.469937][T10313] dev_hard_start_xmit+0x154/0x870 [ 334.475064][T10313] __dev_queue_xmit+0x1aa3/0x37c0 [ 334.480095][T10313] ? __dev_queue_xmit+0x26b/0x37c0 [ 334.485208][T10313] ? netdev_core_pick_tx+0x340/0x340 [ 334.490496][T10313] ? ref_tracker_alloc+0x34e/0x4b0 [ 334.495610][T10313] ? __copy_skb_header+0x3ba/0x4f0 [ 334.500720][T10313] ? memcpy+0x3c/0x60 [ 334.504701][T10313] ? __copy_skb_header+0x3ba/0x4f0 [ 334.509806][T10313] ? __skb_clone+0x480/0x790 [ 334.514394][T10313] ? skb_clone+0x21b/0x370 [ 334.518805][T10313] __netlink_deliver_tap+0x580/0x800 [ 334.524093][T10313] ? netlink_deliver_tap+0x2e/0x1b0 [ 334.529285][T10313] netlink_deliver_tap+0x19c/0x1b0 [ 334.534389][T10313] netlink_unicast+0x728/0x8d0 [ 334.539153][T10313] netlink_sendmsg+0x8ad/0xbd0 [ 334.543919][T10313] ? netlink_getsockopt+0x550/0x550 [ 334.549111][T10313] ? aa_sock_msg_perm+0x94/0x150 [ 334.554043][T10313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 334.559321][T10313] ? security_socket_sendmsg+0x7c/0xa0 [ 334.564775][T10313] ? netlink_getsockopt+0x550/0x550 [ 334.569963][T10313] ____sys_sendmsg+0x5be/0x970 [ 334.574735][T10313] ? __sys_sendmsg_sock+0x30/0x30 [ 334.579753][T10313] ? __import_iovec+0x315/0x500 [ 334.584609][T10313] ? import_iovec+0x6f/0xa0 [ 334.589107][T10313] ___sys_sendmsg+0x2a2/0x360 [ 334.593783][T10313] ? __sys_sendmsg+0x290/0x290 [ 334.598561][T10313] ? __lock_acquire+0x7d10/0x7d10 [ 334.603606][T10313] __se_sys_sendmsg+0x1bb/0x2a0 [ 334.608450][T10313] ? __x64_sys_sendmsg+0x80/0x80 [ 334.613392][T10313] ? lockdep_hardirqs_on+0x94/0x140 [ 334.618587][T10313] do_syscall_64+0x4c/0xa0 [ 334.622994][T10313] ? clear_bhb_loop+0x60/0xb0 [ 334.627664][T10313] ? clear_bhb_loop+0x60/0xb0 [ 334.632337][T10313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.638226][T10313] RIP: 0033:0x7ff9eb39ce59 [ 334.642634][T10313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.662230][T10313] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.670641][T10313] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 334.678604][T10313] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 334.686567][T10313] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.694527][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.702490][T10313] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 334.710468][T10313] [ 336.583830][T10336] delete_channel: no stack [ 336.657556][T10351] FAULT_INJECTION: forcing a failure. [ 336.657556][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.671633][T10351] CPU: 0 PID: 10351 Comm: syz.1.2130 Not tainted syzkaller #0 [ 336.679129][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.689197][T10351] Call Trace: [ 336.692486][T10351] [ 336.695425][T10351] dump_stack_lvl+0x188/0x24e [ 336.700124][T10351] ? show_regs_print_info+0x12/0x12 [ 336.705338][T10351] ? load_image+0x400/0x400 [ 336.709857][T10351] ? __lock_acquire+0x7d10/0x7d10 [ 336.714900][T10351] ? snprintf+0xe5/0x140 [ 336.719162][T10351] should_fail_ex+0x399/0x4d0 [ 336.723863][T10351] _copy_to_user+0x2c/0x130 [ 336.728387][T10351] simple_read_from_buffer+0xe3/0x150 [ 336.733775][T10351] proc_fail_nth_read+0x1a6/0x220 [ 336.738802][T10351] ? proc_fault_inject_write+0x310/0x310 [ 336.744433][T10351] ? fsnotify_perm+0x248/0x550 [ 336.749196][T10351] ? proc_fault_inject_write+0x310/0x310 [ 336.754821][T10351] vfs_read+0x2de/0xa00 [ 336.758979][T10351] ? kernel_read+0x1e0/0x1e0 [ 336.763571][T10351] ? __fget_files+0x28/0x4b0 [ 336.768158][T10351] ? __fget_files+0x28/0x4b0 [ 336.772747][T10351] ? __fget_files+0x43d/0x4b0 [ 336.777431][T10351] ? __fdget_pos+0x2ae/0x360 [ 336.782038][T10351] ? ksys_read+0x71/0x250 [ 336.786377][T10351] ksys_read+0x14c/0x250 [ 336.790620][T10351] ? vfs_write+0xa30/0xa30 [ 336.795034][T10351] ? lockdep_hardirqs_on+0x94/0x140 [ 336.800231][T10351] do_syscall_64+0x4c/0xa0 [ 336.804638][T10351] ? clear_bhb_loop+0x60/0xb0 [ 336.809312][T10351] ? clear_bhb_loop+0x60/0xb0 [ 336.813997][T10351] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.819886][T10351] RIP: 0033:0x7ff9eb35d68e [ 336.824299][T10351] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.843897][T10351] RSP: 002b:00007ff9e95f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.852305][T10351] RAX: ffffffffffffffda RBX: 00007ff9e95f66c0 RCX: 00007ff9eb35d68e [ 336.860268][T10351] RDX: 000000000000000f RSI: 00007ff9e95f60a0 RDI: 0000000000000008 [ 336.868232][T10351] RBP: 00007ff9e95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.876198][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.884158][T10351] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 336.892133][T10351] [ 338.266230][T10339] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.2127'. [ 338.276935][T10339] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.2127'. [ 338.286594][T10339] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.2127'. [ 338.296355][T10340] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2125'. [ 338.306622][T10345] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 338.321733][T10345] device geneve0 entered promiscuous mode [ 338.345306][T10345] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 338.450405][T10363] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2135'. [ 338.522389][T10365] netlink: 'syz.2.2136': attribute type 2 has an invalid length. [ 338.615088][T10365] device 0 entered promiscuous mode [ 338.682869][T10374] FAULT_INJECTION: forcing a failure. [ 338.682869][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.846168][T10374] CPU: 0 PID: 10374 Comm: syz.3.2138 Not tainted syzkaller #0 [ 338.853675][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.863746][T10374] Call Trace: [ 338.867036][T10374] [ 338.869988][T10374] dump_stack_lvl+0x188/0x24e [ 338.874686][T10374] ? show_regs_print_info+0x12/0x12 [ 338.879899][T10374] ? load_image+0x400/0x400 [ 338.884421][T10374] ? __lock_acquire+0x7d10/0x7d10 [ 338.889469][T10374] should_fail_ex+0x399/0x4d0 [ 338.894164][T10374] _copy_from_user+0x2c/0x170 [ 338.898864][T10374] strndup_user+0xb3/0x150 [ 338.903299][T10374] perf_ioctl+0x59b/0x2420 [ 338.907733][T10374] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 338.913216][T10374] ? perf_poll+0x1b0/0x1b0 [ 338.917678][T10374] ? __fget_files+0x28/0x4b0 [ 338.922287][T10374] ? __fget_files+0x28/0x4b0 [ 338.926912][T10374] ? bpf_lsm_file_ioctl+0x5/0x10 [ 338.931878][T10374] ? security_file_ioctl+0x7c/0xa0 [ 338.937007][T10374] ? perf_poll+0x1b0/0x1b0 [ 338.941438][T10374] __se_sys_ioctl+0xfa/0x170 [ 338.946061][T10374] do_syscall_64+0x4c/0xa0 [ 338.950498][T10374] ? clear_bhb_loop+0x60/0xb0 [ 338.955191][T10374] ? clear_bhb_loop+0x60/0xb0 [ 338.959891][T10374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.965798][T10374] RIP: 0033:0x7f8b4ad9ce59 [ 338.970226][T10374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.989844][T10374] RSP: 002b:00007f8b4bba1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.998274][T10374] RAX: ffffffffffffffda RBX: 00007f8b4b016090 RCX: 00007f8b4ad9ce59 [ 339.006246][T10374] RDX: 00002000000002c0 RSI: 0000000040082406 RDI: 0000000000000006 [ 339.014221][T10374] RBP: 00007f8b4bba1090 R08: 0000000000000000 R09: 0000000000000000 [ 339.022196][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.030164][T10374] R13: 00007f8b4b016128 R14: 00007f8b4b016090 R15: 00007ffeb1a94bc8 [ 339.038152][T10374] [ 339.917651][T10398] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2149'. [ 340.041530][T10397] delete_channel: no stack [ 340.753539][T10428] FAULT_INJECTION: forcing a failure. [ 340.753539][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 340.866632][T10428] CPU: 0 PID: 10428 Comm: syz.0.2160 Not tainted syzkaller #0 [ 340.874145][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.884226][T10428] Call Trace: [ 340.887517][T10428] [ 340.890466][T10428] dump_stack_lvl+0x188/0x24e [ 340.895164][T10428] ? show_regs_print_info+0x12/0x12 [ 340.900380][T10428] ? load_image+0x400/0x400 [ 340.904912][T10428] ? __might_sleep+0xd0/0xd0 [ 340.909517][T10428] ? __lock_acquire+0x7d10/0x7d10 [ 340.914561][T10428] ? rcu_is_watching+0x11/0xa0 [ 340.919358][T10428] should_fail_ex+0x399/0x4d0 [ 340.924058][T10428] should_failslab+0x5/0x20 [ 340.928576][T10428] slab_pre_alloc_hook+0x59/0x310 [ 340.933636][T10428] ? create_filter_start+0xb3/0x2a0 [ 340.938855][T10428] __kmem_cache_alloc_node+0x4f/0x260 [ 340.944249][T10428] ? create_filter_start+0xb3/0x2a0 [ 340.949469][T10428] kmalloc_trace+0x26/0xe0 [ 340.953911][T10428] create_filter_start+0xb3/0x2a0 [ 340.958963][T10428] ftrace_profile_set_filter+0xc8/0x280 [ 340.964539][T10428] perf_ioctl+0xa4f/0x2420 [ 340.968976][T10428] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 340.974466][T10428] ? perf_poll+0x1b0/0x1b0 [ 340.978932][T10428] ? __fget_files+0x28/0x4b0 [ 340.983531][T10428] ? __fget_files+0x28/0x4b0 [ 340.988133][T10428] ? bpf_lsm_file_ioctl+0x5/0x10 [ 340.993069][T10428] ? security_file_ioctl+0x7c/0xa0 [ 340.998176][T10428] ? perf_poll+0x1b0/0x1b0 [ 341.002585][T10428] __se_sys_ioctl+0xfa/0x170 [ 341.007179][T10428] do_syscall_64+0x4c/0xa0 [ 341.011588][T10428] ? clear_bhb_loop+0x60/0xb0 [ 341.016268][T10428] ? clear_bhb_loop+0x60/0xb0 [ 