last executing test programs: 13.725403355s ago: executing program 3 (id=3111): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @jmp={0x5, 0x0, 0xb, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x8b, &(0x7f0000000140)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x3}, 0x10, 0x23971, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000160081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="02000000050000000400"/24, @ANYBLOB], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001bc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001c00)="2737d3fa949cfadea1bb4c63604565c4cbbafe2ab2b91564051f9b9b654e64560013f4eeb593caef0474e4269395aee830ba4df8b4f4e248f2a2f60ed8207ef4d4814ae4885efe6b42f6d5d3057f448b69758243544e6e0230f662bc81910b546e777f7bfd1a30c7fe0dd2d15c7939ce7b7a016685c6d1d16ff8ba042551c0c08792284abb2949a5054efe913736e523e4312fa5447a", 0x96}], 0x1, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @local}}}], 0x50}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x7fffffff}, @exit, @alu={0x7, 0x1, 0x5, 0x9, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0x1a00000, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x2, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x9, 0xe, 0x6}, 0x10, 0x2f8, r1, 0x1, &(0x7f0000000a40)=[r2, r2, r6, r2, r2, r2, r2], &(0x7f0000000a80)=[{0x3, 0x5, 0x4, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x12, &(0x7f0000000bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x4, 0x2, 0x8, 0xd03, 0x7fffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xd, 0x0, 0x400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6], &(0x7f0000000640)=[{0x4, 0x4, 0x3, 0x6}, {0x5, 0x4, 0xb, 0x5}, {0x2, 0x1, 0x9, 0x6}, {0x0, 0x1, 0x0, 0xc}, {0x5, 0x3, 0x5, 0x7}], 0x10, 0x9c1c}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="639101c855b98600000000040000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 13.287776326s ago: executing program 3 (id=3114): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xfffffffc}, 0x0, 0x4000010000000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="1100000000000000"], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x8014) 12.80662322s ago: executing program 3 (id=3117): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000074", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/51}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x72cd2ffa4b754971) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 12.045872458s ago: executing program 3 (id=3122): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000d80)=""/113, 0x71}], 0x6}, 0x100) 11.689372056s ago: executing program 3 (id=3126): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x80000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000240)=@tipc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000500)=""/119, 0x77}], 0x7, &(0x7f0000000740)=""/19, 0x13}, 0x2000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x143) 10.80541435s ago: executing program 3 (id=3131): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x1}, 0x1004, 0x5, 0xffff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018005ccb595b758f8f132d340cf1f7ef0c00004e7b47cb88f56e2ffc00020000000000000000"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x12000, 0x200000000, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xe3e, 0x7}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000c817ffff000000000000000085000000bc0100009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xffc1, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d61d4e2ab1e031b2ff6fdade11f0b43761e3a79d61607b3e36c7477d3297b96e8d6145f66f4dd08b8702f27d96ed60372e02eb62d0dffef", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x39) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x800c2ba, 0x0, 0x4000000, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x922000000001, 0x106) close(r4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x88, 0x9, 0x1, 0x5, 0x0, 0x74, 0x20, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x7fff, 0x8b, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0xe, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 8.263744577s ago: executing program 4 (id=3139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f032c0000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 4.152380562s ago: executing program 4 (id=3147): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d00a6ff", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x11}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) close(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r6}, 0x18) 4.151620502s ago: executing program 0 (id=3148): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x143) 2.939819223s ago: executing program 0 (id=3155): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc92, 0x0, 0x0, 0x0}, 0xfffffffffffffd6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.726705894s ago: executing program 1 (id=3156): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000001e40)={0x2, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x7, 0x41c81, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x40, 0x2}, 0x4021, 0x0, 0x3, 0x6, 0x57a, 0x3, 0x8d11, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000001140)="b9efc93564f0de91485f3d", &(0x7f00000011c0)=""/9}, 0x20) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.651957167s ago: executing program 4 (id=3157): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f0000003800)=""/174, 0xae}, {0x0}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000d80)=""/113, 0x71}], 0x7}, 0x100) 2.430237888s ago: executing program 1 (id=3158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)='p', 0x1}], 0x1}, 0x3e8) 2.238111378s ago: executing program 4 (id=3159): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x18, 0x7, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) close(r2) 2.216578879s ago: executing program 0 (id=3160): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000d80)=""/113, 0x71}], 0x6}, 0x100) 2.216165459s ago: executing program 2 (id=3161): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) r2 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1a, 0x0, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000009c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x0, 0x1, 0xe, 0x2}], 0x10, 0x3ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2142) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000500)=@abs={0x1, 0x5c, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x408c0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x20040041) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.034283038s ago: executing program 1 (id=3162): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa6e8}, 0x94) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x9}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r1, 0xffffffffffffffff, r2, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200"], 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x18, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x0, 0x0}, 0x10) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (rerun: 32) r5 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) (async) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) (async) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1d}, 0x880, 0xac5d, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x0, 0x2}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2, 0x80, 0x7, 0x4, 0x0, 0x40000000000fff, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_config_ext={0x4, 0x9}, 0x1800, 0x1, 0xfffffffa, 0x0, 0x8, 0xf0a3, 0x1, 0x0, 0x6, 0x0, 0x1}, r5, 0x5, r6, 0x1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xb6, 0x0, 0x9, 0x2, 0x0, 0x5, 0x203, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x373, 0x1, @perf_config_ext={0x9, 0x623}, 0x1410, 0x6da8, 0x80000000, 0x7, 0x664, 0x624, 0xfff, 0x0, 0x8, 0x0, 0xc}, 0xffffffffffffffff, 0xf, r7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64=r6], &(0x7f0000000100)='GPL\x00', 0xffff}, 0x94) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)}, 0x0) 1.633096868s ago: executing program 2 (id=3163): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x20}, {}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, @jmp={0x5, 0x0, 0xb, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x8b, &(0x7f0000000140)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x3}, 0x10, 0x23971, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x6000, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000160081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="030000000000e700"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="02000000050000000400"/24, @ANYBLOB], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001bc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001c00)="2737d3fa949cfadea1bb4c63604565c4cbbafe2ab2b91564051f9b9b654e64560013f4eeb593caef0474e4269395aee830ba4df8b4f4e248f2a2f60ed8207ef4d4814ae4885efe6b42f6d5d3057f448b69758243544e6e0230f662bc81910b546e777f7bfd1a30c7fe0dd2d15c7939ce7b7a016685c6d1d16ff8ba042551c0c08792284abb2949a5054efe913736e523e4312fa5447a", 0x96}], 0x1, &(0x7f0000001d80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @local}}}], 0x50}, 0x24000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000b80)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x7fffffff}, @exit, @alu={0x7, 0x1, 0x5, 0x9, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0x1a00000, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x2, '\x00', r3, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x9, 0xe, 0x6}, 0x10, 0x2f8, r1, 0x1, &(0x7f0000000a40)=[r2, r2, r6, r2, r2, r2, r2], &(0x7f0000000a80)=[{0x3, 0x5, 0x4, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x12, &(0x7f0000000bc0)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x4, 0x2, 0x8, 0xd03, 0x7fffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xd, 0x0, 0x400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r6], &(0x7f0000000640)=[{0x4, 0x4, 0x3, 0x6}, {0x5, 0x4, 0xb, 0x5}, {0x2, 0x1, 0x9, 0x6}, {0x0, 0x1, 0x0, 0xc}, {0x5, 0x3, 0x5, 0x7}], 0x10, 0x9c1c}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="639101c855b98600000000040000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 1.612553549s ago: executing program 0 (id=3164): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be35c6e17aa31076b876c1d", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071"], 0x18) 1.535794893s ago: executing program 1 (id=3165): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x12, &(0x7f0000000200)=r2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 1.520635754s ago: executing program 4 (id=3166): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000001}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000010000000309000000000000000000000000000000000000a60581ac15396c0309e4b4cafd73a97eb684a9a98b906fe67aa8cb1cf421c6b7da4d39c684cd3c63d62e9a79f961b734898a1f942fd12459034c377af6a46ddc01d1134844b53a6bd4042e1b42b0c9016cf12daecaaeca00c753d6d17545af8941be7aeddae25855b372eb4731"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f00000003c0), &(0x7f0000000480)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xfffffffffffffe08, &(0x7f0000000a80)}, 0xfffffffffffffeef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xe6, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xa, 0x20000000000001a6, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x1, '\x00', r4, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffffffffd98, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0\x00'}, 0x18) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0xfffffffc, @private0, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2000000000000000130100003294284369563b94f4b3c89f39535d58000000977b3d2f56cfdf8bb5f2ac6dd52d0900"], 0x20}, 0x0) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef8}, 0x11efa, 0x1, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020750d0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2, 0x3, 0x84) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) recvmsg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc0000000000000014000000000000000100000041"], 0x4c}, 0x20009840) r10 = openat$cgroup_ro(r1, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r10, 0x400454d1, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 1.247798138s ago: executing program 0 (id=3167): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d00a6ff", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x11}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) close(r4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r6}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 1.246542728s ago: executing program 2 (id=3168): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0x8, 0x830d}, 0x102302, 0x2, 0xfefffffa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000001e40)={0x2, 0x80, 0x7, 0x6, 0x0, 0x9, 0x0, 0x7, 0x41c81, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x40, 0x2}, 0x4021, 0x0, 0x3, 0x6, 0x57a, 0x3, 0x8d11, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r1 = socket$kcm(0xa, 0x3, 0x73) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001200)={r0, &(0x7f0000001140)="b9efc93564f0de91485f3d", &(0x7f00000011c0)=""/9}, 0x20) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.165483462s ago: executing program 1 (id=3169): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f0000003800)=""/174, 0xae}, {0x0}, {&(0x7f0000000e00)=""/102, 0x66}, {&(0x7f0000000d80)=""/113, 0x71}], 0x7}, 0x100) 711.643785ms ago: executing program 4 (id=3170): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1}, 0x40000100) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="80cb3c29497c819a557465656c14681e04ae7295b909132c483222c5eaf1e37169c2c5ba647c0c2534dbb01bda9192411dadc3cf0fa4466f441cbbb30848d6d4387c89239bda7a9f0c692daec3b22e44bdc310e4bee9cdd9411ec6181f", 0x5d}, {&(0x7f00000009c0)="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", 0x1000}], 0x2, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x90}}], 0x30}, 0x4040) setsockopt$sock_attach_bpf(r2, 0x6, 0x2, &(0x7f0000000200)=r1, 0x4) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x2b, 'pids'}]}, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') 709.947385ms ago: executing program 1 (id=3171): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x80000001, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000240)=@tipc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/58, 0x3a}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000500)=""/119, 0x77}], 0x7, &(0x7f0000000740)=""/19, 0x13}, 0x2000) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r1, &(0x7f0000000a80), 0x0}, 0x20) socketpair(0x1e, 0x1, 0x0, 0x0) socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/28, 0x1c}, 0x2042) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x143) 547.399572ms ago: executing program 2 (id=3172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 250.750887ms ago: executing program 2 (id=3173): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e371e14018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=3174): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000003000000060000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007f00"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2ff03076003008cb89e08f086dd", 0x0, 0xd8a8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000024c0)=""/4083, 0xff3}, {&(0x7f0000000b80)=""/66, 0x42}, {&(0x7f0000000000)=""/38, 0x26}], 0x6}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020259040e9e1200002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000840)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0xfec2}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000540)="6fe4dd9eeb85271de1b87ef9440284", 0xf}], 0x4}, 0x200400c4) close(r2) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYRES8=r2, @ANYRES16=r9], 0x12) kernel console output (not intermixed with test programs): : Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.480788][T10317] Call Trace: [ 503.484118][T10317] [ 503.487098][T10317] dump_stack_lvl+0x188/0x24e [ 503.491858][T10317] ? show_regs_print_info+0x12/0x12 [ 503.497215][T10317] ? load_image+0x400/0x400 [ 503.501791][T10317] ? get_user_pages_fast_only+0x40/0x40 [ 503.507424][T10317] should_fail_ex+0x399/0x4d0 [ 503.512161][T10317] get_futex_key+0x8c9/0xf60 [ 503.516839][T10317] ? futex_setup_timer+0xc0/0xc0 [ 503.521933][T10317] ? perf_trace_lock_acquire+0x100/0x3e0 [ 503.527646][T10317] futex_wake+0x123/0x4f0 [ 503.532061][T10317] ? futex_wake_mark+0x150/0x150 [ 503.537084][T10317] do_futex+0x2e2/0x320 [ 503.541302][T10317] ? __ia32_sys_get_robust_list+0x100/0x100 [ 503.547442][T10317] ? __might_fault+0xc2/0x120 [ 503.552188][T10317] mm_release+0x20a/0x330 [ 503.556579][T10317] ? exit_robust_list+0x2d6/0x2f0 [ 503.561668][T10317] ? exit_mm_release+0x30/0x30 [ 503.566594][T10317] ? lockdep_hardirqs_on+0x94/0x140 [ 503.571866][T10317] exit_mm+0xa3/0x2d0 [ 503.575897][T10317] ? do_exit+0x2480/0x2480 [ 503.580358][T10317] ? taskstats_exit+0x35a/0x9d0 [ 503.585255][T10317] do_exit+0x905/0x2480 [ 503.589461][T10317] ? put_task_struct+0x80/0x80 [ 503.594268][T10317] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 503.600284][T10317] ? _raw_spin_lock_irq+0x86/0xf0 [ 503.605344][T10317] ? lock_chain_count+0x20/0x20 [ 503.610235][T10317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 503.615548][T10317] do_group_exit+0x217/0x2d0 [ 