last executing test programs: 11.068940203s ago: executing program 1 (id=5805): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) 10.913481991s ago: executing program 1 (id=5809): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x3000c085) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffffff}, 0xe01, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fffe4e43a", 0x8c}], 0x1}, 0x0) 10.176880737s ago: executing program 1 (id=5816): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000006f0000006f00000002000800080000000000000a030000000b0000000000000c020000000200000004000004080000000300000001000000bd0000000a00000005000000060000000b00000002000000000000000c00000005000000070000000d0000000100000f0300000002000000090000001f2100002a9651000000"], 0x0, 0x8a, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r1], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x24, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x5b, &(0x7f0000000400)=""/91, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1e, r6, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xc, 0x8000}, 0x10, 0xffffffffffffffff, r6, 0x6, &(0x7f0000000780)=[r7, r4, r7, r4, r7, r4], &(0x7f00000008c0)=[{0x5, 0x5, 0xe, 0x4}, {0x4, 0x5, 0x7, 0xe}, {0x1, 0x1, 0xa, 0x3}, {0x1, 0x4, 0x5, 0x8}, {0x1, 0x2, 0x8, 0xc}, {0x3, 0x1, 0x2, 0x6}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r6) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 9.842462383s ago: executing program 1 (id=5823): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x11, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000a40)=""/4096, 0x41100, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x2, 0x400, 0xb973}, 0x10, 0x2a71b}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18190000000000000000000000008186850ac95b1e7420cfb6bd0b111e0a0000850000006d0000001801000020696c250020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095098611a5404c708b01dd2ae015d8ef5dc31c00724df47a171723d585f8d476fa0ecbb969b67a837d605f28ccfc45a36116dc17a49541a8c610bd9e59f4ecd23c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003ee7ffa2dff504e05581330bd54280615e9742c5e1c26b782a982905297eb55b2a04d9e4b6d26823d08ee130952acc6363c81d3a031fd6661c85cde98eddccd3c7fade4da63f31992a6a2c2d1de5d04e01807afc20b26fd36188f8e3cab04d4b14d1d39241d28bbb42f560c223645cfb48075701b71a8e397239f9c667cbc4809a87044c0b22bf0163708c20fec6160d16dd03577475f6ea62e88cbb5eb0e371529ce97cdf8bff6ebff852243a8454f6ad593762cedd049cb209af01f39751417a78770316da56f7414e8e6da1699b5a3e9f28c91759c9cd947d760e0fa1e2275deb760f5455d5b870a9105381214e7eaef4dcd82dbc18c857448d86337646e352ede8be5b8d715a4bb5095c17cd477ffcbd82587cebf22495ace179c5180db02f593baff1825e478c224534149b4a94a960ed94dd7f15ff5911e01017cf2dcf6e8e0d5519f80967088f67c801b3813aa399e59fed2220262528e3c432c4ed501bb261d7470f487709371319fe9d88552b976cf08c126557df8cf8bfc7d4bb1bd034cfc1386378192f70b8decbc639d078b0089eb744314d26c8b6222d5290032c80e5e1f3f9d5567f97b898d04876bca97e000020000000167168b8f10c925bd6440ef3aab5756e3b3d6ed080a4808b66f02e46d1bd961c82ce6bc5b6b31987c14fbf6de6d493e06c45101d64a17f4d94ca97649a13cdca73dc7b", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={r2, 0x58, &(0x7f00000008c0)}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x0, 0x26, 0x0, 0x1}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r6, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, &(0x7f0000000340), &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0xa, r3, 0x8, &(0x7f0000000480)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r0, 0x2, 0x0, &(0x7f00000004c0)=[{0x1, 0x3, 0x5}, {0x4, 0x2, 0xf, 0xb}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x2d8}], 0x1}, 0xff00) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0xc, 'p'}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000780), 0x30801, 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4c010) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)=ANY=[], 0x10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 9.626621245s ago: executing program 1 (id=5825): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 8.847537643s ago: executing program 1 (id=5830): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000500)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff065581fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x106002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x14e2, 0x2, 0x20, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r2, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) 7.718523049s ago: executing program 4 (id=5843): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xca}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x3}, 0x10b09a, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) write$cgroup_devices(r5, &(0x7f0000000140)={'b', ' *:* ', 'rm\x00'}, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='\x12^\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="07f6ffffffffffff60c611479465fba41af96f65ff952b9eabd4351d8e275efe", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x3a, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union={0x0, 0x0, 0x0, 0xb, 0x0, 0x2}]}}, 0x0, 0x3e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="0300000000000000000000000000000000000000bf77a7737c138962db489d5df5d602e9e0eedeb3af434a8445e6fb4deb211d6ae3a4dfeb7493eeecd47365d48b2b2cda736b320d9896cb8840c2805ea82cbb8ccc6b4099ac69fb818b6da118288e31df8d7b537a2a428e031a7c7f53434079d4794a9aaaeef43b530e241c34996bbe52e44eab594757505dd6071f6f031d9cca607eb353409a8aaee17d9f", @ANYRES32=r8, @ANYRES32, @ANYBLOB="02000000050000000300"/28], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x30, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.269075141s ago: executing program 0 (id=5847): perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x0, 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="76c5726ff01f944b8ec9fea775e35ca247152a8fb225483c2b7c1e43f6ed21c16bc5f8f95aede286375e419e613000a0954a4d2f061570800f9d05b364ecb9ecc8aa43b65dbf9386b762ca290b896c5e75fb2b6c83a4f9a4d02d8219a2282e4b11629167e54999e43c7e8a1141819f78dfcf3f667ef4fb28608b8a248a07232930edf513ddd714dfb74e28c34924fd8a7e0c4f049ea1305ab0f1174d2e96a93fb656a85a7ec63488d03ca99b", 0xac}, {&(0x7f0000000580)="319b7a285b2247e7099ef57f98cb3233cf24fc2562dfcfe9dcc8fba20b76f19c878d5c5a44c78d41ad8ffb45d6dd6119205c979f76a4ad0411391e00c73474da0250c5bf5ff076539294d58fe82a7223dd702058abcd9292f8d4bbbeac978b694a4f282c0fce0664fd28abd3113475d98db74dff93fbf18db36385e6719107744063dc2df03cd7a2586c3eebda5dc3f9ec7661ebdb9f5a5c1feab446f0d566f1895f58f05238801db679f4089a2b6d80ea3122c9cebe6bb5863c6d531ae64a1584cb6dcd83aa2d1562bee0b07f0bf61b", 0xd0}, {&(0x7f0000000480)="f03f4c4a9e5bbf1da5158866376fec6c20f0a3a97bd32c7e8660717f7d88406e42b6402f96c20b712729c24b630ec74a20fa61c3136326325dcd7dd56857b29ddf359703cc15da1f565e42c9bb2e5ad286dc74f4214ea56daeb7fade41b7c7480511edfb4921a2b01b7be59cbcb204ffe9975801cb852946", 0x78}], 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6a) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$inet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x2d, 0x0, &(0x7f0000000780)="d2205d96c717ab96f0ded75d86dd07910a21c4e34c102f2b4e7a00f2a6f0fbdae9ff75d2dd71bbc1dc520c23b6", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'ipvlan1\x00', 0x1}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a001505d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188006ac0f000300", 0x2e}], 0x1, 0x0, 0x0, 0x8100000}, 0x8004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000240)) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r7) socket$kcm(0x21, 0x7, 0xa) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f00000001c0)=r0, 0x4) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.560616615s ago: executing program 4 (id=5850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c000300010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003a1000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.449218241s ago: executing program 0 (id=5851): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(0x0, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0x8, 0xc2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="8d", 0x1}], 0x1}, 0x0) close(r6) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x20, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0xa}, 0x100410, 0x200, 0x2, 0x7, 0x4, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000001f8500000082000000850000007d00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000001100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.25734228s ago: executing program 4 (id=5853): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d00020016000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x1000, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x41000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x10000000}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007901b8000000000085000000310000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.121629497s ago: executing program 3 (id=5856): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0xfe, 0xfffffffffffffffc}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x0, 0x1, 0x29014, 0xffffffffffffffff, 0x1, '\x00', r4, r5, 0x5, 0x0, 0x1, 0xd, @value=r3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0xeb9, 0xffffffff, 0x2, 0xb000, r0, 0x3, '\x00', r4, r3, 0x0, 0x4, 0x1, 0x0, @value=r3}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 1.323301415s ago: executing program 3 (id=5857): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000006f0000006f00000002000800080000000000000a030000000b0000000000000c020000000200000004000004080000000300000001000000bd0000000a00000005000000060000000b00000002000000000000000c00000005000000070000000d0000000100000f0300000002000000090000001f2100002a9651000000"], 0x0, 0x8a, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r1], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x24, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x5b, &(0x7f0000000400)=""/91, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1e, r6, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xc, 0x8000}, 0x10, 0xffffffffffffffff, r6, 0x6, &(0x7f0000000780)=[r7, r4, r7, r4, r7, r4], &(0x7f00000008c0)=[{0x5, 0x5, 0xe, 0x4}, {0x4, 0x5, 0x7, 0xe}, {0x1, 0x1, 0xa, 0x3}, {0x1, 0x4, 0x5, 0x8}, {0x1, 0x2, 0x8, 0xc}, {0x3, 0x1, 0x2, 0x6}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r6) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 1.24004675s ago: executing program 0 (id=5858): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_clone(0x4000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, r1, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002815c180535a968d12134e46a3dae86a81de0f844b7eb2d9321a86340276b944ce530f2d50c95069fdfa8457ccd291"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x2180, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x8, r4, 0x8) 1.239650319s ago: executing program 4 (id=5859): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10ccc0, 0x2, 0xfffffffe, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], &(0x7f0000000a00)='syzkaller\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRES32=r5], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x76, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f0000000500), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0xf, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x61, 0x2e, 0x0, 0x2e, 0x0, 0x2e]}}, &(0x7f0000000700)=""/94, 0x30, 0x5e, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c2, 0x0, 0x0, 0x0, 0x2}, [@exit]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xf6, &(0x7f0000000200)=""/246, 0x41100, 0x41, '\x00', r8, 0x0, r9, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x0, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000840)=[r4, r4], &(0x7f0000000880)=[{0x2, 0x1, 0x10, 0x8}, {0x3, 0x3, 0x7, 0xc}, {0x3, 0x4, 0xc, 0x9}, {0x3, 0x3, 0x9, 0x7}, {0x0, 0x2, 0xe, 0x6}, {0x1, 0x2, 0xc, 0x1}, {0x1, 0x5, 0x10, 0x4}, {0x2, 0x5, 0x6, 0xc}, {0x3, 0x1, 0x3, 0xb}], 0x10, 0x50}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r10, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495c0bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a36127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566", 0x3d9}, {&(0x7f0000002b40)="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", 0x1db}], 0x2}, 0x8400) sendmsg$inet(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) 1.062767358s ago: executing program 4 (id=5861): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, 0x0, 0x7}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x9, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) 901.552116ms ago: executing program 2 (id=5862): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000000c0)='%-010d \x00'}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x588, 0x0, 0x0, 0x0, 0xfffffc0f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x6d, &(0x7f0000000040)=""/109, 0x40f00, 0x40, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xa, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r2, r3, 0x1, r3, r2, r3, r1, r2, r2], 0x0, 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0, r4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x22, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 840.834459ms ago: executing program 3 (id=5863): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000003c0)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x80000001}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r7, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 837.043279ms ago: executing program 0 (id=5864): socket$kcm(0x2, 0x5, 0x84) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3650c001ac008000a0004000300020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e", 0x53}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x6e}, 0x40) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000)=r3, 0x10) 744.939224ms ago: executing program 2 (id=5865): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0xff, 0x7f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 719.541755ms ago: executing program 0 (id=5866): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r1 = syz_clone(0x4000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, r1, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d033300fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002815c180535a968d12134e46a3dae86a81de0f844b7eb2d9321a86340276b944ce530f2d50c95069fdfa8457ccd291"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xfa, 0x3, 0x2, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x2180, 0xff, 0x9, 0x5, 0x7303, 0x6, 0x0, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x8, r4, 0x8) 647.451419ms ago: executing program 4 (id=5867): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x3e8) socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) close(r4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) write$cgroup_devices(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 537.084084ms ago: executing program 2 (id=5868): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000040)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) 536.592284ms ago: executing program 3 (id=5869): r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1}, 0x41) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000007fd17fb946bbe06f209caa7ccfa3c1e433ca54c00c567263ea45b1fe908dbbc1018ca163b20ce4a3f23171a8fc68d4d92f80f65b7ef04d51107f254909ed0a52face3c68fc5ba92971af754ced654dccb73bdd071ff48b92e82dfabdce099fe23602caa6abd0781bdedd2b4e50abbe93b4cdca2128eb8c54399768a64b36da541d039164409d212459ca010ef8378e9654aa125b21e0651b9e31618619d878fd285d97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000030000000700000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000294000000"], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r7, 0x58, &(0x7f00000000c0)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000003000000000000000071122100000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func={0x1, 0x0, 0x0, 0xc, 0x1}]}}, &(0x7f0000000940)=""/222, 0x3a, 0xde, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x19, 0x0, 0xa) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) 404.864751ms ago: executing program 2 (id=5870): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000300180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180fec0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 350.473703ms ago: executing program 2 (id=5871): r0 = gettid() r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0x13, &(0x7f00000000c0)='memory.swap.events\x00'}, 0x30) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000540)="72ca8950cd94b30f8c5d114a6cb8ab93bbe6ca9e7f3e531d5a89f83f0183049c6fde63622a4c450b9b21213c8f0d034ac88da9ae3a7d6010c0637896d594b6f16d782bea4216c72b45072983b82e4b83effc2e7eba82e37eae77cc131b8d7fb6b22c05f9a7d3c9062bfe8761edf19850942bb5f9f828c97d7418cb768ec04cddfc0933488a95df8e50994b3ccab3d5d614e6b920bb2d1c992a4fa10e318fd1baa695d19987bfcf9c4bccb6660c540fde7d39a6325d053de1218ea5fee9d580b8cbcf574be70e96a2a60e3ad30264b542e53e7af4"}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 131.838105ms ago: executing program 0 (id=5872): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000006f0000006f00000002000800080000000000000a030000000b0000000000000c020000000200000004000004080000000300000001000000bd0000000a00000005000000060000000b00000002000000000000000c00000005000000070000000d0000000100000f0300000002000000090000001f2100002a9651000000"], 0x0, 0x8a, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES32, @ANYRESHEX, @ANYRES64=r0, @ANYRES64=r1], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r2, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x24, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x5b, &(0x7f0000000400)=""/91, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1e, r6, 0x8, &(0x7f0000000700)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xc, 0x8000}, 0x10, 0xffffffffffffffff, r6, 