last executing test programs: 10.422869046s ago: executing program 3 (id=2028): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa2046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c100, 0xac5d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.31352945s ago: executing program 3 (id=2036): r0 = getpid() (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_clone(0x40000, &(0x7f0000000240)="e68951747dd4930ab6880d07f71f1df42ae6ff55fc9dde1093cb01f023a14d4f92df3271bcbb2fc96ff475286d9a0c21a95d0e44e489e675edd7e7ea11ef18bf15f3f4c6839f0b38e027dcd0f2e24a6ccc72ef493b1a17be3e253215c48c71b5d66c741b5a222666291d835a68f935864fa72d987f398a50", 0x78, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000540)="d7eb4a0dbf0c6d29539146f54f06aeb252bccabd0c4e866cede0be3bbff00367f940ba3ff8d8a5dae4ecd61f73da08d65d09e8e0b988ef907df5457ef736682043f892826e40e35e72e886bf1d729f2c32cbae54a26b679cae87512b100d8b5b7cc3499c50145b0f8441f2228a21709f746b45d9dac199") syz_open_procfs$namespace(r3, &(0x7f00000005c0)='ns/ipc\x00') (async) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r4 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x88, 0x67, 0x0, 0x0) (async) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6) 8.850314434s ago: executing program 0 (id=2038): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000100) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000)=r6, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.8304853s ago: executing program 1 (id=2056): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d31, 0x1021959f2e5c2d0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000031000b03d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000d80), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000100)) sendmsg$inet(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2000000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000", 0x20}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x1f, 0x28, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x39}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6280}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000040000"], 0x50) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 4.773063212s ago: executing program 0 (id=2057): socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc220, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x22, 0x2, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, 0x0, 0x101d0) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r5, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) 4.398787123s ago: executing program 2 (id=2058): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000018000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x103) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000003a00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r3, &(0x7f0000002340)={&(0x7f0000001240)=@isdn, 0x80, &(0x7f0000001300)=[{&(0x7f00000012c0)=""/50, 0x32}], 0x1, &(0x7f0000001340)=""/4096, 0x1000}, 0x40000060) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES8=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r10, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) write$cgroup_int(r7, &(0x7f00000003c0)=0x202, 0x12) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r11 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) 4.398391693s ago: executing program 4 (id=2059): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x227f7, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=[{0x3, 0x1, 0x1}], 0x10, 0x4}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r5, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffff5}, 0x10) 3.582628048s ago: executing program 1 (id=2060): perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x4) r0 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000002d00)={0x0, r0}, 0x8) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 1.820268213s ago: executing program 3 (id=2061): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x4400, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, 0x0, 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ae0e0000000000000100008018110000", @ANYBLOB, @ANYRES32, @ANYBLOB="0000000003000000c3d70200f0ffffff186000000f0000000000000006000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x829, 0x2c, &(0x7f0000000280)=""/44, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x0, 0x7f, 0xfffffffc}, 0x10, 0x1853a, r2, 0x3, &(0x7f0000000e80)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x2, 0x1, 0x4}, {0x0, 0x5, 0x5, 0xc}, {0x2, 0x2, 0xe, 0xb}], 0x10, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRESOCT=r3, @ANYRES8=r0, @ANYRESDEC=r3], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000180)=r4, 0x4) socket$kcm(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a001000fe00028000001294", 0x2e}], 0x1}, 0x20000800) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000200)='./file0\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001680)={'team0\x00', 0x200}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000000000010000000000000a", @ANYRES32, @ANYBLOB="ebc800"/18, @ANYRES32=r8, @ANYRES32=r4, @ANYBLOB="0400000000000000040000000000"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000003600000095000000000000003983427eadaf3e3681a76d5aa2302778b8dd7d21d119098984a7e2655855aca109a45338ce61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f00000002c0)}, 0xfffffffffffffde1) r10 = socket$kcm(0x22, 0x2, 0x21) setsockopt$sock_attach_bpf(r10, 0x6, 0x16, 0x0, 0x0) 1.691040198s ago: executing program 1 (id=2062): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, 0x0, 0x60ff, 0x8cffffff) recvmsg$unix(r2, &(0x7f0000000d40)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f0000000600)}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/133, 0x85}, {&(0x7f0000000bc0)=""/234, 0xea}], 0x5}, 0x0) 1.690839888s ago: executing program 4 (id=2063): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.650438289s ago: executing program 2 (id=2064): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000000100)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x3000c0c0) 1.523121783s ago: executing program 4 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000100000000002948c9c000"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d0000000400000004000000ffffff", @ANYRES32=r2, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000fcff0200bb2e10532719000000000000000000000000000000000000040000006230789e4e204bf088fa5605710e95e83b0292bc4f7188444c5a7b94c53e1875ab6fe593335a785f88c55820b156b932f3f445e6f9e837851c63c8b4f84950502528a8f98e8cba44bb597b025d21a372416a82aa899af17f00f2223f3d305dc2f817b70cb5025426031f69952929c3036c6557972dbbb8531f9db90782071770246af967b0ae5c"], 0x50) mkdir(0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, 0x0, &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000180), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x80006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.409371206s ago: executing program 1 (id=2066): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r1, 0x0, 0x40000010) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c, 0x4000}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) mkdir(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9601"], 0x6e8a) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14bd706a409553bbe94c27e4418111dfdb8196104e8119b803df1eccb04e4a73b47bb2b77160dca15ee9a7d2bfe37467118bfdbe9ce64a4c753db6e2999474df3dbabbeb0b6be6ee7dd8444cd89e0ebf86fc802e90b9721a7ce8bf910a60a951fa64a228c38d92b0254893b4d88c3dcbeed2ec5458cee4238509f4c4"], 0x0, 0x26, 0x0, 0x0, 0x800000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 1.407811706s ago: executing program 0 (id=2067): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 1.250966971s ago: executing program 2 (id=2068): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xec) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) 1.165648634s ago: executing program 1 (id=2069): socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000540)={'virt_wifi0\x00', @random="0180000000f8"}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000500)="61500d4c47323a61f82edfb1bdd17c798d4c68150d3882be091e28e74ddab1e2852e9f177bbb8e8b63b0c468493970f94e025cd80288bf315eca0c76633d732f03af14c10906797cf9e5e869ace9b1534af8d5a71aec51a10ea590da8270e3d17d9c2d0e259908a83c1b00fd0ed0456e6217a3d5d6068cf99f8fd86a28481494801ca79b90a05aba8736986b9d0def83fa7c32311cd2cdbaf6309e32506d087724a33053f9d4b4ecb5036955e1ea868dae3a9563381ac23a6a8bc2db7d6c2c99ba9a1e2fd9449f4d76c7db07b99f2df0a9f0264263fc5973079567a26bc6a18566063c7d0627d62400d7da15a7aeeb3e2cec4c4a3296bea4df790d80b6edd93d26137c4aa2644f03c490075af6e6743664258406633268db354bf5970e8a880c01192a6d55c9862e7eb30dc83ec59f5be9e2fa2373c0f46c53c8b6f03ba3cfb71cef5c768a67ea2bd94b5afeb433290c381978001867d000d1d5a09ccfd845f48f6980ece3a476e88fd629a12df3ca0f5085264ae9ed21edda5a06c48f10cd8cd21b22130524009f260836ee0da9cae93f05569ace75a052f73b30b61748240c01c66f01199d2ff607ba045798a1a4f2a9f40ec536d67af92acc84117d14d21854901432bb94b02d845ce4426f4b8c20d0588d691b4ec444de586fb8f322d5c3b89cb7b55b58c288c3dc20", 0x1eb}], 0x1}, 0x20008010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x30, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5d31, 0x20080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x2002, 0x8, 0x0, 0x9, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9a}, 0x0, 0x10, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f8484800ffef5e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) sendmsg$kcm(r6, 0x0, 0x0) 814.276435ms ago: executing program 3 (id=2070): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0xc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000)=r4, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="2e00000010008102b78cc358f86515e00000c9f1af642fb6429d6efb4400490009002e0010000000ba8000051201", 0x2e}], 0x1}, 0x4000000) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1a69, 0x5}, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, &(0x7f0000000080)=""/227, 0x32, 0xe3, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200008d00"}) 722.075948ms ago: executing program 4 (id=2071): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="4eaa000000000000711065000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 720.663108ms ago: executing program 0 (id=2072): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa2046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c100, 0xac5d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e46647c9d9b8e9a2f2bb70da5800", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 647.05213ms ago: executing program 2 (id=2073): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000009b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 524.707874ms ago: executing program 2 (id=2074): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xa, &(0x7f0000000240), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000180)=0x2cf7) write$cgroup_devices(r2, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xb740, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000900), 0x0}, 0x20) write$cgroup_subtree(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="33fe000018004d"], 0xfe33) 497.975035ms ago: executing program 1 (id=2075): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d8"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full', 0x20, 0xe62}, 0x2f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004cc1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0005005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 421.515357ms ago: executing program 4 (id=2076): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x98}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000611210000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, 0x0, 0x60ff, 0x8cffffff) recvmsg$unix(r2, 0x0, 0x0) 0s ago: executing program 0 (id=2077): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = syz_clone(0x6010000, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x9, 0x5, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x10005ff}, 0x0, 0x403, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x7f, 0x8, 0x0, 0x9e6a, 0x92054, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x2, 0x6}, 0x100960, 0xffffffffffff8001, 0x8001, 0x8, 0x7, 0xff, 0x5, 0x0, 0x2, 0x0, 0x3}, r1, 0xe, r0, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0", 0x1b}], 0x1}, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92a24fc60", 0x14}], 0x3}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) kernel console output (not intermixed with test programs): 28 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.558889][ T6454] RAX: ffffffffffffffda RBX: 00007f3a8fa15fa0 RCX: 00007f3a8f79ce59 [ 185.566914][ T6454] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 185.574914][ T6454] RBP: 00007f3a90695090 R08: 0000000000000000 R09: 0000000000000000 [ 185.582889][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.591060][ T6454] R13: 00007f3a8fa16038 R14: 00007f3a8fa15fa0 R15: 00007fff6e570db8 [ 185.599055][ T6454] [ 186.589755][ T6481] validate_nla: 3 callbacks suppressed [ 186.589775][ T6481] netlink: 'syz.2.694': attribute type 10 has an invalid length. [ 186.659222][ T6481] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'. [ 186.711346][ T6481] device macvlan1 entered promiscuous mode [ 186.735595][ T6481] batman_adv: batadv0: Adding interface: macvlan1 [ 186.743369][ T6481] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.798773][ T6481] batman_adv: batadv0: Interface activated: macvlan1 [ 187.457291][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 188.242824][ T6511] netlink: 'syz.2.703': attribute type 2 has an invalid length. [ 188.383244][ T6511] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 188.428801][ T6511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.703'. [ 188.483129][ T6511] bridge0: port 3(team0) entered blocking state [ 188.498598][ T6511] bridge0: port 3(team0) entered disabled state [ 188.532546][ T6511] device team0 entered promiscuous mode [ 188.561470][ T6511] device team_slave_0 entered promiscuous mode [ 188.599580][ T6511] device team_slave_1 entered promiscuous mode [ 188.619245][ T6511] bridge0: port 3(team0) entered blocking state [ 188.625785][ T6511] bridge0: port 3(team0) entered forwarding state [ 189.390781][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 190.352585][ T6563] netlink: 'syz.2.722': attribute type 10 has an invalid length. [ 190.381890][ T5042] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.828175][ T6562] delete_channel: no stack [ 191.287852][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.727'. [ 191.446636][ T6588] tc_dump_action: action bad kind [ 191.620919][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 191.627067][ T4291] Bluetooth: hci0: command 0x0406 tx timeout [ 191.628914][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 191.633423][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 191.639292][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 191.938025][ T6601] netlink: 'syz.1.734': attribute type 25 has an invalid length. [ 191.957950][ T6601] netlink: 'syz.1.734': attribute type 25 has an invalid length. [ 192.602649][ T6615] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.023707][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 193.695973][ T6638] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 193.891636][ T6639] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 193.942803][ T6638] device 0 entered promiscuous mode [ 194.394166][ T6654] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 194.689414][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.696783][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.159045][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 195.361238][ T6678] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.759'. [ 196.264332][ T6695] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 196.394614][ T6695] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 196.463913][ T6696] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 196.608171][ T6697] netlink: 'syz.2.765': attribute type 29 has an invalid length. [ 197.219053][ T5028] wlan1: Trigger new scan to find an IBSS to join [ 199.205670][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 199.331039][ T6717] netlink: 'syz.2.774': attribute