341.020945][T10428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.026834][T10428] RIP: 0033:0x7f2b0519ce59 [ 341.031246][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.050841][T10428] RSP: 002b:00007f2b0611b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 341.059246][T10428] RAX: ffffffffffffffda RBX: 00007f2b05416090 RCX: 00007f2b0519ce59 [ 341.067211][T10428] RDX: 00002000000002c0 RSI: 0000000040082406 RDI: 0000000000000006 [ 341.075173][T10428] RBP: 00007f2b0611b090 R08: 0000000000000000 R09: 0000000000000000 [ 341.083137][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.091100][T10428] R13: 00007f2b05416128 R14: 00007f2b05416090 R15: 00007fff4a985d08 [ 341.099077][T10428] [ 341.443887][T10447] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2166'. [ 341.543923][T10446] delete_channel: no stack [ 342.116082][T10461] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 342.299459][T10461] device geneve1 entered promiscuous mode [ 342.356252][T10461] team0: Port device geneve1 added [ 343.634676][T10528] netlink: 'syz.0.2195': attribute type 27 has an invalid length. [ 343.671446][T10529] netlink: 'syz.0.2195': attribute type 27 has an invalid length. [ 343.682617][T10528] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2195'. [ 343.701451][T10529] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2195'. [ 347.423429][T10606] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 347.516619][T10606] device geneve1 entered promiscuous mode [ 347.563204][T10606] team0: Port device geneve1 added [ 347.767265][T10620] sock: sock_timestamping_bind_phc: sock not bind to device [ 347.795134][T10622] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2216'. [ 348.102509][T10633] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2221'. [ 348.143139][T10635] netlink: 'syz.3.2218': attribute type 9 has an invalid length. [ 348.210571][T10635] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2218'. [ 348.229921][T10632] delete_channel: no stack [ 348.454003][T10640] netlink: 'syz.0.2224': attribute type 3 has an invalid length. [ 348.477040][T10640] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2224'. [ 348.595510][ T4327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.727898][T10649] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2228'. [ 348.748962][T10650] netlink: 'syz.0.2229': attribute type 3 has an invalid length. [ 348.777458][T10650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2229'. [ 349.101595][T10665] netlink: 'syz.2.2234': attribute type 9 has an invalid length. [ 349.120428][T10667] netlink: 'syz.2.2234': attribute type 9 has an invalid length. [ 349.627956][T10680] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2241'. [ 351.247984][T10711] netlink: 'syz.4.2249': attribute type 11 has an invalid length. [ 351.276286][T10711] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2249'. [ 351.605404][T10719] cgroup: fork rejected by pids controller in /syz3 [ 351.686262][T10743] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2258'. [ 351.744131][T10754] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2257'. [ 351.780631][T10743] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 353.147112][ T7031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.347658][ T7031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.513245][ T7031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.673512][ T7031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.719084][T10877] tap0: tun_chr_ioctl cmd 1074812118 [ 353.773178][T10877] tap0: tun_chr_ioctl cmd 1074025675 [ 353.781464][T10877] tap0: persist enabled [ 353.784457][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.785963][T10877] tap0: tun_chr_ioctl cmd 1074025675 [ 353.794199][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.814438][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.829893][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.837635][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 353.844859][T10877] tap0: persist disabled [ 353.849246][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.453111][T10883] chnl_net:caif_netlink_parms(): no params data found [ 354.528907][T10883] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.536588][T10883] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.544809][T10883] device bridge_slave_0 entered promiscuous mode [ 354.554638][T10883] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.561968][T10883] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.570161][T10883] device bridge_slave_1 entered promiscuous mode [ 354.596731][T10883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.608524][T10883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.637015][T10883] team0: Port device team_slave_0 added [ 354.647607][T10883] team0: Port device team_slave_1 added [ 354.672235][T10883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.679324][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.716824][T10883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.729533][T10883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.750856][T10883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.780791][T10883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.992698][T10883] device hsr_slave_0 entered promiscuous mode [ 355.018656][T10883] device hsr_slave_1 entered promiscuous mode [ 355.049374][T10883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.079660][T10883] Cannot create hsr debugfs directory [ 355.293007][T10910] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2279'. [ 355.509824][T10922] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 355.549822][T10922] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2280'. [ 355.603686][T10922] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 355.931102][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 356.807148][T10947] netlink: 'syz.2.2289': attribute type 2 has an invalid length. [ 357.204919][T10883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.424375][T10883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.501255][T10883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.540288][T10883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.869025][T10972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2292'. [ 357.969154][T10975] netlink: 'syz.0.2292': attribute type 12 has an invalid length. [ 358.001419][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2292'. [ 358.011159][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 358.064956][T10976] bridge0: port 4(dummy0) entered disabled state [ 358.071535][T10976] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.078930][T10976] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.189489][ T7031] device hsr_slave_0 left promiscuous mode [ 358.212629][ T7031] device hsr_slave_1 left promiscuous mode [ 358.221600][ T4771] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.271648][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.280397][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.300001][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.319255][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.332021][ T7031] bridge0: port 4(bond0) entered disabled state [ 358.352053][ T7031] bridge0: port 3(team0) entered disabled state [ 358.364566][ T7031] device bridge_slave_1 left promiscuous mode [ 358.372368][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.386528][ T7031] device bridge_slave_0 left promiscuous mode [ 358.396362][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.450908][ T7031] device veth1_macvtap left promiscuous mode [ 358.470287][ T7031] device veth0_macvtap left promiscuous mode [ 358.486525][T10996] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2297'. [ 358.746417][ T7031] device geneve1 left promiscuous mode [ 358.761793][ T7031] team0 (unregistering): Port device geneve1 removed [ 358.844707][ T7031] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 359.332795][ T7031] device team_slave_1 left promiscuous mode [ 359.339991][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 359.395950][ T7031] device team_slave_0 left promiscuous mode [ 359.408315][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 359.491472][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.523082][ T7031] device bond_slave_1 left promiscuous mode [ 359.589943][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.599551][ T7031] device bond_slave_0 left promiscuous mode [ 359.988227][ T7031] bond0 (unregistering): Released all slaves [ 360.082580][T10981] netlink: 'syz.2.2294': attribute type 39 has an invalid length. [ 360.091666][ T4280] Bluetooth: hci3: command 0x040f tx timeout [ 360.149710][T10982] netlink: 'syz.2.2294': attribute type 39 has an invalid length. [ 360.226190][T11008] netlink: 'syz.4.2301': attribute type 2 has an invalid length. [ 360.483673][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.541471][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 360.561426][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 360.580945][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.614170][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 