0x6, &(0x7f0000000780)=[r7, r4, r7, r4, r7, r4], &(0x7f00000008c0)=[{0x5, 0x5, 0xe, 0x4}, {0x4, 0x5, 0x7, 0xe}, {0x1, 0x1, 0xa, 0x3}, {0x1, 0x4, 0x5, 0x8}, {0x1, 0x2, 0x8, 0xc}, {0x3, 0x1, 0x2, 0x6}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f0000000000000018130000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r6) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r9 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 131.625185ms ago: executing program 3 (id=5873): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x21, 0xa, 0x9, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x0, 0x2d, 0x0, 0x88) 4.037041ms ago: executing program 2 (id=5874): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xb1ac, 0x3}, 0x0, 0x0, 0xffffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffff06, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68881a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f00000002c0)=r7}, 0x20) 0s ago: executing program 3 (id=5875): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$kcm(0x2, 0x5, 0x84) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) (async, rerun: 64) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x84, 0x72, &(0x7f0000000000)=r8, 0xc) (async) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r12 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x161) socket$kcm(0x29, 0xe, 0x0) (async, rerun: 32) close(r12) (rerun: 32) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r14 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r14, 0x4) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) (async, rerun: 64) r15 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64) sendmsg$kcm(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): d length. [ 639.663258][T18354] netlink: 'syz.3.4774': attribute type 10 has an invalid length. [ 639.784140][T18354] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.219221][T18354] bond0: (slave team0): Enslaving as an active interface with an up link [ 642.391932][T18412] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4797'. [ 642.854868][T18421] validate_nla: 3 callbacks suppressed [ 642.855149][T18421] netlink: 'syz.3.4798': attribute type 29 has an invalid length. [ 642.923324][T18421] netlink: 'syz.3.4798': attribute type 29 has an invalid length. [ 643.357004][ T4988] tipc: Subscription rejected, illegal request [ 643.861694][T18444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4807'. [ 643.880899][T18446] netlink: 'syz.3.4809': attribute type 4 has an invalid length. [ 643.889290][T18446] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4809'. [ 643.974758][T18450] FAULT_INJECTION: forcing a failure. [ 643.974758][T18450] name failslab, interval 1, probability 0, space 0, times 0 [ 644.005085][T18450] CPU: 1 PID: 18450 Comm: syz.2.4811 Not tainted syzkaller #0 [ 644.012616][T18450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.022884][T18450] Call Trace: [ 644.026317][T18450] [ 644.029279][T18450] dump_stack_lvl+0x188/0x250 [ 644.034007][T18450] ? show_regs_print_info+0x20/0x20 [ 644.039367][T18450] ? load_image+0x400/0x400 [ 644.043915][T18450] ? __might_sleep+0xf0/0xf0 [ 644.048547][T18450] ? __lock_acquire+0x7d10/0x7d10 [ 644.053639][T18450] should_fail+0x38c/0x4c0 [ 644.058110][T18450] should_failslab+0x5/0x20 [ 644.062654][T18450] slab_pre_alloc_hook+0x51/0xc0 [ 644.067648][T18450] __kmalloc_node_track_caller+0x68/0x3a0 [ 644.073415][T18450] ? netlink_sendmsg+0x654/0xbe0 [ 644.078392][T18450] ? kmem_cache_alloc_node+0x162/0x2d0 [ 644.083895][T18450] ? __alloc_skb+0xf4/0x750 [ 644.088438][T18450] ? netlink_sendmsg+0x654/0xbe0 [ 644.093432][T18450] __alloc_skb+0x22c/0x750 [ 644.097897][T18450] netlink_sendmsg+0x654/0xbe0 [ 644.102727][T18450] ? netlink_getsockopt+0x570/0x570 [ 644.107969][T18450] ? aa_sock_msg_perm+0x94/0x150 [ 644.112955][T18450] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 644.118373][T18450] ? security_socket_sendmsg+0x7c/0xa0 [ 644.124052][T18450] ? netlink_getsockopt+0x570/0x570 [ 644.129297][T18450] ____sys_sendmsg+0x5b7/0x8f0 [ 644.134158][T18450] ? __sys_sendmsg_sock+0x30/0x30 [ 644.139329][T18450] ? import_iovec+0x6f/0xa0 [ 644.143882][T18450] ___sys_sendmsg+0x236/0x2e0 [ 644.148861][T18450] ? __sys_sendmsg+0x2a0/0x2a0 [ 644.153863][T18450] ? trace_event_raw_event_lock+0x270/0x270 [ 644.159797][T18450] ? vfs_write+0x8b2/0xd60 [ 644.164361][T18450] __se_sys_sendmsg+0x1af/0x290 [ 644.169265][T18450] ? __x64_sys_sendmsg+0x80/0x80 [ 644.174262][T18450] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 644.180302][T18450] ? lockdep_hardirqs_on+0x94/0x140 [ 644.185559][T18450] do_syscall_64+0x4c/0xa0 [ 644.190015][T18450] ? clear_bhb_loop+0x30/0x80 [ 644.194735][T18450] ? clear_bhb_loop+0x30/0x80 [ 644.199453][T18450] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 644.205389][T18450] RIP: 0033:0x7f7e8932a799 [ 644.209848][T18450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.229632][T18450] RSP: 002b:00007f7e87584028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.238102][T18450] RAX: ffffffffffffffda RBX: 00007f7e895a3fa0 RCX: 00007f7e8932a799 [ 644.245162][T18453] netlink: 'syz.4.4812': attribute type 29 has an invalid length. [ 644.246108][T18450] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 644.246128][T18450] RBP: 00007f7e87584090 R08: 0000000000000000 R09: 0000000000000000 [ 644.246143][T18450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.246157][T18450] R13: 00007f7e895a4038 R14: 00007f7e895a3fa0 R15: 00007ffcce44bbf8 [ 644.246193][T18450] [ 644.308423][T18453] netlink: 'syz.4.4812': attribute type 29 has an invalid length. [ 644.377079][T18455] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4814'. [ 644.399004][T18463] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4815'. [ 644.722332][T18475] netlink: 'syz.4.4819': attribute type 11 has an invalid length. [ 645.245063][ T4248] tipc: Subscription rejected, illegal request [ 645.385825][T18489] device syzkaller0 entered promiscuous mode [ 645.885106][T18503] FAULT_INJECTION: forcing a failure. [ 645.885106][T18503] name failslab, interval 1, probability 0, space 0, times 0 [ 645.907962][T18503] CPU: 1 PID: 18503 Comm: syz.3.4829 Not tainted syzkaller #0 [ 645.912843][T18507] netlink: 'syz.2.4828': attribute type 9 has an invalid length. [ 645.915583][T18503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.933514][T18503] Call Trace: [ 645.936834][T18503] [ 645.939798][T18503] dump_stack_lvl+0x188/0x250 [ 645.944615][T18503] ? show_regs_print_info+0x20/0x20 [ 645.949948][T18503] ? load_image+0x400/0x400 [ 645.954589][T18503] ? __might_sleep+0xf0/0xf0 [ 645.959317][T18503] ? __lock_acquire+0x7d10/0x7d10 [ 645.964379][T18503] ? netlink_insert+0xe95/0x11f0 [ 645.969362][T18503] should_fail+0x38c/0x4c0 [ 645.973838][T18503] should_failslab+0x5/0x20 [ 645.978387][T18503] slab_pre_alloc_hook+0x51/0xc0 [ 645.983372][T18503] kmem_cache_alloc_node+0x47/0x2d0 [ 645.988622][T18503] ? __alloc_skb+0xf4/0x750 [ 645.993174][T18503] __alloc_skb+0xf4/0x750 [ 645.997566][T18503] netlink_sendmsg+0x654/0xbe0 [ 646.002362][T18507] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4828'. [ 646.002382][T18503] ? netlink_getsockopt+0x570/0x570 [ 646.016911][T18503] ? aa_sock_msg_perm+0x94/0x150 [ 646.021893][T18503] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 646.027237][T18503] ? security_socket_sendmsg+0x7c/0xa0 [ 646.032735][T18503] ? netlink_getsockopt+0x570/0x570 [ 646.037977][T18503] ____sys_sendmsg+0x5b7/0x8f0 [ 646.042879][T18503] ? __sys_sendmsg_sock+0x30/0x30 [ 646.047955][T18503] ? import_iovec+0x6f/0xa0 [ 646.052515][T18503] ___sys_sendmsg+0x236/0x2e0 [ 646.057242][T18503] ? __sys_sendmsg+0x2a0/0x2a0 [ 646.062180][T18503] __se_sys_sendmsg+0x1af/0x290 [ 646.067077][T18503] ? __x64_sys_sendmsg+0x80/0x80 [ 646.072059][T18503] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 646.078106][T18503] ? lockdep_hardirqs_on+0x94/0x140 [ 646.083352][T18503] do_syscall_64+0x4c/0xa0 [ 646.087811][T18503] ? clear_bhb_loop+0x30/0x80 [ 646.092528][T18503] ? clear_bhb_loop+0x30/0x80 [ 646.097250][T18503] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.103183][T18503] RIP: 0033:0x7fe11aeba799 [ 646.107724][T18503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.127463][T18503] RSP: 002b:00007fe119114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.136016][T18503] RAX: ffffffffffffffda RBX: 00007fe11b133fa0 RCX: 00007fe11aeba799 [ 646.144032][T18503] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 646.152156][T18503] RBP: 00007fe119114090 R08: 0000000000000000 R09: 0000000000000000 [ 646.160269][T18503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.168415][T18503] R13: 00007fe11b134038 R14: 00007fe11b133fa0 R15: 00007ffdaca37698 [ 646.176457][T18503] [ 646.236841][T18510] netlink: 'syz.2.4828': attribute type 9 has an invalid length. [ 646.276891][T18510] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4828'. [ 646.738060][T18524] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4837'. [ 646.895334][T18528] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4839'. [ 647.135156][ T4248] tipc: Subscription rejected, illegal request [ 647.529628][T18545] FAULT_INJECTION: forcing a failure. [ 647.529628][T18545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.567553][T18545] CPU: 0 PID: 18545 Comm: syz.2.4844 Not tainted syzkaller #0 [ 647.575093][T18545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 647.585202][T18545] Call Trace: [ 647.588533][T18545] [ 647.591511][T18545] dump_stack_lvl+0x188/0x250 [ 647.596251][T18545] ? show_regs_print_info+0x20/0x20 [ 647.601596][T18545] ? load_image+0x400/0x400 [ 647.606183][T18545] ? __lock_acquire+0x7d10/0x7d10 [ 647.611285][T18545] should_fail+0x38c/0x4c0 [ 647.615820][T18545] _copy_from_user+0x2e/0x170 [ 647.620574][T18545] get_user_ifreq+0x67/0x170 [ 647.625249][T18545] sock_ioctl+0x637/0x710 [ 647.629643][T18545] ? sock_poll+0x410/0x410 [ 647.634132][T18545] ? bpf_lsm_file_ioctl+0x5/0x10 [ 647.639138][T18545] ? security_file_ioctl+0x7c/0xa0 [ 647.644307][T18545] ? sock_poll+0x410/0x410 [ 647.648778][T18545] __se_sys_ioctl+0xfa/0x170 [ 647.653427][T18545] do_syscall_64+0x4c/0xa0 [ 647.657894][T18545] ? clear_bhb_loop+0x30/0x80 [ 647.662663][T18545] ? clear_bhb_loop+0x30/0x80 [ 647.667400][T18545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 647.673353][T18545] RIP: 0033:0x7f7e8932a799 [ 647.677875][T18545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.697608][T18545] RSP: 002b:00007f7e87584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.706057][T18545] RAX: ffffffffffffffda RBX: 00007f7e895a3fa0 RCX: 00007f7e8932a799 [ 647.714062][T18545] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 647.722176][T18545] RBP: 00007f7e87584090 R08: 0000000000000000 R09: 0000000000000000 [ 647.730182][T18545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.738266][T18545] R13: 00007f7e895a4038 R14: 00007f7e895a3fa0 R15: 00007ffcce44bbf8 [ 647.746386][T18545] [ 647.759837][T18549] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.4846'. [ 648.036936][T18556] FAULT_INJECTION: forcing a failure. [ 648.036936][T18556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.082098][T18556] CPU: 1 PID: 18556 Comm: syz.2.4849 Not tainted syzkaller #0 [ 648.089626][T18556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 648.099733][T18556] Call Trace: [ 648.103041][T18556] [ 648.105997][T18556] dump_stack_lvl+0x188/0x250 [ 648.110710][T18556] ? show_regs_print_info+0x20/0x20 [ 648.115947][T18556] ? load_image+0x400/0x400 [ 648.120484][T18556] ? __might_sleep+0xf0/0xf0 [ 648.125192][T18556] ? __lock_acquire+0x7d10/0x7d10 [ 648.130242][T18556] ? mark_lock+0x94/0x320 [ 648.134597][T18556] should_fail+0x38c/0x4c0 [ 648.139061][T18556] copy_page_from_iter+0x33c/0x760 [ 648.144215][T18556] pipe_write+0x96f/0x1aa0 [ 648.148676][T18556] ? pipe_write+0x141/0x1aa0 [ 648.153307][T18556] ? pipe_read+0x1260/0x1260 [ 648.158015][T18556] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 648.164035][T18556] ? end_current_label_crit_section+0x14b/0x170 [ 648.170315][T18556] ? memset+0x1e/0x40 [ 648.174334][T18556] ? iov_iter_init+0xb4/0x170 [ 648.179074][T18556] vfs_write+0x745/0xd60 [ 648.183357][T18556] ? file_end_write+0x250/0x250 [ 648.188250][T18556] ? __fget_files+0x40f/0x480 [ 648.193156][T18556] ? __fdget_pos+0x1e2/0x370 [ 648.197778][T18556] ? ksys_write+0x71/0x260 [ 648.202224][T18556] ksys_write+0x152/0x260 [ 648.206583][T18556] ? __ia32_sys_read+0x80/0x80 [ 648.211391][T18556] ? lockdep_hardirqs_on+0x94/0x140 [ 648.216714][T18556] do_syscall_64+0x4c/0xa0 [ 648.221155][T18556] ? clear_bhb_loop+0x30/0x80 [ 648.225869][T18556] ? clear_bhb_loop+0x30/0x80 [ 648.230577][T18556] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 648.236670][T18556] RIP: 0033:0x7f7e8932a799 [ 648.241115][T18556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.261250][T18556] RSP: 002b:00007f7e87584028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.269694][T18556] RAX: ffffffffffffffda RBX: 00007f7e895a3fa0 RCX: 00007f7e8932a799 [ 648.277693][T18556] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 648.285708][T18556] RBP: 00007f7e87584090 R08: 0000000000000000 R09: 0000000000000000 [ 648.293717][T18556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.301724][T18556] R13: 00007f7e895a4038 R14: 00007f7e895a3fa0 R15: 00007ffcce44bbf8 [ 648.309856][T18556] [ 648.356562][T18561] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.4850'. [ 649.152354][T18586] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.4861'. [ 649.173022][T18587] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4863'. [ 649.469903][T18594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4865'. [ 649.489180][T18592] netlink: 'syz.1.4864': attribute type 3 has an invalid length. [ 649.520425][T18592] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4864'. [ 650.344440][T18626] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4876'. [ 651.026167][T18639] netlink: 'syz.0.4884': attribute type 10 has an invalid length. [ 651.054656][T18639] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4884'. [ 651.089633][T18639] device bond0 entered promiscuous mode [ 651.108880][T18639] device bond_slave_0 entered promiscuous mode [ 651.118601][T18639] device bond_slave_1 entered promiscuous mode [ 651.126018][T18639] device bridge_slave_1 entered promiscuous mode [ 651.203546][T18639] device batadv0 entered promiscuous mode [ 651.236043][T18639] device wlan1 entered promiscuous mode [ 651.247129][T18639] device bridge0 entered promiscuous mode [ 651.263151][T18639] device batadv_slave_0 entered promiscuous mode [ 651.274050][T18639] device team0 entered promiscuous mode [ 651.282969][T18639] device team_slave_1 entered promiscuous mode [ 651.297090][T18639] bridge0: port 2(bond0) entered blocking state [ 651.307319][T18639] bridge0: port 2(bond0) entered disabled state [ 651.347486][T18645] netlink: 'syz.3.4885': attribute type 11 has an invalid length. [ 651.683119][T18670] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.4892'. [ 651.783215][T18664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4890'. [ 651.887277][T18669] netlink: 'syz.4.4891': attribute type 21 has an invalid length. [ 652.177865][T18669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4891'. [ 652.603442][T18695] netlink: 'syz.3.4902': attribute type 10 has an invalid length. [ 652.644481][T18695] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4902'. [ 652.674504][T18695] device bond0 entered promiscuous mode [ 652.688484][T18695] device bond_slave_0 entered promiscuous mode [ 652.706853][T18695] device bond_slave_1 entered promiscuous mode [ 652.716954][T18695] device bridge0 entered promiscuous mode [ 652.735510][T18695] device team0 entered promiscuous mode [ 652.742871][T18695] device team_slave_1 entered promiscuous mode [ 652.763326][T18695] bridge0: port 1(bond0) entered blocking state [ 652.770514][T18695] bridge0: port 1(bond0) entered disabled state [ 652.858568][T18693] netlink: 'syz.2.4900': attribute type 11 has an invalid length. [ 652.935751][T18709] netlink: 'syz.1.4905': attribute type 3 has an invalid length. [ 653.163435][T18722] netlink: 'syz.2.4907': attribute type 3 has an invalid length. [ 654.171417][T18743] netlink: 'syz.0.4912': attribute type 21 has an invalid length. [ 654.187637][T18743] __nla_validate_parse: 4 callbacks suppressed [ 654.187659][T18743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4912'. [ 654.429758][T18756] netlink: 'syz.4.4917': attribute type 10 has an invalid length. [ 654.457318][T18756] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4917'. [ 654.491135][T18756] device bond0 entered promiscuous mode [ 654.510429][T18756] device bond_slave_1 entered promiscuous mode [ 654.532442][T18756] device bridge0 entered promiscuous mode [ 654.563834][T18756] bridge0: port 3(bond0) entered blocking state [ 654.621350][T18756] bridge0: port 3(bond0) entered disabled state [ 654.821316][T18762] netlink: 'syz.1.4918': attribute type 11 has an invalid length. [ 655.241559][T18767] FAULT_INJECTION: forcing a failure. [ 655.241559][T18767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.291750][T18767] CPU: 0 PID: 18767 Comm: syz.4.4920 Not tainted syzkaller #0 [ 655.299294][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.309408][T18767] Call Trace: [ 655.312745][T18767] [ 655.315723][T18767] dump_stack_lvl+0x188/0x250 [ 655.320468][T18767] ? show_regs_print_info+0x20/0x20 [ 655.325713][T18767] ? load_image+0x400/0x400 [ 655.330255][T18767] ? __lock_acquire+0x7d10/0x7d10 [ 655.335325][T18767] ? bpf_test_run+0x78e/0x800 [ 655.340074][T18767] should_fail+0x38c/0x4c0 [ 655.344547][T18767] _copy_to_user+0x2e/0x130 [ 655.349101][T18767] bpf_test_finish+0x1b7/0x2f0 [ 655.353960][T18767] ? convert_skb_to___skb+0x360/0x360 [ 655.359376][T18767] ? __build_skb+0x1e2/0x2e0 [ 655.364199][T18767] ? convert_skb_to___skb+0x1ff/0x360 [ 