503.620190][T10317] ? lockdep_hardirqs_on+0x94/0x140 [ 503.625441][T10317] get_signal+0x1272/0x1350 [ 503.630058][T10317] arch_do_signal_or_restart+0xc4/0x1350 [ 503.635748][T10317] ? kick_process+0xd4/0x140 [ 503.640394][T10317] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 503.646353][T10317] ? __ia32_sys_pidfd_getfd+0x80/0x80 [ 503.651871][T10317] ? get_sigframe_size+0x10/0x10 [ 503.656855][T10317] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 503.662738][T10317] ? exit_to_user_mode_loop+0x3b/0x110 [ 503.668235][T10317] exit_to_user_mode_loop+0x70/0x110 [ 503.673573][T10317] exit_to_user_mode_prepare+0xee/0x180 [ 503.679157][T10317] syscall_exit_to_user_mode+0x16/0x40 [ 503.684645][T10317] do_syscall_64+0x58/0xa0 [ 503.689100][T10317] ? clear_bhb_loop+0x60/0xb0 [ 503.693821][T10317] ? clear_bhb_loop+0x60/0xb0 [ 503.698540][T10317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.704553][T10317] RIP: 0033:0x7fd4ec99c799 [ 503.709002][T10317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.728849][T10317] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.737402][T10317] RAX: fffffffffffffe00 RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 503.745498][T10317] RDX: 0000000000040001 RSI: 00002000000008c0 RDI: 0000000000000004 [ 503.753516][T10317] RBP: 00007fd4ed8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 503.761524][T10317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.769526][T10317] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 503.777551][T10317] [ 503.889231][T10323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2207'. [ 503.910712][T10322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2207'. [ 504.197399][T10347] netlink: 175 bytes leftover after parsing attributes in process `syz.4.2214'. [ 504.505519][T10356] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2217'. [ 504.551665][T10356] netlink: zone id is out of range [ 504.558380][T10356] netlink: zone id is out of range [ 504.632015][T10356] netlink: del zone limit has 4 unknown bytes [ 504.662704][T10361] netlink: 175 bytes leftover after parsing attributes in process `syz.3.2219'. [ 504.754878][T10368] netlink: 'syz.0.2220': attribute type 2 has an invalid length. [ 505.063822][T10376] netlink: 175 bytes leftover after parsing attributes in process `syz.4.2224'. [ 505.103912][T10376] FAULT_INJECTION: forcing a failure. [ 505.103912][T10376] name failslab, interval 1, probability 0, space 0, times 0 [ 505.165785][T10376] CPU: 0 PID: 10376 Comm: syz.4.2224 Not tainted syzkaller #0 [ 505.173344][T10376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.183635][T10376] Call Trace: [ 505.186955][T10376] [ 505.189961][T10376] dump_stack_lvl+0x188/0x24e [ 505.194715][T10376] ? show_regs_print_info+0x12/0x12 [ 505.200076][T10376] ? load_image+0x400/0x400 [ 505.204651][T10376] ? verify_lock_unused+0x140/0x140 [ 505.210019][T10376] should_fail_ex+0x399/0x4d0 [ 505.214774][T10376] should_failslab+0x5/0x20 [ 505.219318][T10376] slab_pre_alloc_hook+0x59/0x310 [ 505.224450][T10376] kmem_cache_alloc+0x56/0x2f0 [ 505.229256][T10376] ? skb_clone+0x1e7/0x370 [ 505.233722][T10376] skb_clone+0x1e7/0x370 [ 505.238010][T10376] __netlink_deliver_tap+0x3ed/0x800 [ 505.243400][T10376] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.248645][T10376] netlink_deliver_tap+0x19c/0x1b0 [ 505.253791][T10376] netlink_unicast+0x728/0x8d0 [ 505.258615][T10376] netlink_sendmsg+0x8ad/0xbd0 [ 505.263431][T10376] ? netlink_getsockopt+0x550/0x550 [ 505.268666][T10376] ? aa_sock_msg_perm+0x94/0x150 [ 505.273641][T10376] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 505.278952][T10376] ? security_socket_sendmsg+0x7c/0xa0 [ 505.284452][T10376] ? netlink_getsockopt+0x550/0x550 [ 505.289685][T10376] ____sys_sendmsg+0x5be/0x970 [ 505.294490][T10376] ? __sys_sendmsg_sock+0x30/0x30 [ 505.299542][T10376] ? __import_iovec+0x315/0x500 [ 505.304449][T10376] ? import_iovec+0x6f/0xa0 [ 505.309070][T10376] ___sys_sendmsg+0x2a2/0x360 [ 505.313788][T10376] ? __sys_sendmsg+0x290/0x290 [ 505.318602][T10376] ? __lock_acquire+0x7d10/0x7d10 [ 505.323766][T10376] __se_sys_sendmsg+0x1bb/0x2a0 [ 505.328923][T10376] ? __x64_sys_sendmsg+0x80/0x80 [ 505.333911][T10376] ? lockdep_hardirqs_on+0x94/0x140 [ 505.339143][T10376] do_syscall_64+0x4c/0xa0 [ 505.343682][T10376] ? clear_bhb_loop+0x60/0xb0 [ 505.348394][T10376] ? clear_bhb_loop+0x60/0xb0 [ 505.353205][T10376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.359220][T10376] RIP: 0033:0x7fb7fb59c799 [ 505.363661][T10376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.383465][T10376] RSP: 002b:00007fb7fc382028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.391997][T10376] RAX: ffffffffffffffda RBX: 00007fb7fb815fa0 RCX: 00007fb7fb59c799 [ 505.399995][T10376] RDX: 0000000020000800 RSI: 0000200000000600 RDI: 0000000000000004 [ 505.407996][T10376] RBP: 00007fb7fc382090 R08: 0000000000000000 R09: 0000000000000000 [ 505.415991][T10376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.424072][T10376] R13: 00007fb7fb816038 R14: 00007fb7fb815fa0 R15: 00007ffd3798ae08 [ 505.432175][T10376] [ 505.614416][T10376] netlink: 'syz.4.2224': attribute type 10 has an invalid length. [ 505.637103][T10376] device veth1_vlan left promiscuous mode [ 505.877804][T10396] netlink: 'syz.1.2231': attribute type 10 has an invalid length. [ 505.907863][T10398] netlink: 'syz.4.2233': attribute type 10 has an invalid length. [ 505.919397][T10395] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2232'. [ 505.941919][T10395] netlink: zone id is out of range [ 505.955752][T10395] netlink: zone id is out of range [ 505.968714][T10398] netlink: 'syz.4.2233': attribute type 10 has an invalid length. [ 505.987009][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2233'. [ 506.030003][T10395] netlink: del zone limit has 4 unknown bytes [ 506.032086][T10398] bridge0: port 3(team0) entered blocking state [ 506.064294][T10398] bridge0: port 3(team0) entered disabled state [ 506.075716][T10398] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 506.671860][T10419] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2241'. [ 506.713879][T10419] netlink: zone id is out of range [ 506.727540][T10419] netlink: zone id is out of range [ 506.767469][T10426] bridge0: port 3(team0) entered blocking state [ 506.806828][T10419] netlink: del zone limit has 4 unknown bytes [ 506.818153][T10426] bridge0: port 3(team0) entered disabled state [ 507.083340][T10431] netlink: 'syz.3.2245': attribute type 10 has an invalid length. [ 507.307008][T10440] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 507.334509][T10440] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 507.375735][T10440] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 507.395783][T10440] __nla_validate_parse: 1 callbacks suppressed [ 507.395802][T10440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2250'. [ 507.594049][T10447] netlink: 'syz.2.2254': attribute type 3 has an invalid length. [ 507.638800][T10447] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2254'. [ 507.688393][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 507.735387][T10449] tc_dump_action: action bad kind [ 508.061101][T10459] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2259'. [ 508.468730][T10467] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2262'. [ 508.565236][T10469] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 508.880161][T10475] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2266'. [ 508.987192][T10481] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 509.045380][T10481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2267'. [ 509.482002][T10487] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.2271'. [ 509.666846][T10499] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2276'. [ 509.701295][T10499] net_ratelimit: 16 callbacks suppressed [ 509.701342][T10499] netlink: zone id is out of range [ 509.761374][T10499] netlink: zone id is out of range [ 509.767655][T10499] netlink: zone id is out of range [ 509.877061][T10499] netlink: del zone limit has 4 unknown bytes [ 510.036217][T10504] validate_nla: 4 callbacks suppressed [ 510.036284][T10504] netlink: 'syz.1.2277': attribute type 3 has an invalid length. [ 510.075354][T10504] netlink: 105104 bytes leftover after parsing attributes in process `syz.1.2277'. [ 510.338185][T10515] netlink: 'syz.3.2279': attribute type 10 has an invalid length. [ 512.507556][T10520] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2281'. [ 512.573924][T10520] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 512.604161][T10525] netlink: 'syz.0.2285': attribute type 10 has an invalid length. [ 512.624423][T10525] wlan1: mtu less than device minimum [ 512.629977][T10525] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 512.698783][T10525] netlink: 'syz.0.2285': attribute type 10 has an invalid length. [ 512.719248][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2285'. [ 512.750023][T10525] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 512.798046][T10524] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.2284'. [ 512.898144][T10524] netlink: 'syz.3.2284': attribute type 10 has an invalid length. [ 512.959099][T10524] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2284'. [ 513.741706][T10548] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 514.081351][T10559] netlink: 'syz.0.2307': attribute type 10 has an invalid length. [ 514.145492][T10558] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2296'. [ 514.176724][T10558] netlink: zone id is out of range [ 514.194564][T10558] netlink: zone id is out of range [ 514.262440][T10558] netlink: del zone limit has 4 unknown bytes [ 514.298083][T10562] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2297'. [ 514.513048][T10565] netlink: 'syz.1.2298': attribute type 10 has an invalid length. [ 516.066498][T10566] netlink: 'syz.1.2298': attribute type 10 has an invalid length. [ 516.086970][T10566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2298'. [ 516.379232][T10573] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2303'. [ 516.410522][T10573] net_ratelimit: 1 callbacks suppressed [ 516.410567][T10573] netlink: zone id is out of range [ 516.433466][T10573] netlink: zone id is out of range [ 516.451977][T10573] netlink: zone id is out of range [ 516.517250][T10573] netlink: del zone limit has 4 unknown bytes [ 516.751370][T10580] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2306'. [ 516.823454][T10580] netlink: 'syz.1.2306': attribute type 10 has an invalid length. [ 516.845425][T10580] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2306'. [ 517.233956][T10598] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 517.247152][T10599] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 519.451129][T10598] team0: Port device wlan1 removed [ 519.534620][T10598] bond0: (slave wlan1): Opening slave failed [ 519.544074][T10603] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 519.579423][T10603] __nla_validate_parse: 1 callbacks suppressed [ 519.579442][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2313'. [ 519.604089][T10603] device team0 entered promiscuous mode [ 519.612749][T10603] device team_slave_0 entered promiscuous mode [ 519.626701][T10603] device team_slave_1 entered promiscuous mode [ 519.640987][T10603] device macvlan1 entered promiscuous mode [ 519.662335][T10603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.701630][T10606] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 519.808588][T10613] netlink: 'syz.4.2319': attribute type 10 has an invalid length. [ 520.034165][T10619] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2321'. [ 520.051709][T10619] netlink: zone id is out of range [ 520.062591][T10619] netlink: zone id is out of range [ 520.074903][T10619] netlink: zone id is out of range [ 520.162773][T10619] netlink: del zone limit has 4 unknown bytes [ 520.721960][T10629] FAULT_INJECTION: forcing a failure. [ 520.721960][T10629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.735749][T10629] CPU: 0 PID: 10629 Comm: syz.2.2325 Not tainted syzkaller #0 [ 520.743299][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.753433][T10629] Call Trace: [ 520.756781][T10629] [ 520.759784][T10629] dump_stack_lvl+0x188/0x24e [ 520.764564][T10629] ? show_regs_print_info+0x12/0x12 [ 520.769942][T10629] ? load_image+0x400/0x400 [ 520.774532][T10629] ? __lock_acquire+0x7d10/0x7d10 [ 520.779757][T10629] should_fail_ex+0x399/0x4d0 [ 520.784526][T10629] _copy_from_user+0x2c/0x170 [ 520.789398][T10629] ___sys_sendmsg+0x1c3/0x360 [ 520.794300][T10629] ? __sys_sendmsg+0x290/0x290 [ 520.799320][T10629] ? __lock_acquire+0x7d10/0x7d10 [ 520.804527][T10629] __se_sys_sendmsg+0x1bb/0x2a0 [ 520.809491][T10629] ? __x64_sys_sendmsg+0x80/0x80 [ 520.814576][T10629] ? lockdep_hardirqs_on+0x94/0x140 [ 520.819878][T10629] do_syscall_64+0x4c/0xa0 [ 520.824473][T10629] ? clear_bhb_loop+0x60/0xb0 [ 520.829335][T10629] ? clear_bhb_loop+0x60/0xb0 [ 520.834194][T10629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.840259][T10629] RIP: 0033:0x7fd4ec99c799 [ 520.844790][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.864864][T10629] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.873364][T10629] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 520.881492][T10629] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 520.889655][T10629] RBP: 00007fd4ed8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 520.897786][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.906188][T10629] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 520.914331][T10629] [ 520.928185][T10613] device team_slave_0 left promiscuous mode [ 520.964401][T10613] team0 (unregistering): Port device team_slave_0 removed [ 520.977460][T10613] device team_slave_1 left promiscuous mode [ 521.033306][T10613] team0 (unregistering): Port device team_slave_1 removed [ 521.046105][T10613] device bridge0 left promiscuous mode [ 521.076140][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.084122][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.159874][T10613] team0 (unregistering): Port device bridge0 removed [ 521.197206][T10613] device macvlan1 left promiscuous mode [ 521.213547][T10613] team0 (unregistering): Port device macvlan1 removed [ 521.231571][T10613] device macvlan0 left promiscuous mode [ 521.240096][T10613] team0 (unregistering): Port device macvlan0 removed [ 521.287439][T10622] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2323'. [ 521.835322][T10646] netlink: 'syz.0.2332': attribute type 10 has an invalid length. [ 521.866851][T10646] wlan1: mtu less than device minimum [ 521.888783][T10646] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 521.944003][T10649] netlink: 'syz.4.2333': attribute type 10 has an invalid length. [ 521.970090][T10646] netlink: 'syz.0.2332': attribute type 10 has an invalid length. [ 521.991864][T10646] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'. [ 522.022304][T10646] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 522.185952][T10652] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2334'. [ 522.212774][T10652] netlink: zone id is out of range [ 522.224197][T10652] netlink: zone id is out of range [ 522.248573][T10652] netlink: zone id is out of range [ 522.366942][T10652] netlink: del zone limit has 4 unknown bytes [ 522.390512][T10658] netlink: 'syz.2.2336': attribute type 29 has an invalid length. [ 522.407313][T10658] netlink: 'syz.2.2336': attribute type 29 has an invalid length. [ 522.417667][T10658] netlink: 'syz.2.2336': attribute type 29 has an invalid length. [ 522.548203][T10660] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 522.591486][T10660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.362430][T10685] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 525.381043][T10685] wlan1: mtu less than device minimum [ 525.389810][T10685] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 525.408317][T10687] netlink: 'syz.1.2346': attribute type 2 has an invalid length. [ 525.420293][T10683] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 525.478001][T10685] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 525.504459][T10685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2347'. [ 525.515712][T10685] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 526.000083][T10687] device 2 entered promiscuous mode [ 526.275556][T10697] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2351'. [ 526.317057][T10697] netlink: zone id is out of range [ 527.408556][T10707] netlink: 'syz.4.2355': attribute type 2 has an invalid length. [ 528.172762][T10707] device 0 entered promiscuous mode [ 529.084733][T10722] netlink: 'syz.4.2360': attribute type 10 has an invalid length. [ 529.157265][T10722] netlink: 'syz.4.2360': attribute type 10 has an invalid length. [ 529.199352][T10722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2360'. [ 529.235860][T10724] FAULT_INJECTION: forcing a failure. [ 529.235860][T10724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.268917][T10724] CPU: 1 PID: 10724 Comm: syz.0.2361 Not tainted syzkaller #0 [ 529.276478][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.286687][T10724] Call Trace: [ 529.290027][T10724] [ 529.293027][T10724] dump_stack_lvl+0x188/0x24e [ 529.297790][T10724] ? show_regs_print_info+0x12/0x12 [ 529.303425][T10724] ? load_image+0x400/0x400 [ 529.308098][T10724] ? __lock_acquire+0x7d10/0x7d10 [ 529.313205][T10724] should_fail_ex+0x399/0x4d0 [ 529.318016][T10724] _copy_from_user+0x2c/0x170 [ 529.322773][T10724] ___sys_sendmsg+0x1c3/0x360 [ 529.327536][T10724] ? __sys_sendmsg+0x290/0x290 [ 529.332599][T10724] ? __lock_acquire+0x7d10/0x7d10 [ 529.337719][T10724] __se_sys_sendmsg+0x1bb/0x2a0 [ 529.342690][T10724] ? __x64_sys_sendmsg+0x80/0x80 [ 529.347727][T10724] ? lockdep_hardirqs_on+0x94/0x140 [ 529.353209][T10724] do_syscall_64+0x4c/0xa0 [ 529.357708][T10724] ? clear_bhb_loop+0x60/0xb0 [ 529.362462][T10724] ? clear_bhb_loop+0x60/0xb0 [ 529.367391][T10724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.373439][T10724] RIP: 0033:0x7fd55239c799 [ 529.377925][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.397858][T10724] RSP: 002b:00007fd553198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.406385][T10724] RAX: ffffffffffffffda RBX: 00007fd552615fa0 RCX: 00007fd55239c799 [ 529.414418][T10724] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 529.422453][T10724] RBP: 00007fd553198090 R08: 0000000000000000 R09: 0000000000000000 [ 529.430929][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.439050][T10724] R13: 00007fd552616038 R14: 00007fd552615fa0 R15: 00007ffdd4f50368 [ 529.447114][T10724] [ 530.018734][T10738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2368'. [ 533.279808][T10767] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 533.295112][T10767] net_ratelimit: 3 callbacks suppressed [ 533.295133][T10767] wlan1: mtu less than device minimum [ 533.325518][T10767] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 533.409836][T10774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2377'. [ 533.425415][T10767] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 533.436596][T10767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2375'. [ 533.448276][T10767] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 533.829912][T10786] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2384'. [ 533.854187][T10782] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2382'. [ 533.858486][T10786] netlink: zone id is out of range [ 533.895142][T10786] netlink: zone id is out of range [ 533.921190][T10782] netlink: zone id is out of range [ 533.926470][T10782] netlink: zone id is out of range [ 533.966117][T10782] netlink: zone id is out of range [ 533.973077][T10786] netlink: del zone limit has 4 unknown bytes [ 534.031806][T10782] netlink: zone id is out of range [ 534.069962][T10782] netlink: get zone limit has 8 unknown bytes [ 534.180304][T10794] netlink: 'syz.4.2387': attribute type 19 has an invalid length. [ 534.233377][T10794] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2387'. [ 535.006179][T10813] netlink: 'syz.4.2393': attribute type 10 has an invalid length. [ 535.083851][T10813] netlink: 'syz.4.2393': attribute type 10 has an invalid length. [ 535.105949][T10813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2393'. [ 535.224193][T10817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2396'. [ 535.257784][T10817] FAULT_INJECTION: forcing a failure. [ 535.257784][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 535.288787][T10817] CPU: 0 PID: 10817 Comm: syz.2.2396 Not tainted syzkaller #0 [ 535.296360][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.306480][T10817] Call Trace: [ 535.309830][T10817] [ 535.312810][T10817] dump_stack_lvl+0x188/0x24e [ 535.317568][T10817] ? finish_task_switch+0x265/0x8f0 [ 535.322827][T10817] ? show_regs_print_info+0x12/0x12 [ 535.328110][T10817] ? load_image+0x400/0x400 [ 535.332677][T10817] ? mark_lock+0x94/0x320 [ 535.337158][T10817] should_fail_ex+0x399/0x4d0 [ 535.341891][T10817] should_failslab+0x5/0x20 [ 535.346447][T10817] slab_pre_alloc_hook+0x59/0x310 [ 535.351535][T10817] kmem_cache_alloc_node+0x5a/0x320 [ 535.356786][T10817] ? __alloc_skb+0xfc/0x7e0 [ 535.361370][T10817] __alloc_skb+0xfc/0x7e0 [ 535.365771][T10817] __ipv6_ifa_notify+0x203/0xe60 [ 535.370779][T10817] ? snmp6_fill_stats+0x760/0x760 [ 535.375961][T10817] ? mark_lock+0x94/0x320 [ 535.380349][T10817] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.386634][T10817] ? lock_chain_count+0x20/0x20 [ 535.391554][T10817] ? inet6_addr_modify+0x8ce/0x1850 [ 535.396826][T10817] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.402256][T10817] ? lockdep_hardirqs_on+0x94/0x140 [ 535.407508][T10817] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.412913][T10817] ? _local_bh_enable+0xa0/0xa0 [ 535.417819][T10817] inet6_addr_modify+0x976/0x1850 [ 535.422932][T10817] ? inet6_set_link_af+0xc50/0xc50 [ 535.428123][T10817] ? ipv6_get_ifaddr+0xff/0x620 [ 535.433419][T10817] ? __lock_acquire+0x7d10/0x7d10 [ 535.438691][T10817] ? memset+0x1e/0x40 [ 535.442739][T10817] ? ipv6_get_ifaddr+0xff/0x620 [ 535.447638][T10817] ? ipv6_get_ifaddr+0x5c0/0x620 [ 535.452651][T10817] ? ipv6_get_ifaddr+0xff/0x620 [ 535.457600][T10817] ? ipv6_dev_find+0x40/0x40 [ 535.462586][T10817] ? ipv6_mc_up+0x240/0x2f0 [ 535.467154][T10817] inet6_rtm_newaddr+0x62f/0x900 [ 535.472191][T10817] ? inet6_dump_ifinfo+0x940/0x940 [ 535.478062][T10817] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 535.483337][T10817] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 535.488619][T10817] ? inet6_dump_ifinfo+0x940/0x940 [ 535.493778][T10817] rtnetlink_rcv_msg+0x87c/0xfc0 [ 535.498772][T10817] ? rtnetlink_bind+0x80/0x80 [ 535.503501][T10817] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.508999][T10817] ? lockdep_hardirqs_on+0x94/0x140 [ 535.514321][T10817] ? __local_bh_enable_ip+0x136/0x1c0 [ 535.519751][T10817] ? _local_bh_enable+0xa0/0xa0 [ 535.524660][T10817] ? __dev_queue_xmit+0x26b/0x37c0 [ 535.529823][T10817] ? __dev_queue_xmit+0x26b/0x37c0 [ 535.534969][T10817] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 535.540208][T10817] ? __dev_queue_xmit+0x26b/0x37c0 [ 535.545529][T10817] ? ref_tracker_free+0x68c/0x840 [ 535.550716][T10817] ? __copy_skb_header+0x3ba/0x4f0 [ 535.555992][T10817] ? refcount_inc+0x70/0x70 [ 535.560537][T10817] ? memcpy+0x3c/0x60 [ 535.564554][T10817] ? __copy_skb_header+0x3ba/0x4f0 [ 535.569712][T10817] ? __skb_clone+0x480/0x790 [ 535.574353][T10817] netlink_rcv_skb+0x1fb/0x450 [ 535.579157][T10817] ? rtnetlink_bind+0x80/0x80 [ 535.583877][T10817] ? netlink_ack+0x1170/0x1170 [ 535.588694][T10817] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.593959][T10817] netlink_unicast+0x74d/0x8d0 [ 535.598773][T10817] netlink_sendmsg+0x8ad/0xbd0 [ 535.603590][T10817] ? netlink_getsockopt+0x550/0x550 [ 535.608847][T10817] ? aa_sock_msg_perm+0x94/0x150 [ 535.613864][T10817] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 535.619199][T10817] ? security_socket_sendmsg+0x7c/0xa0 [ 535.624704][T10817] ? netlink_getsockopt+0x550/0x550 [ 535.629979][T10817] ____sys_sendmsg+0x5be/0x970 [ 535.634798][T10817] ? __sys_sendmsg_sock+0x30/0x30 [ 535.639876][T10817] ? __import_iovec+0x315/0x500 [ 535.644767][T10817] ? import_iovec+0x6f/0xa0 [ 535.649346][T10817] ___sys_sendmsg+0x2a2/0x360 [ 535.654188][T10817] ? __sys_sendmsg+0x290/0x290 [ 535.659101][T10817] ? __lock_acquire+0x7d10/0x7d10 [ 535.664400][T10817] __se_sys_sendmsg+0x1bb/0x2a0 [ 535.669298][T10817] ? __x64_sys_sendmsg+0x80/0x80 [ 535.674286][T10817] ? lockdep_hardirqs_on+0x94/0x140 [ 535.679604][T10817] do_syscall_64+0x4c/0xa0 [ 535.684141][T10817] ? clear_bhb_loop+0x60/0xb0 [ 535.688855][T10817] ? clear_bhb_loop+0x60/0xb0 [ 535.693663][T10817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.699680][T10817] RIP: 0033:0x7fd4ec99c799 [ 535.704136][T10817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.723866][T10817] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.732348][T10817] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 535.740570][T10817] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000003 [ 535.748668][T10817] RBP: 00007fd4ed8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 535.756671][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.764673][T10817] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 535.772689][T10817] [ 535.907623][T10825] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2400'. [ 536.150429][T10826] tap0: tun_chr_ioctl cmd 2147767521 [ 536.237376][T10829] netlink: 'syz.2.2401': attribute type 13 has an invalid length. [ 536.281463][T10829] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2401'. [ 536.470645][T10838] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2404'. [ 537.188345][T10848] netlink: 'syz.0.2408': attribute type 10 has an invalid length. [ 537.248299][T10848] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 537.310562][T10848] netlink: 'syz.0.2408': attribute type 10 has an invalid length. [ 537.550322][T10852] netlink: 'syz.1.2409': attribute type 10 has an invalid length. [ 537.692289][T10858] netlink: 'syz.4.2412': attribute type 21 has an invalid length. [ 538.367790][T10877] netlink: 'syz.4.2419': attribute type 3 has an invalid length. [ 538.412789][T10877] __nla_validate_parse: 6 callbacks suppressed [ 538.412828][T10877] netlink: 101360 bytes leftover after parsing attributes in process `syz.4.2419'. [ 538.835463][T10887] netlink: 'syz.4.2423': attribute type 10 has an invalid length. [ 538.853428][T10887] netlink: 'syz.4.2423': attribute type 10 has an invalid length. [ 538.874734][T10887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2423'. [ 538.947358][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2421'. [ 539.056966][T10888] tc_dump_action: action bad kind [ 539.447916][T10894] netlink: 'syz.2.2425': attribute type 10 has an invalid length. [ 539.658415][T10898] netlink: 'syz.3.2426': attribute type 13 has an invalid length. [ 539.674357][T10898] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2426'. [ 539.724082][T10898] syz_tun: refused to change device tx_queue_len [ 539.756435][T10898] net_ratelimit: 17 callbacks suppressed [ 539.756460][T10898] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 539.812316][T10900] netlink: 'syz.1.2427': attribute type 21 has an invalid length. [ 539.829763][T10900] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2427'. [ 542.088339][T10912] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2430'. [ 542.130266][T10912] device team_slave_0 left promiscuous mode [ 542.175474][T10913] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2430'. [ 542.371668][T10919] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2433'. [ 542.421754][T10919] netlink: zone id is out of range [ 542.443592][T10919] netlink: zone id is out of range [ 542.645524][T10919] netlink: del zone limit has 4 unknown bytes [ 542.707018][T10912] team0: Port device team_slave_0 removed [ 542.863988][T10912] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 542.927722][T10913] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 542.940930][T10913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 542.950689][T10913] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 543.192907][T10934] netlink: 'syz.2.2435': attribute type 10 has an invalid length. [ 543.218412][T10934] bond0: (slave wlan1): Opening slave failed [ 543.260951][T10934] netlink: 'syz.2.2435': attribute type 10 has an invalid length. [ 543.269055][T10934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2435'. [ 543.299886][T10934] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 545.433624][T10946] netlink: 'syz.1.2440': attribute type 10 has an invalid length. [ 545.584371][T10951] FAULT_INJECTION: forcing a failure. [ 545.584371][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.634355][T10951] CPU: 0 PID: 10951 Comm: syz.3.2442 Not tainted syzkaller #0 [ 545.642215][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.652663][T10951] Call Trace: [ 545.656000][T10951] [ 545.658974][T10951] dump_stack_lvl+0x188/0x24e [ 545.663727][T10951] ? show_regs_print_info+0x12/0x12 [ 545.668990][T10951] ? load_image+0x400/0x400 [ 545.673554][T10951] ? __might_fault+0xa6/0x120 [ 545.678303][T10951] should_fail_ex+0x399/0x4d0 [ 545.683036][T10951] copyin+0x1b/0x120 [ 545.687005][T10951] _copy_from_iter+0x447/0x1130 [ 545.691954][T10951] ? copyout_mc+0x110/0x110 [ 545.696516][T10951] ? __virt_addr_valid+0x188/0x540 [ 545.701688][T10951] ? __virt_addr_valid+0x188/0x540 [ 545.706996][T10951] ? __virt_addr_valid+0x465/0x540 [ 545.712261][T10951] ? __check_object_size+0x500/0xa40 [ 545.717627][T10951] netlink_sendmsg+0x755/0xbd0 [ 545.722576][T10951] ? netlink_getsockopt+0x550/0x550 [ 545.727861][T10951] ? aa_sock_msg_perm+0x94/0x150 [ 545.732864][T10951] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 545.738410][T10951] ? security_socket_sendmsg+0x7c/0xa0 [ 545.743944][T10951] ? netlink_getsockopt+0x550/0x550 [ 545.749204][T10951] ____sys_sendmsg+0x5be/0x970 [ 545.754122][T10951] ? __sys_sendmsg_sock+0x30/0x30 [ 545.759205][T10951] ? __import_iovec+0x315/0x500 [ 545.764127][T10951] ? import_iovec+0x6f/0xa0 [ 545.768689][T10951] ___sys_sendmsg+0x2a2/0x360 [ 545.773439][T10951] ? __sys_sendmsg+0x290/0x290 [ 545.778292][T10951] ? __lock_acquire+0x7d10/0x7d10 [ 545.783386][T10951] __se_sys_sendmsg+0x1bb/0x2a0 [ 545.788368][T10951] ? ct_nmi_exit+0x145/0x1c0 [ 545.793078][T10951] ? __x64_sys_sendmsg+0x80/0x80 [ 545.798150][T10951] ? lockdep_hardirqs_on+0x94/0x140 [ 545.803395][T10951] do_syscall_64+0x4c/0xa0 [ 545.807891][T10951] ? clear_bhb_loop+0x60/0xb0 [ 545.812647][T10951] ? clear_bhb_loop+0x60/0xb0 [ 545.817377][T10951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.823512][T10951] RIP: 0033:0x7f90bd19c799 [ 545.827977][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.848252][T10951] RSP: 002b:00007f90bdf8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.856725][T10951] RAX: ffffffffffffffda RBX: 00007f90bd416090 RCX: 00007f90bd19c799 [ 545.864762][T10951] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000009 [ 545.872800][T10951] RBP: 00007f90bdf8b090 R08: 0000000000000000 R09: 0000000000000000 [ 545.880844][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.888867][T10951] R13: 00007f90bd416128 R14: 00007f90bd416090 R15: 00007ffde55e9c68 [ 545.896943][T10951] [ 546.047966][T10959] FAULT_INJECTION: forcing a failure. [ 546.047966][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.090858][T10959] CPU: 0 PID: 10959 Comm: syz.1.2446 Not tainted syzkaller #0 [ 546.098434][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.109058][T10959] Call Trace: [ 546.112394][T10959] [ 546.115365][T10959] dump_stack_lvl+0x188/0x24e [ 546.120393][T10959] ? show_regs_print_info+0x12/0x12 [ 546.125661][T10959] ? load_image+0x400/0x400 [ 546.130335][T10959] ? __lock_acquire+0x7d10/0x7d10 [ 546.135435][T10959] should_fail_ex+0x399/0x4d0 [ 546.140182][T10959] _copy_from_user+0x2c/0x170 [ 546.145045][T10959] ___sys_sendmsg+0x1c3/0x360 [ 546.149983][T10959] ? __sys_sendmsg+0x290/0x290 [ 546.154927][T10959] ? __lock_acquire+0x7d10/0x7d10 [ 546.160038][T10959] __se_sys_sendmsg+0x1bb/0x2a0 [ 546.164983][T10959] ? __x64_sys_sendmsg+0x80/0x80 [ 546.170090][T10959] ? syscall_enter_from_user_mode+0x2a/0x80 [ 546.176062][T10959] do_syscall_64+0x4c/0xa0 [ 546.180645][T10959] ? clear_bhb_loop+0x60/0xb0 [ 546.185553][T10959] ? clear_bhb_loop+0x60/0xb0 [ 546.190305][T10959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.196283][T10959] RIP: 0033:0x7f968519c799 [ 546.200920][T10959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.210182][T10961] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2447'. [ 546.220909][T10959] RSP: 002b:00007f9685ff3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.220943][T10959] RAX: ffffffffffffffda RBX: 00007f9685415fa0 RCX: 00007f968519c799 [ 546.220959][T10959] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000038 [ 546.220972][T10959] RBP: 00007f9685ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 546.220986][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.220998][T10959] R13: 00007f9685416038 R14: 00007f9685415fa0 R15: 00007ffe3446d0a8 [ 546.221040][T10959] [ 546.595529][T10961] netlink: zone id is out of range [ 546.678846][T10961] netlink: zone id is out of range [ 546.831324][T10974] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 546.840118][T10974] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2451'. [ 546.862616][T10961] netlink: del zone limit has 4 unknown bytes [ 549.558931][T10990] netlink: 'syz.3.2454': attribute type 10 has an invalid length. [ 550.611061][T10998] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 550.805583][T11006] netlink: 'syz.1.2461': attribute type 21 has an invalid length. [ 550.841274][T11006] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 550.912967][T11014] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2463'. [ 550.913240][T11006] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2461'. [ 550.933622][T11014] netlink: zone id is out of range [ 550.949795][T11014] netlink: zone id is out of range [ 550.974822][T11006] openvswitch: netlink: Flow key attr not present in new flow. [ 551.020037][T11014] netlink: del zone limit has 4 unknown bytes [ 551.296900][T11026] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2470'. [ 551.350931][T11026] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 551.980561][T11039] netlink: 'syz.2.2472': attribute type 10 has an invalid length. [ 554.030212][T11045] FAULT_INJECTION: forcing a failure. [ 554.030212][T11045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.066644][T11045] CPU: 1 PID: 11045 Comm: syz.0.2474 Not tainted syzkaller #0 [ 554.074592][T11045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.085055][T11045] Call