type 10 has an invalid length. [ 199.370842][ T6717] batman_adv: batadv0: Removing interface: netdevsim0 [ 199.474952][ T6717] device netdevsim0 entered promiscuous mode [ 199.513385][ T6717] team0: Port device netdevsim0 added [ 200.301348][ T6740] €: renamed from virt_wifi0 [ 200.481169][ T6740] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 201.218813][ T46] wlan1: Trigger new scan to find an IBSS to join [ 201.429609][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.787'. [ 201.618189][ T6768] netlink: 14 bytes leftover after parsing attributes in process `syz.0.789'. [ 202.209214][ T5030] wlan1: Creating new IBSS network, BSSID 0a:4f:ad:bc:a3:ca [ 202.523775][ T6793] device sit0 left promiscuous mode [ 202.614333][ T6798] device sit0 entered promiscuous mode [ 202.701100][ T6799] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 202.764008][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 203.294079][ T6818] netlink: 'syz.0.811': attribute type 21 has an invalid length. [ 204.031568][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 204.591618][ T6865] FAULT_INJECTION: forcing a failure. [ 204.591618][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 204.618393][ T6865] CPU: 0 PID: 6865 Comm: syz.4.825 Not tainted syzkaller #0 [ 204.625755][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.635845][ T6865] Call Trace: [ 204.639157][ T6865] [ 204.642109][ T6865] dump_stack_lvl+0x188/0x24e [ 204.646831][ T6865] ? show_regs_print_info+0x12/0x12 [ 204.652072][ T6865] ? load_image+0x400/0x400 [ 204.656625][ T6865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 204.662649][ T6865] should_fail_ex+0x399/0x4d0 [ 204.667375][ T6865] should_failslab+0x5/0x20 [ 204.671991][ T6865] slab_pre_alloc_hook+0x59/0x310 [ 204.677059][ T6865] kmem_cache_alloc+0x56/0x2f0 [ 204.681853][ T6865] ? __build_skb+0x2a/0x3c0 [ 204.686407][ T6865] __build_skb+0x2a/0x3c0 [ 204.690865][ T6865] build_skb+0x1e/0x230 [ 204.695066][ T6865] bpf_prog_test_run_skb+0x37e/0x12a0 [ 204.700478][ T6865] ? __fget_files+0x28/0x4b0 [ 204.705090][ T6865] ? __fget_files+0x43d/0x4b0 [ 204.709782][ T6865] ? cpu_online+0xa0/0xa0 [ 204.714135][ T6865] bpf_prog_test_run+0x31e/0x390 [ 204.719095][ T6865] __sys_bpf+0x62b/0x780 [ 204.723435][ T6865] ? bpf_link_show_fdinfo+0x380/0x380 [ 204.728821][ T6865] ? lock_chain_count+0x20/0x20 [ 204.733666][ T6865] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 204.739648][ T6865] __x64_sys_bpf+0x78/0x90 [ 204.744062][ T6865] do_syscall_64+0x4c/0xa0 [ 204.748478][ T6865] ? clear_bhb_loop+0x60/0xb0 [ 204.753152][ T6865] ? clear_bhb_loop+0x60/0xb0 [ 204.757836][ T6865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.763751][ T6865] RIP: 0033:0x7f8ff7b9ce59 [ 204.768211][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.788015][ T6865] RSP: 002b:00007f8ff8aa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.796518][ T6865] RAX: ffffffffffffffda RBX: 00007f8ff7e15fa0 RCX: 00007f8ff7b9ce59 [ 204.804573][ T6865] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 204.812628][ T6865] RBP: 00007f8ff8aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.820591][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.828812][ T6865] R13: 00007f8ff7e16038 R14: 00007f8ff7e15fa0 R15: 00007ffe75eb2998 [ 204.836807][ T6865] [ 205.196942][ T6872] netlink: 'syz.3.828': attribute type 2 has an invalid length. [ 205.212028][ T6872] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.828'. [ 205.224989][ T6875] FAULT_INJECTION: forcing a failure. [ 205.224989][ T6875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.244514][ T6875] CPU: 1 PID: 6875 Comm: syz.2.829 Not tainted syzkaller #0 [ 205.252303][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.262461][ T6875] Call Trace: [ 205.265743][ T6875] [ 205.268680][ T6875] dump_stack_lvl+0x188/0x24e [ 205.273372][ T6875] ? show_regs_print_info+0x12/0x12 [ 205.278661][ T6875] ? load_image+0x400/0x400 [ 205.283164][ T6875] ? __lock_acquire+0x7d10/0x7d10 [ 205.288364][ T6875] should_fail_ex+0x399/0x4d0 [ 205.293057][ T6875] _copy_from_user+0x2c/0x170 [ 205.297742][ T6875] ___sys_sendmsg+0x1c3/0x360 [ 205.302422][ T6875] ? __sys_sendmsg+0x290/0x290 [ 205.307195][ T6875] ? __lock_acquire+0x7d10/0x7d10 [ 205.312238][ T6875] __se_sys_sendmsg+0x1bb/0x2a0 [ 205.317700][ T6875] ? __x64_sys_sendmsg+0x80/0x80 [ 205.322746][ T6875] ? lockdep_hardirqs_on+0x94/0x140 [ 205.328026][ T6875] do_syscall_64+0x4c/0xa0 [ 205.332443][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 205.337117][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 205.341791][ T6875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.347804][ T6875] RIP: 0033:0x7f4d3ef9ce59 [ 205.352217][ T6875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.372022][ T6875] RSP: 002b:00007f4d3fda1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.380448][ T6875] RAX: ffffffffffffffda RBX: 00007f4d3f215fa0 RCX: 00007f4d3ef9ce59 [ 205.388427][ T6875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 205.396566][ T6875] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 205.404970][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.412943][ T6875] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 205.420928][ T6875] [ 205.983952][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 206.294432][ T6902] tipc: Started in network mode [ 206.314520][ T6902] tipc: Node identity 9215a268, cluster identity 4711 [ 206.343516][ T6902] tipc: Node number set to 2450891368 [ 207.387807][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'. [ 208.914634][ T6976] netlink: 'syz.1.862': attribute type 10 has an invalid length. [ 208.933704][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.862'. [ 209.053149][ T6976] device team0 entered promiscuous mode [ 209.073400][ T6976] device team_slave_0 entered promiscuous mode [ 209.129052][ T6976] device team_slave_1 entered promiscuous mode [ 209.142971][ T6976] bridge0: port 3(team0) entered blocking state [ 209.238950][ T6976] bridge0: port 3(team0) entered disabled state [ 209.368058][ T6976] bridge0: port 3(team0) entered blocking state [ 209.374694][ T6976] bridge0: port 3(team0) entered forwarding state [ 209.933724][ T6996] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.869'. [ 211.006489][ T7022] syz.0.880[7022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.006648][ T7022] syz.0.880[7022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.311099][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.882'. [ 212.042216][ T7045] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 212.090038][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.182973][ T7036] device lo entered promiscuous mode [ 213.309898][ T7057] netlink: 830 bytes leftover after parsing attributes in process `syz.0.893'. [ 215.182889][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 216.023416][ T7088] netlink: 'syz.3.901': attribute type 10 has an invalid length. [ 218.199832][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.913'. [ 218.239940][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 219.474670][ T7135] FAULT_INJECTION: forcing a failure. [ 219.474670][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 219.607103][ T7135] CPU: 0 PID: 7135 Comm: syz.3.916 Not tainted syzkaller #0 [ 219.614474][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.624914][ T7135] Call Trace: [ 219.628209][ T7135] [ 219.631161][ T7135] dump_stack_lvl+0x188/0x24e [ 219.635952][ T7135] ? show_regs_print_info+0x12/0x12 [ 219.641257][ T7135] ? load_image+0x400/0x400 [ 219.645780][ T7135] ? __might_sleep+0xd0/0xd0 [ 219.650395][ T7135] ? __lock_acquire+0x7d10/0x7d10 [ 219.655451][ T7135] should_fail_ex+0x399/0x4d0 [ 219.660160][ T7135] should_failslab+0x5/0x20 [ 219.664680][ T7135] slab_pre_alloc_hook+0x59/0x310 [ 219.669760][ T7135] ? tomoyo_encode+0x27e/0x540 [ 219.674580][ T7135] __kmem_cache_alloc_node+0x4f/0x260 [ 219.679998][ T7135] ? tomoyo_encode+0x27e/0x540 [ 219.684815][ T7135] __kmalloc+0xa0/0x240 [ 219.689022][ T7135] tomoyo_encode+0x27e/0x540 [ 219.693652][ T7135] tomoyo_realpath_from_path+0x58e/0x5d0 [ 219.699324][ T7135] ? tomoyo_path_number_perm+0x205/0x650 [ 219.705004][ T7135] tomoyo_path_number_perm+0x22f/0x650 [ 219.710513][ T7135] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 219.717393][ T7135] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 219.722876][ T7135] ? ksys_write+0x1c0/0x250 [ 219.727400][ T7135] ? common_file_perm+0x171/0x1c0 [ 219.732500][ T7135] ? __fget_files+0x28/0x4b0 [ 219.737126][ T7135] ? __fget_files+0x28/0x4b0 [ 219.741849][ T7135] security_file_ioctl+0x6c/0xa0 [ 219.746823][ T7135] __se_sys_ioctl+0x48/0x170 [ 219.751448][ T7135] do_syscall_64+0x4c/0xa0 [ 219.755890][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 219.760599][ T7135] ? clear_bhb_loop+0x60/0xb0 [ 219.765309][ T7135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.771240][ T7135] RIP: 0033:0x7f505399ce59 [ 219.775679][ T7135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.795493][ T7135] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.803945][ T7135] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 219.811951][ T7135] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 219.819952][ T7135] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 219.827951][ T7135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.836040][ T7135] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 219.844081][ T7135] [ 220.092648][ T7143] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.919'. [ 220.180401][ T7135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.281724][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 221.408779][ T5008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.964284][ T7174] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 222.030415][ T7174] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.358480][ T7184] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 222.382062][ T7187] delete_channel: no stack [ 222.386682][ T7187] delete_channel: no stack [ 223.374062][ T7184] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 223.467775][ T7203] FAULT_INJECTION: forcing a failure. [ 223.467775][ T7203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.539062][ T7203] CPU: 0 PID: 7203 Comm: syz.4.938 Not tainted syzkaller #0 [ 223.546515][ T7203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.556639][ T7203] Call Trace: [ 223.559942][ T7203] [ 223.562980][ T7203] dump_stack_lvl+0x188/0x24e [ 223.567684][ T7203] ? show_regs_print_info+0x12/0x12 [ 223.573009][ T7203] ? load_image+0x400/0x400 [ 223.577723][ T7203] ? __lock_acquire+0x7d10/0x7d10 [ 223.582968][ T7203] should_fail_ex+0x399/0x4d0 [ 223.587777][ T7203] _copy_from_user+0x2c/0x170 [ 223.592672][ T7203] ___sys_sendmsg+0x1c3/0x360 [ 223.597398][ T7203] ? __sys_sendmsg+0x290/0x290 [ 223.602226][ T7203] ? __lock_acquire+0x7d10/0x7d10 [ 223.607317][ T7203] __se_sys_sendmsg+0x1bb/0x2a0 [ 223.611910][ T7207] netlink: 'syz.1.940': attribute type 39 has an invalid length. [ 223.612287][ T7203] ? __x64_sys_sendmsg+0x80/0x80 [ 223.625350][ T7203] ? lockdep_hardirqs_on+0x94/0x140 [ 223.628790][ T7207] netlink: 'syz.1.940': attribute type 25 has an invalid length. [ 223.630568][ T7203] do_syscall_64+0x4c/0xa0 [ 223.642744][ T7203] ? clear_bhb_loop+0x60/0xb0 [ 223.647458][ T7203] ? clear_bhb_loop+0x60/0xb0 [ 223.652192][ T7203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.658130][ T7203] RIP: 0033:0x7f8ff7b9ce59 [ 223.662675][ T7203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.682322][ T7203] RSP: 002b:00007f8ff8aa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.690775][ T7203] RAX: ffffffffffffffda RBX: 00007f8ff7e15fa0 RCX: 00007f8ff7b9ce59 [ 223.698777][ T7203] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 223.706782][ T7203] RBP: 00007f8ff8aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 223.714790][ T7203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.722837][ T7203] R13: 00007f8ff7e16038 R14: 00007f8ff7e15fa0 R15: 00007ffe75eb2998 [ 223.730869][ T7203] [ 224.596872][ T7222] netlink: 'syz.3.945': attribute type 3 has an invalid length. [ 224.639081][ T7222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.945'. [ 225.398585][ T7239] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.951'. [ 225.452158][ T7239] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 225.468784][ T7239] CPU: 0 PID: 7239 Comm: syz.3.951 Not tainted syzkaller #0 [ 225.476152][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.486352][ T7239] Call Trace: [ 225.489684][ T7239] [ 225.492656][ T7239] dump_stack_lvl+0x188/0x24e [ 225.497650][ T7239] ? show_regs_print_info+0x12/0x12 [ 225.502896][ T7239] ? load_image+0x400/0x400 [ 225.507699][ T7239] sysfs_warn_dup+0x8a/0xa0 [ 225.512225][ T7239] sysfs_do_create_link_sd+0xc0/0x110 [ 225.517657][ T7239] device_add+0x7ed/0xfb0 [ 225.522001][ T7239] wiphy_register+0x1d9f/0x2ac0 [ 225.526878][ T7239] ? cfg80211_event_work+0x40/0x40 [ 225.532253][ T7239] ? minstrel_ht_alloc+0x894/0xa20 [ 225.537398][ T7239] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 225.543555][ T7239] ieee80211_register_hw+0x2d00/0x39f0 [ 225.549116][ T7239] ? ieee80211_register_hw+0xe71/0x39f0 [ 225.554691][ T7239] ? ieee80211_register_hw+0xe71/0x39f0 [ 225.560260][ T7239] ? ieee80211_tasklet_handler+0x20/0x20 [ 225.565901][ T7239] ? memset+0x1e/0x40 [ 225.569884][ T7239] ? __hrtimer_init+0x186/0x270 [ 225.574818][ T7239] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 225.580562][ T7239] hwsim_new_radio_nl+0xafa/0xce0 [ 225.585611][ T7239] genl_family_rcv_msg_doit+0x22a/0x330 [ 225.591249][ T7239] ? end_current_label_crit_section+0x170/0x170 [ 225.597506][ T7239] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 225.603405][ T7239] ? bpf_lsm_capable+0x5/0x10 [ 225.608092][ T7239] ? security_capable+0x85/0xb0 [ 225.612953][ T7239] genl_rcv_msg+0x604/0x790 [ 225.617555][ T7239] ? genl_bind+0x360/0x360 [ 225.622159][ T7239] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 225.628522][ T7239] netlink_rcv_skb+0x1fb/0x450 [ 225.633297][ T7239] ? genl_bind+0x360/0x360 [ 225.637755][ T7239] ? netlink_ack+0x1170/0x1170 [ 225.642566][ T7239] ? down_read+0x1a8/0x2d0 [ 225.647009][ T7239] genl_rcv+0x24/0x40 [ 225.651007][ T7239] netlink_unicast+0x74d/0x8d0 [ 225.656049][ T7239] netlink_sendmsg+0x8ad/0xbd0 [ 225.660837][ T7239] ? netlink_getsockopt+0x550/0x550 [ 225.666132][ T7239] ? aa_sock_msg_perm+0x94/0x150 [ 225.671074][ T7239] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 225.676356][ T7239] ? security_socket_sendmsg+0x7c/0xa0 [ 225.681816][ T7239] ? netlink_getsockopt+0x550/0x550 [ 225.687069][ T7239] ____sys_sendmsg+0x5be/0x970 [ 225.692034][ T7239] ? __sys_sendmsg_sock+0x30/0x30 [ 225.697156][ T7239] ? __import_iovec+0x315/0x500 [ 225.702015][ T7239] ? import_iovec+0x6f/0xa0 [ 225.706538][ T7239] ___sys_sendmsg+0x2a2/0x360 [ 225.711220][ T7239] ? try_to_wake_up+0x67c/0x1080 [ 225.716179][ T7239] ? __sys_sendmsg+0x290/0x290 [ 225.720998][ T7239] __se_sys_sendmsg+0x1bb/0x2a0 [ 225.725868][ T7239] ? __x64_sys_sendmsg+0x80/0x80 [ 225.730851][ T7239] ? lockdep_hardirqs_on+0x94/0x140 [ 225.736055][ T7239] do_syscall_64+0x4c/0xa0 [ 225.740473][ T7239] ? clear_bhb_loop+0x60/0xb0 [ 225.745146][ T7239] ? clear_bhb_loop+0x60/0xb0 [ 225.750112][ T7239] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.756042][ T7239] RIP: 0033:0x7f505399ce59 [ 225.760479][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.780094][ T7239] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.788593][ T7239] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 225.796653][ T7239] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.804632][ T7239] RBP: 00007f5053a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 225.812801][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.820879][ T7239] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 225.828871][ T7239] [ 226.383461][ T7246] netlink: 'syz.0.955': attribute type 10 has an invalid length. [ 226.403244][ T7246] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 226.751631][ T7259] FAULT_INJECTION: forcing a failure. [ 226.751631][ T7259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.805932][ T7259] CPU: 0 PID: 7259 Comm: syz.4.960 Not tainted syzkaller #0 [ 