655.369625][T18767] bpf_prog_test_run_skb+0xb8f/0x1180 [ 655.375071][T18767] ? cpu_online+0x60/0x60 [ 655.379533][T18767] bpf_prog_test_run+0x31e/0x390 [ 655.384553][T18767] __sys_bpf+0x5a5/0x6f0 [ 655.388845][T18767] ? bpf_link_show_fdinfo+0x380/0x380 [ 655.394273][T18767] ? vtime_user_exit+0x2c8/0x3e0 [ 655.399258][T18767] __x64_sys_bpf+0x78/0x90 [ 655.403714][T18767] do_syscall_64+0x4c/0xa0 [ 655.408189][T18767] ? clear_bhb_loop+0x30/0x80 [ 655.412907][T18767] ? clear_bhb_loop+0x30/0x80 [ 655.417631][T18767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 655.423589][T18767] RIP: 0033:0x7fb52c0bd799 [ 655.428164][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.448253][T18767] RSP: 002b:00007fb52a317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 655.456738][T18767] RAX: ffffffffffffffda RBX: 00007fb52c336fa0 RCX: 00007fb52c0bd799 [ 655.464913][T18767] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 655.472937][T18767] RBP: 00007fb52a317090 R08: 0000000000000000 R09: 0000000000000000 [ 655.481059][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.489085][T18767] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 655.497240][T18767] [ 655.824012][T18790] netlink: 'syz.1.4926': attribute type 10 has an invalid length. [ 655.926223][T18790] bond0: (slave bond_slave_0): Releasing backup interface [ 655.951560][T18788] netlink: 'syz.4.4927': attribute type 28 has an invalid length. [ 655.994446][T18787] netlink: 'syz.2.4929': attribute type 21 has an invalid length. [ 656.017334][T18787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4929'. [ 656.257362][T18803] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4931'. [ 656.350068][T18795] netlink: 'syz.1.4930': attribute type 10 has an invalid length. [ 656.380561][T18795] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4930'. [ 656.394404][T18795] device bond0 entered promiscuous mode [ 656.402478][T18795] device bond_slave_1 entered promiscuous mode [ 656.443007][T18795] device team0 entered promiscuous mode [ 656.467574][T18795] device team_slave_1 entered promiscuous mode [ 656.493089][T18795] device geneve1 entered promiscuous mode [ 656.503606][T18795] bridge0: port 3(bond0) entered blocking state [ 656.511427][T18795] bridge0: port 3(bond0) entered disabled state [ 656.526493][T18795] bridge0: port 3(bond0) entered blocking state [ 656.532978][T18795] bridge0: port 3(bond0) entered forwarding state [ 656.780151][T18816] netlink: 'syz.2.4938': attribute type 39 has an invalid length. [ 658.284278][T18855] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4951'. [ 658.312319][T18849] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4953'. [ 658.332586][T18858] netlink: 'syz.3.4950': attribute type 21 has an invalid length. [ 658.352036][T18858] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4950'. [ 658.894734][T18872] netlink: 'syz.3.4969': attribute type 29 has an invalid length. [ 658.975775][T18872] netlink: 'syz.3.4969': attribute type 29 has an invalid length. [ 659.047192][T18871] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4968'. [ 659.628269][T18892] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.4978'. [ 659.671635][T18892] netlink: 'syz.3.4978': attribute type 2 has an invalid length. [ 659.984787][T18905] netlink: 'syz.2.4970': attribute type 1 has an invalid length. [ 660.018076][T18905] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.4970'. [ 660.102880][T18907] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4967'. [ 660.292951][T18911] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4983'. [ 660.305730][T18911] netlink: 'syz.0.4983': attribute type 2 has an invalid length. [ 660.362018][T18914] netlink: 'syz.4.4971': attribute type 29 has an invalid length. [ 660.404830][T18914] netlink: 'syz.4.4971': attribute type 29 has an invalid length. [ 660.580240][T18920] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4974'. [ 662.365762][T18961] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4988'. [ 662.387583][T18961] netlink: 'syz.4.4988': attribute type 2 has an invalid length. [ 662.414267][T18966] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 662.500848][T18966] netlink: 'syz.1.4987': attribute type 29 has an invalid length. [ 662.578681][T18970] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4990'. [ 662.634530][T18971] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4990'. [ 662.650351][T18970] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 662.687091][T18971] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 662.720054][T18971] CPU: 0 PID: 18971 Comm: syz.3.4990 Not tainted syzkaller #0 [ 662.727599][T18971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 662.737801][T18971] Call Trace: [ 662.741178][T18971] [ 662.744162][T18971] dump_stack_lvl+0x188/0x250 [ 662.748907][T18971] ? show_regs_print_info+0x20/0x20 [ 662.754173][T18971] ? load_image+0x400/0x400 [ 662.758904][T18971] sysfs_warn_dup+0x8a/0xa0 [ 662.763475][T18971] sysfs_do_create_link_sd+0xc0/0x110 [ 662.768913][T18971] device_add+0x7ed/0xfb0 [ 662.773348][T18971] wiphy_register+0x1e81/0x2c30 [ 662.778336][T18971] ? cfg80211_event_work+0x40/0x40 [ 662.783510][T18971] ? minstrel_ht_alloc+0x808/0x980 [ 662.788712][T18971] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 662.794890][T18971] ieee80211_register_hw+0x2aa1/0x3af0 [ 662.800413][T18971] ? lockdep_hardirqs_on+0x94/0x140 [ 662.805741][T18971] ? ieee80211_tasklet_handler+0x20/0x20 [ 662.811476][T18971] ? rcu_is_watching+0x11/0xa0 [ 662.816311][T18971] ? memset+0x1e/0x40 [ 662.820367][T18971] ? hrtimer_init+0x10c/0x220 [ 662.825164][T18971] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 662.831029][T18971] hwsim_new_radio_nl+0xa6f/0xc40 [ 662.836198][T18971] genl_rcv_msg+0xcea/0xf90 [ 662.840817][T18971] ? genl_bind+0x380/0x380 [ 662.845333][T18971] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 662.851218][T18971] ? verify_lock_unused+0x140/0x140 [ 662.856533][T18971] ? perf_trace_lock_acquire+0x340/0x3e0 [ 662.862260][T18971] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 662.868955][T18971] ? perf_trace_lock+0xe4/0x390 [ 662.873875][T18971] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 662.880503][T18971] netlink_rcv_skb+0x1f5/0x440 [ 662.885329][T18971] ? genl_bind+0x380/0x380 [ 662.889816][T18971] ? netlink_ack+0xb50/0xb50 [ 662.894487][T18971] ? __lock_acquire+0x7d10/0x7d10 [ 662.899600][T18971] ? down_read+0x1aa/0x2e0 [ 662.904100][T18971] genl_rcv+0x24/0x40 [ 662.908142][T18971] netlink_unicast+0x774/0x920 [ 662.913002][T18971] netlink_sendmsg+0x8ba/0xbe0 [ 662.917871][T18971] ? netlink_getsockopt+0x570/0x570 [ 662.923143][T18971] ? aa_sock_msg_perm+0x94/0x150 [ 662.928146][T18971] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 662.933489][T18971] ? security_socket_sendmsg+0x7c/0xa0 [ 662.939018][T18971] ? netlink_getsockopt+0x570/0x570 [ 662.944273][T18971] ____sys_sendmsg+0x5b7/0x8f0 [ 662.949244][T18971] ? __sys_sendmsg_sock+0x30/0x30 [ 662.954365][T18971] ? import_iovec+0x6f/0xa0 [ 662.958942][T18971] ___sys_sendmsg+0x236/0x2e0 [ 662.963716][T18971] ? __sys_sendmsg+0x2a0/0x2a0 [ 662.968582][T18971] ? trace_event_raw_event_lock+0x270/0x270 [ 662.974640][T18971] __se_sys_sendmsg+0x1af/0x290 [ 662.979566][T18971] ? __x64_sys_sendmsg+0x80/0x80 [ 662.984554][T18971] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 662.990650][T18971] ? lockdep_hardirqs_on+0x94/0x140 [ 662.996009][T18971] do_syscall_64+0x4c/0xa0 [ 663.000475][T18971] ? clear_bhb_loop+0x30/0x80 [ 663.005199][T18971] ? clear_bhb_loop+0x30/0x80 [ 663.010032][T18971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 663.015992][T18971] RIP: 0033:0x7fe11aeba799 [ 663.020465][T18971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.040123][T18971] RSP: 002b:00007fe1190f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.048610][T18971] RAX: ffffffffffffffda RBX: 00007fe11b134090 RCX: 00007fe11aeba799 [ 663.056850][T18971] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 663.064879][T18971] RBP: 00007fe11af50c99 R08: 0000000000000000 R09: 0000000000000000 [ 663.072905][T18971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.081075][T18971] R13: 00007fe11b134128 R14: 00007fe11b134090 R15: 00007ffdaca37698 [ 663.089165][T18971] [ 663.189658][T18976] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.4993'. [ 663.742358][T18999] netlink: 'syz.0.5006': attribute type 3 has an invalid length. [ 663.751984][T18999] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 663.759912][T18999] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5006'. [ 663.769210][T18998] netlink: 'syz.0.5006': attribute type 3 has an invalid length. [ 664.985386][T19027] device bridge_slave_1 left promiscuous mode [ 664.994700][T19027] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.624127][T19052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.636241][T19053] __nla_validate_parse: 1 callbacks suppressed [ 665.636260][T19053] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5024'. [ 666.026051][T19066] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 666.074825][T19066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.142442][T19071] validate_nla: 3 callbacks suppressed [ 666.142476][T19071] netlink: 'syz.3.5042': attribute type 16 has an invalid length. [ 666.165734][T19071] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5042'. [ 666.203563][T19074] netlink: 'syz.3.5042': attribute type 16 has an invalid length. [ 666.314806][T19074] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5042'. [ 667.290717][T19107] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5043'. [ 667.552753][T19112] FAULT_INJECTION: forcing a failure. [ 667.552753][T19112] name failslab, interval 1, probability 0, space 0, times 0 [ 667.605876][T19112] CPU: 0 PID: 19112 Comm: syz.0.5045 Not tainted syzkaller #0 [ 667.613416][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 667.623522][T19112] Call Trace: [ 667.626842][T19112] [ 667.629809][T19112] dump_stack_lvl+0x188/0x250 [ 667.634543][T19112] ? show_regs_print_info+0x20/0x20 [ 667.639847][T19112] ? load_image+0x400/0x400 [ 667.644421][T19112] ? __lock_acquire+0x7d10/0x7d10 [ 667.649511][T19112] should_fail+0x38c/0x4c0 [ 667.653992][T19112] should_failslab+0x5/0x20 [ 667.658541][T19112] slab_pre_alloc_hook+0x51/0xc0 [ 667.663530][T19112] __kmalloc+0x6b/0x330 [ 667.667730][T19112] ? sk_prot_alloc+0xe7/0x210 [ 667.672465][T19112] sk_prot_alloc+0xe7/0x210 [ 667.677101][T19112] ? sk_alloc+0x1d/0x310 [ 667.681440][T19112] sk_alloc+0x2f/0x310 [ 667.685575][T19112] bpf_prog_test_run_skb+0x240/0x1180 [ 667.691040][T19112] ? __fget_files+0x40f/0x480 [ 667.695799][T19112] ? cpu_online+0x60/0x60 [ 667.700231][T19112] bpf_prog_test_run+0x31e/0x390 [ 667.705231][T19112] __sys_bpf+0x5a5/0x6f0 [ 667.709530][T19112] ? bpf_link_show_fdinfo+0x380/0x380 [ 667.714978][T19112] ? vtime_user_exit+0x2c8/0x3e0 [ 667.719980][T19112] __x64_sys_bpf+0x78/0x90 [ 667.724446][T19112] do_syscall_64+0x4c/0xa0 [ 667.728905][T19112] ? clear_bhb_loop+0x30/0x80 [ 667.733633][T19112] ? clear_bhb_loop+0x30/0x80 [ 667.738388][T19112] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 667.744380][T19112] RIP: 0033:0x7faa369df799 [ 667.748841][T19112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.768491][T19112] RSP: 002b:00007faa34c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 667.776966][T19112] RAX: ffffffffffffffda RBX: 00007faa36c58fa0 RCX: 00007faa369df799 [ 667.785172][T19112] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 667.793195][T19112] RBP: 00007faa34c39090 R08: 0000000000000000 R09: 0000000000000000 [ 667.801220][T19112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.809520][T19112] R13: 00007faa36c59038 R14: 00007faa36c58fa0 R15: 00007ffd57094858 [ 667.817664][T19112] [ 668.383460][T19140] FAULT_INJECTION: forcing a failure. [ 668.383460][T19140] name failslab, interval 1, probability 0, space 0, times 0 [ 668.439535][T19138] netlink: 'syz.4.5053': attribute type 10 has an invalid length. [ 668.454025][T19140] CPU: 1 PID: 19140 Comm: syz.1.5054 Not tainted syzkaller #0 [ 668.461561][T19140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.471656][T19140] Call Trace: [ 668.474967][T19140] [ 668.477961][T19140] dump_stack_lvl+0x188/0x250 [ 668.482684][T19140] ? show_regs_print_info+0x20/0x20 [ 668.487937][T19140] ? load_image+0x400/0x400 [ 668.492487][T19140] ? __might_sleep+0xf0/0xf0 [ 668.497122][T19140] ? __lock_acquire+0x7d10/0x7d10 [ 668.502201][T19140] should_fail+0x38c/0x4c0 [ 668.506672][T19140] should_failslab+0x5/0x20 [ 668.511219][T19140] slab_pre_alloc_hook+0x51/0xc0 [ 668.516339][T19140] kmem_cache_alloc_trace+0x47/0x2a0 [ 668.521670][T19140] ? sctp_association_new+0x86/0x24a0 [ 668.527093][T19140] sctp_association_new+0x86/0x24a0 [ 668.532349][T19140] ? sctp_do_bind+0x6bd/0x990 [ 668.537187][T19140] sctp_connect_new_asoc+0x2da/0x6a0 [ 668.542522][T19140] ? __sctp_connect+0xd80/0xd80 [ 668.547583][T19140] ? __local_bh_enable_ip+0x136/0x1c0 [ 668.553012][T19140] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 668.558602][T19140] ? security_sctp_bind_connect+0x85/0xb0 [ 668.564458][T19140] sctp_sendmsg+0x158d/0x2900 [ 668.569206][T19140] ? aa_sk_perm+0x7dc/0x910 [ 668.573756][T19140] ? sctp_getsockopt+0x8a0/0x8a0 [ 668.578826][T19140] ? aa_af_perm+0x340/0x340 [ 668.583403][T19140] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 668.589877][T19140] ? sock_rps_record_flow+0x17/0x3b0 [ 668.595296][T19140] ? inet_sendmsg+0xe5/0x2f0 [ 668.599941][T19140] ? inet_send_prepare+0x260/0x260 [ 668.605104][T19140] ____sys_sendmsg+0x5b7/0x8f0 [ 668.610045][T19140] ? __sys_sendmsg_sock+0x30/0x30 [ 668.615151][T19140] ? import_iovec+0x6f/0xa0 [ 668.619713][T19140] ___sys_sendmsg+0x236/0x2e0 [ 668.624457][T19140] ? __sys_sendmsg+0x2a0/0x2a0 [ 668.629290][T19140] ? trace_event_raw_event_lock+0x270/0x270 [ 668.635239][T19140] ? vfs_write+0x8b2/0xd60 [ 668.639735][T19140] __se_sys_sendmsg+0x1af/0x290 [ 668.644641][T19140] ? __x64_sys_sendmsg+0x80/0x80 [ 668.649627][T19140] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 668.655755][T19140] ? lockdep_hardirqs_on+0x94/0x140 [ 668.661006][T19140] do_syscall_64+0x4c/0xa0 [ 668.665472][T19140] ? clear_bhb_loop+0x30/0x80 [ 668.670218][T19140] ? clear_bhb_loop+0x30/0x80 [ 668.674946][T19140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 668.680875][T19140] RIP: 0033:0x7f218a04f799 [ 668.685325][T19140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.704968][T19140] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.713424][T19140] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 668.721434][T19140] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 668.729467][T19140] RBP: 00007f21882a9090 R08: 0000000000000000 R09: 0000000000000000 [ 668.737479][T19140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.745496][T19140] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 668.753537][T19140] [ 668.762993][T19138] device geneve0 entered promiscuous mode [ 668.976446][T19138] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 669.067481][T19144] netlink: 'syz.3.5056': attribute type 21 has an invalid length. [ 669.108045][T19148] netlink: 'syz.3.5056': attribute type 11 has an invalid length. [ 669.886607][T19163] FAULT_INJECTION: forcing a failure. [ 669.886607][T19163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.941674][T19163] CPU: 1 PID: 19163 Comm: syz.4.5072 Not tainted syzkaller #0 [ 669.949205][T19163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.959298][T19163] Call Trace: [ 669.962616][T19163] [ 669.965606][T19163] dump_stack_lvl+0x188/0x250 [ 669.970431][T19163] ? show_regs_print_info+0x20/0x20 [ 669.975680][T19163] ? load_image+0x400/0x400 [ 669.980232][T19163] ? __lock_acquire+0x7d10/0x7d10 [ 669.985317][T19163] should_fail+0x38c/0x4c0 [ 669.989780][T19163] _copy_from_user+0x2e/0x170 [ 669.994497][T19163] iovec_from_user+0x142/0x370 [ 669.999320][T19163] __import_iovec+0x70/0x490 [ 670.003970][T19163] import_iovec+0x6f/0xa0 [ 670.008444][T19163] ___sys_sendmsg+0x1fd/0x2e0 [ 670.013181][T19163] ? __sys_sendmsg+0x2a0/0x2a0 [ 670.017996][T19163] ? trace_event_raw_event_lock+0x270/0x270 [ 670.023942][T19163] ? vfs_write+0x8b2/0xd60 [ 670.028443][T19163] __se_sys_sendmsg+0x1af/0x290 [ 670.033339][T19163] ? __x64_sys_sendmsg+0x80/0x80 [ 670.038308][T19163] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 670.044431][T19163] ? lockdep_hardirqs_on+0x94/0x140 [ 670.049665][T19163] do_syscall_64+0x4c/0xa0 [ 670.054157][T19163] ? clear_bhb_loop+0x30/0x80 [ 670.058853][T19163] ? clear_bhb_loop+0x30/0x80 [ 670.063592][T19163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 670.069534][T19163] RIP: 0033:0x7fb52c0bd799 [ 670.073968][T19163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.093687][T19163] RSP: 002b:00007fb52a317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.102142][T19163] RAX: ffffffffffffffda RBX: 00007fb52c336fa0 RCX: 00007fb52c0bd799 [ 670.110161][T19163] RDX: 0000000000040000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 670.118337][T19163] RBP: 00007fb52a317090 R08: 0000000000000000 R09: 0000000000000000 [ 670.126340][T19163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.134685][T19163] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 670.142710][T19163] [ 670.654878][T19181] netlink: 'syz.4.5066': attribute type 7 has an invalid length. [ 672.279797][T19216] netlink: 'syz.0.5081': attribute type 29 has an invalid length. [ 672.358872][T19216] netlink: 'syz.0.5081': attribute type 29 has an invalid length. [ 672.397847][T19217] netlink: 'syz.0.5081': attribute type 29 has an invalid length. [ 672.419171][T19216] netlink: 'syz.0.5081': attribute type 29 has an invalid length. [ 672.550939][ T9] tipc: Subscription rejected, illegal request [ 673.199089][T19232] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5086'. [ 673.406664][T19242] IPv6: Can't replace route, no match found [ 673.709918][T19247] netlink: 