Trace: [ 554.088368][T11045] [ 554.091328][T11045] dump_stack_lvl+0x188/0x24e [ 554.096171][T11045] ? show_regs_print_info+0x12/0x12 [ 554.101437][T11045] ? load_image+0x400/0x400 [ 554.106246][T11045] ? __lock_acquire+0x7d10/0x7d10 [ 554.111321][T11045] should_fail_ex+0x399/0x4d0 [ 554.116348][T11045] _copy_from_user+0x2c/0x170 [ 554.121111][T11045] iovec_from_user+0x143/0x360 [ 554.125941][T11045] __import_iovec+0x6d/0x500 [ 554.130580][T11045] ? __might_fault+0xc2/0x120 [ 554.135310][T11045] import_iovec+0x6f/0xa0 [ 554.139679][T11045] ___sys_sendmsg+0x252/0x360 [ 554.144412][T11045] ? __sys_sendmsg+0x290/0x290 [ 554.149336][T11045] ? __lock_acquire+0x7d10/0x7d10 [ 554.154443][T11045] __se_sys_sendmsg+0x1bb/0x2a0 [ 554.159391][T11045] ? __x64_sys_sendmsg+0x80/0x80 [ 554.164403][T11045] ? lockdep_hardirqs_on+0x94/0x140 [ 554.169664][T11045] do_syscall_64+0x4c/0xa0 [ 554.174162][T11045] ? clear_bhb_loop+0x60/0xb0 [ 554.178883][T11045] ? clear_bhb_loop+0x60/0xb0 [ 554.183596][T11045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.189768][T11045] RIP: 0033:0x7fd55239c799 [ 554.194219][T11045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.213954][T11045] RSP: 002b:00007fd553198028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.222516][T11045] RAX: ffffffffffffffda RBX: 00007fd552615fa0 RCX: 00007fd55239c799 [ 554.230719][T11045] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 554.238728][T11045] RBP: 00007fd553198090 R08: 0000000000000000 R09: 0000000000000000 [ 554.246729][T11045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.254918][T11045] R13: 00007fd552616038 R14: 00007fd552615fa0 R15: 00007ffdd4f50368 [ 554.263329][T11045] [ 554.332520][T11052] netlink: 'syz.1.2476': attribute type 10 has an invalid length. [ 554.369414][T11052] netlink: 'syz.1.2476': attribute type 10 has an invalid length. [ 554.377917][T11052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2476'. [ 554.686874][T11063] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2481'. [ 554.744366][T11057] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2480'. [ 554.766580][T11057] netlink: zone id is out of range [ 554.781542][T11057] netlink: zone id is out of range [ 554.789685][T11063] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 554.992167][T11057] netlink: del zone limit has 4 unknown bytes [ 555.836830][T11084] netlink: 'syz.0.2488': attribute type 10 has an invalid length. [ 555.968687][T11087] FAULT_INJECTION: forcing a failure. [ 555.968687][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 555.986736][T11087] CPU: 0 PID: 11087 Comm: syz.2.2489 Not tainted syzkaller #0 [ 555.994462][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.004568][T11087] Call Trace: [ 556.007884][T11087] [ 556.010856][T11087] dump_stack_lvl+0x188/0x24e [ 556.015580][T11087] ? show_regs_print_info+0x12/0x12 [ 556.020816][T11087] ? load_image+0x400/0x400 [ 556.025438][T11087] ? __might_sleep+0xd0/0xd0 [ 556.030053][T11087] ? __lock_acquire+0x7d10/0x7d10 [ 556.035142][T11087] ? mark_lock+0x94/0x320 [ 556.039510][T11087] should_fail_ex+0x399/0x4d0 [ 556.044235][T11087] should_failslab+0x5/0x20 [ 556.048765][T11087] slab_pre_alloc_hook+0x59/0x310 [ 556.053817][T11087] ? __get_vm_area_node+0x122/0x330 [ 556.059050][T11087] __kmem_cache_alloc_node+0x4f/0x260 [ 556.064459][T11087] ? __get_vm_area_node+0x122/0x330 [ 556.069702][T11087] kmalloc_node_trace+0x22/0xe0 [ 556.074598][T11087] __get_vm_area_node+0x122/0x330 [ 556.079751][T11087] __vmalloc_node_range+0x357/0x13b0 [ 556.085077][T11087] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.090794][T11087] ? free_vm_area+0x50/0x50 [ 556.095331][T11087] ? end_current_label_crit_section+0x170/0x170 [ 556.101607][T11087] ? __lock_acquire+0x7d10/0x7d10 [ 556.106666][T11087] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.112243][T11087] __vmalloc+0x76/0x80 [ 556.116342][T11087] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.122018][T11087] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.127455][T11087] ? bpf_lsm_capable+0x5/0x10 [ 556.132194][T11087] bpf_prog_alloc+0x1c/0x1b0 [ 556.136831][T11087] bpf_prog_load+0x7c9/0x1560 [ 556.141685][T11087] ? map_freeze+0x390/0x390 [ 556.146224][T11087] ? __might_fault+0xa6/0x120 [ 556.151026][T11087] ? __might_fault+0xa6/0x120 [ 556.155739][T11087] ? __might_fault+0xc2/0x120 [ 556.160530][T11087] ? __might_fault+0xa6/0x120 [ 556.165237][T11087] ? bpf_lsm_bpf+0x5/0x10 [ 556.169596][T11087] ? security_bpf+0x7a/0xa0 [ 556.174248][T11087] __sys_bpf+0x5b8/0x780 [ 556.178625][T11087] ? bpf_link_show_fdinfo+0x380/0x380 [ 556.184140][T11087] ? lock_chain_count+0x20/0x20 [ 556.189141][T11087] __x64_sys_bpf+0x78/0x90 [ 556.193593][T11087] do_syscall_64+0x4c/0xa0 [ 556.198053][T11087] ? clear_bhb_loop+0x60/0xb0 [ 556.202775][T11087] ? clear_bhb_loop+0x60/0xb0 [ 556.207483][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.213496][T11087] RIP: 0033:0x7fd4ec99c799 [ 556.217937][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.237664][T11087] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.246202][T11087] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 556.254397][T11087] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 556.262400][T11087] RBP: 00007fd4ed8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 556.270408][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.278416][T11087] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 556.286602][T11087] [ 556.307579][T11087] syz.2.2489: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 556.325010][T11087] CPU: 0 PID: 11087 Comm: syz.2.2489 Not tainted syzkaller #0 [ 556.332624][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.343260][T11087] Call Trace: [ 556.346588][T11087] [ 556.349559][T11087] dump_stack_lvl+0x188/0x24e [ 556.354305][T11087] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 556.360872][T11087] ? show_regs_print_info+0x12/0x12 [ 556.366244][T11087] ? load_image+0x400/0x400 [ 556.370820][T11087] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 556.377388][T11087] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 556.384048][T11087] warn_alloc+0x242/0x330 [ 556.388474][T11087] ? __get_vm_area_node+0x122/0x330 [ 556.393731][T11087] ? zone_watermark_ok_safe+0x270/0x270 [ 556.399342][T11087] ? rcu_is_watching+0x11/0xa0 [ 556.404174][T11087] ? __get_vm_area_node+0x318/0x330 [ 556.409469][T11087] __vmalloc_node_range+0x37c/0x13b0 [ 556.414866][T11087] ? free_vm_area+0x50/0x50 [ 556.419614][T11087] ? end_current_label_crit_section+0x170/0x170 [ 556.425938][T11087] ? __lock_acquire+0x7d10/0x7d10 [ 556.431207][T11087] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.436822][T11087] __vmalloc+0x76/0x80 [ 556.440955][T11087] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.446655][T11087] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 556.452081][T11087] ? bpf_lsm_capable+0x5/0x10 [ 556.456799][T11087] bpf_prog_alloc+0x1c/0x1b0 [ 556.461463][T11087] bpf_prog_load+0x7c9/0x1560 [ 556.466213][T11087] ? map_freeze+0x390/0x390 [ 556.470781][T11087] ? __might_fault+0xa6/0x120 [ 556.475527][T11087] ? __might_fault+0xa6/0x120 [ 556.480285][T11087] ? __might_fault+0xc2/0x120 [ 556.485175][T11087] ? __might_fault+0xa6/0x120 [ 556.489893][T11087] ? bpf_lsm_bpf+0x5/0x10 [ 556.494260][T11087] ? security_bpf+0x7a/0xa0 [ 556.498798][T11087] __sys_bpf+0x5b8/0x780 [ 556.503106][T11087] ? bpf_link_show_fdinfo+0x380/0x380 [ 556.508614][T11087] ? lock_chain_count+0x20/0x20 [ 556.513506][T11087] __x64_sys_bpf+0x78/0x90 [ 556.517953][T11087] do_syscall_64+0x4c/0xa0 [ 556.522404][T11087] ? clear_bhb_loop+0x60/0xb0 [ 556.527115][T11087] ? clear_bhb_loop+0x60/0xb0 [ 556.531841][T11087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.537770][T11087] RIP: 0033:0x7fd4ec99c799 [ 556.542211][T11087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.562255][T11087] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.570978][T11087] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 556.579084][T11087] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 556.587285][T11087] RBP: 00007fd4ed8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 556.595417][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.603718][T11087] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 556.611837][T11087] [ 556.624755][T11087] Mem-Info: [ 556.627969][T11087] active_anon:6144 inactive_anon:0 isolated_anon:0 [ 556.627969][T11087] active_file:19656 inactive_file:40114 isolated_file:0 [ 556.627969][T11087] unevictable:768 dirty:119 writeback:0 [ 556.627969][T11087] slab_reclaimable:20995 slab_unreclaimable:95629 [ 556.627969][T11087] mapped:31164 shmem:1361 pagetables:649 [ 556.627969][T11087] sec_pagetables:0 bounce:0 [ 556.627969][T11087] kernel_misc_reclaimable:0 [ 556.627969][T11087] free:1325706 free_pcp:6978 free_cma:0 [ 556.686942][T11087] Node 0 active_anon:24576kB inactive_anon:0kB active_file:78624kB inactive_file:160252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124656kB dirty:476kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10256kB pagetables:2596kB sec_pagetables:0kB all_unreclaimable? no [ 556.723180][T11087] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 556.758580][T11087] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.794304][T11087] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 556.805590][T11087] Node 0 DMA32 free:1389428kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:24576kB inactive_anon:0kB active_file:78624kB inactive_file:160252kB unevictable:1536kB writepending:476kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:10400kB local_pcp:7148kB free_cma:0kB [ 556.842454][T11087] lowmem_reserve[]: 0 0 1 1 1 [ 556.847655][T11087] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 556.879228][T11087] lowmem_reserve[]: 0 0 0 0 0 [ 556.884627][T11087] Node 1 Normal free:3897808kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:18848kB local_pcp:9792kB free_cma:0kB [ 556.919226][T11087] lowmem_reserve[]: 0 0 0 0 0 [ 556.924419][T11087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 556.953230][T11087] Node 0 DMA32: 765*4kB (UM) 1864*8kB (UME) 1118*16kB (UME) 1519*32kB (UME) 425*64kB (UME) 359*128kB (UME) 332*256kB (UME) 175*512kB (UME) 80*1024kB (UME) 24*2048kB (UM) 226*4096kB (UM) = 1388980kB [ 556.978965][T11087] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 557.000809][T11087] Node 1 Normal: 268*4kB (UME) 60*8kB (UME) 38*16kB (UME) 41*32kB (UE) 13*64kB (UME) 14*128kB (UME) 6*256kB (UME) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3897808kB [ 557.024467][T11087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.034551][T11087] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 557.048940][T11087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 557.059076][T11087] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 557.076072][T11087] 61131 total pagecache pages [ 557.081770][T11087] 0 pages in swap cache [ 557.085989][T11087] Free swap = 124996kB [ 557.090315][T11087] Total swap = 124996kB [ 557.099888][T11087] 2097051 pages RAM [ 557.108336][T11087] 0 pages HighMem/MovableOnly [ 557.120632][T11087] 415207 pages reserved [ 557.125520][T11087] 0 pages cma reserved [ 558.407690][T11098] netlink: 'syz.1.2493': attribute type 10 has an invalid length. [ 558.464784][T11098] netlink: 'syz.1.2493': attribute type 10 has an invalid length. [ 558.496938][T11100] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2495'. [ 558.511911][T11098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2493'. [ 558.542122][T11100] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 558.652063][T11103] device syzkaller0 entered promiscuous mode [ 558.688021][T11103] syzkaller0: mtu greater than device maximum [ 560.286966][T11131] netlink: 'syz.3.2504': attribute type 10 has an invalid length. [ 560.722509][T11147] netlink: 'syz.4.2511': attribute type 10 has an invalid length. [ 560.737107][T11149] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2510'. [ 560.749766][T11149] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 560.835570][T11158] netlink: 'syz.4.2511': attribute type 10 has an invalid length. [ 560.865711][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2511'. [ 561.277727][T11168] netlink: 'syz.0.2519': attribute type 10 has an invalid length. [ 561.305847][T11165] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2517'. [ 561.317807][T11165] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2517'. [ 562.263869][T11186] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2525'. [ 562.306439][T11186] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 563.173971][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.180572][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.500496][T11203] FAULT_INJECTION: forcing a failure. [ 564.500496][T11203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.590387][T11202] netlink: 'syz.4.2531': attribute type 10 has an invalid length. [ 564.599238][T11203] CPU: 0 PID: 11203 Comm: syz.3.2532 Not tainted syzkaller #0 [ 564.606955][T11203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.617053][T11203] Call Trace: [ 564.620365][T11203] [ 564.623344][T11203] dump_stack_lvl+0x188/0x24e [ 564.628074][T11203] ? show_regs_print_info+0x12/0x12 [ 564.633314][T11203] ? load_image+0x400/0x400 [ 564.637857][T11203] ? __lock_acquire+0x7d10/0x7d10 [ 564.642921][T11203] ? slab_post_alloc_hook+0x4b/0x480 [ 564.648242][T11203] should_fail_ex+0x399/0x4d0 [ 564.652973][T11203] prepare_alloc_pages+0x1e2/0x5f0 [ 564.658146][T11203] __alloc_pages+0x130/0x4f0 [ 564.662970][T11203] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 564.668762][T11203] ? zone_statistics+0x170/0x170 [ 564.673753][T11203] ? __rwlock_init+0x140/0x140 [ 564.678551][T11203] ? do_raw_spin_unlock+0x11d/0x230 [ 564.683786][T11203] __get_free_pages+0x8/0x30 [ 564.688418][T11203] kasan_populate_vmalloc_pte+0x31/0xf0 [ 564.693992][T11203] ? __apply_to_page_range+0x977/0xd10 [ 564.699480][T11203] __apply_to_page_range+0x989/0xd10 [ 564.704975][T11203] ? kasan_populate_vmalloc+0x70/0x70 [ 564.710408][T11203] alloc_vmap_area+0x178f/0x18c0 [ 564.715393][T11203] ? vm_map_ram+0xab0/0xab0 [ 564.719940][T11203] ? rcu_is_watching+0x11/0xa0 [ 564.724945][T11203] __get_vm_area_node+0x158/0x330 [ 564.730010][T11203] ? __kasan_kmalloc+0x8e/0xa0 [ 564.734810][T11203] ? bpf_map_area_alloc+0x47/0xe0 [ 564.739958][T11203] __vmalloc_node_range+0x357/0x13b0 [ 564.745532][T11203] ? dev_map_create_hash+0x24/0x1d0 [ 564.750782][T11203] ? free_vm_area+0x50/0x50 [ 564.755356][T11203] bpf_map_area_alloc+0xd4/0xe0 [ 564.760236][T11203] ? dev_map_create_hash+0x24/0x1d0 [ 564.765467][T11203] dev_map_create_hash+0x24/0x1d0 [ 564.770525][T11203] ? bpf_map_init_from_attr+0x146/0x340 [ 564.776105][T11203] dev_map_alloc+0x29c/0x500 [ 564.780770][T11203] map_create+0x534/0x1000 [ 564.785231][T11203] ? bpf_lsm_bpf+0x5/0x10 [ 564.789593][T11203] __sys_bpf+0x38b/0x780 [ 564.793874][T11203] ? bpf_link_show_fdinfo+0x380/0x380 [ 564.799377][T11203] ? lock_chain_count+0x20/0x20 [ 564.804362][T11203] __x64_sys_bpf+0x78/0x90 [ 564.809437][T11203] do_syscall_64+0x4c/0xa0 [ 564.814004][T11203] ? clear_bhb_loop+0x60/0xb0 [ 564.818722][T11203] ? clear_bhb_loop+0x60/0xb0 [ 564.823578][T11203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.829595][T11203] RIP: 0033:0x7f90bd19c799 [ 564.834150][T11203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.854290][T11203] RSP: 002b:00007f90bdfac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 564.862739][T11203] RAX: ffffffffffffffda RBX: 00007f90bd415fa0 RCX: 00007f90bd19c799 [ 564.870749][T11203] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 564.879006][T11203] RBP: 00007f90bdfac090 R08: 0000000000000000 R09: 0000000000000000 [ 564.887262][T11203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.895267][T11203] R13: 00007f90bd416038 R14: 00007f90bd415fa0 R15: 00007ffde55e9c68 [ 564.903286][T11203] [ 564.984096][T11207] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 564.993171][T11207] wlan1: mtu less than device minimum [ 564.998712][T11207] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 565.070098][T11210] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 565.090948][T11210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2533'. [ 565.111716][T11210] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 565.435815][T11221] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2539'. [ 565.472109][T11221] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 565.949789][T11235] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2544'. [ 565.985730][T11235] netlink: zone id is out of range [ 566.005198][T11235] netlink: zone id is out of range [ 566.064436][T11238] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2545'. [ 566.097691][T11235] netlink: del zone limit has 4 unknown bytes [ 566.108943][T11240] netlink: 'syz.0.2546': attribute type 10 has an invalid length. [ 566.731426][T11252] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2553'. [ 566.836832][T11252] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 567.513083][T11267] netlink: 'syz.2.2557': attribute type 10 has an invalid length. [ 567.569141][T11267] bond0: (slave wlan1): Opening slave failed [ 567.663761][T11267] netlink: 'syz.2.2557': attribute type 10 has an invalid length. [ 567.683256][T11267] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2557'. [ 567.716223][T11267] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 