226.813298][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.823391][ T7259] Call Trace: [ 226.826781][ T7259] [ 226.829740][ T7259] dump_stack_lvl+0x188/0x24e [ 226.834462][ T7259] ? show_regs_print_info+0x12/0x12 [ 226.839695][ T7259] ? load_image+0x400/0x400 [ 226.844232][ T7259] ? __lock_acquire+0x7d10/0x7d10 [ 226.849390][ T7259] should_fail_ex+0x399/0x4d0 [ 226.854114][ T7259] _copy_from_user+0x2c/0x170 [ 226.858823][ T7259] ___sys_sendmsg+0x1c3/0x360 [ 226.863557][ T7259] ? __sys_sendmsg+0x290/0x290 [ 226.868383][ T7259] ? __lock_acquire+0x7d10/0x7d10 [ 226.873647][ T7259] __se_sys_sendmsg+0x1bb/0x2a0 [ 226.878642][ T7259] ? __x64_sys_sendmsg+0x80/0x80 [ 226.883621][ T7259] ? lockdep_hardirqs_on+0x94/0x140 [ 226.889289][ T7259] do_syscall_64+0x4c/0xa0 [ 226.893736][ T7259] ? clear_bhb_loop+0x60/0xb0 [ 226.898440][ T7259] ? clear_bhb_loop+0x60/0xb0 [ 226.903150][ T7259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.909174][ T7259] RIP: 0033:0x7f8ff7b9ce59 [ 226.913606][ T7259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.933460][ T7259] RSP: 002b:00007f8ff8aa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.941918][ T7259] RAX: ffffffffffffffda RBX: 00007f8ff7e15fa0 RCX: 00007f8ff7b9ce59 [ 226.949924][ T7259] RDX: 0000000020048015 RSI: 0000200000000040 RDI: 0000000000000003 [ 226.958068][ T7259] RBP: 00007f8ff8aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 226.966087][ T7259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.974455][ T7259] R13: 00007f8ff7e16038 R14: 00007f8ff7e15fa0 R15: 00007ffe75eb2998 [ 226.982475][ T7259] [ 227.188543][ T7267] netlink: 'syz.3.962': attribute type 21 has an invalid length. [ 228.870423][ T7323] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.981'. [ 231.322003][ T7382] netlink: 'syz.4.998': attribute type 11 has an invalid length. [ 233.506791][ T7436] FAULT_INJECTION: forcing a failure. [ 233.506791][ T7436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.538970][ T7436] CPU: 1 PID: 7436 Comm: syz.2.1018 Not tainted syzkaller #0 [ 233.546529][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.556713][ T7436] Call Trace: [ 233.560025][ T7436] [ 233.562980][ T7436] dump_stack_lvl+0x188/0x24e [ 233.567773][ T7436] ? show_regs_print_info+0x12/0x12 [ 233.573023][ T7436] ? load_image+0x400/0x400 [ 233.577565][ T7436] ? __lock_acquire+0x7d10/0x7d10 [ 233.582633][ T7436] should_fail_ex+0x399/0x4d0 [ 233.587409][ T7436] _copy_from_user+0x2c/0x170 [ 233.592128][ T7436] ___sys_sendmsg+0x1c3/0x360 [ 233.596861][ T7436] ? __sys_sendmsg+0x290/0x290 [ 233.601771][ T7436] ? __lock_acquire+0x7d10/0x7d10 [ 233.606856][ T7436] __se_sys_sendmsg+0x1bb/0x2a0 [ 233.612189][ T7436] ? __x64_sys_sendmsg+0x80/0x80 [ 233.617183][ T7436] ? lockdep_hardirqs_on+0x94/0x140 [ 233.622422][ T7436] do_syscall_64+0x4c/0xa0 [ 233.626889][ T7436] ? clear_bhb_loop+0x60/0xb0 [ 233.631612][ T7436] ? clear_bhb_loop+0x60/0xb0 [ 233.636330][ T7436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.642342][ T7436] RIP: 0033:0x7f4d3ef9ce59 [ 233.646788][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.666543][ T7436] RSP: 002b:00007f4d3fda1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.674992][ T7436] RAX: ffffffffffffffda RBX: 00007f4d3f215fa0 RCX: 00007f4d3ef9ce59 [ 233.682987][ T7436] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 233.690978][ T7436] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.698960][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.707214][ T7436] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 233.715223][ T7436] [ 233.785302][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1020'. [ 235.171389][ T7466] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1029'. [ 235.247359][ T7457] netlink: 'syz.4.1025': attribute type 2 has an invalid length. [ 235.331920][ T7457] netlink: 'syz.4.1025': attribute type 8 has an invalid length. [ 235.421502][ T7457] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1025'. [ 235.681259][ T7474] device pim6reg1 entered promiscuous mode [ 235.922786][ T7482] netlink: 'syz.2.1034': attribute type 2 has an invalid length. [ 235.960839][ T7482] netlink: 'syz.2.1034': attribute type 8 has an invalid length. [ 236.000804][ T7491] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 236.007385][ T7491] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.017791][ T7482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1034'. [ 236.415474][ T7496] netlink: 'syz.0.1041': attribute type 21 has an invalid length. [ 236.457068][ T7496] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1041'. [ 236.987888][ T7507] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1043'. [ 237.078385][ T7505] delete_channel: no stack [ 237.342341][ T7513] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1047'. [ 237.440017][ T7513] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 237.562331][ T7519] delete_channel: no stack [ 237.567201][ T7519] delete_channel: no stack [ 237.630374][ T7522] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1052'. [ 237.702455][ T7522] device veth0_macvtap left promiscuous mode [ 237.914543][ T7526] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1052'. [ 238.032123][ T7531] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 238.051101][ T7531] batman_adv: batadv0: Removing interface: netdevsim0 [ 238.094053][ T7531] device netdevsim0 entered promiscuous mode [ 238.147031][ T7531] team0: Port device netdevsim0 added [ 238.936013][ T7545] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 238.979040][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1059'. [ 238.999394][ T7545] device ipvlan1 entered promiscuous mode [ 239.034704][ T7545] bridge0: port 2(ipvlan1) entered blocking state [ 239.077365][ T7545] bridge0: port 2(ipvlan1) entered disabled state [ 239.109875][ T7545] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 239.205404][ T7547] netlink: 'syz.3.1060': attribute type 16 has an invalid length. [ 239.258890][ T7547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1060'. [ 240.050665][ T7565] netlink: 2739 bytes leftover after parsing attributes in process `syz.4.1066'. [ 240.242697][ T7570] FAULT_INJECTION: forcing a failure. [ 240.242697][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 240.268849][ T7570] CPU: 1 PID: 7570 Comm: syz.2.1068 Not tainted syzkaller #0 [ 240.276306][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.286368][ T7570] Call Trace: [ 240.289657][ T7570] [ 240.292589][ T7570] dump_stack_lvl+0x188/0x24e [ 240.297277][ T7570] ? sctp_sendmsg+0x15b0/0x2940 [ 240.302242][ T7570] ? ___sys_sendmsg+0x2a2/0x360 [ 240.307099][ T7570] ? show_regs_print_info+0x12/0x12 [ 240.312303][ T7570] ? load_image+0x400/0x400 [ 240.316809][ T7570] should_fail_ex+0x399/0x4d0 [ 240.321574][ T7570] should_failslab+0x5/0x20 [ 240.326073][ T7570] slab_pre_alloc_hook+0x59/0x310 [ 240.331103][ T7570] ? sctp_add_bind_addr+0x89/0x350 [ 240.336220][ T7570] __kmem_cache_alloc_node+0x4f/0x260 [ 240.341852][ T7570] ? sctp_add_bind_addr+0x89/0x350 [ 240.347095][ T7570] kmalloc_trace+0x26/0xe0 [ 240.351582][ T7570] sctp_add_bind_addr+0x89/0x350 [ 240.356583][ T7570] sctp_copy_local_addr_list+0x311/0x4e0 [ 240.362263][ T7570] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 240.368031][ T7570] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 240.374142][ T7570] ? sctp_v4_is_any+0x31/0x50 [ 240.378855][ T7570] ? sctp_copy_one_addr+0x93/0x660 [ 240.384014][ T7570] sctp_bind_addr_copy+0xaf/0x3c0 [ 240.389162][ T7570] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 240.395620][ T7570] sctp_connect_new_asoc+0x2f5/0x6a0 [ 240.400913][ T7570] ? __sctp_connect+0xd80/0xd80 [ 240.405761][ T7570] ? __local_bh_enable_ip+0x136/0x1c0 [ 240.411307][ T7570] ? _local_bh_enable+0xa0/0xa0 [ 240.416153][ T7570] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 240.422006][ T7570] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 240.427843][ T7570] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 240.433498][ T7570] ? security_sctp_bind_connect+0x85/0xb0 [ 240.439499][ T7570] sctp_sendmsg+0x15b0/0x2940 [ 240.444281][ T7570] ? aa_sk_perm+0x811/0x950 [ 240.448790][ T7570] ? sctp_getsockopt+0x8a0/0x8a0 [ 240.453729][ T7570] ? __might_fault+0xa6/0x120 [ 240.458427][ T7570] ? aa_af_perm+0x340/0x340 [ 240.462950][ T7570] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 240.469407][ T7570] ? inet_sendmsg+0x78/0x2f0 [ 240.474030][ T7570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 240.479334][ T7570] ? security_socket_sendmsg+0x7c/0xa0 [ 240.484828][ T7570] ? inet_send_prepare+0x260/0x260 [ 240.489955][ T7570] ____sys_sendmsg+0x5be/0x970 [ 240.494735][ T7570] ? __sys_sendmsg_sock+0x30/0x30 [ 240.499801][ T7570] ? __import_iovec+0x315/0x500 [ 240.504659][ T7570] ? import_iovec+0x6f/0xa0 [ 240.509161][ T7570] ___sys_sendmsg+0x2a2/0x360 [ 240.513842][ T7570] ? __sys_sendmsg+0x290/0x290 [ 240.518638][ T7570] ? __lock_acquire+0x7d10/0x7d10 [ 240.523770][ T7570] __se_sys_sendmsg+0x1bb/0x2a0 [ 240.528796][ T7570] ? __x64_sys_sendmsg+0x80/0x80 [ 240.533781][ T7570] ? lockdep_hardirqs_on+0x94/0x140 [ 240.538999][ T7570] do_syscall_64+0x4c/0xa0 [ 240.543422][ T7570] ? clear_bhb_loop+0x60/0xb0 [ 240.548192][ T7570] ? clear_bhb_loop+0x60/0xb0 [ 240.552902][ T7570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.558815][ T7570] RIP: 0033:0x7f4d3ef9ce59 [ 240.563326][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.583035][ T7570] RSP: 002b:00007f4d3fda1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.591449][ T7570] RAX: ffffffffffffffda RBX: 00007f4d3f215fa0 RCX: 00007f4d3ef9ce59 [ 240.599414][ T7570] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 240.607678][ T7570] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.615678][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.624180][ T7570] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 240.632171][ T7570] [ 241.028294][ T7587] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 241.044512][ T7585] netlink: 'syz.2.1074': attribute type 10 has an invalid length. [ 241.332586][ T7596] netlink: 'syz.3.1078': attribute type 21 has an invalid length. [ 241.377413][ T7596] netlink: 'syz.3.1078': attribute type 3 has an invalid length. [ 241.388565][ T7596] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1078'. [ 242.054767][ T7614] delete_channel: no stack [ 242.324420][ T7628] FAULT_INJECTION: forcing a failure. [ 242.324420][ T7628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.379081][ T7628] CPU: 1 PID: 7628 Comm: syz.2.1091 Not tainted syzkaller #0 [ 242.386528][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.396637][ T7628] Call Trace: [ 242.399935][ T7628] [ 242.402888][ T7628] dump_stack_lvl+0x188/0x24e [ 242.407670][ T7628] ? show_regs_print_info+0x12/0x12 [ 242.412924][ T7628] ? load_image+0x400/0x400 [ 242.417467][ T7628] ? __lock_acquire+0x7d10/0x7d10 [ 242.422583][ T7628] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 242.428873][ T7628] should_fail_ex+0x399/0x4d0 [ 242.433582][ T7628] _copy_from_user+0x2c/0x170 [ 242.438390][ T7628] __sys_bpf+0x2ea/0x780 [ 242.442670][ T7628] ? bpf_link_show_fdinfo+0x380/0x380 [ 242.448170][ T7628] ? lock_chain_count+0x20/0x20 [ 242.453057][ T7628] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 242.459170][ T7628] __x64_sys_bpf+0x78/0x90 [ 242.463640][ T7628] do_syscall_64+0x4c/0xa0 [ 242.468080][ T7628] ? clear_bhb_loop+0x60/0xb0 [ 242.472899][ T7628] ? clear_bhb_loop+0x60/0xb0 [ 242.477710][ T7628] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.483631][ T7628] RIP: 0033:0x7f4d3ef9ce59 [ 242.488080][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.507797][ T7628] RSP: 002b:00007f4d3fda1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.516242][ T7628] RAX: ffffffffffffffda RBX: 00007f4d3f215fa0 RCX: 00007f4d3ef9ce59 [ 242.524233][ T7628] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 242.532208][ T7628] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 242.540172][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.548136][ T7628] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 242.556117][ T7628] [ 243.270503][ T7650] netlink: 'syz.2.1099': attribute type 21 has an invalid length. [ 243.510142][ T7657] netlink: 'syz.0.1098': attribute type 2 has an invalid length. [ 244.080288][ T7668] netlink: 'syz.2.1104': attribute type 25 has an invalid length. [ 244.222259][ T7670] netlink: 'syz.4.1105': attribute type 2 has an invalid length. [ 244.259137][ T7670] netlink: 'syz.4.1105': attribute type 8 has an invalid length. [ 244.267243][ T7670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1105'. [ 244.382729][ T7670] netlink: 'syz.4.1105': attribute type 2 has an invalid length. [ 244.399750][ T7670] netlink: 'syz.4.1105': attribute type 8 has an invalid length. [ 244.439651][ T7670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1105'. [ 247.140548][ T7726] netlink: 'syz.3.1123': attribute type 2 has an invalid length. [ 247.168578][ T7726] netlink: 'syz.3.1123': attribute type 8 has an invalid length. [ 247.249932][ T7726] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1123'. [ 247.324880][ T7728] netlink: 'syz.3.1123': attribute type 2 has an invalid length. [ 247.389060][ T7728] netlink: 'syz.3.1123': attribute type 8 has an invalid length. [ 247.419548][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1123'. [ 248.069519][ T7751] FAULT_INJECTION: forcing a failure. [ 248.069519][ T7751] name failslab, interval 1, probability 0, space 0, times 0 [ 248.239009][ T7751] CPU: 0 PID: 7751 Comm: syz.3.1136 Not tainted syzkaller #0 [ 248.246450][ T7751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.256539][ T7751] Call Trace: [ 248.259840][ T7751] [ 248.262788][ T7751] dump_stack_lvl+0x188/0x24e [ 248.267510][ T7751] ? show_regs_print_info+0x12/0x12 [ 248.272733][ T7751] ? load_image+0x400/0x400 [ 248.277246][ T7751] should_fail_ex+0x399/0x4d0 [ 248.281934][ T7751] should_failslab+0x5/0x20 [ 248.286533][ T7751] slab_pre_alloc_hook+0x59/0x310 [ 248.291724][ T7751] ? verify_lock_unused+0x140/0x140 [ 248.296931][ T7751] kmem_cache_alloc+0x56/0x2f0 [ 248.301689][ T7751] ? skb_clone+0x1e7/0x370 [ 248.306111][ T7751] skb_clone+0x1e7/0x370 [ 248.310357][ T7751] bpf_clone_redirect+0x163/0x4a0 [ 248.315386][ T7751] bpf_prog_208b094576c80b22+0x56/0x5b [ 248.320846][ T7751] ? __kprobes_text_end+0x7bbb0/0x7bbb0 [ 248.326385][ T7751] ? lockdep_hardirqs_on+0x94/0x140 [ 248.331580][ T7751] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 248.337730][ T7751] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 248.343974][ T7751] ? seqcount_lockdep_reader_access+0x196/0x1d0 [ 248.350229][ T7751] ? ktime_get_real_ts64+0x440/0x440 [ 248.355595][ T7751] ? read_lock_is_recursive+0x10/0x10 [ 248.360965][ T7751] ? __cant_sleep+0x220/0x220 [ 248.365642][ T7751] ? ktime_get+0x247/0x270 [ 248.370066][ T7751] bpf_test_run+0x2b6/0x830 [ 248.374577][ T7751] ? convert___skb_to_skb+0x580/0x580 [ 248.379943][ T7751] ? eth_get_headlen+0x200/0x200 [ 248.384872][ T7751] ? __build_skb+0x257/0x3c0 [ 248.389463][ T7751] ? convert___skb_to_skb+0x3d/0x580 [ 248.394743][ T7751] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 248.400235][ T7751] ? cpu_online+0xa0/0xa0 [ 248.404565][ T7751] bpf_prog_test_run+0x31e/0x390 [ 248.409592][ T7751] __sys_bpf+0x62b/0x780 [ 248.413836][ T7751] ? bpf_link_show_fdinfo+0x380/0x380 [ 248.419243][ T7751] ? lock_chain_count+0x20/0x20 [ 248.424121][ T7751] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 248.430192][ T7751] __x64_sys_bpf+0x78/0x90 [ 248.434720][ T7751] do_syscall_64+0x4c/0xa0 [ 248.439160][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 248.443850][ T7751] ? clear_bhb_loop+0x60/0xb0 [ 248.448542][ T7751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.454450][ T7751] RIP: 0033:0x7f505399ce59 [ 248.458861][ T7751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.478659][ T7751] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.487157][ T7751] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 248.495230][ T7751] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 248.503384][ T7751] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.511389][ T7751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.519365][ T7751] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 248.527462][ T7751] [ 250.086334][ T7770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1142'. [ 250.139689][ T7776] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 253.337980][ T7794] netlink: 'syz.0.1151': attribute type 2 has an invalid length. [ 253.348940][ T7794] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 253.357074][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1151'. [ 253.662066][ T7802] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 253.717172][ T7802] netlink: 'syz.3.1152': attribute type 10 has an invalid length. [ 253.745796][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1152'. [ 253.776752][ T7802] bridge0: port 3(team0) entered blocking state [ 253.796782][ T7802] bridge0: port 3(team0) entered disabled state [ 253.808775][ T7802] device team0 entered promiscuous mode [ 253.847409][ T7802] device team_slave_0 entered promiscuous mode [ 253.854281][ T7802] device team_slave_1 entered promiscuous mode [ 253.899963][ T7802] device netdevsim0 entered promiscuous mode [ 253.919559][ T7802] bridge0: port 3(team0) entered blocking state [ 253.926050][ T7802] bridge0: port 3(team0) entered forwarding state [ 254.763667][ T7826] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1173'. [ 255.069007][ T7839] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 255.108531][ T7837] device bond_slave_1 entered promiscuous mode [ 255.381798][ T7843] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1180'. [ 255.896097][ T7863] delete_channel: no stack [ 255.919100][ T7868] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 256.109066][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115533][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.348827][ T7884] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 256.356676][ T7884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1182'. [ 256.431130][ T7876] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1183'. [ 256.642701][ T7888] syz.1.1185[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.642842][ T7888] syz.1.1185[7888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.119867][ T7903] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 258.472461][ T7930] netlink: 'syz.4.1199': attribute type 2 has an invalid length. [ 258.693594][ T7930] device 0 entered promiscuous mode [ 258.739295][ T7943] netlink: 'syz.3.1200': attribute type 2 has an invalid length. [ 258.763076][ T7943] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1200'. [ 259.591832][ T7963] netlink: 'syz.2.1208': attribute type 2 has an invalid length. [ 259.662426][ T7963] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 259.701204][ T7963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.782112][ T7963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.863591][ T7963] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 259.972428][ T7969] device bond_slave_1 entered promiscuous mode [ 260.299217][ T7975] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 260.340095][ T7975] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1210'. [ 260.376607][ T7975] device hsr0 entered promiscuous mode [ 260.422573][ T7975] bridge0: port 2(hsr0) entered blocking state [ 260.483496][ T7975] bridge0: port 2(hsr0) entered disabled state [ 260.578394][ T7975] bridge0: port 2(hsr0) entered blocking state [ 260.587014][ T7975] bridge0: port 2(hsr0) entered forwarding state [ 260.765356][ T7982] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.811948][ T7982] device syzkaller0 entered promiscuous mode [ 261.005581][ T7988] netlink: 'syz.3.1217': attribute type 2 has an invalid length. [ 261.243419][ T7988] device 0 entered promiscuous mode [ 261.394436][ T7995] netlink: 'syz.4.1218': attribute type 2 has an invalid length. [ 261.549071][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1218'. [ 262.330271][ T8013] netlink: 'syz.4.1224': attribute type 2 has an invalid length. [ 262.435217][ T8013] netlink: 'syz.4.1224': attribute type 10 has an invalid length. [ 262.464711][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.683800][ T8013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.854547][ T8013] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 263.144723][ T8013] syz.4.1224 (8013) used greatest stack depth: 20248 bytes left [ 263.174593][ T8028] device syzkaller0 entered promiscuous mode [ 263.682243][ T8036] netlink: 'syz.4.1231': attribute type 10 has an invalid length. [ 263.848412][ T8036] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1231'. [ 263.901485][ T8036] device hsr0 entered promiscuous mode [ 263.937010][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.986823][ T8036] bridge0: port 5(hsr0) entered blocking state [ 264.015955][ T8036] bridge0: port 5(hsr0) entered disabled state [ 264.087138][ T8036] bridge0: port 5(hsr0) entered blocking state [ 264.094222][ T8036] bridge0: port 5(hsr0) entered forwarding state [ 264.278451][ T8047] netlink: 'syz.1.1233': attribute type 2 has an invalid length. [ 264.302473][ T8036] syz.4.1231 (8036) used greatest stack depth: 19184 bytes left [ 264.401655][ T8041] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1234'. [ 264.435615][ T8050] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 264.558790][ T8050] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1234'. [ 264.595630][ T8047] device 0 entered promiscuous mode [ 264.698164][ T8052] netlink: 'syz.4.1235': attribute type 10 has an invalid length. [ 265.009331][ T8057] syz.4.1236[8057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.017715][ T8057] syz.4.1236[8057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.135701][ T8060] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 265.271593][ T8060] device netdevsim0 left promiscuous mode [ 265.304589][ T8067] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1239'. [ 265.348204][ T8060] team0: Port device netdevsim0 removed [ 265.372260][ T8060] batman_adv: batadv0: Adding interface: netdevsim0 [ 265.403099][ T8060] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.456045][ T8060] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 265.515275][ T8066] device sit0 entered promiscuous mode [ 265.645866][ T8067] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 265.866203][ T8076] netlink: 'syz.1.1242': attribute type 10 has an invalid length. [ 265.991039][ T8076] device netdevsim0 entered promiscuous mode [ 266.030230][ T8076] team0: Port device netdevsim0 added [ 266.375406][ T8084] device syzkaller0 entered promiscuous mode [ 266.690358][ T8096] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1250'. [ 266.838786][ T8099] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 266.847114][ T8099] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1250'. [ 268.095043][ T8109] delete_channel: no stack [ 269.946014][ T8108] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 269.965034][ T8108] device netdevsim0 left promiscuous mode [ 269.974639][ T8108] team0: Port device netdevsim0 removed [ 269.981283][ T8108] batman_adv: batadv0: Adding interface: netdevsim0 [ 269.988044][ T8108] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.015516][ T8108] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 270.039757][ T8110] netlink: 'syz.4.1254': attribute type 10 has an invalid length. [ 270.288355][ T8132] netlink: 'syz.2.1268': attribute type 10 has an invalid length. [ 270.558166][ T8127] device sit0 entered promiscuous mode [ 271.265674][ T8159] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 271.447682][ T8161] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 271.483305][ T8161] syzkaller0: linktype set to 776 [ 271.592032][ T8168] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 271.905270][ T8178] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 272.530413][ T8198] €: renamed from virt_wifi0 [ 272.555596][ T8198] netlink: 'syz.4.1284': attribute type 10 has an invalid length. [ 272.824329][ T8201] netlink: 'syz.2.1286': attribute type 28 has an invalid length. [ 273.203425][ T8216] netlink: 'syz.4.1289': attribute type 10 has an invalid length. [ 274.117593][ T8236] netlink: 'syz.2.1295': attribute type 10 has an invalid length. [ 275.229739][ T8260] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 275.253115][ T8260] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1302'. [ 275.482051][ T8265] netlink: 'syz.4.1304': attribute type 10 has an invalid length. [ 275.537998][ T8269] FAULT_INJECTION: forcing a failure. [ 275.537998][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.608406][ T8269] CPU: 0 PID: 8269 Comm: syz.3.1305 Not tainted syzkaller #0 [ 275.615948][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.626126][ T8269] Call Trace: [ 275.629433][ T8269] [ 275.632376][ T8269] dump_stack_lvl+0x188/0x24e [ 275.637100][ T8269] ? show_regs_print_info+0x12/0x12 [ 275.642513][ T8269] ? load_image+0x400/0x400 [ 275.647064][ T8269] ? __lock_acquire+0x7d10/0x7d10 [ 275.652141][ T8269] should_fail_ex+0x399/0x4d0 [ 275.656859][ T8269] _copy_from_user+0x2c/0x170 [ 275.661686][ T8269] iovec_from_user+0x143/0x360 [ 275.666496][ T8269] __import_iovec+0x6d/0x500 [ 275.671137][ T8269] import_iovec+0x6f/0xa0 [ 275.675521][ T8269] ___sys_sendmsg+0x252/0x360 [ 275.680251][ T8269] ? __sys_sendmsg+0x290/0x290 [ 275.685260][ T8269] ? trace_call_bpf+0xbf/0x6b0 [ 275.690105][ T8269] __se_sys_sendmsg+0x1bb/0x2a0 [ 275.694998][ T8269] ? ct_nmi_exit+0x145/0x1c0 [ 275.699625][ T8269] ? __x64_sys_sendmsg+0x80/0x80 [ 275.704631][ T8269] ? lockdep_hardirqs_on+0x94/0x140 [ 275.709877][ T8269] do_syscall_64+0x4c/0xa0 [ 275.714485][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 275.719456][ T8269] ? clear_bhb_loop+0x60/0xb0 [ 275.724160][ T8269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.730093][ T8269] RIP: 0033:0x7f505399ce59 [ 275.734543][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.754184][ T8269] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.762721][ T8269] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 275.770846][ T8269] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 275.779215][ T8269] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 275.787226][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.795245][ T8269] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 275.803269][ T8269] [ 276.655676][ T8280] netlink: 'syz.4.1310': attribute type 10 has an invalid length. [ 276.702545][ T8294] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1314'. [ 276.742230][ T8294] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 276.783176][ T8294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.040152][ T8302] netlink: 'syz.4.1317': attribute type 10 has an invalid length. [ 278.320911][ T8319] netlink: 'syz.3.1322': attribute type 10 has an invalid length. [ 278.419178][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1322'. [ 281.650697][ T8332] netlink: 'syz.3.1328': attribute type 5 has an invalid length. [ 282.561339][ T8347] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 283.181127][ T8361] netlink: 'syz.3.1336': attribute type 39 has an invalid length. [ 283.265428][ T8361] netlink: 'syz.3.1336': attribute type 25 has an invalid length. [ 283.357260][ T8364] netlink: 'syz.2.1337': attribute type 39 has an invalid length. [ 283.384542][ T8368] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 283.436886][ T8364] netlink: 'syz.2.1337': attribute type 25 has an invalid length. [ 283.466811][ T8368] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1338'. [ 283.497613][ T8369] bridge0: port 5(hsr0) entered disabled state [ 283.612345][ T8369] bridge0: port 4(team0) entered disabled state [ 283.743069][ T8369] device batadv0 left promiscuous mode [ 283.818979][ T8369] bridge0: port 3(batadv0) entered disabled state [ 283.887458][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.946743][ T8369] device bridge_slave_0 left promiscuous mode [ 283.973388][ T8380] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1341'. [ 283.985311][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.197006][ T8378] netlink: 'syz.1.1342': attribute type 10 has an invalid length. [ 284.225685][ T8378] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 284.270057][ T8380] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 284.317136][ T8380] CPU: 1 PID: 8380 Comm: syz.3.1341 Not tainted syzkaller #0 [ 284.324597][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.334688][ T8380] Call Trace: [ 284.337996][ T8380] [ 284.340965][ T8380] dump_stack_lvl+0x188/0x24e [ 284.345683][ T8380] ? show_regs_print_info+0x12/0x12 [ 284.351111][ T8380] ? load_image+0x400/0x400 [ 284.355674][ T8380] sysfs_warn_dup+0x8a/0xa0 [ 284.360215][ T8380] sysfs_do_create_link_sd+0xc0/0x110 [ 284.365633][ T8380] device_add+0x7ed/0xfb0 [ 284.370009][ T8380] wiphy_register+0x1d9f/0x2ac0 [ 284.375018][ T8380] ? cfg80211_event_work+0x40/0x40 [ 284.380177][ T8380] ? minstrel_ht_alloc+0x894/0xa20 [ 284.385335][ T8380] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 284.391442][ T8380] ieee80211_register_hw+0x2d00/0x39f0 [ 284.396952][ T8380] ? ieee80211_register_hw+0xe71/0x39f0 [ 284.402535][ T8380] ? ieee80211_register_hw+0xe71/0x39f0 [ 284.408144][ T8380] ? ieee80211_tasklet_handler+0x20/0x20 [ 284.413845][ T8380] ? memset+0x1e/0x40 [ 284.417869][ T8380] ? __hrtimer_init+0x186/0x270 [ 284.422767][ T8380] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 284.428574][ T8380] hwsim_new_radio_nl+0xafa/0xce0 [ 284.433755][ T8380] genl_family_rcv_msg_doit+0x22a/0x330 [ 284.439337][ T8380] ? end_current_label_crit_section+0x170/0x170 [ 284.445619][ T8380] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 284.451556][ T8380] ? bpf_lsm_capable+0x5/0x10 [ 284.456365][ T8380] ? security_capable+0x85/0xb0 [ 284.461268][ T8380] genl_rcv_msg+0x604/0x790 [ 284.465815][ T8380] ? genl_bind+0x360/0x360 [ 284.470367][ T8380] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 284.476763][ T8380] netlink_rcv_skb+0x1fb/0x450 [ 284.481672][ T8380] ? genl_bind+0x360/0x360 [ 284.486151][ T8380] ? netlink_ack+0x1170/0x1170 [ 284.490977][ T8380] ? down_read+0x1a8/0x2d0 [ 284.495468][ T8380] genl_rcv+0x24/0x40 [ 284.499571][ T8380] netlink_unicast+0x74d/0x8d0 [ 284.504565][ T8380] netlink_sendmsg+0x8ad/0xbd0 [ 284.509555][ T8380] ? netlink_getsockopt+0x550/0x550 [ 284.514789][ T8380] ? aa_sock_msg_perm+0x94/0x150 [ 284.519757][ T8380] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 284.525077][ T8380] ? security_socket_sendmsg+0x7c/0xa0 [ 284.530591][ T8380] ? netlink_getsockopt+0x550/0x550 [ 284.535961][ T8380] ____sys_sendmsg+0x5be/0x970 [ 284.540776][ T8380] ? __sys_sendmsg_sock+0x30/0x30 [ 284.545837][ T8380] ? __import_iovec+0x315/0x500 [ 284.550728][ T8380] ? import_iovec+0x6f/0xa0 [ 284.555273][ T8380] ___sys_sendmsg+0x2a2/0x360 [ 284.559989][ T8380] ? try_to_wake_up+0x67c/0x1080 [ 284.565061][ T8380] ? __sys_sendmsg+0x290/0x290 [ 284.570312][ T8380] __se_sys_sendmsg+0x1bb/0x2a0 [ 284.575207][ T8380] ? __x64_sys_sendmsg+0x80/0x80 [ 284.580206][ T8380] ? lockdep_hardirqs_on+0x94/0x140 [ 284.585440][ T8380] do_syscall_64+0x4c/0xa0 [ 284.589895][ T8380] ? clear_bhb_loop+0x60/0xb0 [ 284.594611][ T8380] ? clear_bhb_loop+0x60/0xb0 [ 284.599321][ T8380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.605334][ T8380] RIP: 0033:0x7f505399ce59 [ 284.609842][ T8380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.629524][ T8380] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.637996][ T8380] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 284.646094][ T8380] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000003 [ 284.654105][ T8380] RBP: 00007f5053a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 284.662122][ T8380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.670138][ T8380] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 284.678167][ T8380] [ 284.724329][ T8383] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1343'. [ 284.805077][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.819101][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.849927][ T8386] batman_adv: batadv0: Removing interface: netdevsim0 [ 285.178202][ T8399] netlink: 'syz.1.1349': attribute type 10 has an invalid length. [ 285.274668][ T8399] device netdevsim0 left promiscuous mode [ 285.324121][ T8399] team0: Port device netdevsim0 removed [ 285.679253][ T4290] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 285.794243][ T8421] netlink: 'syz.1.1358': attribute type 25 has an invalid length. [ 285.807469][ T8421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.856951][ T8421] Illegal XDP return value 2131548480 on prog (id 673) dev N/A, expect packet loss! [ 287.063943][ T8467] FAULT_INJECTION: forcing a failure. [ 287.063943][ T8467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.125408][ T8467] CPU: 1 PID: 8467 Comm: syz.3.1375 Not tainted syzkaller #0 [ 287.132873][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.143062][ T8467] Call Trace: [ 287.146468][ T8467] [ 287.149438][ T8467] dump_stack_lvl+0x188/0x24e [ 287.154199][ T8467] ? show_regs_print_info+0x12/0x12 [ 287.159458][ T8467] ? load_image+0x400/0x400 [ 287.164538][ T8467] ? __lock_acquire+0x7d10/0x7d10 [ 287.169795][ T8467] should_fail_ex+0x399/0x4d0 [ 287.174686][ T8467] _copy_from_user+0x2c/0x170 [ 287.179423][ T8467] __copy_msghdr+0x3b7/0x580 [ 287.184092][ T8467] ___sys_sendmsg+0x210/0x360 [ 287.188899][ T8467] ? __sys_sendmsg+0x290/0x290 [ 287.193730][ T8467] ? trace_call_bpf+0xbf/0x6b0 [ 287.198676][ T8467] __se_sys_sendmsg+0x1bb/0x2a0 [ 287.203596][ T8467] ? __x64_sys_sendmsg+0x80/0x80 [ 287.208635][ T8467] ? lockdep_hardirqs_on+0x94/0x140 [ 287.213884][ T8467] do_syscall_64+0x4c/0xa0 [ 287.219028][ T8467] ? clear_bhb_loop+0x60/0xb0 [ 287.223811][ T8467] ? clear_bhb_loop+0x60/0xb0 [ 287.228509][ T8467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.234427][ T8467] RIP: 0033:0x7f505399ce59 [ 287.238871][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.258687][ T8467] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.267160][ T8467] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 287.275157][ T8467] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000003 [ 287.283141][ T8467] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 287.291128][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.299216][ T8467] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 287.307340][ T8467] [ 287.700200][ T4290] Bluetooth: hci1: command 0x2016 tx timeout [ 287.809200][ T8471] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 288.798224][ T8489] validate_nla: 2 callbacks suppressed [ 288.798248][ T8489] netlink: 'syz.4.1382': attribute type 3 has an invalid length. [ 288.849656][ T8489] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1382'. [ 289.060329][ T8491] netlink: 'syz.3.1383': attribute type 2 has an invalid length. [ 289.108974][ T8491] netlink: 'syz.3.1383': attribute type 8 has an invalid length. [ 289.117346][ T8491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1383'. [ 289.416436][ T8495] netlink: 'syz.1.1385': attribute type 21 has an invalid length. [ 289.537564][ T8495] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1385'. [ 289.707748][ T8497] netlink: 'syz.4.1386': attribute type 10 has an invalid length. [ 289.816606][ T8501] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1388'. [ 289.865095][ T8499] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1388'. [ 290.693018][ T8516] delete_channel: no stack [ 291.150213][ T8530] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 291.214725][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1397'. [ 291.250860][ T8530] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 291.321825][ T8529] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1395'. [ 291.375977][ T8529] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1395'. [ 292.987608][ T8551] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 293.438861][ T8558] FAULT_INJECTION: forcing a failure. [ 293.438861][ T8558] name failslab, interval 1, probability 0, space 0, times 0 [ 293.488774][ T8558] CPU: 0 PID: 8558 Comm: syz.0.1405 Not tainted syzkaller #0 [ 293.496250][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.506372][ T8558] Call Trace: [ 293.509690][ T8558] [ 293.512656][ T8558] dump_stack_lvl+0x188/0x24e [ 293.517424][ T8558] ? sctp_sendmsg+0x15b0/0x2940 [ 293.522362][ T8558] ? ___sys_sendmsg+0x2a2/0x360 [ 293.527383][ T8558] ? show_regs_print_info+0x12/0x12 [ 293.532658][ T8558] ? load_image+0x400/0x400 [ 293.537304][ T8558] should_fail_ex+0x399/0x4d0 [ 293.542068][ T8558] should_failslab+0x5/0x20 [ 293.546637][ T8558] slab_pre_alloc_hook+0x59/0x310 [ 293.551734][ T8558] ? sctp_add_bind_addr+0x89/0x350 [ 293.556914][ T8558] __kmem_cache_alloc_node+0x4f/0x260 [ 293.562349][ T8558] ? sctp_add_bind_addr+0x89/0x350 [ 293.567589][ T8558] kmalloc_trace+0x26/0xe0 [ 293.572130][ T8558] sctp_add_bind_addr+0x89/0x350 [ 293.577097][ T8558] sctp_copy_local_addr_list+0x311/0x4e0 [ 293.582936][ T8558] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 293.588687][ T8558] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 293.594872][ T8558] ? sctp_v4_is_any+0x31/0x50 [ 293.599744][ T8558] ? sctp_copy_one_addr+0x93/0x660 [ 293.604893][ T8558] sctp_bind_addr_copy+0xaf/0x3c0 [ 293.609944][ T8558] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 293.616296][ T8558] sctp_connect_new_asoc+0x2f5/0x6a0 [ 293.621615][ T8558] ? __sctp_connect+0xd80/0xd80 [ 293.626561][ T8558] ? __local_bh_enable_ip+0x136/0x1c0 [ 293.631942][ T8558] ? _local_bh_enable+0xa0/0xa0 [ 293.636798][ T8558] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 293.642619][ T8558] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 293.648475][ T8558] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 293.654076][ T8558] ? security_sctp_bind_connect+0x85/0xb0 [ 293.659827][ T8558] sctp_sendmsg+0x15b0/0x2940 [ 293.664533][ T8558] ? trace_event_raw_event_lock+0x250/0x250 [ 293.670473][ T8558] ? aa_sk_perm+0x811/0x950 [ 293.674999][ T8558] ? sctp_getsockopt+0x8a0/0x8a0 [ 293.679958][ T8558] ? __might_fault+0xa6/0x120 [ 293.684645][ T8558] ? aa_af_perm+0x340/0x340 [ 293.689157][ T8558] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 293.695608][ T8558] ? inet_sendmsg+0x78/0x2f0 [ 293.700207][ T8558] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 293.705499][ T8558] ? security_socket_sendmsg+0x7c/0xa0 [ 293.711011][ T8558] ? inet_send_prepare+0x260/0x260 [ 293.716157][ T8558] ____sys_sendmsg+0x5be/0x970 [ 293.720982][ T8558] ? __sys_sendmsg_sock+0x30/0x30 [ 293.726305][ T8558] ? __import_iovec+0x315/0x500 [ 293.731192][ T8558] ? import_iovec+0x6f/0xa0 [ 293.735725][ T8558] ___sys_sendmsg+0x2a2/0x360 [ 293.740437][ T8558] ? __sys_sendmsg+0x290/0x290 [ 293.745258][ T8558] ? __lock_acquire+0x7d10/0x7d10 [ 293.750357][ T8558] __se_sys_sendmsg+0x1bb/0x2a0 [ 293.755315][ T8558] ? __x64_sys_sendmsg+0x80/0x80 [ 293.760311][ T8558] ? lockdep_hardirqs_on+0x94/0x140 [ 293.765540][ T8558] do_syscall_64+0x4c/0xa0 [ 293.769976][ T8558] ? clear_bhb_loop+0x60/0xb0 [ 293.774753][ T8558] ? clear_bhb_loop+0x60/0xb0 [ 293.779487][ T8558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.785410][ T8558] RIP: 0033:0x7f648bd9ce59 [ 293.789922][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.809667][ T8558] RSP: 002b:00007f648cb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.818188][ T8558] RAX: ffffffffffffffda RBX: 00007f648c015fa0 RCX: 00007f648bd9ce59 [ 293.826166][ T8558] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 293.834153][ T8558] RBP: 00007f648cb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.842130][ T8558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 293.850288][ T8558] R13: 00007f648c016038 R14: 00007f648c015fa0 R15: 00007ffdb6007ef8 [ 293.858341][ T8558] [ 294.457701][ T8570] netlink: 'syz.1.1408': attribute type 10 has an invalid length. [ 295.220729][ T8583] FAULT_INJECTION: forcing a failure. [ 295.220729][ T8583] name failslab, interval 1, probability 0, space 0, times 0 [ 295.297263][ T8583] CPU: 0 PID: 8583 Comm: syz.1.1414 Not tainted syzkaller #0 [ 295.304732][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.314830][ T8583] Call Trace: [ 295.318210][ T8583] [ 295.321152][ T8583] dump_stack_lvl+0x188/0x24e [ 295.325854][ T8583] ? show_regs_print_info+0x12/0x12 [ 295.331063][ T8583] ? load_image+0x400/0x400 [ 295.335584][ T8583] ? __lock_acquire+0x7d10/0x7d10 [ 295.340636][ T8583] should_fail_ex+0x399/0x4d0 [ 295.345337][ T8583] should_failslab+0x5/0x20 [ 295.349850][ T8583] slab_pre_alloc_hook+0x59/0x310 [ 295.354890][ T8583] ? bpf_test_init+0x9f/0x140 [ 295.359583][ T8583] __kmem_cache_alloc_node+0x4f/0x260 [ 295.365150][ T8583] ? bpf_test_init+0x9f/0x140 [ 295.369854][ T8583] __kmalloc+0xa0/0x240 [ 295.374029][ T8583] bpf_test_init+0x9f/0x140 [ 295.378549][ T8583] bpf_prog_test_run_xdp+0x484/0xf10 [ 295.383871][ T8583] ? dev_put+0x80/0x80 [ 295.388018][ T8583] ? dev_put+0x80/0x80 [ 295.392108][ T8583] bpf_prog_test_run+0x31e/0x390 [ 295.397157][ T8583] __sys_bpf+0x62b/0x780 [ 295.401420][ T8583] ? bpf_link_show_fdinfo+0x380/0x380 [ 295.406922][ T8583] ? lock_chain_count+0x20/0x20 [ 295.411893][ T8583] __x64_sys_bpf+0x78/0x90 [ 295.416347][ T8583] do_syscall_64+0x4c/0xa0 [ 295.420775][ T8583] ? clear_bhb_loop+0x60/0xb0 [ 295.425461][ T8583] ? clear_bhb_loop+0x60/0xb0 [ 295.430171][ T8583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.436172][ T8583] RIP: 0033:0x7f3a8f79ce59 [ 295.440633][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.460269][ T8583] RSP: 002b:00007f3a90695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.468711][ T8583] RAX: ffffffffffffffda RBX: 00007f3a8fa15fa0 RCX: 00007f3a8f79ce59 [ 295.476776][ T8583] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 295.484839][ T8583] RBP: 00007f3a90695090 R08: 0000000000000000 R09: 0000000000000000 [ 295.492828][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.501013][ T8583] R13: 00007f3a8fa16038 R14: 00007f3a8fa15fa0 R15: 00007fff6e570db8 [ 295.509047][ T8583] [ 295.889709][ T8582] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 297.199356][ T8603] netlink: 'syz.1.1418': attribute type 10 has an invalid length. [ 298.103252][ T8616] netlink: 'syz.4.1423': attribute type 6 has an invalid length. [ 298.134304][ T8616] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1423'. [ 298.225194][ T8621] netlink: 'syz.1.1424': attribute type 25 has an invalid length. [ 298.250826][ T8621] netlink: 'syz.1.1424': attribute type 25 has an invalid length. [ 299.359903][ T8639] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 299.629377][ T8649] netlink: 'syz.0.1434': attribute type 10 has an invalid length. [ 300.435909][ T8668] netlink: 'syz.0.1441': attribute type 2 has an invalid length. [ 300.449140][ T8668] netlink: 'syz.0.1441': attribute type 8 has an invalid length. [ 300.467435][ T8668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1441'. [ 300.513590][ T8668] netlink: 'syz.0.1441': attribute type 2 has an invalid length. [ 300.552303][ T8668] netlink: 'syz.0.1441': attribute type 8 has an invalid length. [ 300.569792][ T8668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1441'. [ 300.600737][ T8674] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1444'. [ 300.632074][ T8681] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 300.669273][ T8681] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1446'. [ 301.046038][ T8696] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 301.354007][ T8692] syz.4.1449 (8692) used greatest stack depth: 15768 bytes left [ 301.710077][ T8708] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 302.007313][ T8716] FAULT_INJECTION: forcing a failure. [ 302.007313][ T8716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.056346][ T8716] CPU: 0 PID: 8716 Comm: syz.3.1459 Not tainted syzkaller #0 [ 302.063831][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.073935][ T8716] Call Trace: [ 302.077264][ T8716] [ 302.080232][ T8716] dump_stack_lvl+0x188/0x24e [ 302.084997][ T8716] ? show_regs_print_info+0x12/0x12 [ 302.090247][ T8716] ? load_image+0x400/0x400 [ 302.094819][ T8716] ? __lock_acquire+0x7d10/0x7d10 [ 302.099893][ T8716] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.105936][ T8716] should_fail_ex+0x399/0x4d0 [ 302.110698][ T8716] _copy_from_user+0x2c/0x170 [ 302.115464][ T8716] tipc_setsockopt+0x261/0x960 [ 302.120318][ T8716] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.126634][ T8716] ? tipc_shutdown+0x560/0x560 [ 302.131465][ T8716] ? security_socket_setsockopt+0x40/0xa0 [ 302.137259][ T8716] ? security_socket_setsockopt+0x7a/0xa0 [ 302.143341][ T8716] ? tipc_shutdown+0x560/0x560 [ 302.148176][ T8716] __sys_setsockopt+0x2bf/0x3d0 [ 302.153105][ T8716] __x64_sys_setsockopt+0xb1/0xc0 [ 302.158209][ T8716] do_syscall_64+0x4c/0xa0 [ 302.162688][ T8716] ? clear_bhb_loop+0x60/0xb0 [ 302.167414][ T8716] ? clear_bhb_loop+0x60/0xb0 [ 302.172151][ T8716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.178186][ T8716] RIP: 0033:0x7f505399ce59 [ 302.182664][ T8716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.202414][ T8716] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 302.211071][ T8716] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 302.219276][ T8716] RDX: 0000000000000082 RSI: 000000000000010f RDI: 0000000000000008 [ 302.227309][ T8716] RBP: 00007f505492d090 R08: 0000000000000043 R09: 0000000000000000 [ 302.235511][ T8716] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 302.243534][ T8716] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 302.251616][ T8716] [ 302.830381][ T8724] netlink: 'syz.0.1462': attribute type 10 has an invalid length. [ 302.943401][ T8730] netlink: 'syz.3.1463': attribute type 25 has an invalid length. [ 304.740256][ T8784] €: renamed from virt_wifi0 [ 304.845020][ T8784] validate_nla: 2 callbacks suppressed [ 304.845053][ T8784] netlink: 'syz.3.1481': attribute type 10 has an invalid length. [ 304.910619][ T8787] netlink: 'syz.0.1482': attribute type 10 has an invalid length. [ 304.944728][ T4290] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 305.721084][ T8816] netlink: 'syz.4.1494': attribute type 10 has an invalid length. [ 305.979456][ T8826] netlink: 'syz.2.1497': attribute type 25 has an invalid length. [ 306.013122][ T8826] netlink: 'syz.2.1497': attribute type 25 has an invalid length. [ 306.375491][ T8843] netlink: 'syz.3.1504': attribute type 3 has an invalid length. [ 306.433930][ T8840] netlink: 'syz.4.1501': attribute type 10 has an invalid length. [ 306.448552][ T8843] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1504'. [ 306.482140][ T8846] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1505'. [ 306.573858][ T8846] device syzkaller0 entered promiscuous mode [ 306.977963][ T8853] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1507'. [ 307.037565][ T8855] tipc: Started in network mode [ 307.057536][ T8855] tipc: Node identity 9215a268, cluster identity 4711 [ 307.078809][ T8855] tipc: Node number set to 2450891368 [ 307.092165][ T8860] FAULT_INJECTION: forcing a failure. [ 307.092165][ T8860] name failslab, interval 1, probability 0, space 0, times 0 [ 307.140436][ T8860] CPU: 1 PID: 8860 Comm: syz.4.1508 Not tainted syzkaller #0 [ 307.147913][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.158023][ T8860] Call Trace: [ 307.161426][ T8860] [ 307.164390][ T8860] dump_stack_lvl+0x188/0x24e [ 307.169117][ T8860] ? show_regs_print_info+0x12/0x12 [ 307.174444][ T8860] ? load_image+0x400/0x400 [ 307.178998][ T8860] ? __might_sleep+0xd0/0xd0 [ 307.183623][ T8860] ? __lock_acquire+0x7d10/0x7d10 [ 307.188800][ T8860] should_fail_ex+0x399/0x4d0 [ 307.193532][ T8860] should_failslab+0x5/0x20 [ 307.198075][ T8860] slab_pre_alloc_hook+0x59/0x310 [ 307.203147][ T8860] ? __get_vm_area_node+0x122/0x330 [ 307.208563][ T8860] __kmem_cache_alloc_node+0x4f/0x260 [ 307.213982][ T8860] ? __get_vm_area_node+0x122/0x330 [ 307.219221][ T8860] kmalloc_node_trace+0x22/0xe0 [ 307.224121][ T8860] __get_vm_area_node+0x122/0x330 [ 307.229198][ T8860] ? __local_bh_enable_ip+0x136/0x1c0 [ 307.234613][ T8860] __vmalloc_node_range+0x357/0x13b0 [ 307.240014][ T8860] ? netlink_sendmsg+0x5ec/0xbd0 [ 307.245002][ T8860] ? netlink_insert+0x1034/0x13c0 [ 307.250080][ T8860] ? free_vm_area+0x50/0x50 [ 307.254646][ T8860] ? netlink_sendmsg+0x5ec/0xbd0 [ 307.259615][ T8860] vmalloc+0x75/0x80 [ 307.263535][ T8860] ? netlink_sendmsg+0x5ec/0xbd0 [ 307.268503][ T8860] netlink_sendmsg+0x5ec/0xbd0 [ 307.273307][ T8860] ? netlink_getsockopt+0x550/0x550 [ 307.278540][ T8860] ? aa_sock_msg_perm+0x94/0x150 [ 307.283502][ T8860] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 