360.648683][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 360.677882][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.685519][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.731200][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 360.759738][T11023] tipc: Started in network mode [ 360.768616][T11023] tipc: Node identity 9215a268, cluster identity 4711 [ 360.809998][T11023] tipc: Node number set to 2450891368 [ 360.873876][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 360.891538][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 360.936077][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.943221][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.963193][T11036] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2310'. [ 361.010015][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 361.035508][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 361.112073][T11039] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 361.122236][T10883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.154848][T10883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.278176][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 361.411855][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 361.501697][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 361.589114][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 361.613168][T11058] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2309'. [ 361.683817][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 361.751636][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 361.808634][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 361.824207][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 361.854228][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 361.863986][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 361.913005][T11058] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 361.942930][T11058] CPU: 0 PID: 11058 Comm: syz.2.2309 Not tainted syzkaller #0 [ 361.950421][T11058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.960487][T11058] Call Trace: [ 361.963774][T11058] [ 361.966701][T11058] dump_stack_lvl+0x188/0x24e [ 361.971432][T11058] ? show_regs_print_info+0x12/0x12 [ 361.976627][T11058] ? load_image+0x400/0x400 [ 361.981152][T11058] sysfs_warn_dup+0x8a/0xa0 [ 361.985716][T11058] sysfs_do_create_link_sd+0xc0/0x110 [ 361.991090][T11058] device_add+0x7f6/0x1000 [ 361.995556][T11058] wiphy_register+0x1d9f/0x2ac0 [ 362.000457][T11058] ? cfg80211_event_work+0x40/0x40 [ 362.005565][T11058] ? minstrel_ht_alloc+0x894/0xa20 [ 362.010724][T11058] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 362.016862][T11058] ieee80211_register_hw+0x2d00/0x39f0 [ 362.022360][T11058] ? ieee80211_register_hw+0xec1/0x39f0 [ 362.027899][T11058] ? ieee80211_register_hw+0xec1/0x39f0 [ 362.033447][T11058] ? ieee80211_tasklet_handler+0x20/0x20 [ 362.039086][T11058] ? memset+0x1e/0x40 [ 362.043110][T11058] ? __hrtimer_init+0x186/0x270 [ 362.048015][T11058] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 362.053791][T11058] hwsim_new_radio_nl+0xafa/0xce0 [ 362.058823][T11058] genl_family_rcv_msg_doit+0x22a/0x330 [ 362.064403][T11058] ? end_current_label_crit_section+0x170/0x170 [ 362.070678][T11058] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 362.076579][T11058] ? bpf_lsm_capable+0x5/0x10 [ 362.081304][T11058] ? security_capable+0x85/0xb0 [ 362.086204][T11058] genl_rcv_msg+0x604/0x790 [ 362.090712][T11058] ? genl_bind+0x360/0x360 [ 362.095132][T11058] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 362.101474][T11058] netlink_rcv_skb+0x1fb/0x450 [ 362.106233][T11058] ? genl_bind+0x360/0x360 [ 362.110646][T11058] ? netlink_ack+0x1170/0x1170 [ 362.115416][T11058] ? down_read+0x1a8/0x2d0 [ 362.119871][T11058] genl_rcv+0x24/0x40 [ 362.123847][T11058] netlink_unicast+0x74d/0x8d0 [ 362.128616][T11058] netlink_sendmsg+0x8ad/0xbd0 [ 362.133386][T11058] ? netlink_getsockopt+0x550/0x550 [ 362.138584][T11058] ? aa_sock_msg_perm+0x94/0x150 [ 362.143517][T11058] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.148795][T11058] ? security_socket_sendmsg+0x7c/0xa0 [ 362.154267][T11058] ? netlink_getsockopt+0x550/0x550 [ 362.159471][T11058] ____sys_sendmsg+0x5be/0x970 [ 362.164298][T11058] ? __sys_sendmsg_sock+0x30/0x30 [ 362.169320][T11058] ? __import_iovec+0x315/0x500 [ 362.174200][T11058] ? import_iovec+0x6f/0xa0 [ 362.178710][T11058] ___sys_sendmsg+0x2a2/0x360 [ 362.183386][T11058] ? try_to_wake_up+0x67c/0x1080 [ 362.188378][T11058] ? __sys_sendmsg+0x290/0x290 [ 362.193206][T11058] __se_sys_sendmsg+0x1bb/0x2a0 [ 362.198057][T11058] ? __x64_sys_sendmsg+0x80/0x80 [ 362.203012][T11058] ? lockdep_hardirqs_on+0x94/0x140 [ 362.208221][T11058] do_syscall_64+0x4c/0xa0 [ 362.212637][T11058] ? clear_bhb_loop+0x60/0xb0 [ 362.217368][T11058] ? clear_bhb_loop+0x60/0xb0 [ 362.222053][T11058] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.227947][T11058] RIP: 0033:0x7f9678d9ce59 [ 362.232362][T11058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.251964][T11058] RSP: 002b:00007f96767d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.260375][T11058] RAX: ffffffffffffffda RBX: 00007f9679016360 RCX: 00007f9678d9ce59 [ 362.268341][T11058] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 362.276310][T11058] RBP: 00007f9678e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.284280][T11058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.292246][T11058] R13: 00007f96790163f8 R14: 00007f9679016360 R15: 00007ffd3eb3d188 [ 362.300236][T11058] [ 362.304925][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 362.412804][T11057] netlink: 'syz.1.2314': attribute type 10 has an invalid length. [ 362.475401][T11057] bridge0: port 3(team0) entered disabled state [ 362.482056][T11057] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.489311][T11057] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.519383][T11057] team0: Device bridge0 is already an upper device of the team interface [ 362.825900][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.871296][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 362.898997][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.998673][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.018469][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.100714][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.131397][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.158950][T10883] device veth0_vlan entered promiscuous mode [ 363.195874][T11093] netlink: 'syz.1.2318': attribute type 2 has an invalid length. [ 363.231963][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.279363][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.328291][T10883] device veth1_vlan entered promiscuous mode [ 363.414626][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.441399][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 363.475014][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.523850][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.583716][T10883] device veth0_macvtap entered promiscuous mode [ 363.603994][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.651593][T10883] device veth1_macvtap entered promiscuous mode [ 363.666146][T11108] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2323'. [ 363.705059][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.741904][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.775031][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.808067][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.899768][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.927258][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.961281][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.068983][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.095128][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.201716][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.226703][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.260423][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.314575][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.342896][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.374002][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.487041][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.501281][T10883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.510151][T10883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.547124][T10883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.573373][T10883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.634740][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.646192][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.032169][ T7034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.047980][ T7034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.147160][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.176064][ T4741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.206573][ T4741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.222349][T11147] netlink: 'syz.1.2332': attribute type 20 has an invalid length. [ 365.263764][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 