'syz.4.5090': attribute type 10 has an invalid length. [ 673.791823][T19247] team0: Port device wlan1 added [ 673.934909][T19261] netlink: 'syz.2.5093': attribute type 39 has an invalid length. [ 674.146278][T19269] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.5097'. [ 674.553943][ T4988] tipc: Subscription rejected, illegal request [ 675.318885][T19298] device syzkaller0 entered promiscuous mode [ 676.970134][T19322] netlink: 'syz.2.5114': attribute type 9 has an invalid length. [ 677.008355][T19322] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5114'. [ 677.491029][ T144] tipc: Subscription rejected, illegal request [ 677.764229][T19334] netlink: 'syz.0.5119': attribute type 10 has an invalid length. [ 677.803743][T19266] tipc: Subscription rejected, illegal request [ 678.746083][T19266] tipc: Subscription rejected, illegal request [ 678.965541][T19361] netlink: 'syz.2.5126': attribute type 10 has an invalid length. [ 679.425744][T19380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.861989][T19266] tipc: Subscription rejected, illegal request [ 679.969625][T19385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5134'. [ 681.055542][T19396] device syzkaller0 entered promiscuous mode [ 681.541368][ T4248] tipc: Subscription rejected, illegal request [ 681.566196][T19266] tipc: Subscription rejected, illegal request [ 681.890420][T19400] chnl_net:caif_netlink_parms(): no params data found [ 682.242588][T19400] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.307538][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.348972][T19400] device bridge_slave_0 entered promiscuous mode [ 682.395907][T19400] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.427518][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.436611][T19400] device bridge_slave_1 entered promiscuous mode [ 682.512899][T19421] netlink: 'syz.4.5144': attribute type 10 has an invalid length. [ 682.567821][T19421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.625095][T19421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.694693][T19421] device batadv_slave_0 entered promiscuous mode [ 682.733928][T19421] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 682.819382][T19400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.847733][T10947] Bluetooth: hci3: command 0x0409 tx timeout [ 682.900364][T19400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.002049][T19400] team0: Port device team_slave_0 added [ 683.050219][T19400] team0: Port device team_slave_1 added [ 683.116456][T19400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.154178][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.253269][T19400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.319589][T19400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.376218][T19400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.491796][T19400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.741994][T19400] device hsr_slave_0 entered promiscuous mode [ 683.769435][T19436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5148'. [ 683.807151][T19400] device hsr_slave_1 entered promiscuous mode [ 683.841690][T19400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 683.868007][T19400] Cannot create hsr debugfs directory [ 683.988734][T19445] netlink: 'syz.3.5152': attribute type 46 has an invalid length. [ 683.998787][T19445] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5152'. [ 684.199273][T19453] netlink: 'syz.1.5153': attribute type 10 has an invalid length. [ 684.273692][ T1172] tipc: Subscription rejected, illegal request [ 684.298128][T19453] bridge0: port 3(bond0) entered disabled state [ 684.305549][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.497499][T19453] bridge0: port 3(bond0) entered blocking state [ 684.506125][T19453] bridge0: port 3(bond0) entered forwarding state [ 684.515947][T19453] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.523536][T19453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.936143][T10947] Bluetooth: hci3: command 0x041b tx timeout [ 685.007400][T19453] bridge0: port 3(bond0) entered disabled state [ 685.016085][T19453] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.181494][T19455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5153'. [ 685.316066][T19400] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.516868][T19400] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.714895][T19400] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.824173][T19475] netlink: 'syz.3.5170': attribute type 7 has an invalid length. [ 685.852859][T19475] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5170'. [ 685.890665][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897106][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.210271][T19482] device syzkaller0 entered promiscuous mode [ 686.614408][T19488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5162'. [ 686.628700][T19400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.657966][T19400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.753076][T19400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.772316][T19400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 686.851406][ T4988] tipc: Subscription rejected, illegal request [ 686.966522][ T1172] tipc: Subscription rejected, illegal request [ 686.998027][T10953] Bluetooth: hci3: command 0x040f tx timeout [ 687.065354][T19400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.133483][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.144444][ T1172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.228516][T19400] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.340656][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.361504][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 687.400892][ T4988] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.408130][ T4988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.507275][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 687.524598][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 687.598442][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 687.704156][ T4988] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.711471][ T4988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.729403][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.747174][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.829470][T19509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5168'. [ 687.902823][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 687.939892][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 687.953573][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 687.973074][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 687.986923][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 688.003985][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.014777][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 688.034975][T19512] netlink: 'syz.1.5169': attribute type 21 has an invalid length. [ 688.052604][T19512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5169'. [ 688.090195][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 688.099499][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 688.118747][T19400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 688.410537][T19522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5173'. [ 688.452027][T19522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 688.694468][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.708878][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.729913][T19400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.762411][ T4988] tipc: Subscription rejected, illegal request [ 688.797133][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 688.814500][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 688.874646][T19266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 688.892278][T19266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 688.912909][T19400] device veth0_vlan entered promiscuous mode [ 688.932982][T19266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 688.951828][T19266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 688.982771][T19400] device veth1_vlan entered promiscuous mode [ 689.077841][T10946] Bluetooth: hci3: command 0x0419 tx timeout [ 689.093466][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 689.103627][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 689.113726][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 689.131415][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 689.172390][T19400] device veth0_macvtap entered promiscuous mode [ 689.196579][T19400] device veth1_macvtap entered promiscuous mode [ 689.357021][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.377180][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.387334][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.406218][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.419743][T19400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.431641][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 689.460156][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 689.470915][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 689.480922][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 689.501296][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.517086][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.527637][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.539905][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.550561][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.561863][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.573393][T19400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.584827][T19400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.604070][T19400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.629048][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 689.653591][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 689.684044][T19400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.707517][T19400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.716292][T19400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.761059][T19400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.856010][T19557] bond0: (slave bridge0): Error: Slave device does not support XDP [ 689.957967][ T154] device hsr_slave_0 left promiscuous mode [ 689.968161][ T154] device hsr_slave_1 left promiscuous mode [ 689.981025][ T154] device bridge_slave_0 left promiscuous mode [ 689.987305][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.000699][ T154] device veth1_macvtap left promiscuous mode [ 690.006781][ T154] device veth0_macvtap left promiscuous mode [ 690.013859][ T154] device veth1_vlan left promiscuous mode [ 690.020153][ T154] device veth0_vlan left promiscuous mode [ 690.469451][T19562] netlink: 'syz.4.5189': attribute type 21 has an invalid length. [ 690.484803][T19562] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5189'. [ 690.552929][ T4988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.566045][ T4988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.591032][T19266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 690.637169][T19266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.655408][T19266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.673699][ T4988] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.771679][T19575] netlink: 'syz.3.5202': attribute type 3 has an invalid length. [ 690.817457][T19575] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5202'. [ 690.908996][ T9] tipc: Subscription rejected, illegal request [ 691.553436][T19599] FAULT_INJECTION: forcing a failure. [ 691.553436][T19599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.600636][T19599] CPU: 0 PID: 19599 Comm: syz.4.5198 Not tainted syzkaller #0 [ 691.608199][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.618396][T19599] Call Trace: [ 691.621707][T19599] [ 691.624665][T19599] dump_stack_lvl+0x188/0x250 [ 691.629372][T19599] ? show_regs_print_info+0x20/0x20 [ 691.634600][T19599] ? load_image+0x400/0x400 [ 691.639144][T19599] ? __lock_acquire+0x7d10/0x7d10 [ 691.644204][T19599] should_fail+0x38c/0x4c0 [ 691.648760][T19599] _copy_to_user+0x2e/0x130 [ 691.653323][T19599] simple_read_from_buffer+0xe3/0x150 [ 691.658730][T19599] proc_fail_nth_read+0x1a6/0x220 [ 691.663782][T19599] ? proc_fault_inject_write+0x310/0x310 [ 691.669458][T19599] ? fsnotify_perm+0x254/0x560 [ 691.674253][T19599] ? proc_fault_inject_write+0x310/0x310 [ 691.680103][T19599] vfs_read+0x301/0xd60 [ 691.684301][T19599] ? kernel_read+0x1e0/0x1e0 [ 691.688926][T19599] ? __fget_files+0x40f/0x480 [ 691.693637][T19599] ? mutex_lock_nested+0x17/0x20 [ 691.698596][T19599] ? __fdget_pos+0x2bf/0x370 [ 691.703213][T19599] ? ksys_read+0x71/0x260 [ 691.707573][T19599] ksys_read+0x152/0x260 [ 691.711849][T19599] ? vfs_write+0xd60/0xd60 [ 691.716299][T19599] ? lockdep_hardirqs_on+0x94/0x140 [ 691.721537][T19599] do_syscall_64+0x4c/0xa0 [ 691.725971][T19599] ? clear_bhb_loop+0x30/0x80 [ 691.731017][T19599] ? clear_bhb_loop+0x30/0x80 [ 691.735720][T19599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 691.741736][T19599] RIP: 0033:0x7fb52c07dfce [ 691.746176][T19599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 691.765809][T19599] RSP: 002b:00007fb52a316fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 691.774252][T19599] RAX: ffffffffffffffda RBX: 00007fb52a3176c0 RCX: 00007fb52c07dfce [ 691.782251][T19599] RDX: 000000000000000f RSI: 00007fb52a3170a0 RDI: 0000000000000009 [ 691.790333][T19599] RBP: 00007fb52a317090 R08: 0000000000000000 R09: 0000000000000000 [ 691.798322][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.806372][T19599] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 691.814404][T19599] [ 691.983707][T19601] netlink: 'syz.1.5199': attribute type 10 has an invalid length. [ 692.007801][T19601] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 692.067749][T19601] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 692.106878][T19601] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 692.214025][T19601] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 692.249881][T19612] netlink: 'syz.2.5205': attribute type 21 has an invalid length. [ 692.276693][T19612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5205'. [ 692.300723][T19619] netlink: 'syz.3.5206': attribute type 21 has an invalid length. [ 692.318943][T19619] netlink: 'syz.3.5206': attribute type 6 has an invalid length. [ 692.346487][T19619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5206'. [ 693.324385][T19634] netlink: 'syz.0.5213': attribute type 3 has an invalid length. [ 693.437843][T19634] netlink: 'syz.0.5213': attribute type 1 has an invalid length. [ 693.546431][ T1172] tipc: Subscription rejected, illegal request [ 693.596756][T19634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5213'. [ 694.087661][T19667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5225'. [ 694.368590][T19680] netlink: 'syz.4.5227': attribute type 28 has an invalid length. [ 694.432484][T19683] netlink: 'syz.3.5228': attribute type 39 has an invalid length. [ 694.729577][T19687] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5230'. [ 694.961672][T19687] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 695.222789][ T9] tipc: Subscription rejected, illegal request [ 695.406838][T19714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5237'. [ 695.688877][T19717] validate_nla: 2 callbacks suppressed [ 695.688917][T19717] netlink: 'syz.2.5238': attribute type 39 has an invalid length. [ 695.922055][T19723] netlink: 'syz.1.5251': attribute type 10 has an invalid length. [ 696.094422][T19732] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.5243'. [ 696.715268][T19746] netlink: 'syz.2.5249': attribute type 10 has an invalid length. [ 696.747949][T19746] device bridge_slave_1 left promiscuous mode [ 696.788616][T19746] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.219333][T19785] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5263'. [ 699.392642][T19800] netlink: 'syz.1.5267': attribute type 10 has an invalid length. [ 699.458433][T19800] device bridge_slave_1 left promiscuous mode [ 699.491123][T19800] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.677296][T19800] device bridge_slave_1 entered promiscuous mode [ 699.688731][T19800] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 699.734233][T19785] netlink: 'syz.2.5263': attribute type 1 has an invalid length. [ 700.441520][T19820] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5275'. [ 700.484926][T19820] netlink: 160820 bytes leftover after parsing attributes in process `syz.2.5275'. [ 704.013741][T19866] netlink: 'syz.0.5286': attribute type 10 has an invalid length. [ 704.208368][T19873] netlink: 'syz.2.5287': attribute type 10 has an invalid length. [ 704.251531][T19873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.262810][T19877] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.5289'. [ 704.318298][T19873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.375342][T19873] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 704.416106][T19880] netlink: 'syz.0.5290': attribute type 10 has an invalid length. [ 704.444137][T19880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5290'. [ 704.464919][T19880] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 704.480918][T19880] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.596142][T19880] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 704.802416][T19884] netlink: 'syz.1.5301': attribute type 10 has an invalid length. [ 704.867153][T19884] device batadv_slave_0 entered promiscuous mode [ 704.919013][T19884] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 704.965477][T19888] netlink: 'syz.2.5291': attribute type 10 has an invalid length. [ 706.297237][T19945] netlink: 'syz.3.5311': attribute type 10 has an invalid length. [ 