307.289015][ T8860] ? security_socket_sendmsg+0x7c/0xa0 [ 307.294516][ T8860] ? netlink_getsockopt+0x550/0x550 [ 307.299752][ T8860] ____sys_sendmsg+0x5be/0x970 [ 307.304588][ T8860] ? __sys_sendmsg_sock+0x30/0x30 [ 307.309652][ T8860] ? __import_iovec+0x315/0x500 [ 307.314729][ T8860] ? import_iovec+0x6f/0xa0 [ 307.319454][ T8860] ___sys_sendmsg+0x2a2/0x360 [ 307.324182][ T8860] ? __sys_sendmsg+0x290/0x290 [ 307.329024][ T8860] ? __lock_acquire+0x7d10/0x7d10 [ 307.334110][ T8860] __se_sys_sendmsg+0x1bb/0x2a0 [ 307.338989][ T8860] ? ct_nmi_exit+0x145/0x1c0 [ 307.343610][ T8860] ? __x64_sys_sendmsg+0x80/0x80 [ 307.349048][ T8860] ? lockdep_hardirqs_on+0x94/0x140 [ 307.354290][ T8860] do_syscall_64+0x4c/0xa0 [ 307.358757][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 307.363471][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 307.368186][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.374116][ T8860] RIP: 0033:0x7f8ff7b9ce59 [ 307.378567][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.398310][ T8860] RSP: 002b:00007f8ff8aa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.407116][ T8860] RAX: ffffffffffffffda RBX: 00007f8ff7e15fa0 RCX: 00007f8ff7b9ce59 [ 307.415134][ T8860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 307.423145][ T8860] RBP: 00007f8ff8aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 307.431240][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.439348][ T8860] R13: 00007f8ff7e16038 R14: 00007f8ff7e15fa0 R15: 00007ffe75eb2998 [ 307.447379][ T8860] [ 307.573054][ T8860] syz.4.1508: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 307.648792][ T8860] CPU: 1 PID: 8860 Comm: syz.4.1508 Not tainted syzkaller #0 [ 307.656241][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.666340][ T8860] Call Trace: [ 307.669625][ T8860] [ 307.672551][ T8860] dump_stack_lvl+0x188/0x24e [ 307.677766][ T8860] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 307.684219][ T8860] ? show_regs_print_info+0x12/0x12 [ 307.689619][ T8860] ? load_image+0x400/0x400 [ 307.694133][ T8860] ? __rcu_read_unlock+0x78/0xd0 [ 307.699083][ T8860] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 307.705530][ T8860] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 307.712046][ T8860] warn_alloc+0x242/0x330 [ 307.716421][ T8860] ? __get_vm_area_node+0x122/0x330 [ 307.721703][ T8860] ? zone_watermark_ok_safe+0x270/0x270 [ 307.727289][ T8860] ? rcu_is_watching+0x11/0xa0 [ 307.732271][ T8860] ? __get_vm_area_node+0x318/0x330 [ 307.737491][ T8860] ? __local_bh_enable_ip+0x136/0x1c0 [ 307.742908][ T8860] __vmalloc_node_range+0x37c/0x13b0 [ 307.748289][ T8860] ? netlink_insert+0x1034/0x13c0 [ 307.753326][ T8860] ? free_vm_area+0x50/0x50 [ 307.758010][ T8860] ? netlink_sendmsg+0x5ec/0xbd0 [ 307.763044][ T8860] vmalloc+0x75/0x80 [ 307.766938][ T8860] ? netlink_sendmsg+0x5ec/0xbd0 [ 307.771993][ T8860] netlink_sendmsg+0x5ec/0xbd0 [ 307.776879][ T8860] ? netlink_getsockopt+0x550/0x550 [ 307.782101][ T8860] ? aa_sock_msg_perm+0x94/0x150 [ 307.787064][ T8860] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 307.792347][ T8860] ? security_socket_sendmsg+0x7c/0xa0 [ 307.797896][ T8860] ? netlink_getsockopt+0x550/0x550 [ 307.803191][ T8860] ____sys_sendmsg+0x5be/0x970 [ 307.808058][ T8860] ? __sys_sendmsg_sock+0x30/0x30 [ 307.813255][ T8860] ? __import_iovec+0x315/0x500 [ 307.818105][ T8860] ? import_iovec+0x6f/0xa0 [ 307.822599][ T8860] ___sys_sendmsg+0x2a2/0x360 [ 307.827279][ T8860] ? __sys_sendmsg+0x290/0x290 [ 307.832050][ T8860] ? __lock_acquire+0x7d10/0x7d10 [ 307.837096][ T8860] __se_sys_sendmsg+0x1bb/0x2a0 [ 307.841945][ T8860] ? ct_nmi_exit+0x145/0x1c0 [ 307.846559][ T8860] ? __x64_sys_sendmsg+0x80/0x80 [ 307.851526][ T8860] ? lockdep_hardirqs_on+0x94/0x140 [ 307.856742][ T8860] do_syscall_64+0x4c/0xa0 [ 307.861192][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 307.865978][ T8860] ? clear_bhb_loop+0x60/0xb0 [ 307.870676][ T8860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.876569][ T8860] RIP: 0033:0x7f8ff7b9ce59 [ 307.880992][ T8860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.900609][ T8860] RSP: 002b:00007f8ff8aa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.909021][ T8860] RAX: ffffffffffffffda RBX: 00007f8ff7e15fa0 RCX: 00007f8ff7b9ce59 [ 307.916985][ T8860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 307.924949][ T8860] RBP: 00007f8ff8aa2090 R08: 0000000000000000 R09: 0000000000000000 [ 307.932918][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.940970][ T8860] R13: 00007f8ff7e16038 R14: 00007f8ff7e15fa0 R15: 00007ffe75eb2998 [ 307.948948][ T8860] [ 307.965278][ T8867] netlink: 'syz.3.1512': attribute type 2 has an invalid length. [ 307.974909][ T8867] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1512'. [ 307.990746][ T8860] Mem-Info: [ 307.994007][ T8860] active_anon:19981 inactive_anon:0 isolated_anon:0 [ 307.994007][ T8860] active_file:21428 inactive_file:40045 isolated_file:0 [ 307.994007][ T8860] unevictable:768 dirty:114 writeback:25 [ 307.994007][ T8860] slab_reclaimable:21280 slab_unreclaimable:96437 [ 307.994007][ T8860] mapped:39967 shmem:15589 pagetables:631 [ 307.994007][ T8860] sec_pagetables:0 bounce:0 [ 307.994007][ T8860] kernel_misc_reclaimable:0 [ 307.994007][ T8860] free:1296118 free_pcp:11624 free_cma:0 [ 308.048510][ T8860] Node 0 active_anon:82524kB inactive_anon:0kB active_file:85712kB inactive_file:159980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159868kB dirty:456kB writeback:100kB shmem:63520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10984kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no [ 308.086522][ T8860] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 308.120802][ T8860] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.152707][ T8860] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 308.168712][ T8860] Node 0 DMA32 free:1269904kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:85624kB inactive_anon:0kB active_file:85712kB inactive_file:159980kB unevictable:1536kB writepending:556kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:35940kB local_pcp:17712kB free_cma:0kB [ 308.244564][ T8860] lowmem_reserve[]: 0 0 1 1 1 [ 308.249682][ T8860] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.363389][ T8876] netlink: 'syz.0.1514': attribute type 25 has an invalid length. [ 308.372102][ T8860] lowmem_reserve[]: 0 0 0 0 0 [ 308.377027][ T8876] netlink: 'syz.0.1514': attribute type 25 has an invalid length. [ 308.390815][ T8860] Node 1 Normal free:3894172kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21392kB local_pcp:15024kB free_cma:0kB [ 308.430440][ T8860] lowmem_reserve[]: 0 0 0 0 0 [ 308.445490][ T8860] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.492239][ T8860] Node 0 DMA32: 1*4kB (E) 3*8kB (UME) 2*16kB (UE) 114*32kB (UME) 640*64kB (UME) 239*128kB (UME) 122*256kB (UME) 47*512kB (M) 18*1024kB (UME) 5*2048kB (UME) 270*4096kB (UM) = 1265148kB [ 308.558761][ T8860] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.622175][ T8860] Node 1 Normal: 225*4kB (UE) 21*8kB (UE) 29*16kB (UME) 25*32kB (UME) 14*64kB (UME) 10*128kB (UME) 6*256kB (UME) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3894172kB [ 308.706234][ T8860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.729533][ T8860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.752988][ T8860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.777776][ T8860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.801594][ T8860] 79754 total pagecache pages [ 308.815422][ T8860] 0 pages in swap cache [ 308.824445][ T8860] Free swap = 124996kB [ 308.851052][ T8860] Total swap = 124996kB [ 308.876913][ T8860] 2097051 pages RAM [ 308.902016][ T8860] 0 pages HighMem/MovableOnly [ 308.947647][ T8860] 415209 pages reserved [ 308.976744][ T8860] 0 pages cma reserved [ 311.456061][ T8899] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1519'. [ 311.480305][ T8898] validate_nla: 1 callbacks suppressed [ 311.480326][ T8898] netlink: 'syz.0.1519': attribute type 29 has an invalid length. [ 311.537424][ T5034] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller1: link becomes ready [ 311.567146][ T8898] netlink: 'syz.0.1519': attribute type 29 has an invalid length. [ 311.590216][ T8903] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.619104][ T8903] syzkaller1: Linktype set failed because interface is up [ 311.713016][ T8908] netlink: 'syz.3.1524': attribute type 27 has an invalid length. [ 312.102668][ T8908] bond0: (slave bond_slave_0): Releasing backup interface [ 312.381342][ T8926] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1531'. [ 315.321762][ T8928] netlink: 'syz.4.1531': attribute type 2 has an invalid length. [ 315.344115][ T8928] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1531'. [ 315.478742][ T8929] netlink: 'syz.4.1531': attribute type 2 has an invalid length. [ 315.486734][ T8929] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1531'. [ 315.562036][ T8935] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 317.019647][ T8971] netlink: 'syz.3.1546': attribute type 39 has an invalid length. [ 317.048360][ T8971] netlink: 'syz.3.1546': attribute type 25 has an invalid length. [ 317.240852][ T8976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1547'. [ 317.361921][ T8980] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 317.549301][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.555713][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661497][ T8982] netlink: 'syz.0.1549': attribute type 10 has an invalid length. [ 317.889081][ T8996] netlink: 'syz.3.1553': attribute type 10 has an invalid length. [ 317.950637][ T8996] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 319.533247][ T9021] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 319.608159][ T9021] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1561'. [ 321.398364][ T9042] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 322.557701][ T9068] FAULT_INJECTION: forcing a failure. [ 322.557701][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 322.621840][ T9068] CPU: 0 PID: 9068 Comm: syz.3.1575 Not tainted syzkaller #0 [ 322.629303][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.639373][ T9068] Call Trace: [ 322.642668][ T9068] [ 322.645624][ T9068] dump_stack_lvl+0x188/0x24e [ 322.650333][ T9068] ? show_regs_print_info+0x12/0x12 [ 322.655565][ T9068] ? load_image+0x400/0x400 [ 322.660180][ T9068] ? __might_sleep+0xd0/0xd0 [ 322.664783][ T9068] ? __lock_acquire+0x7d10/0x7d10 [ 322.669824][ T9068] ? __lock_acquire+0x12f4/0x7d10 [ 322.674880][ T9068] ? verify_lock_unused+0x140/0x140 [ 322.680112][ T9068] should_fail_ex+0x399/0x4d0 [ 322.684814][ T9068] should_failslab+0x5/0x20 [ 322.689338][ T9068] slab_pre_alloc_hook+0x59/0x310 [ 322.694387][ T9068] kmem_cache_alloc_node+0x5a/0x320 [ 322.699612][ T9068] ? __alloc_skb+0xfc/0x7e0 [ 322.704163][ T9068] __alloc_skb+0xfc/0x7e0 [ 322.708531][ T9068] ? perf_trace_lock_acquire+0x100/0x3e0 [ 322.714287][ T9068] alloc_skb_with_frags+0xa7/0x710 [ 322.719427][ T9068] ? __lock_acquire+0x12f4/0x7d10 [ 322.724484][ T9068] sock_alloc_send_pskb+0x87f/0x9a0 [ 322.729825][ T9068] ? sock_kzfree_s+0x50/0x50 [ 322.734442][ T9068] ? perf_trace_lock_acquire+0x100/0x3e0 [ 322.740098][ T9068] ? dev_get_by_index+0x1e/0x2d0 [ 322.745063][ T9068] ? dev_get_by_index+0x1e/0x2d0 [ 322.750030][ T9068] packet_sendmsg+0x32b0/0x4e60 [ 322.754917][ T9068] ? __might_sleep+0xd0/0xd0 [ 322.759527][ T9068] ? verify_lock_unused+0x140/0x140 [ 322.764747][ T9068] ? perf_trace_lock_acquire+0x100/0x3e0 [ 322.770415][ T9068] ? aa_sk_perm+0x81f/0x950 [ 322.775022][ T9068] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 322.781637][ T9068] ? packet_getsockopt+0x9a0/0x9a0 [ 322.786871][ T9068] ? aa_sock_msg_perm+0x94/0x150 [ 322.791859][ T9068] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 322.797167][ T9068] ? security_socket_sendmsg+0x7c/0xa0 [ 322.802651][ T9068] ? packet_getsockopt+0x9a0/0x9a0 [ 322.807798][ T9068] ____sys_sendmsg+0x5be/0x970 [ 322.812590][ T9068] ? __sys_sendmsg_sock+0x30/0x30 [ 322.817634][ T9068] ? __import_iovec+0x315/0x500 [ 322.822523][ T9068] ? import_iovec+0x6f/0xa0 [ 322.827048][ T9068] ___sys_sendmsg+0x2a2/0x360 [ 322.831968][ T9068] ? __sys_sendmsg+0x290/0x290 [ 322.836796][ T9068] ? __lock_acquire+0x7d10/0x7d10 [ 322.842431][ T9068] __se_sys_sendmsg+0x1bb/0x2a0 [ 322.847358][ T9068] ? __x64_sys_sendmsg+0x80/0x80 [ 322.852372][ T9068] ? lockdep_hardirqs_on+0x94/0x140 [ 322.857601][ T9068] do_syscall_64+0x4c/0xa0 [ 322.862064][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 322.866766][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 322.871909][ T9068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.878541][ T9068] RIP: 0033:0x7f505399ce59 [ 322.883245][ T9068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.902974][ T9068] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.911443][ T9068] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 322.919536][ T9068] RDX: 0000000020048015 RSI: 0000200000000040 RDI: 0000000000000003 [ 322.927547][ T9068] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 322.935742][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.943775][ T9068] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 322.951811][ T9068] [ 325.367651][ T9101] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 325.893070][ T9113] netlink: 'syz.0.1591': attribute type 2 has an invalid length. [ 325.902111][ T9113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1591'. [ 326.825696][ T9126] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1596'. [ 327.097132][ T9134] netlink: 175 bytes leftover after parsing attributes in process `syz.3.1600'. [ 327.188029][ T9136] netlink: 'syz.3.1600': attribute type 10 has an invalid length. [ 327.436334][ T9141] netlink: 'syz.4.1602': attribute type 21 has an invalid length. [ 327.513742][ T9141] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1602'. [ 327.567519][ T9143] netlink: 'syz.2.1601': attribute type 10 has an invalid length. [ 327.818812][ T9154] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1603'. [ 327.904706][ T9150] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1603'. [ 328.925956][ T9174] netlink: 'syz.0.1612': attribute type 10 has an invalid length. [ 329.032614][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1612'. [ 329.100178][ T9174] bridge0: port 4(ipvlan1) entered blocking state [ 329.139255][ T9174] bridge0: port 4(ipvlan1) entered disabled state [ 329.172060][ T9174] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 329.287822][ T9179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 329.341591][ T9173] netlink: 'syz.3.1610': attribute type 2 has an invalid length. [ 329.429188][ T9173] netlink: 'syz.3.1610': attribute type 8 has an invalid length. [ 329.437737][ T9173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1610'. [ 331.721547][ T9203] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 332.394411][ T9215] netlink: 'syz.1.1623': attribute type 6 has an invalid length. [ 333.193431][ T9228] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 333.581692][ T9232] FAULT_INJECTION: forcing a failure. [ 333.581692][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 333.711381][ T9232] CPU: 0 PID: 9232 Comm: syz.0.1627 Not tainted syzkaller #0 [ 333.718871][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.729056][ T9232] Call Trace: [ 333.732371][ T9232] [ 333.735350][ T9232] dump_stack_lvl+0x188/0x24e [ 333.740099][ T9232] ? sctp_sendmsg+0x15b0/0x2940 [ 333.745008][ T9232] ? ___sys_sendmsg+0x2a2/0x360 [ 333.750078][ T9232] ? show_regs_print_info+0x12/0x12 [ 333.755324][ T9232] ? load_image+0x400/0x400 [ 333.759920][ T9232] should_fail_ex+0x399/0x4d0 [ 333.764645][ T9232] should_failslab+0x5/0x20 [ 333.769201][ T9232] slab_pre_alloc_hook+0x59/0x310 [ 333.774287][ T9232] ? sctp_add_bind_addr+0x89/0x350 [ 333.779463][ T9232] __kmem_cache_alloc_node+0x4f/0x260 [ 333.784893][ T9232] ? sctp_add_bind_addr+0x89/0x350 [ 333.790061][ T9232] kmalloc_trace+0x26/0xe0 [ 333.794525][ T9232] sctp_add_bind_addr+0x89/0x350 [ 333.799532][ T9232] sctp_copy_local_addr_list+0x311/0x4e0 [ 333.805303][ T9232] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 333.811147][ T9232] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 333.817263][ T9232] ? sctp_v4_is_any+0x31/0x50 [ 333.822077][ T9232] ? sctp_copy_one_addr+0x93/0x660 [ 333.827237][ T9232] sctp_bind_addr_copy+0xaf/0x3c0 [ 333.832305][ T9232] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 333.838691][ T9232] sctp_connect_new_asoc+0x2f5/0x6a0 [ 333.844106][ T9232] ? __sctp_connect+0xd80/0xd80 [ 333.848988][ T9232] ? __local_bh_enable_ip+0x136/0x1c0 [ 333.854477][ T9232] ? _local_bh_enable+0xa0/0xa0 [ 333.859408][ T9232] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 333.865255][ T9232] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 333.871187][ T9232] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 333.876778][ T9232] ? security_sctp_bind_connect+0x85/0xb0 [ 333.882543][ T9232] sctp_sendmsg+0x15b0/0x2940 [ 333.887270][ T9232] ? trace_event_raw_event_lock+0x250/0x250 [ 333.893234][ T9232] ? aa_sk_perm+0x811/0x950 [ 333.897974][ T9232] ? sctp_getsockopt+0x8a0/0x8a0 [ 333.902967][ T9232] ? __might_fault+0xa6/0x120 [ 333.907680][ T9232] ? aa_af_perm+0x340/0x340 [ 333.912212][ T9232] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 333.918694][ T9232] ? inet_sendmsg+0x78/0x2f0 [ 333.923397][ T9232] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.928707][ T9232] ? security_socket_sendmsg+0x7c/0xa0 [ 333.934478][ T9232] ? inet_send_prepare+0x260/0x260 [ 333.939714][ T9232] ____sys_sendmsg+0x5be/0x970 [ 333.944632][ T9232] ? __sys_sendmsg_sock+0x30/0x30 [ 333.949700][ T9232] ? __import_iovec+0x315/0x500 [ 333.954610][ T9232] ? import_iovec+0x6f/0xa0 [ 333.959173][ T9232] ___sys_sendmsg+0x2a2/0x360 [ 333.963916][ T9232] ? __sys_sendmsg+0x290/0x290 [ 333.968793][ T9232] ? __lock_acquire+0x7d10/0x7d10 [ 333.973944][ T9232] __se_sys_sendmsg+0x1bb/0x2a0 [ 333.978850][ T9232] ? __x64_sys_sendmsg+0x80/0x80 [ 333.983874][ T9232] ? lockdep_hardirqs_on+0x94/0x140 [ 333.989210][ T9232] do_syscall_64+0x4c/0xa0 [ 333.993665][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 333.998443][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 334.003260][ T9232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.009213][ T9232] RIP: 0033:0x7f648bd9ce59 [ 334.013684][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.033340][ T9232] RSP: 002b:00007f648cb8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.041806][ T9232] RAX: ffffffffffffffda RBX: 00007f648c015fa0 RCX: 00007f648bd9ce59 [ 334.049809][ T9232] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 334.057809][ T9232] RBP: 00007f648cb8f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.065908][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.073922][ T9232] R13: 00007f648c016038 R14: 00007f648c015fa0 R15: 00007ffdb6007ef8 [ 334.082028][ T9232] [ 335.807549][ T9255] netlink: 'syz.0.1634': attribute type 10 has an invalid length. [ 338.214599][ T9266] FAULT_INJECTION: forcing a failure. [ 338.214599][ T9266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.268821][ T9266] CPU: 0 PID: 9266 Comm: syz.1.1637 Not tainted syzkaller #0 [ 338.276385][ T9266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.286495][ T9266] Call Trace: [ 338.289803][ T9266] [ 338.292784][ T9266] dump_stack_lvl+0x188/0x24e [ 338.297611][ T9266] ? show_regs_print_info+0x12/0x12 [ 338.302871][ T9266] ? load_image+0x400/0x400 [ 338.307800][ T9266] ? __lock_acquire+0x7d10/0x7d10 [ 338.312910][ T9266] ? __virt_addr_valid+0x188/0x540 [ 338.318100][ T9266] should_fail_ex+0x399/0x4d0 [ 338.322825][ T9266] _copy_from_user+0x2c/0x170 [ 338.327520][ T9266] bpf_test_init+0xde/0x140 [ 338.332139][ T9266] bpf_prog_test_run_xdp+0x484/0xf10 [ 338.337570][ T9266] ? dev_put+0x80/0x80 [ 338.341785][ T9266] ? dev_put+0x80/0x80 [ 338.345879][ T9266] bpf_prog_test_run+0x31e/0x390 [ 338.350929][ T9266] __sys_bpf+0x62b/0x780 [ 338.355188][ T9266] ? bpf_link_show_fdinfo+0x380/0x380 [ 338.360618][ T9266] ? lock_chain_count+0x20/0x20 [ 338.365587][ T9266] __x64_sys_bpf+0x78/0x90 [ 338.370037][ T9266] do_syscall_64+0x4c/0xa0 [ 338.374735][ T9266] ? clear_bhb_loop+0x60/0xb0 [ 338.379527][ T9266] ? clear_bhb_loop+0x60/0xb0 [ 338.384323][ T9266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.390230][ T9266] RIP: 0033:0x7f3a8f79ce59 [ 338.394660][ T9266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.414370][ T9266] RSP: 002b:00007f3a90695028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 338.422796][ T9266] RAX: ffffffffffffffda RBX: 00007f3a8fa15fa0 RCX: 00007f3a8f79ce59 [ 338.430775][ T9266] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 338.438749][ T9266] RBP: 00007f3a90695090 R08: 0000000000000000 R09: 0000000000000000 [ 338.446812][ T9266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.454783][ T9266] R13: 00007f3a8fa16038 R14: 00007f3a8fa15fa0 R15: 00007fff6e570db8 [ 338.462882][ T9266] [ 338.727563][ T9273] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1639'. [ 338.780055][ T9271] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1639'. [ 339.952645][ T9287] netlink: 'syz.1.1643': attribute type 25 has an invalid length. [ 339.978906][ T9287] netlink: 'syz.1.1643': attribute type 25 has an invalid length. [ 340.133688][ T9295] netlink: 'syz.3.1645': attribute type 10 has an invalid length. [ 341.373380][ T9308] netlink: 175 bytes leftover after parsing attributes in process `syz.2.1651'. [ 341.418873][ T9308] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 341.541749][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1652'. [ 341.594356][ T9313] netlink: 'syz.0.1653': attribute type 2 has an invalid length. [ 341.648763][ T9313] netlink: 'syz.0.1653': attribute type 8 has an invalid length. [ 341.708822][ T9313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1653'. [ 341.762372][ T9318] netlink: 'syz.0.1653': attribute type 2 has an invalid length. [ 341.779237][ T9318] netlink: 'syz.0.1653': attribute type 8 has an invalid length. [ 341.809115][ T9318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1653'. [ 342.060008][ T9325] delete_channel: no stack [ 342.268041][ T9333] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 342.324514][ T9331] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1658'. [ 342.399591][ T9331] device veth0_macvtap left promiscuous mode [ 342.702663][ T9340] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1658'. [ 342.831885][ T9354] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 342.850003][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1665'. [ 342.867822][ T9354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1665'. [ 344.197793][ T9386] device 0 entered promiscuous mode [ 344.242398][ T9391] __nla_validate_parse: 1 callbacks suppressed [ 344.242421][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1675'. [ 344.325156][ T9386] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.1675'. [ 344.368219][ T9394] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1678'. [ 344.394800][ T9393] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1678'. [ 344.414271][ T9386] openvswitch: netlink: Key type 386 is out of range max 32 [ 345.145458][ T9408] validate_nla: 7 callbacks suppressed [ 345.145594][ T9408] netlink: 'syz.3.1682': attribute type 3 has an invalid length. [ 345.260534][ T9408] netlink: 'syz.3.1682': attribute type 8 has an invalid length. [ 345.293765][ T9417] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1682'. [ 345.335443][ T9408] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.1682'. [ 345.813319][ T9433] netlink: 'syz.1.1690': attribute type 2 has an invalid length. [ 346.025830][ T9433] netlink: 'syz.1.1690': attribute type 10 has an invalid length. [ 346.078981][ T9433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1690'. [ 346.164145][ T9442] FAULT_INJECTION: forcing a failure. [ 346.164145][ T9442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.279392][ T9442] CPU: 0 PID: 9442 Comm: syz.2.1694 Not tainted syzkaller #0 [ 346.286894][ T9442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.296981][ T9442] Call Trace: [ 346.300275][ T9442] [ 346.303218][ T9442] dump_stack_lvl+0x188/0x24e [ 346.307932][ T9442] ? show_regs_print_info+0x12/0x12 [ 346.313152][ T9442] ? load_image+0x400/0x400 [ 346.317698][ T9442] ? __lock_acquire+0x7d10/0x7d10 [ 346.322747][ T9442] ? snprintf+0xe5/0x140 [ 346.327008][ T9442] should_fail_ex+0x399/0x4d0 [ 346.331720][ T9442] _copy_to_user+0x2c/0x130 [ 346.336261][ T9442] simple_read_from_buffer+0xe3/0x150 [ 346.341660][ T9442] proc_fail_nth_read+0x1a6/0x220 [ 346.346699][ T9442] ? proc_fault_inject_write+0x310/0x310 [ 346.352353][ T9442] ? fsnotify_perm+0x248/0x550 [ 346.357223][ T9442] ? proc_fault_inject_write+0x310/0x310 [ 346.362972][ T9442] vfs_read+0x2de/0xa00 [ 346.367159][ T9442] ? kernel_read+0x1e0/0x1e0 [ 346.371770][ T9442] ? __fget_files+0x28/0x4b0 [ 346.376412][ T9442] ? __fget_files+0x28/0x4b0 [ 346.381048][ T9442] ? __fget_files+0x43d/0x4b0 [ 346.385770][ T9442] ? __fdget_pos+0x2ae/0x360 [ 346.390383][ T9442] ? ksys_read+0x71/0x250 [ 346.394747][ T9442] ksys_read+0x14c/0x250 [ 346.399014][ T9442] ? vfs_write+0xa30/0xa30 [ 346.403450][ T9442] ? lockdep_hardirqs_on+0x94/0x140 [ 346.408692][ T9442] do_syscall_64+0x4c/0xa0 [ 346.413136][ T9442] ? clear_bhb_loop+0x60/0xb0 [ 346.417838][ T9442] ? clear_bhb_loop+0x60/0xb0 [ 346.422541][ T9442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.428457][ T9442] RIP: 0033:0x7f4d3ef5d68e [ 346.432898][ T9442] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.452623][ T9442] RSP: 002b:00007f4d3fda0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.461245][ T9442] RAX: ffffffffffffffda RBX: 00007f4d3fda16c0 RCX: 00007f4d3ef5d68e [ 346.469240][ T9442] RDX: 000000000000000f RSI: 00007f4d3fda10a0 RDI: 0000000000000009 [ 346.477241][ T9442] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 346.485320][ T9442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.493321][ T9442] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 346.501351][ T9442] [ 346.694215][ T9445] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1695'. [ 346.733021][ T9445] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 347.290097][ T9460] netlink: 'syz.0.1701': attribute type 25 has an invalid length. [ 347.322670][ T9460] netlink: 'syz.0.1701': attribute type 25 has an invalid length. [ 347.802679][ T9468] netlink: 'syz.3.1704': attribute type 6 has an invalid length. [ 348.453664][ T9485] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 348.486635][ T9488] netlink: 'syz.2.1708': attribute type 29 has an invalid length. [ 348.561454][ T9488] netlink: 'syz.2.1708': attribute type 29 has an invalid length. [ 348.672894][ T9491] netlink: 'syz.2.1708': attribute type 29 has an invalid length. [ 348.701467][ T9488] netlink: 199740 bytes leftover after parsing attributes in process `syz.2.1708'. [ 350.582949][ T9548] validate_nla: 4 callbacks suppressed [ 350.582967][ T9548] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 351.094098][ T9560] netlink: 'syz.2.1734': attribute type 11 has an invalid length. [ 351.140421][ T9560] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1734'. [ 351.179683][ T9564] netlink: 'syz.3.1735': attribute type 2 has an invalid length. [ 351.187537][ T9564] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1735'. [ 351.356353][ T9567] netlink: 'syz.0.1736': attribute type 10 has an invalid length. [ 351.940478][ T9558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.147550][ T9567] bridge0: port 3(batadv0) entered disabled state [ 352.467980][ T9567] device batadv0 left promiscuous mode [ 352.490636][ T9567] bridge0: port 3(batadv0) entered disabled state [ 352.529328][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.566019][ T9567] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 354.424937][ T9612] tipc: Started in network mode [ 354.444508][ T9612] tipc: Node identity 9215a268, cluster identity 4711 [ 354.468767][ T9612] tipc: Node number set to 2450891368 [ 356.482064][ T9661] tipc: Started in network mode [ 356.542909][ T9661] tipc: Node identity 9215a268, cluster identity 4711 [ 356.622360][ T9661] tipc: Node number set to 2450891368 [ 359.202328][ T9682] netlink: 'syz.2.1769': attribute type 10 has an invalid length. [ 359.218948][ T9682] team0: Device vxcan0 is up. Set it down before adding it as a team port [ 359.385493][ T9686] : port 1(gretap0) entered blocking state [ 359.410897][ T9686] : port 1(gretap0) entered disabled state [ 359.441942][ T9686] device gretap0 entered promiscuous mode [ 362.133327][ T9769] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1797'. [ 362.205980][ T9776] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 362.258211][ T9776] netlink: 'syz.2.1799': attribute type 8 has an invalid length. [ 362.289319][ T9776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1799'. [ 362.876782][ T9791] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 362.988914][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1803'. [ 363.122259][ T9791] device ipvlan1 entered promiscuous mode [ 363.186474][ T9791] bridge0: port 4(ipvlan1) entered blocking state [ 363.234785][ T9791] bridge0: port 4(ipvlan1) entered disabled state [ 363.297958][ T9791] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 363.835644][ T9812] delete_channel: no stack [ 363.930656][ T9817] netlink: 'syz.3.1811': attribute type 2 has an invalid length. [ 363.981621][ T9817] netlink: 'syz.3.1811': attribute type 8 has an invalid length. [ 364.021754][ T9817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1811'. [ 364.242062][ T9828] netlink: 'syz.4.1817': attribute type 21 has an invalid length. [ 364.297759][ T9828] netlink: 883 bytes leftover after parsing attributes in process `syz.4.1817'. [ 364.381823][ T9830] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.1816'. [ 364.382296][ T9835] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 364.498302][ T9835] batman_adv: batadv0: Removing interface: netdevsim0 [ 364.984917][ T9835] device netdevsim0 entered promiscuous mode [ 364.997569][ T9835] team0: Port device netdevsim0 added [ 365.030508][ T9840] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1819'. [ 365.068778][ T9841] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1819'. [ 365.316818][ T9850] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.430159][ T46] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 365.450122][ T46] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 365.835648][ T9864] netlink: 8281 bytes leftover after parsing attributes in process `syz.3.1828'. [ 365.938231][ T9870] netlink: 'syz.2.1830': attribute type 10 has an invalid length. [ 366.028203][ T9868] netlink: 'syz.1.1829': attribute type 21 has an invalid length. [ 366.072281][ T9868] netlink: 883 bytes leftover after parsing attributes in process `syz.1.1829'. [ 366.481187][ T9885] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 366.532397][ T9891] FAULT_INJECTION: forcing a failure. [ 366.532397][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.581302][ T9885] device netdevsim0 left promiscuous mode [ 366.673186][ T9885] team0: Port device netdevsim0 removed [ 366.696689][ T9891] CPU: 1 PID: 9891 Comm: syz.3.1836 Not tainted syzkaller #0 [ 366.700233][ T9885] batman_adv: batadv0: Adding interface: netdevsim0 [ 366.704211][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.704230][ T9891] Call Trace: [ 366.704239][ T9891] [ 366.704246][ T9891] dump_stack_lvl+0x188/0x24e [ 366.704287][ T9891] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.704315][ T9891] ? show_regs_print_info+0x12/0x12 [ 366.704339][ T9891] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.704374][ T9891] should_fail_ex+0x399/0x4d0 [ 366.704400][ T9891] _copy_from_user+0x2c/0x170 [ 366.720346][ T9885] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.721362][ T9891] __sys_bpf+0x2ea/0x780 [ 366.721404][ T9891] ? bpf_link_show_fdinfo+0x380/0x380 [ 366.721444][ T9891] ? lock_chain_count+0x20/0x20 [ 366.721477][ T9891] __x64_sys_bpf+0x78/0x90 [ 366.721502][ T9891] do_syscall_64+0x4c/0xa0 [ 366.725034][ T9885] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 366.727778][ T9891] ? clear_bhb_loop+0x60/0xb0 [ 366.727807][ T9891] ? clear_bhb_loop+0x60/0xb0 [ 366.727831][ T9891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.727853][ T9891] RIP: 0033:0x7f505399ce59 [ 366.727874][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.858085][ T9891] RSP: 