365.346651][T11151] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2332'. [ 365.373335][T11151] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2332'. [ 365.406584][T11147] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2332'. [ 365.445350][T11154] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 366.297000][T11171] netlink: 'syz.0.2339': attribute type 19 has an invalid length. [ 366.337342][T11171] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2339'. [ 366.531393][T11184] delete_channel: no stack [ 366.564858][T11184] delete_channel: no stack [ 366.812946][T11198] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2346'. [ 366.983046][T11197] delete_channel: no stack [ 367.020588][T11201] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2347'. [ 367.140986][T11207] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2349'. [ 368.048258][T11239] netlink: 'syz.2.2359': attribute type 3 has an invalid length. [ 368.081033][T11239] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2359'. [ 368.112462][T11242] netlink: 'syz.2.2359': attribute type 4 has an invalid length. [ 368.151680][T11233] netlink: 'syz.3.2357': attribute type 19 has an invalid length. [ 368.178453][T11233] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2357'. [ 368.502221][T11255] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2362'. [ 368.627257][T11254] delete_channel: no stack [ 369.217034][T11279] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2370'. [ 369.312502][T11280] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.2368'. [ 369.631789][T11297] netlink: 'syz.3.2374': attribute type 4 has an invalid length. [ 369.639555][T11297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2374'. [ 369.972438][T11296] netlink: 'syz.2.2375': attribute type 19 has an invalid length. [ 370.191905][T11327] netlink: 'syz.0.2382': attribute type 2 has an invalid length. [ 370.271017][T11327] netlink: 'syz.0.2382': attribute type 8 has an invalid length. [ 370.445723][T11334] netlink: 'syz.2.2384': attribute type 10 has an invalid length. [ 370.476376][T11334] bridge0: port 3(bond0) entered disabled state [ 370.484074][T11334] bridge0: port 4(dummy0) entered disabled state [ 370.491031][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.499241][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.780511][T11334] bridge0: port 3(bond0) entered blocking state [ 370.787263][T11334] bridge0: port 3(bond0) entered forwarding state [ 370.794737][T11334] bridge0: port 4(dummy0) entered blocking state [ 370.801411][T11334] bridge0: port 4(dummy0) entered forwarding state [ 370.808429][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.816106][T11334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.824174][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.831875][T11334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.026042][T11334] bridge0: port 3(bond0) entered disabled state [ 371.033274][T11334] bridge0: port 4(dummy0) entered disabled state [ 371.040116][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.047800][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.622877][T11348] __nla_validate_parse: 5 callbacks suppressed [ 371.622893][T11348] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2388'. [ 376.053576][T11360] netlink: 'syz.4.2394': attribute type 2 has an invalid length. [ 376.201971][T11360] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2394'. [ 376.874139][T11371] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2400'. [ 377.057390][T11369] delete_channel: no stack [ 377.697581][T11382] bridge0: port 4(ip6gretap0) entered blocking state [ 377.739956][T11382] bridge0: port 4(ip6gretap0) entered disabled state [ 377.767528][T11382] device ip6gretap0 entered promiscuous mode [ 378.336181][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.342604][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.413404][T11410] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2412'. [ 378.897342][T11419] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2415'. [ 378.986290][T11423] netlink: 'syz.3.2416': attribute type 21 has an invalid length. [ 379.005270][T11423] netlink: 'syz.3.2416': attribute type 2 has an invalid length. [ 379.047887][T11422] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2414'. [ 379.224019][T11419] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 379.235256][T11420] delete_channel: no stack [ 379.488822][T11434] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2418'. [ 379.801425][T11448] netlink: 'syz.4.2422': attribute type 2 has an invalid length. [ 379.809346][T11448] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2422'. [ 379.963413][T11452] netlink: 'syz.4.2422': attribute type 2 has an invalid length. [ 380.017974][T11452] netlink: 'syz.4.2422': attribute type 8 has an invalid length. [ 380.067476][T11452] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2422'. [ 380.122363][T11454] netlink: 'syz.0.2424': attribute type 10 has an invalid length. [ 380.146300][T11454] bridge0: port 4(dummy0) entered blocking state [ 380.152810][T11454] bridge0: port 4(dummy0) entered forwarding state [ 380.159547][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.166801][T11454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.174236][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.181406][T11454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.192613][T11454] !: (slave bridge0): Enslaving as an active interface with an up link [ 380.461165][T11466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2429'. [ 380.636181][T11476] netlink: 'syz.2.2432': attribute type 4 has an invalid length. [ 380.746118][T11476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2432'. [ 380.825116][T11476] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 380.890374][T11481] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2433'. [ 380.939634][T11481] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 381.643451][T11500] netlink: 'syz.0.2441': attribute type 2 has an invalid length. [ 381.714822][T11506] netlink: 'syz.4.2443': attribute type 10 has an invalid length. [ 381.771872][T11506] batman_adv: batadv0: Adding interface: netdevsim0 [ 381.810838][T11506] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.914153][T11506] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 381.944233][T11509] netlink: 'syz.0.2441': attribute type 2 has an invalid length. [ 381.963524][T11509] netlink: 'syz.0.2441': attribute type 8 has an invalid length. [ 382.014793][T11509] __nla_validate_parse: 1 callbacks suppressed [ 382.014806][T11509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2441'. [ 382.066618][T11514] FAULT_INJECTION: forcing a failure. [ 382.066618][T11514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.093176][T11514] CPU: 1 PID: 11514 Comm: syz.2.2445 Not tainted syzkaller #0 [ 382.100694][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.110784][T11514] Call Trace: [ 382.114093][T11514] [ 382.117058][T11514] dump_stack_lvl+0x188/0x24e [ 382.121789][T11514] ? show_regs_print_info+0x12/0x12 [ 382.127034][T11514] ? load_image+0x400/0x400 [ 382.131602][T11514] ? __lock_acquire+0x7d10/0x7d10 [ 382.136791][T11514] should_fail_ex+0x399/0x4d0 [ 382.141585][T11514] _copy_from_user+0x2c/0x170 [ 382.146354][T11514] kstrtouint_from_user+0xda/0x170 [ 382.151502][T11514] ? kstrtol_from_user+0x190/0x190 [ 382.156674][T11514] proc_fail_nth_write+0x8b/0x200 [ 382.161726][T11514] ? proc_fail_nth_read+0x220/0x220 [ 382.166934][T11514] ? common_file_perm+0x171/0x1c0 [ 382.171980][T11514] ? proc_fail_nth_read+0x220/0x220 [ 382.177191][T11514] vfs_write+0x2e6/0xa30 [ 382.181531][T11514] ? file_end_write+0x250/0x250 [ 382.186404][T11514] ? __fget_files+0x28/0x4b0 [ 382.191022][T11514] ? __fget_files+0x28/0x4b0 [ 382.195627][T11514] ? __fget_files+0x43d/0x4b0 [ 382.200344][T11514] ? __fdget_pos+0x2ae/0x360 [ 382.204948][T11514] ? ksys_write+0x71/0x250 [ 382.209388][T11514] ksys_write+0x14c/0x250 [ 382.213740][T11514] ? __ia32_sys_read+0x80/0x80 [ 382.218528][T11514] ? lockdep_hardirqs_on+0x94/0x140 [ 382.223750][T11514] do_syscall_64+0x4c/0xa0 [ 382.228171][T11514] ? clear_bhb_loop+0x60/0xb0 [ 382.232858][T11514] ? clear_bhb_loop+0x60/0xb0 [ 382.237556][T11514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.243456][T11514] RIP: 0033:0x7f9678d5d68e [ 382.247893][T11514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.267505][T11514] RSP: 002b:00007f9679bbafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.275930][T11514] RAX: ffffffffffffffda RBX: 00007f9679bbb6c0 RCX: 00007f9678d5d68e [ 382.283913][T11514] RDX: 0000000000000001 RSI: 00007f9679bbb0a0 RDI: 0000000000000005 [ 382.291892][T11514] RBP: 00007f9679bbb090 R08: 0000000000000000 R09: 0000000000000000 [ 382.299871][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.307848][T11514] R13: 00007f9679016038 R14: 00007f9679015fa0 R15: 00007ffd3eb3d188 [ 382.315883][T11514] [ 383.176654][T11549] : port 1(ip6gretap0) entered blocking state [ 383.190988][T11549] : port 1(ip6gretap0) entered disabled state [ 383.214162][T11549] device ip6gretap0 entered promiscuous mode [ 383.265993][T11561] device ip6gretap0 left promiscuous mode [ 