567.823519][T11279] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 567.848725][T11277] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2559'. [ 567.898817][T11277] netlink: zone id is out of range [ 567.930414][T11277] netlink: zone id is out of range [ 568.108314][T11277] netlink: del zone limit has 4 unknown bytes [ 568.580459][T11300] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2568'. [ 568.726683][T11300] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 569.303692][T11309] netlink: 'syz.4.2573': attribute type 10 has an invalid length. [ 569.561287][T11314] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2575'. [ 569.590331][T11314] netlink: zone id is out of range [ 570.011005][T11332] netlink: 'syz.4.2579': attribute type 21 has an invalid length. [ 570.018941][T11332] netlink: 'syz.4.2579': attribute type 5 has an invalid length. [ 570.032393][T11329] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2578'. [ 570.104154][T11331] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 570.131893][T11331] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 570.180653][T11334] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 570.209174][T11334] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2580'. [ 570.473388][T11342] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2584'. [ 570.997143][T11355] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 571.028007][T11356] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2590'. [ 571.097307][T11356] net_ratelimit: 8 callbacks suppressed [ 571.097328][T11356] netlink: zone id is out of range [ 571.137813][T11356] netlink: zone id is out of range [ 571.181485][T11356] netlink: del zone limit has 4 unknown bytes [ 571.410245][T11360] netlink: 'syz.4.2592': attribute type 10 has an invalid length. [ 571.761800][T11370] wlan1: mtu less than device minimum [ 571.786240][T11370] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 571.831817][T11372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2595'. [ 571.852407][T11372] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 572.067186][T11381] bond0: (slave wlan1): Opening slave failed [ 572.073275][T11382] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2598'. [ 572.083162][T11382] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 572.154228][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 572.172044][T11381] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 572.607725][T11394] validate_nla: 5 callbacks suppressed [ 572.607753][T11394] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 572.642803][T11394] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2602'. [ 572.722588][T11400] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2605'. [ 572.758086][T11400] netlink: zone id is out of range [ 572.779044][T11400] netlink: zone id is out of range [ 572.822699][T11400] netlink: del zone limit has 4 unknown bytes [ 573.180138][T11407] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2607'. [ 573.482175][T11408] delete_channel: no stack [ 573.588822][T11415] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2612'. [ 574.239951][T11407] device syzkaller0 entered promiscuous mode [ 574.256755][T11421] netlink: 'syz.2.2614': attribute type 5 has an invalid length. [ 577.790031][T11425] netlink: 'syz.4.2615': attribute type 10 has an invalid length. [ 577.811345][T11428] netlink: 'syz.4.2615': attribute type 10 has an invalid length. [ 577.819233][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2615'. [ 578.009101][T11434] netlink: 'syz.2.2617': attribute type 10 has an invalid length. [ 578.048129][T11436] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2618'. [ 578.116292][T11436] net_ratelimit: 1 callbacks suppressed [ 578.116318][T11436] netlink: zone id is out of range [ 578.141324][T11436] netlink: zone id is out of range [ 578.192523][T11436] netlink: del zone limit has 4 unknown bytes [ 578.410169][T11451] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2624'. [ 578.420577][T11451] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 578.453967][T11453] netlink: 'syz.0.2625': attribute type 22 has an invalid length. [ 578.511257][T11455] netlink: 'syz.4.2626': attribute type 4 has an invalid length. [ 578.519433][T11455] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2626'. [ 578.557522][T11455] netlink: 'syz.4.2626': attribute type 21 has an invalid length. [ 578.591137][T11455] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2626'. [ 579.582970][T11472] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 579.595084][T11472] wlan1: mtu less than device minimum [ 579.606476][T11472] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 579.644051][T11475] netlink: 'syz.3.2629': attribute type 10 has an invalid length. [ 579.671086][T11475] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2629'. [ 579.689672][T11475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 582.277513][T11482] device syzkaller0 entered promiscuous mode [ 582.656386][T11494] netlink: 'syz.0.2634': attribute type 10 has an invalid length. [ 585.754631][T11506] netlink: 'syz.3.2642': attribute type 22 has an invalid length. [ 585.763298][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2642'. [ 586.058561][T11517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2645'. [ 586.120757][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.155556][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.172027][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.213388][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.271891][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.334395][T11517] Dead loop on virtual device ip6_vti0, fix it urgently! [ 586.510052][T11531] netlink: 'syz.0.2651': attribute type 10 has an invalid length. [ 587.773680][T11561] netlink: 'syz.3.2666': attribute type 10 has an invalid length. [ 587.964557][T11565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2667'. [ 588.086148][ T4280] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 588.762864][T11590] netlink: 'syz.1.2675': attribute type 10 has an invalid length. [ 588.787594][T11590] netlink: 'syz.1.2675': attribute type 10 has an invalid length. [ 588.799888][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2675'. [ 589.051904][T11597] netlink: 'syz.0.2679': attribute type 16 has an invalid length. [ 589.060361][T11597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2679'. [ 589.102921][T11597] netlink: 'syz.0.2679': attribute type 10 has an invalid length. [ 589.128804][T11597] device veth1_vlan left promiscuous mode [ 589.236659][T11602] netlink: 'syz.4.2681': attribute type 10 has an invalid length. [ 590.699564][T11635] device syzkaller0 entered promiscuous mode [ 590.805309][T11631] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 590.968416][T11640] netlink: 'syz.4.2695': attribute type 10 has an invalid length. [ 591.305797][T11642] delete_channel: no stack [ 594.901091][T11663] delete_channel: no stack [ 595.228984][T11682] netlink: 'syz.4.2709': attribute type 10 has an invalid length. [ 595.773934][T11694] netlink: 'syz.2.2723': attribute type 10 has an invalid length. [ 596.060042][T11699] netlink: 'syz.3.2715': attribute type 22 has an invalid length. [ 596.086373][T11696] device syzkaller0 entered promiscuous mode [ 596.895874][T11719] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2722'. [ 598.477285][T11745] syz.1.2732[11745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.477482][T11745] syz.1.2732[11745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.529289][T11745] netlink: 'syz.1.2732': attribute type 3 has an invalid length. [ 598.550994][T11745] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 598.559921][T11745] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2732'. [ 600.043844][T11721] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2724'. [ 600.059005][T11737] netlink: 'syz.4.2729': attribute type 10 has an invalid length. [ 600.443618][T11756] device syzkaller0 entered promiscuous mode [ 600.575816][T11759] FAULT_INJECTION: forcing a failure. [ 600.575816][T11759] name failslab, interval 1, probability 0, space 0, times 0 [ 600.610239][T11759] CPU: 0 PID: 11759 Comm: syz.4.2739 Not tainted syzkaller #0 [ 600.617820][T11759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.628035][T11759] Call Trace: [ 600.631377][T11759] [ 600.634492][T11759] dump_stack_lvl+0x188/0x24e [ 600.639284][T11759] ? show_regs_print_info+0x12/0x12 [ 600.644684][T11759] ? load_image+0x400/0x400 [ 600.649291][T11759] ? __might_sleep+0xd0/0xd0 [ 600.653972][T11759] ? __lock_acquire+0x7d10/0x7d10 [ 600.659327][T11759] should_fail_ex+0x399/0x4d0 [ 600.664101][T11759] should_failslab+0x5/0x20 [ 600.668776][T11759] slab_pre_alloc_hook+0x59/0x310 [ 600.673985][T11759] kmem_cache_alloc_node+0x5a/0x320 [ 600.679270][T11759] ? __alloc_skb+0xfc/0x7e0 [ 600.683885][T11759] __alloc_skb+0xfc/0x7e0 [ 600.688391][T11759] ? netlink_autobind+0xda/0x300 [ 600.693444][T11759] netlink_sendmsg+0x654/0xbd0 [ 600.698323][T11759] ? netlink_getsockopt+0x550/0x550 [ 600.703806][T11759] ? aa_sock_msg_perm+0x94/0x150 [ 600.708924][T11759] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 600.714292][T11759] ? security_socket_sendmsg+0x7c/0xa0 [ 600.719856][T11759] ? netlink_getsockopt+0x550/0x550 [ 600.725220][T11759] ____sys_sendmsg+0x5be/0x970 [ 600.730109][T11759] ? __sys_sendmsg_sock+0x30/0x30 [ 600.735231][T11759] ? __import_iovec+0x315/0x500 [ 600.740179][T11759] ? import_iovec+0x6f/0xa0 [ 600.744768][T11759] ___sys_sendmsg+0x2a2/0x360 [ 600.749551][T11759] ? __sys_sendmsg+0x290/0x290 [ 600.754449][T11759] ? __lock_acquire+0x7d10/0x7d10 [ 600.759644][T11759] __se_sys_sendmsg+0x1bb/0x2a0 [ 600.764695][T11759] ? __x64_sys_sendmsg+0x80/0x80 [ 600.769748][T11759] ? lockdep_hardirqs_on+0x94/0x140 [ 600.775119][T11759] do_syscall_64+0x4c/0xa0 [ 600.779648][T11759] ? clear_bhb_loop+0x60/0xb0 [ 600.784434][T11759] ? clear_bhb_loop+0x60/0xb0 [ 600.789288][T11759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.795368][T11759] RIP: 0033:0x7fb7fb59c799 [ 600.799851][T11759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.819621][T11759] RSP: 002b:00007fb7fc382028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.828114][T11759] RAX: ffffffffffffffda RBX: 00007fb7fb815fa0 RCX: 00007fb7fb59c799 [ 600.836247][T11759] RDX: 0000000020004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 600.844281][T11759] RBP: 00007fb7fc382090 R08: 0000000000000000 R09: 0000000000000000 [ 600.852323][T11759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.860442][T11759] R13: 00007fb7fb816038 R14: 00007fb7fb815fa0 R15: 00007ffd3798ae08 [ 600.868601][T11759] [ 601.389874][T11782] netlink: 'syz.3.2746': attribute type 10 has an invalid length. [ 601.488495][T11787] FAULT_INJECTION: forcing a failure. [ 601.488495][T11787] name failslab, interval 1, probability 0, space 0, times 0 [ 601.518579][T11787] CPU: 0 PID: 11787 Comm: syz.4.2747 Not tainted syzkaller #0 [ 601.526335][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 601.536716][T11787] Call Trace: [ 601.540102][T11787] [ 601.543097][T11787] dump_stack_lvl+0x188/0x24e [ 601.547858][T11787] ? show_regs_print_info+0x12/0x12 [ 601.553166][T11787] ? load_image+0x400/0x400 [ 601.557748][T11787] ? __might_sleep+0xd0/0xd0 [ 601.562395][T11787] ? __lock_acquire+0x7d10/0x7d10 [ 601.567492][T11787] should_fail_ex+0x399/0x4d0 [ 601.572240][T11787] should_failslab+0x5/0x20 [ 601.576795][T11787] slab_pre_alloc_hook+0x59/0x310 [ 601.581883][T11787] kmem_cache_alloc_node+0x5a/0x320 [ 601.587148][T11787] ? __dev_queue_xmit+0x26b/0x37c0 [ 601.592326][T11787] ? __alloc_skb+0xfc/0x7e0 [ 601.596899][T11787] __alloc_skb+0xfc/0x7e0 [ 601.601413][T11787] netlink_ack+0x372/0x1170 [ 601.605988][T11787] ? perf_trace_lock+0xf8/0x390 [ 601.610886][T11787] ? __copy_skb_header+0x3ba/0x4f0 [ 601.616050][T11787] ? netlink_dump+0xd00/0xd00 [ 601.620778][T11787] ? __skb_clone+0x480/0x790 [ 601.625538][T11787] netlink_rcv_skb+0x280/0x450 [ 601.630349][T11787] ? rtnetlink_bind+0x80/0x80 [ 601.635075][T11787] ? netlink_ack+0x1170/0x1170 [ 601.639912][T11787] ? netlink_deliver_tap+0x2e/0x1b0 [ 601.645217][T11787] netlink_unicast+0x74d/0x8d0 [ 601.650051][T11787] netlink_sendmsg+0x8ad/0xbd0 [ 601.654868][T11787] ? netlink_getsockopt+0x550/0x550 [ 601.660110][T11787] ? aa_sock_msg_perm+0x94/0x150 [ 601.665222][T11787] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 601.670579][T11787] ? security_socket_sendmsg+0x7c/0xa0 [ 601.676203][T11787] ? netlink_getsockopt+0x550/0x550 [ 601.681460][T11787] ____sys_sendmsg+0x5be/0x970 [ 601.686281][T11787] ? __sys_sendmsg_sock+0x30/0x30 [ 601.691342][T11787] ? __import_iovec+0x315/0x500 [ 601.696239][T11787] ? import_iovec+0x6f/0xa0 [ 601.700772][T11787] ___sys_sendmsg+0x2a2/0x360 [ 601.705491][T11787] ? __sys_sendmsg+0x290/0x290 [ 601.710308][T11787] ? __lock_acquire+0x7d10/0x7d10 [ 601.715391][T11787] __se_sys_sendmsg+0x1bb/0x2a0 [ 601.720286][T11787] ? __x64_sys_sendmsg+0x80/0x80 [ 601.725278][T11787] ? lockdep_hardirqs_on+0x94/0x140 [ 601.730514][T11787] do_syscall_64+0x4c/0xa0 [ 601.734968][T11787] ? clear_bhb_loop+0x60/0xb0 [ 601.739685][T11787] ? clear_bhb_loop+0x60/0xb0 [ 601.744487][T11787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.750439][T11787] RIP: 0033:0x7fb7fb59c799 [ 601.754882][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.775234][T11787] RSP: 002b:00007fb7fc382028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.783768][T11787] RAX: ffffffffffffffda RBX: 00007fb7fb815fa0 RCX: 00007fb7fb59c799 [ 601.791767][T11787] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 601.799769][T11787] RBP: 00007fb7fc382090 R08: 0000000000000000 R09: 0000000000000000 [ 601.807988][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.816081][T11787] R13: 00007fb7fb816038 R14: 00007fb7fb815fa0 R15: 00007ffd3798ae08 [ 601.824363][T11787] [ 603.941855][T11796] device syzkaller0 entered promiscuous mode [ 605.636250][T11819] netlink: 'syz.2.2759': attribute type 10 has an invalid length. [ 607.441731][T11860] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 607.966066][T11881] netlink: 'syz.4.2784': attribute type 10 has an invalid length. [ 608.010347][T11881] netlink: 'syz.4.2784': attribute type 10 has an invalid length. [ 608.048794][T11881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2784'. [ 608.411861][T11892] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2789'. [ 608.542425][T11897] netlink: 'syz.0.2790': attribute type 10 has an invalid length. [ 609.020826][T11908] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 609.057875][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2794'. [ 609.129171][T11908] batman_adv: batadv0: Adding interface: vlan1 [ 609.160910][T11908] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.245724][T11908] batman_adv: batadv0: Interface activated: vlan1 [ 611.025643][T11953] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2813'. [ 613.373563][T11976] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 613.792184][T11987] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 614.296459][T12004] device syzkaller0 entered promiscuous mode [ 614.606590][T12010] netlink: 'syz.0.2835': attribute type 10 has an invalid length. [ 614.643414][T12010] bond0: (slave bond_slave_0): Releasing backup interface [ 615.201260][T12017] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 615.681279][T12031] netlink: 'syz.4.2843': attribute type 10 has an invalid length. [ 616.004303][T12036] netlink: 'syz.3.2844': attribute type 10 has an invalid length. [ 617.660891][T12064] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 618.748215][T12064] bond0: (slave bond_slave_0): Releasing backup interface [ 619.191141][T12090] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2860'. [ 619.292561][T12090] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 619.640537][T12096] FAULT_INJECTION: forcing a failure. [ 619.640537][T12096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.676931][T12096] CPU: 1 PID: 12096 Comm: syz.1.2863 Not tainted syzkaller #0 [ 619.684686][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.694810][T12096] Call Trace: [ 619.698173][T12096] [ 619.701251][T12096] dump_stack_lvl+0x188/0x24e [ 619.706018][T12096] ? show_regs_print_info+0x12/0x12 [ 619.711279][T12096] ? load_image+0x400/0x400 [ 619.716385][T12096] ? __lock_acquire+0x7d10/0x7d10 [ 619.721598][T12096] should_fail_ex+0x399/0x4d0 [ 619.726519][T12096] _copy_from_user+0x2c/0x170 [ 619.731264][T12096] iovec_from_user+0x143/0x360 [ 619.736166][T12096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 619.742402][T12096] __import_iovec+0x6d/0x500 [ 619.747368][T12096] import_iovec+0x6f/0xa0 [ 619.751754][T12096] ___sys_sendmsg+0x252/0x360 [ 619.756515][T12096] ? migrate_enable+0x148/0x220 [ 619.761442][T12096] ? __sys_sendmsg+0x290/0x290 [ 619.766441][T12096] __se_sys_sendmsg+0x1bb/0x2a0 [ 619.771456][T12096] ? __x64_sys_sendmsg+0x80/0x80 [ 619.776558][T12096] ? syscall_enter_from_user_mode+0x2a/0x80 [ 619.782493][T12096] do_syscall_64+0x4c/0xa0 [ 619.786947][T12096] ? clear_bhb_loop+0x60/0xb0 [ 619.791662][T12096] ? clear_bhb_loop+0x60/0xb0 [ 619.796379][T12096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.802319][T12096] RIP: 0033:0x7f968519c799 [ 619.806867][T12096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.826775][T12096] RSP: 