002b:00007f505492d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.866589][ T9891] RAX: ffffffffffffffda RBX: 00007f5053c15fa0 RCX: 00007f505399ce59 [ 366.874557][ T9891] RDX: 0000000000000020 RSI: 0000200000000d80 RDI: 0000000000000012 [ 366.882578][ T9891] RBP: 00007f505492d090 R08: 0000000000000000 R09: 0000000000000000 [ 366.890547][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.898613][ T9891] R13: 00007f5053c16038 R14: 00007f5053c15fa0 R15: 00007ffd5318c348 [ 366.906602][ T9891] [ 367.191551][ T9893] netlink: 'syz.3.1836': attribute type 10 has an invalid length. [ 367.236487][ T9893] device netdevsim0 left promiscuous mode [ 369.698344][ T9893] team0: Port device netdevsim0 removed [ 369.719017][ T9897] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1839'. [ 369.810031][ T9903] netlink: 'syz.1.1839': attribute type 10 has an invalid length. [ 369.825090][ T9915] netlink: 'syz.0.1845': attribute type 25 has an invalid length. [ 369.837543][ T9915] netlink: 'syz.0.1845': attribute type 25 has an invalid length. [ 370.449601][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.499788][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.559306][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.602187][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.669310][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.714477][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.746880][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.789354][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 370.858734][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1847'. [ 371.283662][ T9952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.708467][ T9971] netlink: 'syz.4.1864': attribute type 2 has an invalid length. [ 371.809183][ T9973] netlink: 'syz.4.1864': attribute type 10 has an invalid length. [ 371.823630][ T9973] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.131114][ T9994] netlink: 'syz.2.1873': attribute type 21 has an invalid length. [ 375.686328][T10023] __nla_validate_parse: 59 callbacks suppressed [ 375.686352][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1885'. [ 375.749998][T10023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1885'. [ 375.870658][T10023] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.939213][ T5034] bridge0: port 3(team0) entered disabled state [ 375.973617][T10032] netlink: 3850 bytes leftover after parsing attributes in process `syz.1.1888'. [ 376.523814][T10048] netlink: 'syz.1.1894': attribute type 10 has an invalid length. [ 376.638522][T10048] device macvlan0 entered promiscuous mode [ 376.650552][T10048] team0: Port device macvlan0 added [ 376.944193][T10047] delete_channel: no stack [ 377.343473][T10078] netlink: 'syz.4.1900': attribute type 16 has an invalid length. [ 377.405559][T10078] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1900'. [ 377.485880][T10091] netlink: 'syz.2.1904': attribute type 10 has an invalid length. [ 378.355987][T10112] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 378.441330][T10113] netlink: 'syz.2.1912': attribute type 10 has an invalid length. [ 378.535388][T10113] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.543562][T10113] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.766720][T10113] team0: Device bridge0 is already an upper device of the team interface [ 378.981858][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.988316][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.163362][T10125] netlink: 'syz.4.1915': attribute type 3 has an invalid length. [ 379.249254][T10125] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1915'. [ 379.410825][T10132] netlink: 'syz.1.1919': attribute type 2 has an invalid length. [ 379.471560][T10132] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1919'. [ 381.704633][T10193] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 381.738987][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1935'. [ 384.052614][T10239] netlink: 'syz.4.1951': attribute type 2 has an invalid length. [ 384.100765][T10239] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1951'. [ 388.252900][T10256] netlink: 'syz.0.1956': attribute type 39 has an invalid length. [ 388.318831][T10256] netlink: 'syz.0.1956': attribute type 25 has an invalid length. [ 388.396832][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1961'. [ 388.467182][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1961'. [ 388.730094][T10279] FAULT_INJECTION: forcing a failure. [ 388.730094][T10279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.766642][T10279] CPU: 0 PID: 10279 Comm: syz.2.1966 Not tainted syzkaller #0 [ 388.774366][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.784459][T10279] Call Trace: [ 388.787821][T10279] [ 388.790747][T10279] dump_stack_lvl+0x188/0x24e [ 388.795472][T10279] ? show_regs_print_info+0x12/0x12 [ 388.800675][T10279] ? load_image+0x400/0x400 [ 388.805274][T10279] ? __lock_acquire+0x7d10/0x7d10 [ 388.810300][T10279] ? snprintf+0xe5/0x140 [ 388.814544][T10279] should_fail_ex+0x399/0x4d0 [ 388.819395][T10279] _copy_to_user+0x2c/0x130 [ 388.823902][T10279] simple_read_from_buffer+0xe3/0x150 [ 388.829270][T10279] proc_fail_nth_read+0x1a6/0x220 [ 388.834386][T10279] ? proc_fault_inject_write+0x310/0x310 [ 388.840074][T10279] ? fsnotify_perm+0x248/0x550 [ 388.844844][T10279] ? proc_fault_inject_write+0x310/0x310 [ 388.850618][T10279] vfs_read+0x2de/0xa00 [ 388.854861][T10279] ? kernel_read+0x1e0/0x1e0 [ 388.859463][T10279] ? __fget_files+0x28/0x4b0 [ 388.864049][T10279] ? __fget_files+0x28/0x4b0 [ 388.868635][T10279] ? __fget_files+0x43d/0x4b0 [ 388.873313][T10279] ? __fdget_pos+0x2ae/0x360 [ 388.877900][T10279] ? ksys_read+0x71/0x250 [ 388.882236][T10279] ksys_read+0x14c/0x250 [ 388.886476][T10279] ? vfs_write+0xa30/0xa30 [ 388.890890][T10279] ? lockdep_hardirqs_on+0x94/0x140 [ 388.896087][T10279] do_syscall_64+0x4c/0xa0 [ 388.900511][T10279] ? clear_bhb_loop+0x60/0xb0 [ 388.905188][T10279] ? clear_bhb_loop+0x60/0xb0 [ 388.909874][T10279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.915774][T10279] RIP: 0033:0x7f4d3ef5d68e [ 388.920186][T10279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.939897][T10279] RSP: 002b:00007f4d3fda0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.948321][T10279] RAX: ffffffffffffffda RBX: 00007f4d3fda16c0 RCX: 00007f4d3ef5d68e [ 388.956301][T10279] RDX: 000000000000000f RSI: 00007f4d3fda10a0 RDI: 0000000000000004 [ 388.964316][T10279] RBP: 00007f4d3fda1090 R08: 0000000000000000 R09: 0000000000000000 [ 388.972378][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.980349][T10279] R13: 00007f4d3f216038 R14: 00007f4d3f215fa0 R15: 00007fff0b8c60b8 [ 388.988324][T10279] [ 389.729641][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 389.773799][T10309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1975'. [ 391.765215][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1984'. [ 392.092272][T10337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1984'. [ 392.130048][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 392.995849][T10349] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1986'. [ 393.015037][T10343] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1986'. [ 394.601133][T10363] netlink: 'syz.2.1999': attribute type 2 has an invalid length. [ 394.649004][T10363] netlink: 'syz.2.1999': attribute type 8 has an invalid length. [ 394.679309][T10363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1999'. [ 394.768351][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 394.958056][T10372] netlink: 'syz.0.1991': attribute type 6 has an invalid length. [ 394.964248][T10366] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1989'. [ 395.125860][T10377] netlink: 'syz.1.1993': attribute type 21 has an invalid length. [ 395.176040][T10377] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1993'. [ 395.957200][T10385] delete_channel: no stack [ 396.585730][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 396.621909][T10413] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 396.716152][T10421] netlink: 'syz.2.2010': attribute type 10 has an invalid length. [ 396.733399][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 397.027910][T10425] netlink: 'syz.0.2012': attribute type 21 has an invalid length. [ 397.174498][T10425] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2012'. [ 397.988520][T10448] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2020'. [ 398.064751][T10451] netlink: 'syz.3.2020': attribute type 2 has an invalid length. [ 398.211472][T10451] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2020'. [ 398.356823][T10448] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 398.853265][T10461] netlink: 'syz.1.2024': attribute type 2 has an invalid length. [ 398.921830][T10461] netlink: 'syz.1.2024': attribute type 8 has an invalid length. [ 398.950668][T10462] netlink: 'syz.1.2024': attribute type 2 has an invalid length. [ 403.496613][T10536] validate_nla: 4 callbacks suppressed [ 403.496637][T10536] netlink: 'syz.2.2046': attribute type 6 has an invalid length. [ 403.588862][T10537] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 404.144128][T10553] __nla_validate_parse: 4 callbacks suppressed [ 404.144155][T10553] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2050'. [ 404.870526][T10566] device € entered promiscuous mode [ 404.903804][T10568] netlink: 'syz.1.2056': attribute type 12 has an invalid length. [ 404.961311][T10568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2056'. [ 407.721955][T10569] delete_channel: no stack [ 407.930013][T10580] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 408.197307][T10590] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 408.378979][T10596] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2068'. [ 408.448906][T10596] bridge_slave_1: default FDB implementation only supports local addresses [ 408.476477][T10579] delete_channel: no stack [ 408.477500][T10598] netlink: 'syz.2.2068': attribute type 21 has an invalid length. [ 408.519285][T10598] netlink: 'syz.2.2068': attribute type 3 has an invalid length. [ 408.540781][T10598] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2068'. [ 408.677805][T10607] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 409.124244][T10614] netlink: 'syz.3.2070': attribute type 11 has an invalid length. [ 409.170225][T10614] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2070'. [ 409.223057][T10622] netlink: 'syz.1.2075': attribute type 10 has an invalid length. [ 409.242520][T10620] netlink: 'syz.3.2070': attribute type 46 has an invalid length. [ 409.308486][T10620] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2070'. [ 409.413573][T10625] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 409.413595][ T5034] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 409.413616][ T5034] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 409.491262][ T46] ------------[ cut here ]------------ [ 409.497180][ T46] WARNING: CPU: 0 PID: 46 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 409.507104][ T46] Modules linked in: [ 409.511092][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 409.518795][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.528927][ T46] Workqueue: cfg80211 cfg80211_event_work [ 409.534723][ T46] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 409.540955][ T46] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 7c ed f7 0f 0b eb bb e8 88 7c ed f7 <0f> 0b eb b2 e8 7f 7c ed f7 0f 0b e9 77 fd ff ff e8 73 7c ed f7 0f [ 409.560656][ T46] RSP: 0018:ffffc90000b77aa0 EFLAGS: 00010293 [ 409.566860][ T46] RAX: ffffffff89950a28 RBX: dffffc0000000000 RCX: ffff88801daa1dc0 [ 409.574938][ T46] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 409.582991][ T46] RBP: ffffc90000b77b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 409.591251][ T46] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff8880547735f8 [ 409.599304][ T46] R13: 1ffff9200016ef5c R14: 000000000000001f R15: ffff8880242ecc90 [ 409.607453][ T46] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 409.616489][ T46] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 409.623207][ T46] CR2: 00007f50539ea540 CR3: 0000000019693000 CR4: 00000000003506f0 [ 409.631272][ T46] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 409.639414][ T46] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 409.647600][ T46] Call Trace: [ 409.650951][ T46] [ 409.653917][ T46] ? mutex_lock_nested+0x10/0x10 [ 409.659051][ T46] ? trace_rdev_return_void+0x240/0x240 [ 409.664759][ T46] cfg80211_process_wdev_events+0x3ad/0x550 [ 409.670837][ T46] cfg80211_process_rdev_events+0x9d/0x110 [ 409.676876][ T46] ? process_one_work+0x7b0/0x1160 [ 409.682098][ T46] cfg80211_event_work+0x2b/0x40 [ 409.687090][ T46] process_one_work+0x8a2/0x1160 [ 409.692242][ T46] ? worker_detach_from_pool+0x240/0x240 [ 409.697922][ T46] ? _raw_spin_lock_irq+0x86/0xf0 [ 409.703063][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 409.708136][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 409.713802][ T46] ? kthread_data+0x4b/0xc0 [ 409.718365][ T46] worker_thread+0xaa2/0x1270 [ 409.723179][ T46] ? __kthread_parkme+0x162/0x1c0 [ 409.728269][ T46] kthread+0x29d/0x330 [ 409.732441][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 409.737509][ T46] ? kthread_blkcg+0xd0/0xd0 [ 409.742472][ T46] ret_from_fork+0x1f/0x30 [ 409.746989][ T46] [ 409.750108][ T46] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.757409][ T46] CPU: 0 PID: 46 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 409.764803][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 409.774886][ T46] Workqueue: cfg80211 cfg80211_event_work [ 409.780743][ T46] Call Trace: [ 409.784062][ T46] [ 409.787025][ T46] dump_stack_lvl+0x188/0x24e [ 409.791752][ T46] ? memcpy+0x3c/0x60 [ 409.795762][ T46] ? show_regs_print_info+0x12/0x12 [ 409.801004][ T46] ? load_image+0x400/0x400 [ 409.805608][ T46] panic+0x2e5/0x730 [ 409.809569][ T46] ? bpf_jit_dump+0xd0/0xd0 [ 409.814117][ T46] ? ret_from_fork+0x1f/0x30 [ 409.818787][ T46] __warn+0x2f8/0x4f0 [ 409.822793][ T46] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 409.828381][ T46] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 409.833976][ T46] report_bug+0x2ba/0x4f0 [ 409.838345][ T46] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 409.843923][ T46] handle_bug+0x3a/0x70 [ 409.848112][ T46] exc_invalid_op+0x16/0x40 [ 409.852679][ T46] asm_exc_invalid_op+0x16/0x20 [ 409.857567][ T46] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 409.863754][ T46] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 91 7c ed f7 0f 0b eb bb e8 88 7c ed f7 <0f> 0b eb b2 e8 7f 7c ed f7 0f 0b e9 77 fd ff ff e8 73 7c ed f7 0f [ 409.883478][ T46] RSP: 0018:ffffc90000b77aa0 EFLAGS: 00010293 [ 409.889641][ T46] RAX: ffffffff89950a28 RBX: dffffc0000000000 RCX: ffff88801daa1dc0 [ 409.897618][ T46] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 409.905585][ T46] RBP: ffffc90000b77b70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 409.913560][ T46] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff8880547735f8 [ 409.921646][ T46] R13: 1ffff9200016ef5c R14: 000000000000001f R15: ffff8880242ecc90 [ 409.929639][ T46] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 409.935205][ T46] ? mutex_lock_nested+0x10/0x10 [ 409.940160][ T46] ? trace_rdev_return_void+0x240/0x240 [ 409.945708][ T46] cfg80211_process_wdev_events+0x3ad/0x550 [ 409.951611][ T46] cfg80211_process_rdev_events+0x9d/0x110 [ 409.957415][ T46] ? process_one_work+0x7b0/0x1160 [ 409.962519][ T46] cfg80211_event_work+0x2b/0x40 [ 409.967462][ T46] process_one_work+0x8a2/0x1160 [ 409.972431][ T46] ? worker_detach_from_pool+0x240/0x240 [ 409.978094][ T46] ? _raw_spin_lock_irq+0x86/0xf0 [ 409.983133][ T46] ? _raw_spin_lock_irq+0xb7/0xf0 [ 409.988181][ T46] ? _raw_spin_lock_irqsave+0x100/0x100 [ 409.993745][ T46] ? kthread_data+0x4b/0xc0 [ 409.998272][ T46] worker_thread+0xaa2/0x1270 [ 410.002964][ T46] ? __kthread_parkme+0x162/0x1c0 [ 410.008003][ T46] kthread+0x29d/0x330 [ 410.012076][ T46] ? worker_clr_flags+0x1a0/0x1a0 [ 410.017094][ T46] ? kthread_blkcg+0xd0/0xd0 [ 410.021676][ T46] ret_from_fork+0x1f/0x30 [ 410.026124][ T46] [ 410.029564][ T46] Kernel Offset: disabled [ 410.033988][ T46] Rebooting in 86400 seconds..