383.284883][T11561] : port 1(ip6gretap0) entered disabled state [ 383.434931][T11565] device veth1_macvtap left promiscuous mode [ 383.563369][T11573] netlink: 'syz.1.2463': attribute type 2 has an invalid length. [ 383.576962][T11573] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2463'. [ 383.659865][T11577] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 383.687985][T11577] netlink: 'syz.2.2465': attribute type 1 has an invalid length. [ 383.708269][T11577] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2465'. [ 386.364642][T11575] IPv6: Can't replace route, no match found [ 386.371592][T11565] device veth1_macvtap entered promiscuous mode [ 386.380159][T11565] device macsec0 entered promiscuous mode [ 386.394195][T11578] netlink: 'syz.1.2463': attribute type 2 has an invalid length. [ 386.408544][T11578] netlink: 'syz.1.2463': attribute type 8 has an invalid length. [ 386.428887][T11578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2463'. [ 387.139599][T11617] netlink: 'syz.4.2477': attribute type 2 has an invalid length. [ 387.181056][T11617] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2477'. [ 388.700674][T11656] device syzkaller0 entered promiscuous mode [ 388.719642][T11663] netlink: 7455 bytes leftover after parsing attributes in process `syz.3.2489'. [ 389.171179][ T46] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 390.970119][T11715] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 390.986870][T11715] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2507'. [ 391.374646][T11677] netlink: 'syz.0.2495': attribute type 5 has an invalid length. [ 391.382608][T11677] netlink: 'syz.0.2495': attribute type 30 has an invalid length. [ 391.390456][T11687] netlink: 'syz.3.2497': attribute type 21 has an invalid length. [ 391.406199][T11687] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2497'. [ 391.417995][T11687] netlink: 'syz.3.2497': attribute type 4 has an invalid length. [ 391.438105][T11687] netlink: 'syz.3.2497': attribute type 5 has an invalid length. [ 391.449581][T11687] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2497'. [ 391.466309][T11702] netlink: 'syz.1.2502': attribute type 33 has an invalid length. [ 391.487159][T11702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2502'. [ 391.666968][T11726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2511'. [ 392.571620][T11752] ÿ: renamed from virt_wifi0 [ 393.057308][T11762] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2525'. [ 393.101010][T11762] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2525'. [ 393.418011][T11773] netlink: 'syz.0.2528': attribute type 21 has an invalid length. [ 393.933271][T11782] bridge0: port 4(dummy0) entered disabled state [ 393.973403][T11782] device bridge_slave_1 left promiscuous mode [ 393.991685][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.016589][T11782] device bridge_slave_0 left promiscuous mode [ 394.032001][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.360096][T11782] !: (slave bridge0): Releasing backup interface [ 395.031673][T11815] netlink: 'syz.4.2542': attribute type 2 has an invalid length. [ 395.050188][T11815] netlink: 'syz.4.2542': attribute type 1 has an invalid length. [ 395.071081][T11815] netlink: 'syz.4.2542': attribute type 2 has an invalid length. [ 395.079114][T11815] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.2542'. [ 395.867257][T11861] IPv6: Can't replace route, no match found [ 395.913443][T11861] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 395.955091][T11861] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 396.001177][T11861] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2556'. [ 396.074055][T11868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2558'. [ 396.409688][T11884] netlink: 'syz.1.2561': attribute type 21 has an invalid length. [ 396.439149][T11884] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2561'. [ 396.481418][T11879] netlink: 'syz.4.2563': attribute type 17 has an invalid length. [ 396.506280][T11879] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2563'. [ 396.601310][T11890] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2565'. [ 396.719460][T11899] device syzkaller0 left promiscuous mode [ 397.160080][T11911] netlink: 'syz.3.2574': attribute type 2 has an invalid length. [ 397.222203][T11911] device 0 entered promiscuous mode [ 397.722645][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 398.177398][T11963] netlink: 'syz.4.2587': attribute type 13 has an invalid length. [ 398.200807][T11963] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2587'. [ 398.270387][T11963] syz_tun: refused to change device tx_queue_len [ 398.305250][T11963] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 399.256629][T11991] tipc: Started in network mode [ 399.292222][T11991] tipc: Node identity 9215a268, cluster identity 4711 [ 399.299141][T11991] tipc: Node number set to 2450891368 [ 400.536808][T12040] device veth1_macvtap left promiscuous mode [ 400.676969][T12046] device veth1_macvtap entered promiscuous mode [ 400.701141][T12046] device macsec0 entered promiscuous mode [ 400.743246][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.947603][T12062] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2620'. [ 404.364553][T12108] device veth1_macvtap left promiscuous mode [ 404.390900][T12115] device veth1_macvtap entered promiscuous mode [ 404.397219][T12115] device macsec0 entered promiscuous mode [ 404.440367][T12128] netlink: 'syz.0.2639': attribute type 13 has an invalid length. [ 404.450839][T12128] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2639'. [ 404.481172][T12128] syz_tun: refused to change device tx_queue_len [ 404.487535][T12128] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 405.455758][T12159] IPv6: Can't replace route, no match found [ 405.494870][T12159] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 405.519592][T12159] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 405.540358][T12159] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2651'. [ 405.708330][T12169] netlink: 'syz.2.2656': attribute type 3 has an invalid length. [ 405.732094][T12169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'. [ 406.115075][T12181] netlink: 'syz.3.2659': attribute type 2 has an invalid length. [ 406.139991][T12181] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2659'. [ 406.201490][T12178] netlink: 'syz.3.2659': attribute type 3 has an invalid length. [ 406.226664][T12178] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2659'. [ 409.147312][T12260] netlink: 'syz.3.2684': attribute type 1 has an invalid length. [ 409.185021][T12260] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2684'. [ 409.633044][T12280] netlink: 'syz.1.2694': attribute type 21 has an invalid length. [ 409.712354][T12287] sctp: [Deprecated]: syz.0.2696 (pid 12287) Use of int in maxseg socket option. [ 409.712354][T12287] Use struct sctp_assoc_value instead [ 410.459533][T12332] netlink: 'syz.4.2708': attribute type 11 has an invalid length. [ 410.525632][T12333] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2707'. [ 410.652403][T12333] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 410.736282][T12333] CPU: 1 PID: 12333 Comm: syz.1.2707 Not tainted syzkaller #0 [ 410.743788][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.753855][T12333] Call Trace: [ 410.757137][T12333] [ 410.760074][T12333] dump_stack_lvl+0x188/0x24e [ 410.764777][T12333] ? show_regs_print_info+0x12/0x12 [ 410.769984][T12333] ? load_image+0x400/0x400 [ 410.774516][T12333] sysfs_warn_dup+0x8a/0xa0 [ 410.779040][T12333] sysfs_do_create_link_sd+0xc0/0x110 [ 410.784425][T12333] device_add+0x7f6/0x1000 [ 410.788832][T12333] wiphy_register+0x1d9f/0x2ac0 [ 410.793701][T12333] ? cfg80211_event_work+0x40/0x40 [ 410.798831][T12333] ? minstrel_ht_alloc+0x894/0xa20 [ 410.803968][T12333] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 410.810061][T12333] ieee80211_register_hw+0x2d00/0x39f0 [ 410.815552][T12333] ? ieee80211_register_hw+0xec1/0x39f0 [ 410.821117][T12333] ? ieee80211_register_hw+0xec1/0x39f0 [ 410.826687][T12333] ? ieee80211_tasklet_handler+0x20/0x20 [ 410.832344][T12333] ? memset+0x1e/0x40 [ 410.836340][T12333] ? __hrtimer_init+0x186/0x270 [ 410.841213][T12333] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 410.846964][T12333] hwsim_new_radio_nl+0xafa/0xce0 [ 410.852016][T12333] genl_family_rcv_msg_doit+0x22a/0x330 [ 410.857585][T12333] ? end_current_label_crit_section+0x170/0x170 [ 410.863848][T12333] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 410.869770][T12333] ? bpf_lsm_capable+0x5/0x10 [ 410.874466][T12333] ? security_capable+0x85/0xb0 [ 410.879334][T12333] genl_rcv_msg+0x604/0x790 [ 410.883857][T12333] ? genl_bind+0x360/0x360 [ 410.888283][T12333] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 410.894637][T12333] netlink_rcv_skb+0x1fb/0x450 [ 410.899411][T12333] ? genl_bind+0x360/0x360 [ 410.903839][T12333] ? netlink_ack+0x1170/0x1170 [ 410.908626][T12333] ? down_read+0x1a8/0x2d0 [ 410.913059][T12333] genl_rcv+0x24/0x40 [ 410.917057][T12333] netlink_unicast+0x74d/0x8d0 [ 410.921847][T12333] netlink_sendmsg+0x8ad/0xbd0 [ 