002b:00007f9685ff3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.835234][T12096] RAX: ffffffffffffffda RBX: 00007f9685415fa0 RCX: 00007f968519c799 [ 619.843236][T12096] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000010 [ 619.851234][T12096] RBP: 00007f9685ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 619.859233][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.867235][T12096] R13: 00007f9685416038 R14: 00007f9685415fa0 R15: 00007ffe3446d0a8 [ 619.875265][T12096] [ 620.075139][T12100] can: request_module (can-proto-4) failed. [ 620.296533][T12115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2872'. [ 620.332339][T12115] netlink: 'syz.0.2872': attribute type 10 has an invalid length. [ 620.340590][T12113] netlink: 'syz.3.2871': attribute type 10 has an invalid length. [ 620.406040][T12115] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2872'. [ 620.475877][T12120] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 620.565560][T12120] bond0: (slave bond_slave_0): Releasing backup interface [ 620.927681][T12125] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2875'. [ 620.955478][T12131] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2876'. [ 620.990954][T12131] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 622.095655][T12161] netlink: 'syz.4.2883': attribute type 21 has an invalid length. [ 622.151684][T12161] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.2883'. [ 622.191216][T12162] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2885'. [ 622.209688][T12162] bridge_slave_1: default FDB implementation only supports local addresses [ 622.255549][T12150] device syzkaller0 entered promiscuous mode [ 622.738613][T12171] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2888'. [ 622.805900][T12171] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 623.048825][T12179] netlink: 'syz.4.2893': attribute type 10 has an invalid length. [ 623.235021][T12184] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2891'. [ 623.313399][T12184] bridge_slave_1: default FDB implementation only supports local addresses [ 623.522269][T12191] netlink: 'syz.2.2894': attribute type 21 has an invalid length. [ 624.699682][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.706189][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.749259][T12210] device syzkaller0 entered promiscuous mode [ 624.961861][T12215] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2902'. [ 624.995107][T12215] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 626.550621][T12253] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2916'. [ 626.594652][T12253] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 628.450028][T12282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.479780][T12282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.490432][T12282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.511399][T12282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.519559][T12282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 628.535310][T12282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.662962][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.977408][T12295] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2930'. [ 628.990855][T12295] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 629.071715][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.136714][T12294] device syzkaller0 entered promiscuous mode [ 629.241134][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.370240][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.933396][T12313] device syzkaller0 entered promiscuous mode [ 630.101921][T12307] device syzkaller0 entered promiscuous mode [ 630.623515][ T4280] Bluetooth: hci0: command 0x0409 tx timeout [ 631.075507][T12340] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2941'. [ 631.102777][T12281] chnl_net:caif_netlink_parms(): no params data found [ 631.106940][T12340] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 631.914909][T12360] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 631.924065][T12360] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 631.958527][T12281] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.971487][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.981825][T12281] device bridge_slave_0 entered promiscuous mode [ 632.117407][T12281] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.146702][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.156687][T12281] device bridge_slave_1 entered promiscuous mode [ 632.388202][T12376] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 632.411244][T12381] netlink: 'syz.1.2959': attribute type 10 has an invalid length. [ 632.436393][T12381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2959'. [ 632.526455][T12281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.644561][T12281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.691265][ T4280] Bluetooth: hci0: command 0x041b tx timeout [ 632.774840][T12392] FAULT_INJECTION: forcing a failure. [ 632.774840][T12392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.800983][T12392] CPU: 1 PID: 12392 Comm: syz.1.2951 Not tainted syzkaller #0 [ 632.808558][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 632.818932][T12392] Call Trace: [ 632.822258][T12392] [ 632.825253][T12392] dump_stack_lvl+0x188/0x24e [ 632.830016][T12392] ? show_regs_print_info+0x12/0x12 [ 632.835322][T12392] ? load_image+0x400/0x400 [ 632.839887][T12392] ? __lock_acquire+0x7d10/0x7d10 [ 632.845037][T12392] should_fail_ex+0x399/0x4d0 [ 632.849805][T12392] _copy_from_user+0x2c/0x170 [ 632.854560][T12392] bpf_prog_test_run_flow_dissector+0x27d/0x640 [ 632.860900][T12392] ? xdp_convert_buff_to_md+0x200/0x200 [ 632.866505][T12392] ? __fget_files+0x28/0x4b0 [ 632.871156][T12392] ? __fget_files+0x28/0x4b0 [ 632.875804][T12392] ? __fget_files+0x43d/0x4b0 [ 632.880555][T12392] ? xdp_convert_buff_to_md+0x200/0x200 [ 632.886362][T12392] bpf_prog_test_run+0x31e/0x390 [ 632.891377][T12392] __sys_bpf+0x62b/0x780 [ 632.895778][T12392] ? bpf_link_show_fdinfo+0x380/0x380 [ 632.901404][T12392] ? lock_chain_count+0x20/0x20 [ 632.906319][T12392] __x64_sys_bpf+0x78/0x90 [ 632.910790][T12392] do_syscall_64+0x4c/0xa0 [ 632.915459][T12392] ? clear_bhb_loop+0x60/0xb0 [ 632.920203][T12392] ? clear_bhb_loop+0x60/0xb0 [ 632.925052][T12392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.931009][T12392] RIP: 0033:0x7f968519c799 [ 632.935476][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.955142][T12392] RSP: 002b:00007f9685ff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.963615][T12392] RAX: ffffffffffffffda RBX: 00007f9685415fa0 RCX: 00007f968519c799 [ 632.971656][T12392] RDX: 0000000000000030 RSI: 0000200000000180 RDI: 000000000000000a [ 632.980118][T12392] RBP: 00007f9685ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 632.988259][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.996294][T12392] R13: 00007f9685416038 R14: 00007f9685415fa0 R15: 00007ffe3446d0a8 [ 633.004603][T12392] [ 633.021197][T12390] device syzkaller0 entered promiscuous mode [ 633.290428][T12281] team0: Port device team_slave_0 added [ 633.354255][T12404] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2953'. [ 633.381140][T12404] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 633.387275][T12281] team0: Port device team_slave_1 added [ 633.768733][T12281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.783089][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.834061][T12281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.905886][T12281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.920915][T12281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.965685][T12281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.212214][T12425] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 634.220247][T12425] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 634.243034][T12426] netlink: 'syz.4.2963': attribute type 10 has an invalid length. [ 634.289371][T12426] netlink: 'syz.4.2963': attribute type 10 has an invalid length. [ 634.311191][T12426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2963'. [ 634.419329][ T9] device hsr_slave_0 left promiscuous mode [ 634.432755][ T9] device hsr_slave_1 left promiscuous mode [ 634.453569][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.472592][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.559534][ T9] device veth0_macvtap left promiscuous mode [ 634.771186][ T4280] Bluetooth: hci0: command 0x040f tx timeout [ 635.193133][ T9] device macvlan1 left promiscuous mode [ 635.204994][ T9] team0 (unregistering): Port device macvlan1 removed [ 635.235122][ T9] device macvlan0 left promiscuous mode [ 635.243483][ T9] team0 (unregistering): Port device macvlan0 removed [ 635.548758][ T9] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 635.596381][ T9] device team_slave_1 left promiscuous mode [ 635.603708][ T9] team0 (unregistering): Port device team_slave_1 removed [ 635.648383][ T9] device team_slave_0 left promiscuous mode [ 635.657404][ T9] team0 (unregistering): Port device team_slave_0 removed [ 635.711113][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.078654][ T9] bond0 (unregistering): Released all slaves [ 636.130525][T12281] device hsr_slave_0 entered promiscuous mode [ 636.138758][T12281] device hsr_slave_1 entered promiscuous mode [ 636.146609][T12281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.168492][T12281] Cannot create hsr debugfs directory [ 636.178735][T12446] netlink: 'syz.4.2966': attribute type 10 has an invalid length. [ 636.417967][T12452] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2967'. [ 636.449044][T12452] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 636.565452][T12457] netlink: 'syz.3.2968': attribute type 10 has an invalid length. [ 636.861904][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 637.005808][T12471] netlink: 'syz.4.2973': attribute type 10 has an invalid length. [ 637.185747][T12474] netlink: 'syz.2.2974': attribute type 10 has an invalid length. [ 637.197279][T12474] bond0: (slave wlan1): Opening slave failed [ 637.209800][T12471] netlink: 'syz.4.2973': attribute type 10 has an invalid length. [ 637.238529][T12471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2973'. [ 637.271961][T12478] netlink: 'syz.2.2974': attribute type 10 has an invalid length. [ 637.300359][T12478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2974'. [ 637.336741][T12478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 637.478945][T12487] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 637.486106][T12487] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 637.777549][T12497] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2980'. [ 637.799807][T12494] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 637.820488][T12497] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 637.896201][T12281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 637.944995][T12281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 638.009672][T12281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 638.038515][T12281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 638.067235][T12501] netlink: 'syz.3.2991': attribute type 10 has an invalid length. [ 638.095399][T12503] netlink: 'syz.4.2981': attribute type 10 has an invalid length. [ 638.413676][T12281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.528278][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 638.551494][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.597273][T12521] netlink: 'syz.4.2987': attribute type 10 has an invalid length. [ 638.618374][T12281] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.651469][T12524] netlink: 'syz.4.2987': attribute type 10 has an invalid length. [ 638.700395][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2987'. [ 638.711424][T12523] device syzkaller0 entered promiscuous mode [ 638.738203][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 638.803869][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.843961][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.851292][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.990814][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 638.999151][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.045156][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.069827][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.077127][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.117974][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.168278][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.229173][T12539] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2993'. [ 639.239372][T12539] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 639.325073][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.356294][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.423267][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.433288][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.445782][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.465897][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.494654][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.517704][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 639.534404][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.742840][T12550] netlink: 'syz.3.2995': attribute type 10 has an invalid length. [ 640.598158][T12562] netlink: 'syz.4.2999': attribute type 10 has an invalid length. [ 640.666902][T12562] netlink: 'syz.4.2999': attribute type 10 has an invalid length. [ 640.742602][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2999'. [ 641.004925][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.024127][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.163491][T12281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.470222][T12579] device syzkaller0 entered promiscuous mode [ 641.526743][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.540511][T12581] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3003'. [ 641.562922][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.616803][T12281] device veth0_vlan entered promiscuous mode [ 641.639756][T12581] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 641.661647][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.681961][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.882733][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.905676][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.955916][T12589] netlink: 'syz.4.3005': attribute type 10 has an invalid length. [ 641.983118][T12281] device veth1_vlan entered promiscuous mode [ 642.022167][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 642.051282][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.118750][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.153848][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 642.193536][T12281] device veth0_macvtap entered promiscuous mode [ 642.225724][T12281] device veth1_macvtap entered promiscuous mode [ 642.314520][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.375498][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.401934][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.453667][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.472866][T12281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.502510][T12605] netlink: 'syz.4.3011': attribute type 10 has an invalid length. [ 642.531583][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 642.550597][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 642.570094][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 642.607000][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 642.661571][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.707888][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.758813][T12281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.816357][T12281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.883569][T12281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.915771][T12605] netlink: 'syz.4.3011': attribute type 10 has an invalid length. [ 642.934512][T12605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3011'. [ 642.966845][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 642.991362][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 643.054476][T12281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.111365][T12281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.170244][T12281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.190840][T12281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.340116][T12621] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3016'. [ 643.446202][T12621] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 643.831045][ T9538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.839030][ T9538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.016559][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 644.039747][ T9538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.050299][T12638] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 644.075499][ T9538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.110900][ T9541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 645.485310][T12676] FAULT_INJECTION: forcing a failure. [ 645.485310][T12676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.500927][T12676] CPU: 0 PID: 12676 Comm: syz.3.3029 Not tainted syzkaller #0 [ 645.508470][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.518753][T12676] Call