706.350761][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.392824][T19945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.543184][T19945] device batadv_slave_0 entered promiscuous mode [ 706.581187][T19945] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 706.654675][T19953] netlink: 'syz.1.5313': attribute type 21 has an invalid length. [ 706.705064][T19953] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5313'. [ 707.231975][T19970] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5318'. [ 707.614083][T19972] device syzkaller0 entered promiscuous mode [ 708.289047][T19970] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 708.341389][T19970] CPU: 0 PID: 19970 Comm: syz.4.5318 Not tainted syzkaller #0 [ 708.348928][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 708.359041][T19970] Call Trace: [ 708.362359][T19970] [ 708.365325][T19970] dump_stack_lvl+0x188/0x250 [ 708.370058][T19970] ? show_regs_print_info+0x20/0x20 [ 708.375343][T19970] ? load_image+0x400/0x400 [ 708.379995][T19970] sysfs_warn_dup+0x8a/0xa0 [ 708.384549][T19970] sysfs_do_create_link_sd+0xc0/0x110 [ 708.390082][T19970] device_add+0x7ed/0xfb0 [ 708.394477][T19970] wiphy_register+0x1e81/0x2c30 [ 708.399402][T19970] ? cfg80211_event_work+0x40/0x40 [ 708.404593][T19970] ? minstrel_ht_alloc+0x808/0x980 [ 708.410112][T19970] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 708.416248][T19970] ieee80211_register_hw+0x2aa1/0x3af0 [ 708.421988][T19970] ? ieee80211_tasklet_handler+0x20/0x20 [ 708.427757][T19970] ? rcu_is_watching+0x11/0xa0 [ 708.432584][T19970] ? memset+0x1e/0x40 [ 708.436623][T19970] ? hrtimer_init+0x10c/0x220 [ 708.441366][T19970] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 708.447158][T19970] hwsim_new_radio_nl+0xa6f/0xc40 [ 708.452249][T19970] genl_rcv_msg+0xcea/0xf90 [ 708.456981][T19970] ? genl_bind+0x380/0x380 [ 708.461464][T19970] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 708.467324][T19970] ? verify_lock_unused+0x140/0x140 [ 708.472567][T19970] ? perf_trace_lock_acquire+0x340/0x3e0 [ 708.478262][T19970] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 708.485332][T19970] ? perf_trace_lock+0x301/0x390 [ 708.490331][T19970] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 708.496952][T19970] netlink_rcv_skb+0x1f5/0x440 [ 708.502018][T19970] ? genl_bind+0x380/0x380 [ 708.506510][T19970] ? netlink_ack+0xb50/0xb50 [ 708.511160][T19970] ? __lock_acquire+0x7d10/0x7d10 [ 708.516331][T19970] ? down_read+0x1aa/0x2e0 [ 708.520881][T19970] genl_rcv+0x24/0x40 [ 708.524907][T19970] netlink_unicast+0x774/0x920 [ 708.529783][T19970] netlink_sendmsg+0x8ba/0xbe0 [ 708.534610][T19970] ? netlink_getsockopt+0x570/0x570 [ 708.539880][T19970] ? aa_sock_msg_perm+0x94/0x150 [ 708.544955][T19970] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 708.550287][T19970] ? security_socket_sendmsg+0x7c/0xa0 [ 708.555790][T19970] ? netlink_getsockopt+0x570/0x570 [ 708.561038][T19970] ____sys_sendmsg+0x5b7/0x8f0 [ 708.565954][T19970] ? __sys_sendmsg_sock+0x30/0x30 [ 708.571048][T19970] ? import_iovec+0x6f/0xa0 [ 708.575603][T19970] ___sys_sendmsg+0x236/0x2e0 [ 708.580352][T19970] ? __sys_sendmsg+0x2a0/0x2a0 [ 708.585275][T19970] ? trace_event_raw_event_lock+0x270/0x270 [ 708.591253][T19970] __se_sys_sendmsg+0x1af/0x290 [ 708.596197][T19970] ? __x64_sys_sendmsg+0x80/0x80 [ 708.601187][T19970] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 708.607365][T19970] ? lockdep_hardirqs_on+0x94/0x140 [ 708.612636][T19970] do_syscall_64+0x4c/0xa0 [ 708.617175][T19970] ? clear_bhb_loop+0x30/0x80 [ 708.621881][T19970] ? clear_bhb_loop+0x30/0x80 [ 708.626583][T19970] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.632499][T19970] RIP: 0033:0x7fb52c0bd799 [ 708.636941][T19970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.656578][T19970] RSP: 002b:00007fb52a317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.665024][T19970] RAX: ffffffffffffffda RBX: 00007fb52c336fa0 RCX: 00007fb52c0bd799 [ 708.673022][T19970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 708.681017][T19970] RBP: 00007fb52c153c99 R08: 0000000000000000 R09: 0000000000000000 [ 708.689189][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.697458][T19970] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 708.705474][T19970] [ 709.019524][T19988] netlink: 'syz.0.5323': attribute type 10 has an invalid length. [ 709.353467][T20010] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5329'. [ 710.381209][T20030] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5337'. [ 710.587549][T20036] netlink: 'syz.3.5338': attribute type 3 has an invalid length. [ 710.627564][T20036] netlink: 'syz.3.5338': attribute type 2 has an invalid length. [ 710.635483][T20036] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5338'. [ 711.688475][T20067] netlink: 'syz.1.5350': attribute type 1 has an invalid length. [ 711.909056][T20071] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5353'. [ 711.969290][T20071] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 712.036410][T20071] CPU: 0 PID: 20071 Comm: syz.0.5353 Not tainted syzkaller #0 [ 712.044229][T20071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.054342][T20071] Call Trace: [ 712.057663][T20071] [ 712.060636][T20071] dump_stack_lvl+0x188/0x250 [ 712.065362][T20071] ? show_regs_print_info+0x20/0x20 [ 712.070610][T20071] ? load_image+0x400/0x400 [ 712.075190][T20071] sysfs_warn_dup+0x8a/0xa0 [ 712.079771][T20071] sysfs_do_create_link_sd+0xc0/0x110 [ 712.085209][T20071] device_add+0x7ed/0xfb0 [ 712.089707][T20071] wiphy_register+0x1e81/0x2c30 [ 712.094628][T20071] ? cfg80211_event_work+0x40/0x40 [ 712.100050][T20071] ? minstrel_ht_alloc+0x808/0x980 [ 712.105218][T20071] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 712.111373][T20071] ieee80211_register_hw+0x2aa1/0x3af0 [ 712.116911][T20071] ? ieee80211_tasklet_handler+0x20/0x20 [ 712.122692][T20071] ? rcu_is_watching+0x11/0xa0 [ 712.127505][T20071] ? memset+0x1e/0x40 [ 712.131569][T20071] ? hrtimer_init+0x10c/0x220 [ 712.136294][T20071] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 712.142102][T20071] hwsim_new_radio_nl+0xa6f/0xc40 [ 712.147202][T20071] genl_rcv_msg+0xcea/0xf90 [ 712.151753][T20071] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 712.158115][T20071] ? genl_bind+0x380/0x380 [ 712.162613][T20071] ? verify_lock_unused+0x140/0x140 [ 712.167896][T20071] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 712.174651][T20071] ? perf_trace_lock+0xe4/0x390 [ 712.179554][T20071] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 712.186137][T20071] netlink_rcv_skb+0x1f5/0x440 [ 712.190943][T20071] ? genl_bind+0x380/0x380 [ 712.195410][T20071] ? netlink_ack+0xb50/0xb50 [ 712.200134][T20071] ? __lock_acquire+0x7d10/0x7d10 [ 712.205217][T20071] ? down_read+0x1aa/0x2e0 [ 712.209698][T20071] genl_rcv+0x24/0x40 [ 712.213716][T20071] netlink_unicast+0x774/0x920 [ 712.218544][T20071] netlink_sendmsg+0x8ba/0xbe0 [ 712.223353][T20071] ? netlink_getsockopt+0x570/0x570 [ 712.228577][T20071] ? apparmor_socket_sendmsg+0xe/0x30 [ 712.233993][T20071] ? aa_sock_msg_perm+0x94/0x150 [ 712.238952][T20071] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 712.244345][T20071] ? security_socket_sendmsg+0x7c/0xa0 [ 712.249829][T20071] ? netlink_getsockopt+0x570/0x570 [ 712.255054][T20071] ____sys_sendmsg+0x5b7/0x8f0 [ 712.259965][T20071] ? __sys_sendmsg_sock+0x30/0x30 [ 712.265049][T20071] ? import_iovec+0x6f/0xa0 [ 712.269579][T20071] ___sys_sendmsg+0x236/0x2e0 [ 712.274289][T20071] ? __sys_sendmsg+0x2a0/0x2a0 [ 712.279110][T20071] ? lockdep_hardirqs_on+0x94/0x140 [ 712.284360][T20071] __se_sys_sendmsg+0x1af/0x290 [ 712.289249][T20071] ? __x64_sys_sendmsg+0x80/0x80 [ 712.294206][T20071] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 712.300228][T20071] ? lockdep_hardirqs_on+0x94/0x140 [ 712.305461][T20071] do_syscall_64+0x4c/0xa0 [ 712.309903][T20071] ? clear_bhb_loop+0x30/0x80 [ 712.314609][T20071] ? clear_bhb_loop+0x30/0x80 [ 712.319308][T20071] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.325230][T20071] RIP: 0033:0x7faa369df799 [ 712.329679][T20071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.349313][T20071] RSP: 002b:00007faa34c39028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.358014][T20071] RAX: ffffffffffffffda RBX: 00007faa36c58fa0 RCX: 00007faa369df799 [ 712.366013][T20071] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 712.373996][T20071] RBP: 00007faa36a75c99 R08: 0000000000000000 R09: 0000000000000000 [ 712.381981][T20071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.390109][T20071] R13: 00007faa36c59038 R14: 00007faa36c58fa0 R15: 00007ffd57094858 [ 712.398143][T20071] [ 712.944752][T20092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5357'. [ 713.360015][T20109] netlink: 'syz.0.5366': attribute type 21 has an invalid length. [ 713.377041][T20109] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5366'. [ 714.001232][T20141] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5374'. [ 714.359771][T20144] netlink: 'syz.3.5375': attribute type 10 has an invalid length. [ 714.447774][T20155] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5377'. [ 715.593530][T20182] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 715.658573][T20182] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 715.780118][T20186] FAULT_INJECTION: forcing a failure. [ 715.780118][T20186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.828120][T20186] CPU: 0 PID: 20186 Comm: syz.1.5386 Not tainted syzkaller #0 [ 715.835648][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.845838][T20186] Call Trace: [ 715.849243][T20186] [ 715.852208][T20186] dump_stack_lvl+0x188/0x250 [ 715.856963][T20186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 715.863168][T20186] ? show_regs_print_info+0x20/0x20 [ 715.868449][T20186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 715.874785][T20186] should_fail+0x38c/0x4c0 [ 715.879256][T20186] _copy_from_user+0x2e/0x170 [ 715.884009][T20186] __copy_msghdr_from_user+0xc9/0x630 [ 715.889556][T20186] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 715.896281][T20186] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 715.901728][T20186] ___sys_sendmsg+0x19a/0x2e0 [ 715.906467][T20186] ? __sys_sendmsg+0x2a0/0x2a0 [ 715.911305][T20186] ? rcu_lock_acquire+0x9/0x30 [ 715.916242][T20186] __se_sys_sendmsg+0x1af/0x290 [ 715.920828][T20190] netlink: 'syz.0.5388': attribute type 1 has an invalid length. [ 715.921538][T20186] ? __x64_sys_sendmsg+0x80/0x80 [ 715.934876][T20186] ? syscall_enter_from_user_mode+0x2a/0x70 [ 715.940924][T20186] do_syscall_64+0x4c/0xa0 [ 715.945388][T20186] ? clear_bhb_loop+0x30/0x80 [ 715.950145][T20186] ? clear_bhb_loop+0x30/0x80 [ 715.954827][T20190] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5388'. [ 715.954866][T20186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 715.970133][T20186] RIP: 0033:0x7f218a04f799 [ 715.974590][T20186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.994236][T20186] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.002712][T20186] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 716.010847][T20186] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 716.018972][T20186] RBP: 00007f21882a9090 R08: 0000000000000000 R09: 0000000000000000 [ 716.026992][T20186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.035089][T20186] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 716.043233][T20186] [ 716.155673][T20192] netlink: 'syz.4.5387': attribute type 9 has an invalid length. [ 716.953712][T20214] netlink: 'syz.1.5394': attribute type 3 has an invalid length. [ 716.974713][T20214] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5394'. [ 717.800337][T20227] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5399'. [ 717.900302][T20227] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 717.929924][T20227] CPU: 0 PID: 20227 Comm: syz.3.5399 Not tainted syzkaller #0 [ 717.937508][T20227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.947610][T20227] Call Trace: [ 717.950935][T20227] [ 717.953902][T20227] dump_stack_lvl+0x188/0x250 [ 717.958619][T20227] ? show_regs_print_info+0x20/0x20 [ 717.963865][T20227] ? load_image+0x400/0x400 [ 717.968493][T20227] sysfs_warn_dup+0x8a/0xa0 [ 717.973023][T20227] sysfs_do_create_link_sd+0xc0/0x110 [ 717.978416][T20227] device_add+0x7ed/0xfb0 [ 717.982777][T20227] wiphy_register+0x1e81/0x2c30 [ 717.987669][T20227] ? cfg80211_event_work+0x40/0x40 [ 717.992821][T20227] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 717.999047][T20227] ieee80211_register_hw+0x2aa1/0x3af0 [ 718.004642][T20227] ? ieee80211_tasklet_handler+0x20/0x20 [ 718.010310][T20227] ? rcu_is_watching+0x11/0xa0 [ 718.015099][T20227] ? memset+0x1e/0x40 [ 718.019111][T20227] ? hrtimer_init+0x10c/0x220 [ 718.023819][T20227] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 718.029817][T20227] hwsim_new_radio_nl+0xa6f/0xc40 [ 718.034894][T20227] genl_rcv_msg+0xcea/0xf90 [ 718.039509][T20227] ? lock_chain_count+0x20/0x20 [ 718.044400][T20227] ? genl_bind+0x380/0x380 [ 718.048860][T20227] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 718.054877][T20227] ? lock_chain_count+0x20/0x20 [ 718.059767][T20227] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 718.066073][T20227] ? lockdep_hardirqs_on+0x94/0x140 [ 718.071296][T20227] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 718.077475][T20227] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 718.084195][T20227] ? lock_acquire+0x208/0x400 [ 718.088913][T20227] netlink_rcv_skb+0x1f5/0x440 [ 718.093703][T20227] ? genl_bind+0x380/0x380 [ 718.098142][T20227] ? netlink_ack+0xb50/0xb50 [ 718.102755][T20227] ? __lock_acquire+0x7d10/0x7d10 [ 718.107847][T20227] ? down_read+0x1aa/0x2e0 [ 718.112293][T20227] genl_rcv+0x24/0x40 [ 718.116291][T20227] netlink_unicast+0x774/0x920 [ 718.121094][T20227] netlink_sendmsg+0x8ba/0xbe0 [ 718.125892][T20227] ? netlink_getsockopt+0x570/0x570 [ 718.131216][T20227] ? netlink_getsockopt+0x570/0x570 [ 718.136605][T20227] ____sys_sendmsg+0x5b7/0x8f0 [ 718.141489][T20227] ? __sys_sendmsg_sock+0x30/0x30 [ 718.146564][T20227] ? import_iovec+0x6f/0xa0 [ 718.151232][T20227] ___sys_sendmsg+0x236/0x2e0 [ 718.155969][T20227] ? __sys_sendmsg+0x2a0/0x2a0 [ 718.160820][T20227] __se_sys_sendmsg+0x1af/0x290 [ 718.165696][T20227] ? __x64_sys_sendmsg+0x80/0x80 [ 718.170665][T20227] ? syscall_enter_from_user_mode+0x2a/0x70 [ 718.176593][T20227] do_syscall_64+0x4c/0xa0 [ 718.181115][T20227] ? clear_bhb_loop+0x30/0x80 [ 718.185917][T20227] ? clear_bhb_loop+0x30/0x80 [ 718.190618][T20227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 718.196620][T20227] RIP: 0033:0x7fe11aeba799 [ 718.201080][T20227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.220716][T20227] RSP: 002b:00007fe119114028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.229157][T20227] RAX: ffffffffffffffda RBX: 00007fe11b133fa0 RCX: 00007fe11aeba799 [ 718.237149][T20227] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 718.245147][T20227] RBP: 00007fe11af50c99 R08: 0000000000000000 R09: 0000000000000000 [ 718.253137][T20227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.261231][T20227] R13: 00007fe11b134038 R14: 00007fe11b133fa0 R15: 00007ffdaca37698 [ 718.269244][T20227] [ 718.618019][T20239] netlink: 'syz.1.5402': attribute type 10 has an invalid length. [ 718.839118][T20256] IPv6: Can't replace route, no match found [ 718.846026][T20256] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 721.965836][T20267] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.5410'. [ 722.856020][T20305] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5420'. [ 722.915673][T20310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5423'. [ 722.979450][T20305] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 723.110090][T20305] CPU: 1 PID: 20305 Comm: syz.1.5420 Not tainted syzkaller #0 [ 723.117638][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.128160][T20305] Call Trace: [ 723.131479][T20305] [ 723.134444][T20305] dump_stack_lvl+0x188/0x250 [ 723.139341][T20305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.145598][T20305] ? show_regs_print_info+0x20/0x20 [ 723.150918][T20305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.157143][T20305] sysfs_warn_dup+0x8a/0xa0 [ 723.161783][T20305] sysfs_do_create_link_sd+0xc0/0x110 [ 723.167206][T20305] device_add+0x7ed/0xfb0 [ 723.171792][T20305] wiphy_register+0x1e81/0x2c30 [ 723.177027][T20305] ? cfg80211_event_work+0x40/0x40 [ 723.182371][T20305] ? minstrel_ht_alloc+0x808/0x980 [ 723.187647][T20305] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 723.193872][T20305] ieee80211_register_hw+0x2aa1/0x3af0 [ 723.199583][T20305] ? ieee80211_tasklet_handler+0x20/0x20 [ 723.205283][T20305] ? rcu_is_watching+0x11/0xa0 [ 723.210094][T20305] ? memset+0x1e/0x40 [ 723.214127][T20305] ? hrtimer_init+0x10c/0x220 [ 723.218910][T20305] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 723.224703][T20305] hwsim_new_radio_nl+0xa6f/0xc40 [ 723.229795][T20305] genl_rcv_msg+0xcea/0xf90 [ 723.234370][T20305] ? genl_bind+0x380/0x380 [ 723.238845][T20305] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 723.244987][T20305] ? lock_chain_count+0x20/0x20 [ 723.249911][T20305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.256239][T20305] ? lockdep_hardirqs_on+0x94/0x140 [ 723.261501][T20305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 723.267710][T20305] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 723.274270][T20305] ? lock_acquire+0x208/0x400 [ 723.279003][T20305] netlink_rcv_skb+0x1f5/0x440 [ 723.283806][T20305] ? genl_bind+0x380/0x380 [ 723.288257][T20305] ? netlink_ack+0xb50/0xb50 [ 723.292975][T20305] ? __lock_acquire+0x7d10/0x7d10 [ 723.298120][T20305] ? down_read+0x1aa/0x2e0 [ 723.302589][T20305] genl_rcv+0x24/0x40 [ 723.306598][T20305] netlink_unicast+0x774/0x920 [ 723.311420][T20305] netlink_sendmsg+0x8ba/0xbe0 [ 723.316237][T20305] ? netlink_getsockopt+0x570/0x570 [ 