410.926630][T12333] ? netlink_getsockopt+0x550/0x550 [ 410.931840][T12333] ? aa_sock_msg_perm+0x94/0x150 [ 410.936788][T12333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 410.942080][T12333] ? security_socket_sendmsg+0x7c/0xa0 [ 410.947574][T12333] ? netlink_getsockopt+0x550/0x550 [ 410.952782][T12333] ____sys_sendmsg+0x5be/0x970 [ 410.957569][T12333] ? __sys_sendmsg_sock+0x30/0x30 [ 410.962603][T12333] ? __import_iovec+0x315/0x500 [ 410.967476][T12333] ? import_iovec+0x6f/0xa0 [ 410.971994][T12333] ___sys_sendmsg+0x2a2/0x360 [ 410.976682][T12333] ? try_to_wake_up+0x67c/0x1080 [ 410.981640][T12333] ? __sys_sendmsg+0x290/0x290 [ 410.986477][T12333] __se_sys_sendmsg+0x1bb/0x2a0 [ 410.991346][T12333] ? __x64_sys_sendmsg+0x80/0x80 [ 410.996313][T12333] ? lockdep_hardirqs_on+0x94/0x140 [ 411.001533][T12333] do_syscall_64+0x4c/0xa0 [ 411.005957][T12333] ? clear_bhb_loop+0x60/0xb0 [ 411.010646][T12333] ? clear_bhb_loop+0x60/0xb0 [ 411.015342][T12333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.021250][T12333] RIP: 0033:0x7ff9eb39ce59 [ 411.025669][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.045285][T12333] RSP: 002b:00007ff9e95d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.053713][T12333] RAX: ffffffffffffffda RBX: 00007ff9eb616090 RCX: 00007ff9eb39ce59 [ 411.061698][T12333] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 411.069680][T12333] RBP: 00007ff9eb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 411.077662][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.085638][T12333] R13: 00007ff9eb616128 R14: 00007ff9eb616090 R15: 00007fffac848b58 [ 411.093642][T12333] [ 412.265263][T12366] netlink: 'syz.3.2718': attribute type 3 has an invalid length. [ 412.302124][T12372] netlink: 'syz.2.2721': attribute type 2 has an invalid length. [ 412.319041][T12366] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2718'. [ 412.339062][T12372] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2721'. [ 413.293190][T12389] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2727'. [ 413.362421][T12388] delete_channel: no stack [ 413.824606][T12413] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2734'. [ 413.886340][T12412] netlink: 'syz.4.2734': attribute type 21 has an invalid length. [ 413.933444][T12412] netlink: 'syz.4.2734': attribute type 5 has an invalid length. [ 414.188035][T12424] netlink: 'syz.0.2738': attribute type 2 has an invalid length. [ 414.215689][T12424] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2738'. [ 414.360058][T12435] netlink: 'syz.4.2740': attribute type 1 has an invalid length. [ 414.378645][T12435] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2740'. [ 414.485241][T12418] netlink: 'syz.2.2736': attribute type 3 has an invalid length. [ 414.506375][T12438] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2741'. [ 414.581232][T12442] IPv6: Can't replace route, no match found [ 414.595149][T12418] netlink: 'syz.2.2736': attribute type 1 has an invalid length. [ 414.663452][T12442] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 414.702705][T12418] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2736'. [ 414.716056][T12436] delete_channel: no stack [ 414.727758][T12442] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 414.840784][T12442] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2742'. [ 415.279890][T12456] netlink: 'syz.2.2747': attribute type 11 has an invalid length. [ 415.302358][T12459] netlink: 'syz.2.2747': attribute type 11 has an invalid length. [ 415.633286][T12476] __nla_validate_parse: 4 callbacks suppressed [ 415.633314][T12476] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2753'. [ 415.746991][T12474] delete_channel: no stack [ 415.763087][T12479] IPv6: Can't replace route, no match found [ 415.789167][T12479] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 415.820401][T12479] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 415.835766][T12479] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2754'. [ 416.441172][T12502] IPv6: Can't replace route, no match found [ 416.501793][T12502] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 416.594603][T12502] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 416.714587][T12502] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2761'. [ 419.715788][T12533] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2768'. [ 419.843429][T12532] delete_channel: no stack [ 419.940075][T12541] netlink: 'syz.1.2769': attribute type 21 has an invalid length. [ 419.969020][T12541] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2769'. [ 420.098380][T12541] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2769'. [ 420.134591][T12541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.186914][T12552] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 420.205207][T12552] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 420.228694][T12552] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2774'. [ 420.258443][T12554] netlink: 'syz.2.2775': attribute type 21 has an invalid length. [ 420.271821][T12554] netlink: 'syz.2.2775': attribute type 5 has an invalid length. [ 420.293882][T12548] IPv6: Can't replace route, no match found [ 420.314698][T12550] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2775'. [ 420.456872][T12557] device veth1_macvtap left promiscuous mode [ 420.489495][T12557] device macsec0 left promiscuous mode [ 420.560412][T12557] device veth1_macvtap entered promiscuous mode [ 420.589103][T12557] device macsec0 entered promiscuous mode [ 420.621064][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 421.676572][T12579] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2780'. [ 421.807239][T12584] netlink: 'syz.1.2779': attribute type 2 has an invalid length. [ 421.839865][T12584] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2779'. [ 423.613069][T12591] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2783'. [ 423.769120][T12589] delete_channel: no stack [ 424.209090][T12620] netlink: 'syz.4.2792': attribute type 3 has an invalid length. [ 424.244702][T12620] netlink: 'syz.4.2792': attribute type 1 has an invalid length. [ 424.288159][T12620] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2792'. [ 424.353622][T12623] netlink: 'syz.4.2792': attribute type 3 has an invalid length. [ 424.356978][T12625] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 424.382799][T12623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2792'. [ 424.431828][T12625] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2794'. [ 424.692238][T12641] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2797'. [ 427.951725][T12676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.968795][T12676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.006514][T12676] batman_adv: batadv0: Removing interface: netdevsim0 [ 428.337175][T12682] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2811'. [ 429.128267][T12696] IPv6: Can't replace route, no match found [ 429.171991][T12696] validate_nla: 1 callbacks suppressed [ 429.172006][T12696] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 429.207491][T12696] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 429.275612][T12696] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2815'. [ 430.857793][T12737] netlink: 'syz.4.2826': attribute type 7 has an invalid length. [ 430.917277][T12746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2830'. [ 430.934301][T12746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2830'. [ 430.993330][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2830'. [ 431.012956][T12746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2830'. [ 431.135417][T12759] IPv6: Can't replace route, no match found [ 431.159983][T12759] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 431.189464][T12759] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 431.224516][T12759] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2834'. [ 433.122642][T12782] netlink: 'syz.4.2840': attribute type 10 has an invalid length. [ 433.322031][T12782] bond0: (slave team0): Releasing backup interface [ 433.368355][T12782] device team0 left promiscuous mode [ 433.392326][T12782] device team_slave_0 left promiscuous mode [ 433.398435][T12782] device team_slave_1 left promiscuous mode [ 433.404534][T12782] device geneve1 left promiscuous mode [ 433.443964][T12782] team0 (unregistering): Port device team_slave_0 removed [ 433.514889][T12782] team0 (unregistering): Port device team_slave_1 removed [ 433.592075][T12782] team0 (unregistering): Port device geneve1 removed [ 434.033216][T12800] IPv6: Can't replace route, no match found [ 434.097387][T12800] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 434.150007][T12800] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 434.229823][T12800] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2849'. [ 434.812315][ T4280] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 435.106572][T12836] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2856'. [ 435.396365][T12842] netlink: 'syz.3.2859': attribute type 10 has an invalid length. [ 435.499597][T12840] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2858'. [ 435.515346][T12842] team0: Device nlmon0 is