Trace: [ 645.522083][T12676] [ 645.525236][T12676] dump_stack_lvl+0x188/0x24e [ 645.529991][T12676] ? show_regs_print_info+0x12/0x12 [ 645.535255][T12676] ? load_image+0x400/0x400 [ 645.539813][T12676] ? __lock_acquire+0x7d10/0x7d10 [ 645.544921][T12676] should_fail_ex+0x399/0x4d0 [ 645.549777][T12676] prepare_alloc_pages+0x1e2/0x5f0 [ 645.554985][T12676] __alloc_pages+0x130/0x4f0 [ 645.559687][T12676] ? zone_statistics+0x170/0x170 [ 645.564714][T12676] ? __lock_acquire+0x12f4/0x7d10 [ 645.569903][T12676] ? verify_lock_unused+0x140/0x140 [ 645.575220][T12676] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 645.581033][T12676] __folio_alloc+0xe/0x30 [ 645.585434][T12676] vma_alloc_folio+0x4a3/0x900 [ 645.590384][T12676] wp_page_copy+0x28b/0x1680 [ 645.595211][T12676] ? do_wp_page+0x67f/0x1680 [ 645.599968][T12676] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 645.605925][T12676] handle_mm_fault+0x1d19/0x3ee0 [ 645.610930][T12676] ? numa_migrate_prep+0x250/0x250 [ 645.617161][T12676] ? lock_chain_count+0x20/0x20 [ 645.622099][T12676] ? lock_mm_and_find_vma+0xae/0x2f0 [ 645.627444][T12676] do_user_addr_fault+0x51f/0xb10 [ 645.632573][T12676] exc_page_fault+0x60/0x100 [ 645.637323][T12676] asm_exc_page_fault+0x22/0x30 [ 645.642254][T12676] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 645.649103][T12676] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 645.669076][T12676] RSP: 0018:ffffc90003247cd0 EFLAGS: 00050206 [ 645.675305][T12676] RAX: ffffffff84114401 RBX: 000000000000b161 RCX: 00000000000018a1 [ 645.683358][T12676] RDX: 000000000000b161 RSI: ffff88805b5498c0 RDI: 000020000000b000 [ 645.691387][T12676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 645.699407][T12676] R10: dffffc0000000000 R11: ffffed100b6a962c R12: 00007fffffff3e9f [ 645.707615][T12676] R13: 0000000000000000 R14: 0000200000001740 R15: ffff88805b540000 [ 645.715680][T12676] ? _copy_from_user+0x161/0x170 [ 645.720697][T12676] _copy_to_user+0xea/0x130 [ 645.725261][T12676] map_lookup_and_delete_elem+0x705/0x840 [ 645.731055][T12676] __sys_bpf+0x5cc/0x780 [ 645.735626][T12676] ? bpf_link_show_fdinfo+0x380/0x380 [ 645.741085][T12676] ? lock_chain_count+0x20/0x20 [ 645.746203][T12676] __x64_sys_bpf+0x78/0x90 [ 645.750688][T12676] do_syscall_64+0x4c/0xa0 [ 645.755172][T12676] ? clear_bhb_loop+0x60/0xb0 [ 645.759907][T12676] ? clear_bhb_loop+0x60/0xb0 [ 645.764662][T12676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.770751][T12676] RIP: 0033:0x7f90bd19c799 [ 645.775234][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.794990][T12676] RSP: 002b:00007f90bdfac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.803913][T12676] RAX: ffffffffffffffda RBX: 00007f90bd415fa0 RCX: 00007f90bd19c799 [ 645.812027][T12676] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 645.820132][T12676] RBP: 00007f90bdfac090 R08: 0000000000000000 R09: 0000000000000000 [ 645.828410][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.836440][T12676] R13: 00007f90bd416038 R14: 00007f90bd415fa0 R15: 00007ffde55e9c68 [ 645.844497][T12676] [ 646.017135][T12680] netlink: 'syz.2.3031': attribute type 10 has an invalid length. [ 646.146787][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 646.159948][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 646.170370][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 646.239745][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 646.247715][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 646.256584][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.337308][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.524143][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.614902][T12692] netlink: 'syz.0.3043': attribute type 10 has an invalid length. [ 646.728295][T12692] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 646.812234][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.887293][T12698] netlink: 'syz.0.3043': attribute type 10 has an invalid length. [ 646.935894][T12710] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3037'. [ 646.945635][T12698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3043'. [ 646.977857][T12710] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 646.986722][T12698] device team0 entered promiscuous mode [ 647.009387][T12698] device team_slave_0 entered promiscuous mode [ 647.035493][T12698] device team_slave_1 entered promiscuous mode [ 647.072553][T12698] bridge0: port 3(team0) entered blocking state [ 647.097333][T12698] bridge0: port 3(team0) entered disabled state [ 647.138736][T12698] bridge0: port 3(team0) entered blocking state [ 647.145559][T12698] bridge0: port 3(team0) entered forwarding state [ 647.330051][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.767132][ T9] device 0 left promiscuous mode [ 648.036308][T12682] chnl_net:caif_netlink_parms(): no params data found [ 648.186215][T12742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3046'. [ 648.291163][T12282] Bluetooth: hci4: command 0x0409 tx timeout [ 648.562467][T12759] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3050'. [ 648.652517][T12759] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 648.724586][T12682] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.756847][T12682] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.799718][T12682] device bridge_slave_0 entered promiscuous mode [ 648.879185][T12766] netlink: 'syz.1.3052': attribute type 10 has an invalid length. [ 648.906428][T12766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3052'. [ 648.937810][T12772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3054'. [ 648.941200][T12682] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.999511][T12682] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.029084][T12682] device bridge_slave_1 entered promiscuous mode [ 649.211351][T12772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3054'. [ 649.308507][T12773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3054'. [ 649.374520][T12682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.398652][T12682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.664994][T12682] team0: Port device team_slave_0 added [ 649.807721][T12682] team0: Port device team_slave_1 added [ 649.895792][T12788] bridge0: port 2(hsr0) entered disabled state [ 649.915522][T12788] bridge0: port 3(team0) entered disabled state [ 649.975435][T12803] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3063'. [ 649.987517][T12788] device bridge_slave_0 left promiscuous mode [ 650.010034][T12803] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 650.025657][T12788] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.209362][T12682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.221539][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.297881][T12682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.347346][T12682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.371330][T12282] Bluetooth: hci4: command 0x041b tx timeout [ 650.395711][T12682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.467006][T12682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.492145][T12810] netlink: 'syz.2.3064': attribute type 10 has an invalid length. [ 650.514843][T12815] netlink: 'syz.0.3075': attribute type 10 has an invalid length. [ 650.544423][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3075'. [ 650.901071][T12682] device hsr_slave_0 entered promiscuous mode [ 650.958531][T12682] device hsr_slave_1 entered promiscuous mode [ 650.999841][T12682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.024367][T12682] Cannot create hsr debugfs directory [ 651.308713][ T9] device hsr_slave_0 left promiscuous mode [ 651.341542][ T9] device hsr_slave_1 left promiscuous mode [ 651.386307][ T9] device bridge_slave_1 left promiscuous mode [ 651.417489][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.479827][ T9] device bridge_slave_0 left promiscuous mode [ 651.495125][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.613914][T12842] netlink: 'syz.0.3082': attribute type 3 has an invalid length. [ 651.861408][ T9] device veth0_macvtap left promiscuous mode [ 652.451266][T12282] Bluetooth: hci4: command 0x040f tx timeout [ 654.531108][T12282] Bluetooth: hci4: command 0x0419 tx timeout [ 655.592615][T12861] __nla_validate_parse: 1 callbacks suppressed [ 655.592636][T12861] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3077'. [ 655.879507][T12873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3080'. [ 656.121919][T12873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3080'. [ 656.155802][T12876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3080'. [ 656.196341][T12878] netlink: 'syz.0.3079': attribute type 10 has an invalid length. [ 656.265416][T12878] device veth1_macvtap left promiscuous mode [ 656.609609][T12879] device syzkaller0 entered promiscuous mode [ 657.188365][T12887] device syzkaller0 entered promiscuous mode [ 657.814382][T12682] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 657.851699][T12914] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 657.876452][T12914] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 657.890478][T12682] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 657.938037][T12918] netlink: 'syz.2.3088': attribute type 10 has an invalid length. [ 657.980909][T12918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3088'. [ 658.020947][T12918] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 658.068726][T12682] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.106922][T12919] netlink: 'syz.3.3089': attribute type 7 has an invalid length. [ 658.137143][T12923] netlink: 'syz.1.3090': attribute type 3 has an invalid length. [ 658.165801][T12682] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.184530][T12923] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3090'. [ 658.830000][T12682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.961093][T12682] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.077081][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.117464][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.188557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.231864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.279248][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.286716][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.374805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.384019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.421201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.477591][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.485005][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.541427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.624524][T12958] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3098'. [ 659.719507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.741914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.794870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.829239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.852223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.873114][T12961] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 659.915829][T12961] netlink: 'syz.3.3097': attribute type 4 has an invalid length. [ 659.932279][T12961] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3097'. [ 660.045268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.069472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.105344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.147999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.187924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 660.229509][T12682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.298713][T12972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3101'. [ 660.906908][T12983] netlink: 'syz.2.3103': attribute type 3 has an invalid length. [ 660.986851][T12983] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3103'. [ 661.524925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.541578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.576437][T12682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.877281][T13009] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 662.127798][T13004] device syzkaller0 entered promiscuous mode [ 662.260371][T13018] netlink: 'syz.3.3111': attribute type 10 has an invalid length. [ 663.545489][T13049] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 663.642636][T13045] can: request_module (can-proto-0) failed. [ 663.694878][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.706450][ T9538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.802616][T13054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3122'. [ 663.813327][T13053] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 663.826003][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 663.836890][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.851876][T13054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3122'. [ 663.861976][T13053] netlink: 'syz.1.3123': attribute type 10 has an invalid length. [ 663.875880][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3123'. [ 663.885294][T13056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3124'. [ 663.896142][T13053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 663.914157][T12682] device veth0_vlan entered promiscuous mode [ 663.921914][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.937918][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 663.946705][T13054] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3122'. [ 663.961249][T13056] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3124'. [ 663.989721][T13057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3124'. [ 664.037253][T12682] device veth1_vlan entered promiscuous mode [ 664.173731][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 664.185147][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 664.194324][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 664.208615][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.326680][T13061] netlink: 'syz.1.3125': attribute type 10 has an invalid length. [ 664.339277][T12682] device veth0_macvtap entered promiscuous mode [ 664.349423][T13065] device syzkaller0 entered promiscuous mode [ 664.362943][T12682] device veth1_macvtap entered promiscuous mode [ 664.399424][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.410549][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.432675][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.448480][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.490988][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.502187][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.514692][T12682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.594139][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.603187][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 664.613632][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 664.626610][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.641628][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.662130][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.676354][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.688872][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.704744][T12682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.717538][T12682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.734297][T12682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.805979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 664.860029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 664.884483][T12682] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.903990][T12682] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.920748][T12682] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.937679][T12682] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.970824][T13067] IPv6: Can't replace route, no match found [ 665.283084][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.321060][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.361808][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.491097][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.499844][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.548746][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 666.585907][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3135'. [ 666.636260][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3135'. [ 666.703004][T13096] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3135'. [ 667.190161][T13101] netlink: 'syz.2.3136': attribute type 10 has an invalid length. [ 667.445505][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.456621][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.467261][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 667.476500][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 667.488387][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 667.509061][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 667.535271][T13102] netlink: 'syz.2.3136': attribute type 10 has an invalid length. [ 667.544083][T13102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3136'. [ 667.559923][T13102] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 667.604566][T13103] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 667.840182][T13109] device syzkaller0 entered promiscuous mode [ 667.876946][T12282] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 