723.321488][T20305] ? netlink_getsockopt+0x570/0x570 [ 723.326732][T20305] ____sys_sendmsg+0x5b7/0x8f0 [ 723.331558][T20305] ? __sys_sendmsg_sock+0x30/0x30 [ 723.336628][T20305] ? import_iovec+0x6f/0xa0 [ 723.341163][T20305] ___sys_sendmsg+0x236/0x2e0 [ 723.345875][T20305] ? __sys_sendmsg+0x2a0/0x2a0 [ 723.350705][T20305] __se_sys_sendmsg+0x1af/0x290 [ 723.355678][T20305] ? __x64_sys_sendmsg+0x80/0x80 [ 723.360672][T20305] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 723.366696][T20305] ? lockdep_hardirqs_on+0x94/0x140 [ 723.371924][T20305] do_syscall_64+0x4c/0xa0 [ 723.376400][T20305] ? clear_bhb_loop+0x30/0x80 [ 723.381215][T20305] ? clear_bhb_loop+0x30/0x80 [ 723.386123][T20305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 723.392063][T20305] RIP: 0033:0x7f218a04f799 [ 723.396542][T20305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.416391][T20305] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.424837][T20305] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 723.432870][T20305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 723.440858][T20305] RBP: 00007f218a0e5c99 R08: 0000000000000000 R09: 0000000000000000 [ 723.448847][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.456923][T20305] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 723.464937][T20305] [ 723.553868][T20312] netlink: 'syz.0.5424': attribute type 10 has an invalid length. [ 723.607659][T20329] device wlan0 entered promiscuous mode [ 723.916027][T20342] netlink: 'syz.0.5429': attribute type 11 has an invalid length. [ 723.975172][T20342] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5429'. [ 724.001290][T20323] netlink: 'syz.4.5426': attribute type 10 has an invalid length. [ 724.248485][T20353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.256014][T20353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.739924][T20369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5438'. [ 724.859876][T20372] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.5439'. [ 725.045603][T20372] netlink: 'syz.2.5439': attribute type 10 has an invalid length. [ 725.087943][T20372] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5439'. [ 725.170554][T20373] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.5439'. [ 725.204490][T20373] netlink: zone id is out of range [ 725.234464][T20373] netlink: zone id is out of range [ 725.265237][T20373] netlink: zone id is out of range [ 725.292760][T20373] netlink: zone id is out of range [ 725.298822][T20373] netlink: zone id is out of range [ 725.304578][T20373] netlink: zone id is out of range [ 725.319762][T20373] netlink: zone id is out of range [ 725.355457][T20373] netlink: zone id is out of range [ 725.363035][T20373] netlink: zone id is out of range [ 725.382072][ T9] tipc: Subscription rejected, illegal request [ 725.408150][T20373] netlink: zone id is out of range [ 725.765625][T20393] netlink: 'syz.1.5447': attribute type 10 has an invalid length. [ 725.973688][T20393] device bond0 left promiscuous mode [ 725.985745][T20393] device bond_slave_1 left promiscuous mode [ 726.029850][T20393] device team0 left promiscuous mode [ 726.036874][T20393] device team_slave_1 left promiscuous mode [ 726.045687][T20393] device geneve1 left promiscuous mode [ 726.068416][T20393] device bridge_slave_1 left promiscuous mode [ 726.088695][T20393] device batadv_slave_0 left promiscuous mode [ 726.107452][T20393] bridge0: port 3(bond0) entered disabled state [ 726.161333][T20393] team0: Device bond0 is already an upper device of the team interface [ 726.189899][T20394] netlink: 'syz.2.5445': attribute type 10 has an invalid length. [ 726.572450][T20427] FAULT_INJECTION: forcing a failure. [ 726.572450][T20427] name failslab, interval 1, probability 0, space 0, times 0 [ 726.632123][T20427] CPU: 0 PID: 20427 Comm: syz.3.5459 Not tainted syzkaller #0 [ 726.639670][T20427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.649887][T20427] Call Trace: [ 726.653207][T20427] [ 726.656177][T20427] dump_stack_lvl+0x188/0x250 [ 726.661503][T20427] ? show_regs_print_info+0x20/0x20 [ 726.666917][T20427] ? load_image+0x400/0x400 [ 726.671545][T20427] ? __might_sleep+0xf0/0xf0 [ 726.676168][T20427] ? __lock_acquire+0x7d10/0x7d10 [ 726.681237][T20427] should_fail+0x38c/0x4c0 [ 726.685783][T20427] should_failslab+0x5/0x20 [ 726.690307][T20427] slab_pre_alloc_hook+0x51/0xc0 [ 726.695283][T20427] __kmalloc+0x6b/0x330 [ 726.699555][T20427] ? tomoyo_encode+0x27e/0x540 [ 726.704878][T20427] tomoyo_encode+0x27e/0x540 [ 726.709514][T20427] tomoyo_realpath_from_path+0x5cd/0x610 [ 726.715209][T20427] tomoyo_path_number_perm+0x242/0x660 [ 726.720738][T20427] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 726.726349][T20427] security_file_ioctl+0x6c/0xa0 [ 726.731331][T20427] __se_sys_ioctl+0x48/0x170 [ 726.735952][T20427] do_syscall_64+0x4c/0xa0 [ 726.740479][T20427] ? clear_bhb_loop+0x30/0x80 [ 726.745237][T20427] ? clear_bhb_loop+0x30/0x80 [ 726.750125][T20427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 726.756047][T20427] RIP: 0033:0x7fe11aeba799 [ 726.760498][T20427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.780567][T20427] RSP: 002b:00007fe119114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.789012][T20427] RAX: ffffffffffffffda RBX: 00007fe11b133fa0 RCX: 00007fe11aeba799 [ 726.797012][T20427] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 000000000000000d [ 726.805030][T20427] RBP: 00007fe119114090 R08: 0000000000000000 R09: 0000000000000000 [ 726.813031][T20427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.821032][T20427] R13: 00007fe11b134038 R14: 00007fe11b133fa0 R15: 00007ffdaca37698 [ 726.829508][T20427] [ 726.877632][T20427] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.087730][ T9] tipc: Subscription rejected, illegal request [ 727.126078][T20441] netlink: 'syz.4.5462': attribute type 10 has an invalid length. [ 727.215788][T20441] netlink: 209860 bytes leftover after parsing attributes in process `syz.4.5462'. [ 727.567001][T20457] netlink: 'syz.3.5463': attribute type 10 has an invalid length. [ 727.592241][T20462] netlink: 'syz.0.5464': attribute type 10 has an invalid length. [ 727.609857][T20462] device hsr0 entered promiscuous mode [ 727.615524][T20462] FAULT_INJECTION: forcing a failure. [ 727.615524][T20462] name failslab, interval 1, probability 0, space 0, times 0 [ 727.660916][T20462] CPU: 0 PID: 20462 Comm: syz.0.5464 Not tainted syzkaller #0 [ 727.668460][T20462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.678552][T20462] Call Trace: [ 727.681867][T20462] [ 727.684827][T20462] dump_stack_lvl+0x188/0x250 [ 727.689544][T20462] ? __lock_acquire+0x7d10/0x7d10 [ 727.694707][T20462] ? show_regs_print_info+0x20/0x20 [ 727.699959][T20462] ? load_image+0x400/0x400 [ 727.704516][T20462] should_fail+0x38c/0x4c0 [ 727.708981][T20462] should_failslab+0x5/0x20 [ 727.713521][T20462] slab_pre_alloc_hook+0x51/0xc0 [ 727.718508][T20462] kmem_cache_alloc_node+0x47/0x2d0 [ 727.723746][T20462] ? __alloc_skb+0xf4/0x750 [ 727.728304][T20462] __alloc_skb+0xf4/0x750 [ 727.732680][T20462] rtmsg_ifinfo_build_skb+0x80/0x180 [ 727.738020][T20462] rtmsg_ifinfo+0x71/0x120 [ 727.742619][T20462] __dev_notify_flags+0xdc/0x300 [ 727.747687][T20462] ? __dev_change_flags+0x496/0x6a0 [ 727.752928][T20462] ? __dev_change_flags+0x6a0/0x6a0 [ 727.758236][T20462] ? __dev_change_flags+0x4d0/0x6a0 [ 727.763497][T20462] ? dev_get_flags+0x1c0/0x1c0 [ 727.768301][T20462] ? preempt_schedule_common+0xa5/0xd0 [ 727.773812][T20462] ? preempt_schedule+0xbc/0xd0 [ 727.778843][T20462] dev_change_flags+0xe3/0x1a0 [ 727.783748][T20462] do_setlink+0xcdb/0x3d60 [ 727.788263][T20462] ? vprintk_emit+0xf9/0x150 [ 727.792896][T20462] ? _printk+0xda/0x130 [ 727.797092][T20462] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 727.803300][T20462] ? load_image+0x400/0x400 [ 727.807930][T20462] ? perf_trace_lock+0xe4/0x390 [ 727.812832][T20462] ? __nla_validate_parse+0x1e23/0x2780 [ 727.818427][T20462] ? rtnetlink_rcv_msg+0x844/0xf30 [ 727.823582][T20462] ? netlink_rcv_skb+0x1f5/0x440 [ 727.828555][T20462] ? netlink_unicast+0x774/0x920 [ 727.833557][T20462] ? __nla_validate+0x50/0x50 [ 727.838316][T20462] ? validate_linkmsg+0x3db/0x4c0 [ 727.843397][T20462] rtnl_newlink+0x1658/0x1a50 [ 727.848225][T20462] ? rtnl_newlink+0x401/0x1a50 [ 727.853040][T20462] ? rtnl_setlink+0x500/0x500 [ 727.857786][T20462] ? __lock_acquire+0x13bc/0x7d10 [ 727.862928][T20462] ? trace_event_raw_event_lock+0x270/0x270 [ 727.868936][T20462] ? rtnetlink_rcv_msg+0x7ee/0xf30 [ 727.874219][T20462] ? rtnl_setlink+0x500/0x500 [ 727.879040][T20462] rtnetlink_rcv_msg+0x844/0xf30 [ 727.884041][T20462] ? rtnetlink_bind+0x80/0x80 [ 727.888804][T20462] ? __local_bh_enable_ip+0x136/0x1c0 [ 727.894218][T20462] ? lockdep_hardirqs_on+0x94/0x140 [ 727.899469][T20462] ? __local_bh_enable_ip+0x136/0x1c0 [ 727.904879][T20462] ? _local_bh_enable+0xa0/0xa0 [ 727.910047][T20462] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 727.915310][T20462] ? perf_trace_lock+0xe4/0x390 [ 727.920222][T20462] ? trace_event_raw_event_lock+0x270/0x270 [ 727.926189][T20462] ? __skb_clone+0x480/0x790 [ 727.930841][T20462] netlink_rcv_skb+0x1f5/0x440 [ 727.935643][T20462] ? rtnetlink_bind+0x80/0x80 [ 727.940363][T20462] ? netlink_ack+0xb50/0xb50 [ 727.945015][T20462] netlink_unicast+0x774/0x920 [ 727.949920][T20462] netlink_sendmsg+0x8ba/0xbe0 [ 727.954832][T20462] ? netlink_getsockopt+0x570/0x570 [ 727.960075][T20462] ? aa_sock_msg_perm+0x94/0x150 [ 727.965053][T20462] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 727.970379][T20462] ? security_socket_sendmsg+0x7c/0xa0 [ 727.975883][T20462] ? netlink_getsockopt+0x570/0x570 [ 727.981130][T20462] ____sys_sendmsg+0x5b7/0x8f0 [ 727.985952][T20462] ? __sys_sendmsg_sock+0x30/0x30 [ 727.991032][T20462] ? import_iovec+0x6f/0xa0 [ 727.995627][T20462] ___sys_sendmsg+0x236/0x2e0 [ 728.000533][T20462] ? __sys_sendmsg+0x2a0/0x2a0 [ 728.005350][T20462] ? trace_event_raw_event_lock+0x270/0x270 [ 728.011285][T20462] ? vfs_write+0x8b2/0xd60 [ 728.015776][T20462] __se_sys_sendmsg+0x1af/0x290 [ 728.020711][T20462] ? __x64_sys_sendmsg+0x80/0x80 [ 728.025696][T20462] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 728.031740][T20462] ? lockdep_hardirqs_on+0x94/0x140 [ 728.037129][T20462] do_syscall_64+0x4c/0xa0 [ 728.041595][T20462] ? clear_bhb_loop+0x30/0x80 [ 728.046356][T20462] ? clear_bhb_loop+0x30/0x80 [ 728.051173][T20462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.057123][T20462] RIP: 0033:0x7faa369df799 [ 728.061592][T20462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.081667][T20462] RSP: 002b:00007faa34c18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.090129][T20462] RAX: ffffffffffffffda RBX: 00007faa36c59090 RCX: 00007faa369df799 [ 728.098335][T20462] RDX: 0000000000000040 RSI: 0000200000000000 RDI: 000000000000000c [ 728.106356][T20462] RBP: 00007faa34c18090 R08: 0000000000000000 R09: 0000000000000000 [ 728.114375][T20462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.122381][T20462] R13: 00007faa36c59128 R14: 00007faa36c59090 R15: 00007ffd57094858 [ 728.130484][T20462] [ 728.171166][T20462] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 728.202542][T20462] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 728.214789][T20462] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 728.227854][T20462] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 728.250923][T20456] netlink: 'syz.1.5465': attribute type 10 has an invalid length. [ 728.265830][T20466] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 728.307744][T20466] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 728.318777][T20466] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 728.336424][T20466] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 728.995017][ T1172] tipc: Subscription rejected, illegal request [ 731.468203][T20479] device wlan0 entered promiscuous mode [ 731.639164][ T154] tipc: Subscription rejected, illegal request [ 732.038593][T20500] validate_nla: 1 callbacks suppressed [ 732.038622][T20500] netlink: 'syz.1.5480': attribute type 10 has an invalid length. [ 732.157075][T20513] netlink: 'syz.4.5483': attribute type 46 has an invalid length. [ 732.170156][T20502] netlink: 'syz.0.5481': attribute type 10 has an invalid length. [ 732.846702][ T154] tipc: Subscription rejected, illegal request [ 733.017431][T20538] netlink: 'syz.4.5494': attribute type 10 has an invalid length. [ 733.302609][T20550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5497'. [ 733.317749][T20550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5497'. [ 733.338983][T20550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5497'. [ 733.368830][T20550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5497'. [ 733.742808][T20561] netlink: 'syz.1.5500': attribute type 5 has an invalid length. [ 733.949639][T20571] FAULT_INJECTION: forcing a failure. [ 733.949639][T20571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.981187][T20569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5503'. [ 734.016318][T20571] CPU: 0 PID: 20571 Comm: syz.1.5504 Not tainted syzkaller #0 [ 734.023858][T20571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.034048][T20571] Call Trace: [ 734.037366][T20571] [ 734.040331][T20571] dump_stack_lvl+0x188/0x250 [ 734.045063][T20571] ? show_regs_print_info+0x20/0x20 [ 734.050319][T20571] ? load_image+0x400/0x400 [ 734.054886][T20571] ? __lock_acquire+0x7d10/0x7d10 [ 734.059982][T20571] should_fail+0x38c/0x4c0 [ 734.064459][T20571] _copy_from_iter+0x22e/0x1170 [ 734.069448][T20571] ? __lock_acquire+0x7d10/0x7d10 [ 734.074614][T20571] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 734.080144][T20571] ? __virt_addr_valid+0x3c6/0x470 [ 734.085299][T20571] ? __phys_addr_symbol+0x2b/0x70 [ 734.090354][T20571] ? __check_object_size+0x30c/0x410 [ 734.095683][T20571] netlink_sendmsg+0x758/0xbe0 [ 734.100509][T20571] ? netlink_getsockopt+0x570/0x570 [ 734.105876][T20571] ? aa_sock_msg_perm+0x94/0x150 [ 734.110869][T20571] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 734.116205][T20571] ? security_socket_sendmsg+0x7c/0xa0 [ 734.121717][T20571] ? netlink_getsockopt+0x570/0x570 [ 734.126954][T20571] ____sys_sendmsg+0x5b7/0x8f0 [ 734.131784][T20571] ? __sys_sendmsg_sock+0x30/0x30 [ 734.136873][T20571] ? import_iovec+0x6f/0xa0 [ 734.141512][T20571] ___sys_sendmsg+0x236/0x2e0 [ 734.146258][T20571] ? __sys_sendmsg+0x2a0/0x2a0 [ 734.151095][T20571] ? trace_event_raw_event_lock+0x270/0x270 [ 734.157035][T20571] ? vfs_write+0x8b2/0xd60 [ 734.161539][T20571] __se_sys_sendmsg+0x1af/0x290 [ 734.166537][T20571] ? __x64_sys_sendmsg+0x80/0x80 [ 734.171702][T20571] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 734.177902][T20571] ? lockdep_hardirqs_on+0x94/0x140 [ 734.183168][T20571] do_syscall_64+0x4c/0xa0 [ 734.187621][T20571] ? clear_bhb_loop+0x30/0x80 [ 734.192341][T20571] ? clear_bhb_loop+0x30/0x80 [ 734.197153][T20571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 734.203084][T20571] RIP: 0033:0x7f218a04f799 [ 734.207551][T20571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.227220][T20571] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.235679][T20571] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 734.243687][T20571] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 734.251702][T20571] RBP: 00007f21882a9090 R08: 0000000000000000 R09: 0000000000000000 [ 734.259721][T20571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.267742][T20571] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 734.275782][T20571] [ 734.363508][T20574] netlink: 'syz.4.5505': attribute type 4 has an invalid length. [ 734.397519][T20574] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5505'. [ 734.626620][T20574] net_ratelimit: 5 callbacks suppressed [ 734.626664][T20574] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 734.670055][T20578] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5506'. [ 734.713381][T20578] netlink: 'syz.3.5506': attribute type 3 has an invalid length. [ 734.757775][T20578] netlink: 19272 bytes leftover after parsing attributes in process `syz.3.5506'. [ 734.827068][T20580] netlink: 'syz.1.5507': attribute type 10 has an invalid length. [ 734.999651][T20588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5510'. [ 735.059023][ T9] tipc: Subscription rejected, illegal request [ 735.143003][T20588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5510'. [ 735.515385][T20608] netlink: 'syz.0.5515': attribute type 11 has an invalid length. [ 735.570022][T20607] netlink: 'syz.4.5517': attribute type 3 has an invalid length. [ 735.613539][T20612] sctp: [Deprecated]: syz.3.5516 (pid 20612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 735.613539][T20612] Use struct sctp_sack_info instead [ 735.634783][T20611] FAULT_INJECTION: forcing a failure. [ 735.634783][T20611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.693458][T20611] CPU: 0 PID: 20611 Comm: syz.1.5518 Not tainted syzkaller #0 [ 735.701000][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.711106][T20611] Call Trace: [ 735.714437][T20611] [ 735.717429][T20611] dump_stack_lvl+0x188/0x250 [ 735.722193][T20611] ? show_regs_print_info+0x20/0x20 [ 735.727450][T20611] ? load_image+0x400/0x400 [ 735.731997][T20611] ? __lock_acquire+0x7d10/0x7d10 [ 735.737092][T20611] should_fail+0x38c/0x4c0 [ 735.741566][T20611] _copy_from_user+0x2e/0x170 [ 735.746385][T20611] ip_tunnel_siocdevprivate+0xbe/0x1e0 [ 735.751995][T20611] ? ip_tunnel_update+0xad0/0xad0 [ 735.757080][T20611] ? full_name_hash+0x8e/0xe0 [ 735.761945][T20611] dev_ifsioc+0xa30/0xd50 [ 735.766346][T20611] ? dev_ioctl+0xe30/0xe30 [ 735.770838][T20611] ? full_name_hash+0x8e/0xe0 [ 735.775710][T20611] dev_ioctl+0x5df/0xe30 [ 735.780020][T20611] ? get_user_ifreq+0xc7/0x170 [ 735.784859][T20611] sock_ioctl+0x691/0x710 [ 735.789317][T20611] ? sock_poll+0x410/0x410 [ 735.793821][T20611] ? bpf_lsm_file_ioctl+0x5/0x10 [ 735.798805][T20611] ? security_file_ioctl+0x7c/0xa0 [ 735.803967][T20611] ? sock_poll+0x410/0x410 [ 735.808433][T20611] __se_sys_ioctl+0xfa/0x170 [ 735.813078][T20611] do_syscall_64+0x4c/0xa0 [ 735.817841][T20611] ? clear_bhb_loop+0x30/0x80 [ 735.822575][T20611] ? clear_bhb_loop+0x30/0x80 [ 735.827382][T20611] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 735.833377][T20611] RIP: 0033:0x7f218a04f799 [ 735.837892][T20611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.857584][T20611] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.866241][T20611] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 735.874348][T20611] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 735.882463][T20611] RBP: 00007f21882a9090 R08: 0000000000000000 R09: 0000000000000000 [ 735.890483][T20611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.898595][T20611] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 735.906668][T20611] [ 736.241081][T20628] sctp: [Deprecated]: syz.0.5523 (pid 20628) Use of int in max_burst socket option deprecated. [ 736.241081][T20628] Use struct sctp_assoc_value instead [ 736.444090][ T154] tipc: Subscription rejected, illegal request [ 736.705563][T20639] FAULT_INJECTION: forcing a failure. [ 736.705563][T20639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.746082][ T154] tipc: Subscription rejected, illegal request [ 736.833496][T20639] CPU: 1 PID: 20639 Comm: syz.0.5528 Not tainted syzkaller #0 [ 736.841047][T20639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.851178][T20639] Call Trace: [ 736.854495][T20639] [ 736.857460][T20639] dump_stack_lvl+0x188/0x250 [ 736.862306][T20639] ? show_regs_print_info+0x20/0x20 [ 736.867642][T20639] ? load_image+0x400/0x400 [ 736.872186][T20639] ? __lock_acquire+0x7d10/0x7d10 [ 736.877253][T20639] ? lock_chain_count+0x20/0x20 [ 736.882141][T20639] should_fail+0x38c/0x4c0 [ 736.886602][T20639] prepare_alloc_pages+0x1e4/0x5f0 [ 736.891754][T20639] __alloc_pages+0x11b/0x480 [ 736.896385][T20639] ? zone_statistics+0x170/0x170 [ 736.901356][T20639] ? copy_page_from_iter+0x49d/0x760 [ 736.906692][T20639] ? alloc_pages+0x438/0x550 [ 736.911413][T20639] pipe_write+0x5d2/0x1aa0 [ 736.915869][T20639] ? pipe_write+0x141/0x1aa0 [ 736.920506][T20639] ? pipe_read+0x1260/0x1260 [ 736.925122][T20639] ? end_current_label_crit_section+0x14b/0x170 [ 736.931404][T20639] ? memset+0x1e/0x40 [ 736.935500][T20639] ? iov_iter_init+0xb4/0x170 [ 736.940234][T20639] vfs_write+0x745/0xd60 [ 736.944517][T20639] ? file_end_write+0x250/0x250 [ 736.949411][T20639] ? __fget_files+0x40f/0x480 [ 736.954216][T20639] ? __fdget_pos+0x1e2/0x370 [ 736.958835][T20639] ? ksys_write+0x71/0x260 [ 736.963288][T20639] ksys_write+0x152/0x260 [ 736.967655][T20639] ? __ia32_sys_read+0x80/0x80 [ 736.972460][T20639] ? syscall_enter_from_user_mode+0x2a/0x70 [ 736.978391][T20639] do_syscall_64+0x4c/0xa0 [ 736.982831][T20639] ? clear_bhb_loop+0x30/0x80 [ 736.987621][T20639] ? clear_bhb_loop+0x30/0x80 [ 736.992328][T20639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 736.998245][T20639] RIP: 0033:0x7faa369df799 [ 737.002684][T20639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.022419][T20639] RSP: 002b:00007faa34c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.031001][T20639] RAX: ffffffffffffffda RBX: 00007faa36c58fa0 RCX: 00007faa369df799 [ 737.039016][T20639] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 737.047278][T20639] RBP: 00007faa34c39090 R08: 0000000000000000 R09: 0000000000000000 [ 737.055283][T20639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.063287][T20639] R13: 00007faa36c59038 R14: 00007faa36c58fa0 R15: 00007ffd57094858 [ 737.071488][T20639] [ 739.525809][T20652] validate_nla: 1 callbacks suppressed [ 739.525830][T20652] netlink: 'syz.4.5531': attribute type 3 has an invalid length. [ 739.587281][T20652] __nla_validate_parse: 5 callbacks suppressed [ 739.587299][T20652] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5531'. [ 739.670615][T20657] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5534'. [ 739.695066][T20657] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.5534'. [ 739.712802][T20657] tipc: Started in network mode [ 739.735216][T20657] tipc: Node identity 1a, cluster identity 4711 [ 739.745157][T20657] tipc: Node number set to 26 [ 739.855721][T20666] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5537'. [ 739.955698][T20670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5539'. [ 740.273703][T20673] netlink: 'syz.0.5540': attribute type 10 has an invalid length. [ 740.645674][ T154] tipc: Subscription rejected, illegal request [ 740.946866][T20690] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.5555'. [ 741.140624][T20694] netlink: 'syz.0.5546': attribute type 4 has an invalid length. [ 741.197338][T20694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5546'. [ 741.380943][T20694] wlan1: mtu less than device minimum [ 741.570977][T20702] netlink: 'syz.3.5547': attribute type 10 has an invalid length. [ 741.862318][T20708] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5551'. [ 741.997617][T20711] FAULT_INJECTION: forcing a failure. [ 741.997617][T20711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.014742][T20711] CPU: 1 PID: 20711 Comm: syz.1.5549 Not tainted syzkaller #0 [ 742.022268][T20711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.032352][T20711] Call Trace: [ 742.035663][T20711] [ 742.038611][T20711] dump_stack_lvl+0x188/0x250 [ 742.043330][T20711] ? show_regs_print_info+0x20/0x20 [ 742.048556][T20711] ? load_image+0x400/0x400 [ 742.053088][T20711] ? __lock_acquire+0x7d10/0x7d10 [ 742.058135][T20711] ? bpf_test_run+0x78e/0x800 [ 742.062837][T20711] should_fail+0x38c/0x4c0 [ 742.067279][T20711] _copy_to_user+0x2e/0x130 [ 742.071812][T20711] bpf_test_finish+0x1e6/0x2f0 [ 742.076961][T20711] ? convert_skb_to___skb+0x360/0x360 [ 742.082358][T20711] ? __build_skb+0x1e2/0x2e0 [ 742.087061][T20711] ? convert_skb_to___skb+0x1ff/0x360 [ 742.092487][T20711] bpf_prog_test_run_skb+0xb8f/0x1180 [ 742.097900][T20711] ? cpu_online+0x60/0x60 [ 742.102256][T20711] bpf_prog_test_run+0x31e/0x390 [ 742.107220][T20711] __sys_bpf+0x5a5/0x6f0 [ 742.111502][T20711] ? bpf_link_show_fdinfo+0x380/0x380 [ 742.117204][T20711] ? vtime_user_exit+0x2c8/0x3e0 [ 742.122170][T20711] __x64_sys_bpf+0x78/0x90 [ 742.126709][T20711] do_syscall_64+0x4c/0xa0 [ 742.131148][T20711] ? clear_bhb_loop+0x30/0x80 [ 742.135844][T20711] ? clear_bhb_loop+0x30/0x80 [ 742.140549][T20711] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 742.146464][T20711] RIP: 0033:0x7f218a04f799 [ 742.150899][T20711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.170529][T20711] RSP: 002b:00007f21882a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 742.179046][T20711] RAX: ffffffffffffffda RBX: 00007f218a2c8fa0 RCX: 00007f218a04f799 [ 742.187033][T20711] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 742.195019][T20711] RBP: 00007f21882a9090 R08: 0000000000000000 R09: 0000000000000000 [ 742.203007][T20711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.210996][T20711] R13: 00007f218a2c9038 R14: 00007f218a2c8fa0 R15: 00007ffde77a88f8 [ 742.219001][T20711] [ 742.273847][T20714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5552'. [ 742.346380][T20716] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5564'. [ 742.622515][ T9] tipc: Subscription rejected, illegal request [ 744.234610][ T9] tipc: Subscription rejected, illegal request [ 747.321448][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.327997][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.566195][T20793] __nla_validate_parse: 1 callbacks suppressed [ 747.566219][T20793] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5581'. [ 747.823270][T20805] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5593'. [ 748.302751][T19266] tipc: Subscription rejected, illegal request [ 748.630846][T20830] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5595'. [ 748.659970][T20837] FAULT_INJECTION: forcing a failure. [ 748.659970][T20837] name failslab, interval 1, probability 0, space 0, times 0 [ 748.807546][T20837] CPU: 1 PID: 20837 Comm: syz.4.5597 Not tainted syzkaller #0 [ 748.815086][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.825182][T20837] Call Trace: [ 748.828576][T20837] [ 748.831630][T20837] dump_stack_lvl+0x188/0x250 [ 748.836354][T20837] ? show_regs_print_info+0x20/0x20 [ 748.841623][T20837] ? load_image+0x400/0x400 [ 748.846169][T20837] ? __might_sleep+0xf0/0xf0 [ 748.850808][T20837] ? __lock_acquire+0x7d10/0x7d10 [ 748.855965][T20837] ? __local_bh_enable_ip+0x136/0x1c0 [ 748.861375][T20837] should_fail+0x38c/0x4c0 [ 748.865863][T20837] should_failslab+0x5/0x20 [ 748.870394][T20837] slab_pre_alloc_hook+0x51/0xc0 [ 748.875378][T20837] kmem_cache_alloc_node_trace+0x4a/0x300 [ 748.881137][T20837] ? __get_vm_area_node+0x119/0x2d0 [ 748.886390][T20837] __get_vm_area_node+0x119/0x2d0 [ 748.891458][T20837] __vmalloc_node_range+0xef/0x8b0 [ 748.896601][T20837] ? netlink_sendmsg+0x5ec/0xbe0 [ 748.901572][T20837] ? netlink_data_ready+0x10/0x10 [ 748.906649][T20837] ? netlink_sendmsg+0x5ec/0xbe0 [ 748.911624][T20837] vmalloc+0x75/0x80 [ 748.915563][T20837] ? netlink_sendmsg+0x5ec/0xbe0 [ 748.920543][T20837] netlink_sendmsg+0x5ec/0xbe0 [ 748.925455][T20837] ? netlink_getsockopt+0x570/0x570 [ 748.930785][T20837] ? aa_sock_msg_perm+0x94/0x150 [ 748.935785][T20837] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 748.941116][T20837] ? security_socket_sendmsg+0x7c/0xa0 [ 748.946606][T20837] ? netlink_getsockopt+0x570/0x570 [ 748.951835][T20837] ____sys_sendmsg+0x5b7/0x8f0 [ 748.956643][T20837] ? __sys_sendmsg_sock+0x30/0x30 [ 748.961710][T20837] ? import_iovec+0x6f/0xa0 [ 748.966252][T20837] ___sys_sendmsg+0x236/0x2e0 [ 748.970977][T20837] ? __sys_sendmsg+0x2a0/0x2a0 [ 748.975874][T20837] ? trace_event_raw_event_lock+0x270/0x270 [ 748.981818][T20837] ? vfs_write+0x8b2/0xd60 [ 748.986301][T20837] __se_sys_sendmsg+0x1af/0x290 [ 748.991191][T20837] ? __x64_sys_sendmsg+0x80/0x80 [ 748.996161][T20837] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 749.002624][T20837] ? lockdep_hardirqs_on+0x94/0x140 [ 749.007866][T20837] do_syscall_64+0x4c/0xa0 [ 749.012397][T20837] ? clear_bhb_loop+0x30/0x80 [ 749.017101][T20837] ? clear_bhb_loop+0x30/0x80 [ 749.021900][T20837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 749.027916][T20837] RIP: 0033:0x7fb52c0bd799 [ 749.032454][T20837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.052173][T20837] RSP: 002b:00007fb52a317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.060629][T20837] RAX: ffffffffffffffda RBX: 00007fb52c336fa0 RCX: 00007fb52c0bd799 [ 749.068639][T20837] RDX: 0000000000040000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 749.076651][T20837] RBP: 00007fb52a317090 R08: 0000000000000000 R09: 0000000000000000 [ 749.084669][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.092854][T20837] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 749.100899][T20837] [ 749.153590][T20837] syz.4.5597: vmalloc error: size 64960, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 749.198495][T20837] CPU: 0 PID: 20837 Comm: syz.4.5597 Not tainted syzkaller #0 [ 749.206031][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 749.216128][T20837] Call Trace: [ 749.219440][T20837] [ 749.222443][T20837] dump_stack_lvl+0x188/0x250 [ 749.227272][T20837] ? rcu_lock_release+0x5/0x20 [ 749.232077][T20837] ? show_regs_print_info+0x20/0x20 [ 749.237322][T20837] ? load_image+0x400/0x400 [ 749.241875][T20837] warn_alloc+0x243/0x320 [ 749.246257][T20837] ? zone_watermark_ok_safe+0x240/0x240 [ 749.251856][T20837] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 749.257879][T20837] ? __get_vm_area_node+0x119/0x2d0 [ 749.263143][T20837] __vmalloc_node_range+0x2b1/0x8b0 [ 749.268491][T20837] ? netlink_data_ready+0x10/0x10 [ 749.273570][T20837] ? netlink_sendmsg+0x5ec/0xbe0 [ 749.278549][T20837] vmalloc+0x75/0x80 [ 749.282491][T20837] ? netlink_sendmsg+0x5ec/0xbe0 [ 749.287469][T20837] netlink_sendmsg+0x5ec/0xbe0 [ 749.292281][T20837] ? netlink_getsockopt+0x570/0x570 [ 749.297519][T20837] ? aa_sock_msg_perm+0x94/0x150 [ 749.302516][T20837] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 749.307846][T20837] ? security_socket_sendmsg+0x7c/0xa0 [ 749.313463][T20837] ? netlink_getsockopt+0x570/0x570 [ 749.318700][T20837] ____sys_sendmsg+0x5b7/0x8f0 [ 749.323520][T20837] ? __sys_sendmsg_sock+0x30/0x30 [ 749.328608][T20837] ? import_iovec+0x6f/0xa0 [ 749.333157][T20837] ___sys_sendmsg+0x236/0x2e0 [ 749.337890][T20837] ? __sys_sendmsg+0x2a0/0x2a0 [ 749.342775][T20837] ? trace_event_raw_event_lock+0x270/0x270 [ 749.348707][T20837] ? vfs_write+0x8b2/0xd60 [ 749.353185][T20837] __se_sys_sendmsg+0x1af/0x290 [ 749.358077][T20837] ? __x64_sys_sendmsg+0x80/0x80 [ 749.363060][T20837] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 749.369128][T20837] ? lockdep_hardirqs_on+0x94/0x140 [ 749.374373][T20837] do_syscall_64+0x4c/0xa0 [ 749.378827][T20837] ? clear_bhb_loop+0x30/0x80 [ 749.383536][T20837] ? clear_bhb_loop+0x30/0x80 [ 749.388250][T20837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 749.394174][T20837] RIP: 0033:0x7fb52c0bd799 [ 749.398639][T20837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.418287][T20837] RSP: 002b:00007fb52a317028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.426763][T20837] RAX: ffffffffffffffda RBX: 00007fb52c336fa0 RCX: 00007fb52c0bd799 [ 749.434773][T20837] RDX: 0000000000040000 RSI: 0000200000000c40 RDI: 0000000000000003 [ 749.442784][T20837] RBP: 00007fb52a317090 R08: 0000000000000000 R09: 0000000000000000 [ 749.450815][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.458917][T20837] R13: 00007fb52c337038 R14: 00007fb52c336fa0 R15: 00007fffadbb1788 [ 749.466966][T20837] [ 749.518720][T20828] netlink: 'syz.3.5592': attribute type 10 has an invalid length. [ 749.710224][T20837] Mem-Info: [ 749.713677][T20837] active_anon:275 inactive_anon:10363 isolated_anon:0 [ 749.713677][T20837] active_file:26155 inactive_file:41532 isolated_file:0 [ 749.713677][T20837] unevictable:768 dirty:411 writeback:0 [ 749.713677][T20837] slab_reclaimable:21015 slab_unreclaimable:99576 [ 749.713677][T20837] mapped:30114 shmem:1630 pagetables:670 bounce:0 [ 749.713677][T20837] kernel_misc_reclaimable:0 [ 749.713677][T20837] free:1352278 free_pcp:10365 free_cma:0 [ 749.766599][T20837] Node 0 active_anon:1068kB inactive_anon:40944kB active_file:104416kB inactive_file:166128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120456kB dirty:1644kB writeback:0kB shmem:4444kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10248kB pagetables:2680kB all_unreclaimable? no [ 749.811139][T20837] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 750.269586][T20853] netlink: 'syz.3.5601': attribute type 7 has an invalid length. [ 750.457751][T20837] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.488687][T20837] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 750.494544][T20837] Node 0 DMA32 free:1470112kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:40892kB active_file:104416kB inactive_file:166128kB unevictable:1536kB writepending:1644kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:42440kB local_pcp:20980kB free_cma:0kB [ 750.532994][T20837] lowmem_reserve[]: 0 0 0 0 0 [ 750.541577][T20837] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 750.650083][T20837] lowmem_reserve[]: 0 0 0 0 0 [ 750.655018][T20837] Node 1 Normal free:3925184kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.684059][T20837] lowmem_reserve[]: 0 0 0 0 0 [ 750.689235][T20837] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 750.702817][T20837] Node 0 DMA32: 3830*4kB (UME) 2583*8kB (UME) 2181*16kB (UME) 1951*32kB (UME) 812*64kB (UME) 668*128kB (UME) 507*256kB (UME) 265*512kB (UME) 136*1024kB (UME) 28*2048kB (UM) 180*4096kB (UM) = 1470144kB [ 750.732612][T20837] Node 0 Normal: 2*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 750.735376][T19266] tipc: Subscription rejected, illegal request [ 750.752764][T20837] Node 1 Normal: 198*4kB (UME) 41*8kB (UME) 22*16kB (UME) 180*32kB (UME) 74*64kB (UME) 14*128kB (UE) 7*256kB (UME) 4*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 953*4096kB (M) = 3925184kB [ 750.771581][T20837] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.781745][T20837] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.828763][T20837] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.864852][T20837] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.874812][T20837] 69317 total pagecache pages [ 750.879931][T20837] 0 pages in swap cache [ 750.884219][T20837] Swap cache stats: add 151, delete 151, find 9/27 [ 750.891320][T20837] Free swap = 124472kB [ 750.895620][T20837] Total swap = 124996kB [ 750.900291][T20837] 2097051 pages RAM [ 750.904291][T20837] 0 pages HighMem/MovableOnly [ 750.909464][T20837] 411490 pages reserved [ 750.918383][T20837] 0 pages cma reserved [ 751.897291][T20873] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5608'. [ 752.061095][T20878] netlink: 'syz.1.5609': attribute type 10 has an invalid length. [ 752.123778][T20877] netlink: 'syz.0.5610': attribute type 10 has an invalid length. [ 753.021030][T20912] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5622'. [ 755.978274][T20914] netlink: 'syz.0.5623': attribute type 10 has an invalid length. [ 755.995051][T20917] netlink: 'syz.2.5624': attribute type 10 has an invalid length. [ 756.014425][T20923] device wlan1 entered promiscuous mode [ 756.295193][T20937] netlink: 'syz.1.5630': attribute type 27 has an invalid length. [ 756.339385][T20937] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.5630'. [ 756.543133][T20947] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5634'. [ 757.152309][T20962] netlink: 'syz.3.5637': attribute type 3 has an invalid length. [ 757.214777][T20962] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.5637'. [ 757.534428][T20966] device wlan1 entered promiscuous mode [ 757.875630][T20969] netlink: 'syz.1.5638': attribute