of different type [ 436.535607][T12869] netlink: 'syz.0.2865': attribute type 2 has an invalid length. [ 436.586592][T12869] netlink: 'syz.0.2865': attribute type 8 has an invalid length. [ 436.610856][T12869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2865'. [ 436.639468][T12865] netlink: 'syz.0.2865': attribute type 2 has an invalid length. [ 436.671481][T12865] netlink: 'syz.0.2865': attribute type 8 has an invalid length. [ 436.713464][T12865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2865'. [ 436.758149][T12872] netlink: 'syz.1.2866': attribute type 10 has an invalid length. [ 436.823369][T12872] team0: Device hsr_slave_0 failed to register rx_handler [ 436.921840][T12869] netlink: 'syz.0.2865': attribute type 10 has an invalid length. [ 436.951195][T12873] netlink: 'syz.2.2868': attribute type 2 has an invalid length. [ 436.984251][T12873] netlink: 'syz.2.2868': attribute type 9 has an invalid length. [ 437.033680][T12873] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 437.068962][T12873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'. [ 437.143799][T12876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2868'. [ 437.368420][T12886] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2871'. [ 437.402318][T12891] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2873'. [ 437.599956][T12890] delete_channel: no stack [ 438.022611][T12897] IPv6: Can't replace route, no match found [ 438.090915][T12899] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2876'. [ 438.738743][T12914] IPv6: Can't replace route, no match found [ 439.242602][ T4280] Bluetooth: hci2: ISO packet for unknown connection handle 3646 [ 439.263962][T12927] __nla_validate_parse: 4 callbacks suppressed [ 439.263978][T12927] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2886'. [ 439.395881][T12931] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2888'. [ 439.552974][T12930] delete_channel: no stack [ 439.694185][T12937] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2891'. [ 439.773623][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.779975][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.076943][T12949] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2890'. [ 440.544284][T12959] IPv6: Can't replace route, no match found [ 440.590338][T12959] validate_nla: 13 callbacks suppressed [ 440.590352][T12959] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 440.724998][T12959] netlink: 'syz.0.2898': attribute type 1 has an invalid length. [ 440.771975][T12965] device veth1_macvtap left promiscuous mode [ 440.778252][T12965] device macsec0 left promiscuous mode [ 440.790843][T12959] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2898'. [ 440.845871][T12966] device syzkaller0 entered promiscuous mode [ 442.112788][T12980] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2901'. [ 442.369623][T13002] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2910'. [ 442.412844][T13002] netlink: 6332 bytes leftover after parsing attributes in process `syz.3.2910'. [ 443.130507][T13005] ================================================================== [ 443.138616][T13005] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 443.146437][T13005] Write of size 80 at addr ffff888077ce0990 by task syz.1.2911/13005 [ 443.154510][T13005] [ 443.156834][T13005] CPU: 0 PID: 13005 Comm: syz.1.2911 Not tainted syzkaller #0 [ 443.164300][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.174358][T13005] Call Trace: [ 443.177626][T13005] [ 443.180544][T13005] dump_stack_lvl+0x188/0x24e [ 443.185220][T13005] ? __lock_acquire+0x7d10/0x7d10 [ 443.190242][T13005] ? show_regs_print_info+0x12/0x12 [ 443.195430][T13005] ? load_image+0x400/0x400 [ 443.199929][T13005] ? __virt_addr_valid+0x465/0x540 [ 443.205103][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 443.210203][T13005] print_report+0xa8/0x210 [ 443.214614][T13005] kasan_report+0x10b/0x140 [ 443.219112][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 443.224226][T13005] kasan_check_range+0x235/0x290 [ 443.229157][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 443.234255][T13005] memcpy+0x3c/0x60 [ 443.238050][T13005] __bpf_get_stackid+0x6c9/0x920 [ 443.242981][T13005] bpf_get_stackid_pe+0x33f/0x400 [ 443.248003][T13005] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 443.253454][T13005] bpf_overflow_handler+0x522/0x7c0 [ 443.258662][T13005] ? bpf_overflow_handler+0xd9/0x7c0 [ 443.263937][T13005] ? perf_swevent_overflow+0x230/0x230 [ 443.269384][T13005] ? ct_irq_exit_irqson+0x113/0x170 [ 443.274627][T13005] ? __perf_event_account_interrupt+0x187/0x280 [ 443.280866][T13005] __perf_event_overflow+0x448/0x610 [ 443.286151][T13005] perf_swevent_event+0x315/0x570 [ 443.291172][T13005] ? perf_tp_event+0xc30/0xc30 [ 443.295927][T13005] ? perf_trace_buf_alloc+0x300/0x300 [ 443.301339][T13005] ___perf_sw_event+0x49e/0x6e0 [ 443.306188][T13005] ? ___perf_sw_event+0x180/0x6e0 [ 443.311204][T13005] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 443.317613][T13005] ? mark_lock+0x94/0x320 [ 443.321951][T13005] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 443.327667][T13005] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 443.333639][T13005] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 443.339265][T13005] ? lock_chain_count+0x20/0x20 [ 443.344113][T13005] __perf_sw_event+0x135/0x260 [ 443.348874][T13005] do_user_addr_fault+0xaea/0xb10 [ 443.353896][T13005] ? trace_hardirqs_off_finish+0x86/0x180 [ 443.359677][T13005] exc_page_fault+0x60/0x100 [ 443.364276][T13005] asm_exc_page_fault+0x22/0x30 [ 443.369127][T13005] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 443.375709][T13005] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 443.395309][T13005] RSP: 0018:ffffc9000cc6f788 EFLAGS: 00050206 [ 443.401373][T13005] RAX: ffffffff840f5e01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 443.409337][T13005] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc9000e7c3fc0 [ 443.417307][T13005] RBP: 0000000000000000 R08: ffffc9000e7f5fdf R09: 1ffff92001cfebfb [ 443.425273][T13005] R10: dffffc0000000000 R11: fffff52001cfebfc R12: 00007ffffffcb020 [ 443.433242][T13005] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc9000e7c2000 [ 443.441214][T13005] ? copyin+0xd1/0x120 [ 443.445284][T13005] copyin+0xe7/0x120 [ 443.449168][T13005] _copy_from_iter+0x447/0x1130 [ 443.454017][T13005] ? copyout_mc+0x110/0x110 [ 443.458511][T13005] ? do_raw_spin_unlock+0x11d/0x230 [ 443.463703][T13005] ? _raw_spin_unlock+0x24/0x40 [ 443.468548][T13005] ? find_vmap_area+0xf8/0x110 [ 443.473366][T13005] ? __check_object_size+0x500/0xa40 [ 443.478646][T13005] netlink_sendmsg+0x755/0xbd0 [ 443.483408][T13005] ? netlink_getsockopt+0x550/0x550 [ 443.488601][T13005] ? aa_sock_msg_perm+0x94/0x150 [ 443.493531][T13005] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 443.498809][T13005] ? security_socket_sendmsg+0x7c/0xa0 [ 443.504262][T13005] ? netlink_getsockopt+0x550/0x550 [ 443.509452][T13005] ____sys_sendmsg+0x5be/0x970 [ 443.514215][T13005] ? __sys_sendmsg_sock+0x30/0x30 [ 443.519229][T13005] ? __import_iovec+0x315/0x500 [ 443.524077][T13005] ? import_iovec+0x6f/0xa0 [ 443.528572][T13005] ___sys_sendmsg+0x2a2/0x360 [ 443.533245][T13005] ? __sys_sendmsg+0x290/0x290 [ 443.538024][T13005] __se_sys_sendmsg+0x1bb/0x2a0 [ 443.542867][T13005] ? __x64_sys_sendmsg+0x80/0x80 [ 443.547808][T13005] ? lockdep_hardirqs_on+0x94/0x140 [ 443.553000][T13005] do_syscall_64+0x4c/0xa0 [ 443.557409][T13005] ? clear_bhb_loop+0x60/0xb0 [ 443.562082][T13005] ? clear_bhb_loop+0x60/0xb0 [ 443.566759][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.572643][T13005] RIP: 0033:0x7ff9eb39ce59 [ 443.577049][T13005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.596643][T13005] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.605047][T13005] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 443.613009][T13005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.620971][T13005] RBP: 00007ff9eb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 443.628933][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.636892][T13005] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 443.644864][T13005] [ 443.647872][T13005] [ 443.650194][T13005] Allocated by task 13005: [ 443.654592][T13005] kasan_set_track+0x4b/0x70 [ 443.659185][T13005] __kasan_kmalloc+0x8e/0xa0 [ 443.663766][T13005] __kmalloc_node+0xb0/0x240 [ 443.668433][T13005] bpf_map_area_alloc+0x47/0xe0 [ 443.673378][T13005] prealloc_elems_and_freelist+0x86/0x1c0 [ 443.679088][T13005] stack_map_alloc+0x390/0x520 [ 443.683840][T13005] map_create+0x534/0x1000 [ 443.688249][T13005] __sys_bpf+0x38b/0x780 [ 443.692485][T13005] __x64_sys_bpf+0x78/0x90 [ 443.696892][T13005] do_syscall_64+0x4c/0xa0 [ 443.701298][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.707182][T13005] [ 443.709493][T13005] Last potentially related work creation: [ 443.715196][T13005] kasan_save_stack+0x3a/0x60 [ 443.719865][T13005] __kasan_record_aux_stack+0xb2/0xc0 [ 443.725229][T13005] call_rcu+0x14f/0x990 [ 443.729447][T13005] __nf_register_net_hook+0x788/0x910 [ 443.734843][T13005] nf_register_net_hook+0xae/0x190 [ 443.739947][T13005] nf_register_net_hooks+0x40/0x1a0 [ 443.745138][T13005] nf_ct_netns_do_get+0x3bc/0x5b0 [ 443.750186][T13005] nf_ct_netns_inet_get+0x1f/0x150 [ 443.755288][T13005] nf_conncount_init+0x123/0x380 [ 443.760269][T13005] ovs_ct_init+0x312/0x480 [ 443.764703][T13005] ovs_init_net+0x1e2/0x240 [ 443.769228][T13005] ops_init+0x355/0x5f0 [ 443.773388][T13005] setup_net+0x4f2/0xbd0 [ 443.777623][T13005] copy_net_ns+0x348/0x5b0 [ 443.782030][T13005] create_new_namespaces+0x3d3/0x6f0 [ 443.787336][T13005] copy_namespaces+0x3b0/0x410 [ 443.792089][T13005] copy_process+0x19c2/0x4080 [ 443.796785][T13005] kernel_clone+0x24b/0x900 [ 443.801277][T13005] __x64_sys_clone+0x1a7/0x220 [ 443.806027][T13005] do_syscall_64+0x4c/0xa0 [ 443.810430][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.816320][T13005] [ 443.818632][T13005] The buggy address belongs to the object at ffff888077ce0980 [ 443.818632][T13005] which belongs to the cache kmalloc-cg-64 of size 64 [ 443.832760][T13005] The buggy address is located 16 bytes inside of [ 443.832760][T13005] 64-byte region [ffff888077ce0980, ffff888077ce09c0) [ 443.845850][T13005] [ 443.848164][T13005] The buggy address belongs to the physical page: [ 443.854570][T13005] page:ffffea0001df3800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77ce0 [ 443.864709][T13005] memcg:ffff88807d05aa01 [ 443.868939][T13005] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 443.876484][T13005] raw: 00fff00000000200 ffffea0001cb7cc0 dead000000000002 ffff888017442780 [ 443.885057][T13005] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807d05aa01 [ 443.893623][T13005] page dumped because: kasan: bad access detected [ 443.900025][T13005] page_owner tracks the page as allocated [ 443.905727][T13005] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4273, tgid 4273 (syz-executor), ts 107874009778, free_ts 107873612017 [ 443.924119][T13005] post_alloc_hook+0x173/0x1a0 [ 443.928891][T13005] get_page_from_freelist+0x1a1e/0x1ab0 [ 443.934438][T13005] __alloc_pages+0x1ec/0x4f0 [ 443.939017][T13005] alloc_slab_page+0x5d/0x160 [ 443.943685][T13005] new_slab+0x87/0x2c0 [ 443.947751][T13005] ___slab_alloc+0xbc6/0x1240 [ 443.952418][T13005] __kmem_cache_alloc_node+0x1a0/0x260 [ 443.957863][T13005] kmalloc_trace+0x26/0xe0 [ 443.962271][T13005] alloc_fdtable+0xca/0x2c0 [ 443.966767][T13005] dup_fd+0x782/0xa50 [ 443.970740][T13005] copy_files+0x72/0xe0 [ 443.974887][T13005] copy_process+0x1835/0x4080 [ 443.979553][T13005] kernel_clone+0x24b/0x900 [ 443.984043][T13005] __x64_sys_clone+0x1a7/0x220 [ 443.988796][T13005] do_syscall_64+0x4c/0xa0 [ 443.993202][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.999091][T13005] page last free stack trace: [ 444.003747][T13005] free_unref_page_prepare+0x8b4/0x9a0 [ 444.009199][T13005] free_unref_page+0x2e/0x3f0 [ 444.013867][T13005] __vunmap+0x856/0xa00 [ 444.018013][T13005] __do_replace+0x86d/0x980 [ 444.022590][T13005] do_ip6t_set_ctl+0xb44/0xe10 [ 444.027348][T13005] nf_setsockopt+0x25f/0x280 [ 444.031931][T13005] __sys_setsockopt+0x2bf/0x3d0 [ 444.036771][T13005] __x64_sys_setsockopt+0xb1/0xc0 [ 444.041783][T13005] do_syscall_64+0x4c/0xa0 [ 444.046186][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.052077][T13005] [ 444.054389][T13005] Memory state around the buggy address: [ 444.060003][T13005] ffff888077ce0880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 444.068067][T13005] ffff888077ce0900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 444.076119][T13005] >ffff888077ce0980: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 444.084162][T13005] ^ [ 444.089515][T13005] ffff888077ce0a00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 444.097565][T13005] ffff888077ce0a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 444.105619][T13005] ================================================================== [ 444.113679][T13005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 444.120859][T13005] CPU: 0 PID: 13005 Comm: syz.1.2911 Not tainted syzkaller #0 [ 444.128303][T13005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.138352][T13005] Call Trace: [ 444.141623][T13005] [ 444.144547][T13005] dump_stack_lvl+0x188/0x24e [ 444.149220][T13005] ? memcpy+0x3c/0x60 [ 444.153197][T13005] ? show_regs_print_info+0x12/0x12 [ 444.158384][T13005] ? load_image+0x400/0x400 [ 444.162891][T13005] panic+0x2e5/0x730 [ 444.166785][T13005] ? bpf_jit_dump+0xd0/0xd0 [ 444.171287][T13005] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 444.177175][T13005] ? _raw_spin_unlock+0x40/0x40 [ 444.182025][T13005] ? print_memory_metadata+0x314/0x400 [ 444.187482][T13005] check_panic_on_warn+0x80/0xa0 [ 444.192410][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 444.197511][T13005] end_report+0x66/0x110 [ 444.201753][T13005] kasan_report+0x118/0x140 [ 444.206255][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 444.211365][T13005] kasan_check_range+0x235/0x290 [ 444.216296][T13005] ? __bpf_get_stackid+0x6c9/0x920 [ 444.221397][T13005] memcpy+0x3c/0x60 [ 444.225203][T13005] __bpf_get_stackid+0x6c9/0x920 [ 444.230138][T13005] bpf_get_stackid_pe+0x33f/0x400 [ 444.235155][T13005] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 444.240608][T13005] bpf_overflow_handler+0x522/0x7c0 [ 444.245802][T13005] ? bpf_overflow_handler+0xd9/0x7c0 [ 444.251077][T13005] ? perf_swevent_overflow+0x230/0x230 [ 444.256526][T13005] ? ct_irq_exit_irqson+0x113/0x170 [ 444.261716][T13005] ? __perf_event_account_interrupt+0x187/0x280 [ 444.267954][T13005] __perf_event_overflow+0x448/0x610 [ 444.273239][T13005] perf_swevent_event+0x315/0x570 [ 444.278256][T13005] ? perf_tp_event+0xc30/0xc30 [ 444.283014][T13005] ? perf_trace_buf_alloc+0x300/0x300 [ 444.288379][T13005] ___perf_sw_event+0x49e/0x6e0 [ 444.293228][T13005] ? ___perf_sw_event+0x180/0x6e0 [ 444.298246][T13005] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 444.304652][T13005] ? mark_lock+0x94/0x320 [ 444.308991][T13005] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 444.314705][T13005] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 444.320697][T13005] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 444.326336][T13005] ? lock_chain_count+0x20/0x20 [ 444.331183][T13005] __perf_sw_event+0x135/0x260 [ 444.335952][T13005] do_user_addr_fault+0xaea/0xb10 [ 444.340973][T13005] ? trace_hardirqs_off_finish+0x86/0x180 [ 444.346686][T13005] exc_page_fault+0x60/0x100 [ 444.351271][T13005] asm_exc_page_fault+0x22/0x30 [ 444.356116][T13005] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 444.362694][T13005] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 444.382378][T13005] RSP: 0018:ffffc9000cc6f788 EFLAGS: 00050206 [ 444.388434][T13005] RAX: ffffffff840f5e01 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 444.396393][T13005] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc9000e7c3fc0 [ 444.404352][T13005] RBP: 0000000000000000 R08: ffffc9000e7f5fdf R09: 1ffff92001cfebfb [ 444.412314][T13005] R10: dffffc0000000000 R11: fffff52001cfebfc R12: 00007ffffffcb020 [ 444.420273][T13005] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc9000e7c2000 [ 444.428236][T13005] ? copyin+0xd1/0x120 [ 444.432301][T13005] copyin+0xe7/0x120 [ 444.436185][T13005] _copy_from_iter+0x447/0x1130 [ 444.441034][T13005] ? copyout_mc+0x110/0x110 [ 444.445528][T13005] ? do_raw_spin_unlock+0x11d/0x230 [ 444.450718][T13005] ? _raw_spin_unlock+0x24/0x40 [ 444.455563][T13005] ? find_vmap_area+0xf8/0x110 [ 444.460318][T13005] ? __check_object_size+0x500/0xa40 [ 444.465595][T13005] netlink_sendmsg+0x755/0xbd0 [ 444.470357][T13005] ? netlink_getsockopt+0x550/0x550 [ 444.475545][T13005] ? aa_sock_msg_perm+0x94/0x150 [ 444.480472][T13005] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 444.485747][T13005] ? security_socket_sendmsg+0x7c/0xa0 [ 444.491202][T13005] ? netlink_getsockopt+0x550/0x550 [ 444.496395][T13005] ____sys_sendmsg+0x5be/0x970 [ 444.501151][T13005] ? __sys_sendmsg_sock+0x30/0x30 [ 444.506168][T13005] ? __import_iovec+0x315/0x500 [ 444.511018][T13005] ? import_iovec+0x6f/0xa0 [ 444.515510][T13005] ___sys_sendmsg+0x2a2/0x360 [ 444.520185][T13005] ? __sys_sendmsg+0x290/0x290 [ 444.524961][T13005] __se_sys_sendmsg+0x1bb/0x2a0 [ 444.529806][T13005] ? __x64_sys_sendmsg+0x80/0x80 [ 444.534742][T13005] ? lockdep_hardirqs_on+0x94/0x140 [ 444.539933][T13005] do_syscall_64+0x4c/0xa0 [ 444.544340][T13005] ? clear_bhb_loop+0x60/0xb0 [ 444.549007][T13005] ? clear_bhb_loop+0x60/0xb0 [ 444.553677][T13005] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.559560][T13005] RIP: 0033:0x7ff9eb39ce59 [ 444.563968][T13005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.583571][T13005] RSP: 002b:00007ff9e95f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.591979][T13005] RAX: ffffffffffffffda RBX: 00007ff9eb615fa0 RCX: 00007ff9eb39ce59 [ 444.599944][T13005] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 444.607905][T13005] RBP: 00007ff9eb432d6f R08: 0000000000000000 R09: 0000000000000000 [ 444.615867][T13005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.623829][T13005] R13: 00007ff9eb616038 R14: 00007ff9eb615fa0 R15: 00007fffac848b58 [ 444.631807][T13005] [ 444.635070][T13005] Kernel Offset: disabled [ 444.639382][T13005] Rebooting in 86400 seconds..