667.989076][ T5191] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.574904][T12282] Bluetooth: hci3: command 0x0409 tx timeout [ 671.422766][ T5191] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.600435][ T5191] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.650892][T12282] Bluetooth: hci3: command 0x041b tx timeout [ 671.787660][ T5191] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.070431][T13141] netlink: 'syz.2.3151': attribute type 10 has an invalid length. [ 672.492392][T13149] netlink: 'syz.1.3152': attribute type 10 has an invalid length. [ 672.746121][T13149] netlink: 'syz.1.3152': attribute type 10 has an invalid length. [ 672.771140][T13149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3152'. [ 672.801718][T13149] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 672.943288][T13104] chnl_net:caif_netlink_parms(): no params data found [ 673.210006][T13165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3157'. [ 673.312498][T13165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3157'. [ 673.344780][T13168] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3157'. [ 673.585778][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3160'. [ 673.675247][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3160'. [ 673.730909][T12282] Bluetooth: hci3: command 0x040f tx timeout [ 673.928078][T13177] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3160'. [ 674.100724][T13104] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.108017][T13104] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.173938][T13104] device bridge_slave_0 entered promiscuous mode [ 674.290592][T13104] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.298112][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.314433][T13104] device bridge_slave_1 entered promiscuous mode [ 674.329147][T13198] netlink: 'syz.2.3163': attribute type 10 has an invalid length. [ 674.350974][T13202] netlink: 'syz.4.3166': attribute type 10 has an invalid length. [ 674.436731][T13202] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 674.568216][T13203] netlink: 'syz.4.3166': attribute type 10 has an invalid length. [ 674.589624][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3166'. [ 674.601286][T13208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 674.636069][T13203] device team0 entered promiscuous mode [ 674.643267][T13203] device team_slave_0 entered promiscuous mode [ 674.650152][T13203] device team_slave_1 entered promiscuous mode [ 674.658384][T13203] bridge0: port 3(team0) entered blocking state [ 674.665995][T13203] bridge0: port 3(team0) entered disabled state [ 674.683235][T13203] bridge0: port 3(team0) entered blocking state [ 674.689811][T13203] bridge0: port 3(team0) entered forwarding state [ 674.766328][T13208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3169'. [ 674.798053][T13104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.969777][T13104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.183981][T13104] team0: Port device team_slave_0 added [ 675.229614][T13104] team0: Port device team_slave_1 added [ 675.559788][T13104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.584161][T13104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.667325][T13104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.716456][T13104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.759027][T13228] ================================================================== [ 675.767189][T13228] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 675.775187][T13228] Write of size 80 at addr ffff8880323c1690 by task syz.2.3173/13228 [ 675.783520][T13228] [ 675.785905][T13228] CPU: 0 PID: 13228 Comm: syz.2.3173 Not tainted syzkaller #0 [ 675.793432][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 675.803539][T13228] Call Trace: [ 675.806863][T13228] [ 675.809839][T13228] dump_stack_lvl+0x188/0x24e [ 675.814674][T13228] ? __lock_acquire+0x7d10/0x7d10 [ 675.819763][T13228] ? show_regs_print_info+0x12/0x12 [ 675.825026][T13228] ? load_image+0x400/0x400 [ 675.829595][T13228] ? __virt_addr_valid+0x465/0x540 [ 675.834778][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 675.839985][T13228] print_report+0xa8/0x210 [ 675.844472][T13228] kasan_report+0x10b/0x140 [ 675.849046][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 675.854320][T13228] kasan_check_range+0x235/0x290 [ 675.859342][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 675.864511][T13228] memcpy+0x3c/0x60 [ 675.868403][T13228] __bpf_get_stackid+0x6c9/0x920 [ 675.873394][T13228] bpf_get_stackid_pe+0x33f/0x400 [ 675.878567][T13228] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 675.884174][T13228] bpf_overflow_handler+0x522/0x7c0 [ 675.889398][T13228] ? bpf_overflow_handler+0xd9/0x7c0 [ 675.894719][T13228] ? perf_swevent_overflow+0x230/0x230 [ 675.900200][T13228] ? ct_irq_exit_irqson+0x113/0x170 [ 675.905429][T13228] ? __perf_event_account_interrupt+0x187/0x280 [ 675.911704][T13228] __perf_event_overflow+0x448/0x610 [ 675.917027][T13228] perf_swevent_event+0x315/0x570 [ 675.922099][T13228] ? perf_tp_event+0xc30/0xc30 [ 675.926908][T13228] ___perf_sw_event+0x49e/0x6e0 [ 675.931798][T13228] ? ___perf_sw_event+0x180/0x6e0 [ 675.936860][T13228] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 675.943310][T13228] ? mark_lock+0x94/0x320 [ 675.947690][T13228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 675.953718][T13228] ? lock_chain_count+0x20/0x20 [ 675.958603][T13228] __perf_sw_event+0x135/0x260 [ 675.963415][T13228] do_user_addr_fault+0xaea/0xb10 [ 675.968564][T13228] ? trace_hardirqs_off_finish+0x86/0x180 [ 675.974325][T13228] exc_page_fault+0x60/0x100 [ 675.978964][T13228] asm_exc_page_fault+0x22/0x30 [ 675.983849][T13228] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 675.990648][T13228] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 676.010383][T13228] RSP: 0018:ffffc9000375f788 EFLAGS: 00050206 [ 676.016485][T13228] RAX: ffffffff840f3201 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 676.024507][T13228] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc9000379afc0 [ 676.032511][T13228] RBP: 0000000000000000 R08: ffffc900037ccfdf R09: 1ffff920006f99fb [ 676.040506][T13228] R10: dffffc0000000000 R11: fffff520006f99fc R12: 00007ffffffcb020 [ 676.048504][T13228] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90003799000 [ 676.056594][T13228] ? copyin+0x71/0x120 [ 676.060816][T13228] copyin+0xe7/0x120 [ 676.064750][T13228] _copy_from_iter+0x447/0x1130 [ 676.069641][T13228] ? copyout_mc+0x110/0x110 [ 676.074173][T13228] ? do_raw_spin_unlock+0x11d/0x230 [ 676.079485][T13228] ? _raw_spin_unlock+0x24/0x40 [ 676.084463][T13228] ? find_vmap_area+0xf8/0x110 [ 676.089344][T13228] ? __check_object_size+0x500/0xa40 [ 676.094654][T13228] netlink_sendmsg+0x755/0xbd0 [ 676.099634][T13228] ? netlink_getsockopt+0x550/0x550 [ 676.104874][T13228] ? aa_sock_msg_perm+0x94/0x150 [ 676.109952][T13228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 676.115494][T13228] ? security_socket_sendmsg+0x7c/0xa0 [ 676.121123][T13228] ? netlink_getsockopt+0x550/0x550 [ 676.126457][T13228] ____sys_sendmsg+0x5be/0x970 [ 676.131268][T13228] ? __sys_sendmsg_sock+0x30/0x30 [ 676.136358][T13228] ? __import_iovec+0x315/0x500 [ 676.141246][T13228] ? import_iovec+0x6f/0xa0 [ 676.145784][T13228] ___sys_sendmsg+0x2a2/0x360 [ 676.150495][T13228] ? try_to_wake_up+0x67c/0x1080 [ 676.155466][T13228] ? __sys_sendmsg+0x290/0x290 [ 676.160288][T13228] __se_sys_sendmsg+0x1bb/0x2a0 [ 676.165182][T13228] ? __x64_sys_sendmsg+0x80/0x80 [ 676.170171][T13228] ? lockdep_hardirqs_on+0x94/0x140 [ 676.175506][T13228] do_syscall_64+0x4c/0xa0 [ 676.179998][T13228] ? clear_bhb_loop+0x60/0xb0 [ 676.184722][T13228] ? clear_bhb_loop+0x60/0xb0 [ 676.189434][T13228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.195442][T13228] RIP: 0033:0x7fd4ec99c799 [ 676.199971][T13228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.219613][T13228] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.228210][T13228] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 676.236223][T13228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 676.244228][T13228] RBP: 00007fd4eca32c99 R08: 0000000000000000 R09: 0000000000000000 [ 676.252224][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.260250][T13228] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 676.268259][T13228] [ 676.271388][T13228] [ 676.273747][T13228] Allocated by task 13228: [ 676.278183][T13228] kasan_set_track+0x4b/0x70 [ 676.282818][T13228] __kasan_kmalloc+0x8e/0xa0 [ 676.287441][T13228] __kmalloc_node+0xb0/0x240 [ 676.292116][T13228] bpf_map_area_alloc+0x47/0xe0 [ 676.297083][T13228] prealloc_elems_and_freelist+0x86/0x1c0 [ 676.302826][T13228] stack_map_alloc+0x390/0x520 [ 676.307613][T13228] map_create+0x534/0x1000 [ 676.312065][T13228] __sys_bpf+0x38b/0x780 [ 676.316340][T13228] __x64_sys_bpf+0x78/0x90 [ 676.320783][T13228] do_syscall_64+0x4c/0xa0 [ 676.325320][T13228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.331334][T13228] [ 676.333680][T13228] The buggy address belongs to the object at ffff8880323c1680 [ 676.333680][T13228] which belongs to the cache kmalloc-cg-64 of size 64 [ 676.347869][T13228] The buggy address is located 16 bytes inside of [ 676.347869][T13228] 64-byte region [ffff8880323c1680, ffff8880323c16c0) [ 676.361033][T13228] [ 676.363372][T13228] The buggy address belongs to the physical page: [ 676.369896][T13228] page:ffffea0000c8f040 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x323c1 [ 676.380065][T13228] memcg:ffff88803075fa01 [ 676.384316][T13228] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 676.391893][T13228] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442780 [ 676.400616][T13228] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88803075fa01 [ 676.409236][T13228] page dumped because: kasan: bad access detected [ 676.415690][T13228] page_owner tracks the page as allocated [ 676.421422][T13228] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5191, tgid 5191 (kworker/u4:9), ts 672396646330, free_ts 667543508241 [ 676.439866][T13228] post_alloc_hook+0x173/0x1a0 [ 676.444677][T13228] get_page_from_freelist+0x1a1e/0x1ab0 [ 676.450263][T13228] __alloc_pages+0x1ec/0x4f0 [ 676.454894][T13228] alloc_slab_page+0x5d/0x160 [ 676.459732][T13228] new_slab+0x87/0x2c0 [ 676.463837][T13228] ___slab_alloc+0xbc6/0x1240 [ 676.468534][T13228] __kmem_cache_alloc_node+0x1a0/0x260 [ 676.474101][T13228] __kmalloc_node+0xa0/0x240 [ 676.478721][T13228] kvmalloc_node+0x6c/0x180 [ 676.483261][T13228] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 676.489184][T13228] __nf_unregister_net_hook+0x4e1/0x6e0 [ 676.494761][T13228] nf_unregister_net_hooks+0xc7/0x130 [ 676.500311][T13228] nf_ct_netns_put+0x369/0x510 [ 676.505211][T13228] nf_conncount_destroy+0x3d/0x150 [ 676.510533][T13228] ovs_ct_exit+0x98/0x200 [ 676.514903][T13228] ovs_exit_net+0xe9/0x7a0 [ 676.519372][T13228] page last free stack trace: [ 676.524068][T13228] free_unref_page_prepare+0x8b4/0x9a0 [ 676.530032][T13228] free_unref_page+0x2e/0x3f0 [ 676.534798][T13228] qlist_free_all+0x76/0xe0 [ 676.539362][T13228] kasan_quarantine_reduce+0x144/0x160 [ 676.544938][T13228] __kasan_slab_alloc+0x1e/0x80 [ 676.549913][T13228] slab_post_alloc_hook+0x4b/0x480 [ 676.555138][T13228] kmem_cache_alloc+0x123/0x2f0 [ 676.560013][T13228] getname_flags+0xb7/0x500 [ 676.564566][T13228] do_sys_openat2+0xdd/0x4b0 [ 676.569302][T13228] __x64_sys_openat+0x135/0x160 [ 676.574192][T13228] do_syscall_64+0x4c/0xa0 [ 676.578726][T13228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.584770][T13228] [ 676.587162][T13228] Memory state around the buggy address: [ 676.592929][T13228] ffff8880323c1580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 676.601042][T13228] ffff8880323c1600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 676.609153][T13228] >ffff8880323c1680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 676.617248][T13228] ^ [ 676.622735][T13228] ffff8880323c1700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 676.631165][T13228] ffff8880323c1780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 676.639515][T13228] ================================================================== [ 676.647714][T13228] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 676.654929][T13228] CPU: 0 PID: 13228 Comm: syz.2.3173 Not tainted syzkaller #0 [ 676.662413][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.672502][T13228] Call Trace: [ 676.675807][T13228] [ 676.678758][T13228] dump_stack_lvl+0x188/0x24e [ 676.683479][T13228] ? memcpy+0x3c/0x60 [ 676.687586][T13228] ? show_regs_print_info+0x12/0x12 [ 676.692813][T13228] ? load_image+0x400/0x400 [ 676.697353][T13228] panic+0x2e5/0x730 [ 676.701282][T13228] ? bpf_jit_dump+0xd0/0xd0 [ 676.705813][T13228] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 676.711759][T13228] ? _raw_spin_unlock+0x40/0x40 [ 676.716636][T13228] ? print_memory_metadata+0x314/0x400 [ 676.722124][T13228] check_panic_on_warn+0x80/0xa0 [ 676.727181][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 676.732319][T13228] end_report+0x66/0x110 [ 676.736600][T13228] kasan_report+0x118/0x140 [ 676.741137][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 676.746282][T13228] kasan_check_range+0x235/0x290 [ 676.751362][T13228] ? __bpf_get_stackid+0x6c9/0x920 [ 676.756523][T13228] memcpy+0x3c/0x60 [ 676.760356][T13228] __bpf_get_stackid+0x6c9/0x920 [ 676.765326][T13228] bpf_get_stackid_pe+0x33f/0x400 [ 676.770378][T13228] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 676.775860][T13228] bpf_overflow_handler+0x522/0x7c0 [ 676.781091][T13228] ? bpf_overflow_handler+0xd9/0x7c0 [ 676.786488][T13228] ? perf_swevent_overflow+0x230/0x230 [ 676.791976][T13228] ? ct_irq_exit_irqson+0x113/0x170 [ 676.797295][T13228] ? __perf_event_account_interrupt+0x187/0x280 [ 676.803577][T13228] __perf_event_overflow+0x448/0x610 [ 676.808919][T13228] perf_swevent_event+0x315/0x570 [ 676.813990][T13228] ? perf_tp_event+0xc30/0xc30 [ 676.818796][T13228] ___perf_sw_event+0x49e/0x6e0 [ 676.823684][T13228] ? ___perf_sw_event+0x180/0x6e0 [ 676.828742][T13228] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 676.835203][T13228] ? mark_lock+0x94/0x320 [ 676.839590][T13228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 676.845627][T13228] ? lock_chain_count+0x20/0x20 [ 676.850533][T13228] __perf_sw_event+0x135/0x260 [ 676.855389][T13228] do_user_addr_fault+0xaea/0xb10 [ 676.860480][T13228] ? trace_hardirqs_off_finish+0x86/0x180 [ 676.866348][T13228] exc_page_fault+0x60/0x100 [ 676.871078][T13228] asm_exc_page_fault+0x22/0x30 [ 676.876223][T13228] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 676.882854][T13228] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 676.902679][T13228] RSP: 0018:ffffc9000375f788 EFLAGS: 00050206 [ 676.908774][T13228] RAX: ffffffff840f3201 RBX: 0000000000033fe0 RCX: 0000000000032020 [ 676.916857][T13228] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc9000379afc0 [ 676.925211][T13228] RBP: 0000000000000000 R08: ffffc900037ccfdf R09: 1ffff920006f99fb [ 676.933203][T13228] R10: dffffc0000000000 R11: fffff520006f99fc R12: 00007ffffffcb020 [ 676.941293][T13228] R13: 0000000000000000 R14: 0000200000000040 R15: ffffc90003799000 [ 676.949298][T13228] ? copyin+0x71/0x120 [ 676.953610][T13228] copyin+0xe7/0x120 [ 676.957556][T13228] _copy_from_iter+0x447/0x1130 [ 676.962446][T13228] ? copyout_mc+0x110/0x110 [ 676.967002][T13228] ? do_raw_spin_unlock+0x11d/0x230 [ 676.972418][T13228] ? _raw_spin_unlock+0x24/0x40 [ 676.977296][T13228] ? find_vmap_area+0xf8/0x110 [ 676.982205][T13228] ? __check_object_size+0x500/0xa40 [ 676.987517][T13228] netlink_sendmsg+0x755/0xbd0 [ 676.992321][T13228] ? netlink_getsockopt+0x550/0x550 [ 676.997644][T13228] ? aa_sock_msg_perm+0x94/0x150 [ 677.002892][T13228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 677.008619][T13228] ? security_socket_sendmsg+0x7c/0xa0 [ 677.014326][T13228] ? netlink_getsockopt+0x550/0x550 [ 677.019576][T13228] ____sys_sendmsg+0x5be/0x970 [ 677.024386][T13228] ? __sys_sendmsg_sock+0x30/0x30 [ 677.029538][T13228] ? __import_iovec+0x315/0x500 [ 677.034546][T13228] ? import_iovec+0x6f/0xa0 [ 677.039290][T13228] ___sys_sendmsg+0x2a2/0x360 [ 677.044039][T13228] ? try_to_wake_up+0x67c/0x1080 [ 677.049061][T13228] ? __sys_sendmsg+0x290/0x290 [ 677.054120][T13228] __se_sys_sendmsg+0x1bb/0x2a0 [ 677.059226][T13228] ? __x64_sys_sendmsg+0x80/0x80 [ 677.064210][T13228] ? lockdep_hardirqs_on+0x94/0x140 [ 677.069570][T13228] do_syscall_64+0x4c/0xa0 [ 677.074152][T13228] ? clear_bhb_loop+0x60/0xb0 [ 677.078974][T13228] ? clear_bhb_loop+0x60/0xb0 [ 677.083696][T13228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.089996][T13228] RIP: 0033:0x7fd4ec99c799 [ 677.094456][T13228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.115245][T13228] RSP: 002b:00007fd4ed8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.123787][T13228] RAX: ffffffffffffffda RBX: 00007fd4ecc15fa0 RCX: 00007fd4ec99c799 [ 677.132062][T13228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 677.140438][T13228] RBP: 00007fd4eca32c99 R08: 0000000000000000 R09: 0000000000000000 [ 677.148745][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.156750][T13228] R13: 00007fd4ecc16038 R14: 00007fd4ecc15fa0 R15: 00007ffde650b928 [ 677.165046][T13228] [ 677.168665][T13228] Kernel Offset: disabled [ 677.173019][T13228] Rebooting in 86400 seconds..