type 10 has an invalid length. [ 758.306593][T20978] netlink: 'syz.3.5642': attribute type 39 has an invalid length. [ 758.743323][T20990] netlink: 'syz.2.5645': attribute type 6 has an invalid length. [ 758.976131][T21001] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5649'. [ 759.999984][T21021] device wlan1 entered promiscuous mode [ 760.067970][T21026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5657'. [ 760.883279][T21034] netlink: 'syz.1.5662': attribute type 10 has an invalid length. [ 761.239792][T21047] netlink: 'syz.3.5665': attribute type 10 has an invalid length. [ 761.306552][T21047] device bridge_slave_1 left promiscuous mode [ 761.333903][T21047] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.329035][T21049] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5666'. [ 764.541260][ T154] tipc: Subscription rejected, illegal request [ 764.682334][T21073] device syzkaller0 entered promiscuous mode [ 764.799780][T21080] netlink: 'syz.0.5677': attribute type 10 has an invalid length. [ 765.117101][T21096] netlink: 'syz.0.5683': attribute type 10 has an invalid length. [ 765.442612][ T9] tipc: Subscription rejected, illegal request [ 765.460182][T21110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 765.528590][T21110] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 765.551373][T21105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 765.574835][T21105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5686'. [ 765.970107][T21127] netlink: 'syz.1.5696': attribute type 6 has an invalid length. [ 766.154402][T21135] netlink: 'syz.2.5700': attribute type 10 has an invalid length. [ 766.257202][ T1172] tipc: Subscription rejected, illegal request [ 766.276619][T21135] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.313454][T21135] bond0: (slave team0): Enslaving as an active interface with an up link [ 766.340050][T21143] netlink: 'syz.4.5701': attribute type 21 has an invalid length. [ 767.365805][ T9] tipc: Subscription rejected, illegal request [ 767.368687][T21171] netlink: 'syz.3.5714': attribute type 10 has an invalid length. [ 767.829626][T21190] netlink: 'syz.1.5719': attribute type 10 has an invalid length. [ 768.625453][ T9] tipc: Subscription rejected, illegal request [ 769.035894][T21249] netlink: 182 bytes leftover after parsing attributes in process `syz.2.5739'. [ 769.067199][T21248] netlink: 'syz.1.5741': attribute type 39 has an invalid length. [ 769.111448][T21248] netlink: 'syz.1.5741': attribute type 10 has an invalid length. [ 769.154417][T21248] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5741'. [ 769.824616][ T9] tipc: Subscription rejected, illegal request [ 769.850250][T21261] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5747'. [ 773.158989][T21302] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5761'. [ 773.260921][T21302] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.5761'. [ 773.287479][T21306] netlink: 'syz.3.5762': attribute type 10 has an invalid length. [ 773.603827][ T154] tipc: Subscription rejected, illegal request [ 773.728315][T21319] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5767'. [ 773.835891][T21333] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5767'. [ 776.718081][T21333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 777.033457][T21352] netlink: 'syz.0.5775': attribute type 10 has an invalid length. [ 777.563971][T19266] tipc: Subscription rejected, illegal request [ 780.321376][T21375] device syzkaller0 entered promiscuous mode [ 780.626507][T21396] netlink: 'syz.4.5790': attribute type 10 has an invalid length. [ 780.974284][ T154] tipc: Subscription rejected, illegal request [ 784.185017][T21437] netlink: 'syz.4.5806': attribute type 10 has an invalid length. [ 784.887886][ T154] tipc: Subscription rejected, illegal request [ 785.000884][T21466] netlink: 'syz.2.5822': attribute type 10 has an invalid length. [ 785.332990][T21482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5820'. [ 786.309228][T21502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 786.316679][T21502] IPv6: NLM_F_CREATE should be set when creating new route [ 786.324060][T21502] IPv6: NLM_F_CREATE should be set when creating new route [ 786.331345][T21502] IPv6: NLM_F_CREATE should be set when creating new route [ 786.380368][ T154] tipc: Subscription rejected, illegal request [ 786.804975][T21521] netlink: 'syz.4.5834': attribute type 10 has an invalid length. [ 787.566219][T21530] chnl_net:caif_netlink_parms(): no params data found [ 787.858777][T21530] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.876312][T21530] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.901803][T21530] device bridge_slave_0 entered promiscuous mode [ 787.937176][T21530] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.960840][T21530] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.991950][T21530] device bridge_slave_1 entered promiscuous mode [ 788.071839][T21530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.110917][T21530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.236494][T21530] team0: Port device team_slave_0 added [ 788.264880][T21530] team0: Port device team_slave_1 added [ 789.167549][T10954] Bluetooth: hci4: command 0x0409 tx timeout [ 790.437917][T21530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.442659][T21566] netlink: 'syz.3.5849': attribute type 46 has an invalid length. [ 790.474637][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.608761][T21530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.641897][T21566] netlink: 'syz.3.5849': attribute type 46 has an invalid length. [ 790.656415][T21570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.666516][T21530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.673613][T21530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.711722][T21530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.843086][T21530] device hsr_slave_0 entered promiscuous mode [ 791.237648][ T21] Bluetooth: hci4: command 0x041b tx timeout [ 793.327614][T10952] Bluetooth: hci4: command 0x040f tx timeout [ 793.605103][T21530] device hsr_slave_1 entered promiscuous mode [ 793.623004][T21530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.636890][T21530] Cannot create hsr debugfs directory [ 793.654740][T21587] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5853'. [ 793.777238][ T4988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.843022][ T9] tipc: Subscription rejected, illegal request [ 793.942666][T21601] netlink: 'syz.2.5860': attribute type 3 has an invalid length. [ 793.974221][T21601] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5860'. [ 794.030073][ T4988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.090393][T21603] netlink: 'syz.0.5858': attribute type 10 has an invalid length. [ 794.140356][ T4988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.796104][T21637] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 794.812913][T21622] netlink: 'syz.0.5866': attribute type 10 has an invalid length. [ 794.824815][T21632] tun0: tun_chr_ioctl cmd 1074025677 [ 794.831631][T21632] tun0: linktype set to 768 [ 794.847207][T21635] IPv6: Can't replace route, no match found [ 794.939871][ T9] tipc: Subscription rejected, illegal request [ 795.009348][ T4988] tipc: Left network mode [ 795.151383][ C1] ------------[ cut here ]------------ [ 795.156927][ C1] WARNING: CPU: 1 PID: 21643 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 795.166365][ C1] Modules linked in: [ 795.170302][ C1] CPU: 1 PID: 21643 Comm: syz.2.5874 Not tainted syzkaller #0 [ 795.177813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.188027][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 795.194233][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 795.213873][ C1] RSP: 0018:ffffc90000dd0910 EFLAGS: 00010006 [ 795.219983][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff888022f53b80 [ 795.227975][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.235997][ C1] RBP: 0000000000000000 R08: ffff888022f53b87 R09: 1ffff110045ea770 [ 795.244002][ C1] R10: dffffc0000000000 R11: ffffed10045ea771 R12: ffff888022f55308 [ 795.252047][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0988 R15: 0000000020000000 [ 795.260051][ C1] FS: 00007f1bade356c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 795.269099][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.275964][ C1] CR2: 0000000000000000 CR3: 0000000020c09000 CR4: 00000000003506e0 [ 795.283961][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 795.292390][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 795.300423][ C1] Call Trace: [ 795.303756][ C1] [ 795.306643][ C1] bpf_probe_read_compat+0xdd/0x170 [ 795.311889][ C1] bpf_prog_fe8bc24ffbd89bb9+0x40/0x368 [ 795.317480][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 795.322728][ C1] ? perf_event_switch_output+0x730/0x730 [ 795.328483][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 795.334777][ C1] __perf_event_overflow+0x364/0x530 [ 795.340218][ C1] perf_swevent_hrtimer+0x41b/0x5b0 [ 795.345502][ C1] ? verify_lock_unused+0x140/0x140 [ 795.350745][ C1] ? cpu_clock_event_read+0x50/0x50 [ 795.355998][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 795.361941][ C1] ? _raw_spin_unlock+0x40/0x40 [ 795.366968][ C1] ? cpu_clock_event_read+0x50/0x50 [ 795.372214][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 795.377488][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 795.382740][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 795.388867][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 795.393876][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 795.400052][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 795.406350][ C1] [ 795.409317][ C1] [ 795.412281][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.418379][ C1] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 795.424401][ C1] Code: 8a e8 a6 3c 73 08 65 66 8b 05 ae 5b ba 7e 66 85 c0 75 54 bf 01 00 00 00 e8 bf 24 09 00 e8 6a 0f 36 00 fb 65 8b 05 5a 32 b9 7e <85> c0 75 05 e8 a9 3f b7 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 795.444038][ C1] RSP: 0018:ffffc90002dff740 EFLAGS: 00000286 [ 795.450167][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 97d46d49a85a5400 [ 795.458172][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 795.466180][ C1] RBP: ffffc90002dff7d0 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 795.474174][ C1] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffffffff87e345b5 [ 795.482182][ C1] R13: ffff88807bde4000 R14: dffffc0000000000 R15: 1ffff920005bfee8 [ 795.490341][ C1] ? local_bh_enable+0x5/0x20 [ 795.495091][ C1] ? _local_bh_enable+0xa0/0xa0 [ 795.499980][ C1] __dev_queue_xmit+0x1cbf/0x2f80 [ 795.505038][ C1] ? rcu_is_watching+0x11/0xa0 [ 795.509848][ C1] ? dev_queue_xmit+0x20/0x20 [ 795.514638][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.520834][ C1] ? bpf_clone_redirect+0x1bb/0x470 [ 795.526114][ C1] ? skb_release_data+0x19c/0x800 [ 795.531453][ C1] __bpf_redirect+0xa46/0xee0 [ 795.536175][ C1] bpf_clone_redirect+0x2e2/0x470 [ 795.541244][ C1] bpf_prog_ddd136b54ea55eb4+0x19/0xd78 [ 795.546834][ C1] bpf_test_run+0x2a8/0x800 [ 795.551395][ C1] ? convert___skb_to_skb+0x4c0/0x4c0 [ 795.556809][ C1] ? bpf_prog_test_run_skb+0x52d/0x1180 [ 795.562394][ C1] ? convert___skb_to_skb+0x3d/0x4c0 [ 795.567707][ C1] bpf_prog_test_run_skb+0x9cc/0x1180 [ 795.573120][ C1] ? cpu_online+0x60/0x60 [ 795.577594][ C1] bpf_prog_test_run+0x31e/0x390 [ 795.582586][ C1] __sys_bpf+0x5a5/0x6f0 [ 795.586971][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 795.592393][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 795.597465][ C1] __x64_sys_bpf+0x78/0x90 [ 795.601921][ C1] do_syscall_64+0x4c/0xa0 [ 795.606386][ C1] ? clear_bhb_loop+0x30/0x80 [ 795.611088][ C1] ? clear_bhb_loop+0x30/0x80 [ 795.615802][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.621726][ C1] RIP: 0033:0x7f1bafbdb799 [ 795.626358][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.646093][ C1] RSP: 002b:00007f1bade35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.654624][ C1] RAX: ffffffffffffffda RBX: 00007f1bafe54fa0 RCX: 00007f1bafbdb799 [ 795.662624][ C1] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 795.670707][ C1] RBP: 00007f1bafc71c99 R08: 0000000000000000 R09: 0000000000000000 [ 795.678710][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.686699][ C1] R13: 00007f1bafe55038 R14: 00007f1bafe54fa0 R15: 00007ffd46e95088 [ 795.694710][ C1] [ 795.697759][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 795.705247][ C1] CPU: 1 PID: 21643 Comm: syz.2.5874 Not tainted syzkaller #0 [ 795.712733][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.722986][ C1] Call Trace: [ 795.726293][ C1] [ 795.729162][ C1] dump_stack_lvl+0x188/0x250 [ 795.733879][ C1] ? show_regs_print_info+0x20/0x20 [ 795.739117][ C1] ? load_image+0x400/0x400 [ 795.744095][ C1] panic+0x2e5/0x810 [ 795.748035][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 795.752596][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 795.758175][ C1] __warn+0x248/0x2b0 [ 795.762187][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 795.767757][ C1] report_bug+0x1b7/0x2e0 [ 795.772129][ C1] handle_bug+0x3a/0x70 [ 795.776416][ C1] exc_invalid_op+0x16/0x40 [ 795.780944][ C1] asm_exc_invalid_op+0x16/0x20 [ 795.785814][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 795.791997][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 795.811647][ C1] RSP: 0018:ffffc90000dd0910 EFLAGS: 00010006 [ 795.817847][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000008 RCX: ffff888022f53b80 [ 795.825923][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 795.834010][ C1] RBP: 0000000000000000 R08: ffff888022f53b87 R09: 1ffff110045ea770 [ 795.842005][ C1] R10: dffffc0000000000 R11: ffffed10045ea771 R12: ffff888022f55308 [ 795.850005][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0988 R15: 0000000020000000 [ 795.858020][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 795.863620][ C1] bpf_probe_read_compat+0xdd/0x170 [ 795.868957][ C1] bpf_prog_fe8bc24ffbd89bb9+0x40/0x368 [ 795.874880][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 795.880121][ C1] ? perf_event_switch_output+0x730/0x730 [ 795.885893][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 795.892168][ C1] __perf_event_overflow+0x364/0x530 [ 795.897485][ C1] perf_swevent_hrtimer+0x41b/0x5b0 [ 795.902706][ C1] ? verify_lock_unused+0x140/0x140 [ 795.907960][ C1] ? cpu_clock_event_read+0x50/0x50 [ 795.913302][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 795.919498][ C1] ? _raw_spin_unlock+0x40/0x40 [ 795.924467][ C1] ? cpu_clock_event_read+0x50/0x50 [ 795.929694][ C1] __hrtimer_run_queues+0x4b4/0xb70 [ 795.935119][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 795.940270][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 795.946361][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 795.951349][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 795.957360][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 795.963123][ C1] [ 795.966074][ C1] [ 795.969025][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 795.975029][ C1] RIP: 0010:__local_bh_enable_ip+0x13e/0x1c0 [ 795.981042][ C1] Code: 8a e8 a6 3c 73 08 65 66 8b 05 ae 5b ba 7e 66 85 c0 75 54 bf 01 00 00 00 e8 bf 24 09 00 e8 6a 0f 36 00 fb 65 8b 05 5a 32 b9 7e <85> c0 75 05 e8 a9 3f b7 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 796.000757][ C1] RSP: 0018:ffffc90002dff740 EFLAGS: 00000286 [ 796.006853][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 97d46d49a85a5400 [ 796.014854][ C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 796.022860][ C1] RBP: ffffc90002dff7d0 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 796.030864][ C1] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffffffff87e345b5 [ 796.038874][ C1] R13: ffff88807bde4000 R14: dffffc0000000000 R15: 1ffff920005bfee8 [ 796.046883][ C1] ? local_bh_enable+0x5/0x20 [ 796.051609][ C1] ? _local_bh_enable+0xa0/0xa0 [ 796.056502][ C1] __dev_queue_xmit+0x1cbf/0x2f80 [ 796.061565][ C1] ? rcu_is_watching+0x11/0xa0 [ 796.066398][ C1] ? dev_queue_xmit+0x20/0x20 [ 796.071111][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 796.077378][ C1] ? bpf_clone_redirect+0x1bb/0x470 [ 796.082652][ C1] ? skb_release_data+0x19c/0x800 [ 796.087730][ C1] __bpf_redirect+0xa46/0xee0 [ 796.092454][ C1] bpf_clone_redirect+0x2e2/0x470 [ 796.097524][ C1] bpf_prog_ddd136b54ea55eb4+0x19/0xd78 [ 796.103214][ C1] bpf_test_run+0x2a8/0x800 [ 796.107768][ C1] ? convert___skb_to_skb+0x4c0/0x4c0 [ 796.113275][ C1] ? bpf_prog_test_run_skb+0x52d/0x1180 [ 796.118936][ C1] ? convert___skb_to_skb+0x3d/0x4c0 [ 796.124266][ C1] bpf_prog_test_run_skb+0x9cc/0x1180 [ 796.129876][ C1] ? cpu_online+0x60/0x60 [ 796.134248][ C1] bpf_prog_test_run+0x31e/0x390 [ 796.139219][ C1] __sys_bpf+0x5a5/0x6f0 [ 796.143486][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 796.148905][ C1] ? vtime_user_exit+0x2c8/0x3e0 [ 796.153891][ C1] __x64_sys_bpf+0x78/0x90 [ 796.158337][ C1] do_syscall_64+0x4c/0xa0 [ 796.162874][ C1] ? clear_bhb_loop+0x30/0x80 [ 796.167583][ C1] ? clear_bhb_loop+0x30/0x80 [ 796.172286][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.178305][ C1] RIP: 0033:0x7f1bafbdb799 [ 796.182749][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.202760][ C1] RSP: 002b:00007f1bade35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 796.211198][ C1] RAX: ffffffffffffffda RBX: 00007f1bafe54fa0 RCX: 00007f1bafbdb799 [ 796.219188][ C1] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 796.227193][ C1] RBP: 00007f1bafc71c99 R08: 0000000000000000 R09: 0000000000000000 [ 796.235188][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 796.243187][ C1] R13: 00007f1bafe55038 R14: 00007f1bafe54fa0 R15: 00007ffd46e95088 [ 796.251202][ C1] [ 796.254536][ C1] Kernel Offset: disabled [ 796.259034][ C1] Rebooting in 86400 seconds..