last executing test programs: 5.832098513s ago: executing program 3 (id=1310): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000580)="27050200160014000600002fb96dbcf706e1050007008100000081", 0x1b}, {&(0x7f0000000700)="cb4e64b0af329873eef12979b7", 0xd}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="850000007a0000007600000000000000270000000000b6dd9500000000000000990415e9fdddf411b40e47fe918fb8a776e6697c77f9c32feeb75916fc7f88ebc92863f7341e8323af3bccd0"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x14, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.532371376s ago: executing program 3 (id=1316): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)}, 0xc001) 2.5053023s ago: executing program 0 (id=1317): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b7be00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xf, 0x4, 0x4, 0x12, 0x22800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000002100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0xfffffff2, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bc76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.195487182s ago: executing program 2 (id=1320): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000800)=""/93, 0x5d}, {&(0x7f0000000880)=""/12, 0xc}, {&(0x7f00000008c0)=""/10, 0xa}, {&(0x7f0000000900)=""/153, 0x99}, {&(0x7f00000009c0)=""/206, 0xce}, {&(0x7f0000000ac0)=""/252, 0xfc}], 0x6, 0xfffffffffffffffe}, 0x142) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xa, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x20, &(0x7f00000002c0)={0x0, 0x3c, 0x0, &(0x7f00000000c0)=""/171, 0xab}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x2f, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10182) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x5f, 0x61]}}, 0x0, 0x38, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x6, 0xa0, 0x5, 0x0, 0x4, 0x1120, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8fb8, 0x0, @perf_config_ext={0x10000, 0x6}, 0x9000, 0x1000, 0xf4, 0x5, 0xfffffffffffffffb, 0x0, 0x5, 0x0, 0xfffffff9, 0x0, 0x4}, 0xffffffffffffffff, 0x24f5, r5, 0x1) 2.012285873s ago: executing program 0 (id=1322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.943738004s ago: executing program 2 (id=1323): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8953, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0b", 0xcb}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002"], 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x1c, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 1.832189293s ago: executing program 0 (id=1325): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x42}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x954b, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @ldst={0x1, 0x3, 0x6, 0x7, 0x6, 0x30, 0x1}, @map_val={0x18, 0x6815c22c1970bfaa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x6e, &(0x7f00000002c0)=""/110, 0x40f00, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x81}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2042) 1.696995405s ago: executing program 0 (id=1326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x27) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bc76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x6, 0x10, 0xb1, 0x2, 0x0, 0x6, 0x1800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10400, 0xbd, 0x7ff, 0x0, 0x7fff, 0x9b50, 0xd, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xf, r2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 1.632820796s ago: executing program 2 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.500730468s ago: executing program 3 (id=1329): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x21, 0x1, 0xfffffffe, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x10, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) socket$kcm(0x10, 0x2, 0x0) 1.156165596s ago: executing program 1 (id=1331): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000033000b0f667054a351b5d7860d8f6a8a31395d160a5889a33b864f87247ca0baa5960c4c884216c5e558a4c3f21fc4a78cda1b88979bc97e1412dfa731570165f6e54e04085a41f2ea8b501604d54073bce952b80e53ed15427679", 0x5f}], 0x1}, 0x10) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'blkio'}, {0x2b, 'net'}, {0x2d, 'devices'}]}, 0x15) 1.13310372s ago: executing program 0 (id=1332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8953, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0b", 0xcb}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002"], 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x1c, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 956.24099ms ago: executing program 2 (id=1333): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r1, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 932.452793ms ago: executing program 1 (id=1334): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x9, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0xfff5, 0x0, @mcast1, 0x4, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000780)="f4000900062b3c25fe80000000000000dc8b850f238466cc00007a000000adac911b", 0x22}, {&(0x7f0000000080)="53b12d3fa0ba", 0x6}], 0x2}, 0x0) 825.271412ms ago: executing program 2 (id=1335): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f4", 0x78}], 0x1}, 0xff0f000000000000) 803.999125ms ago: executing program 3 (id=1336): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x0, 0x1, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) r1 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r1, 0x0, 0xfe33) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8953, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0b", 0xcb}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002"], 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x1c, 0x4}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 793.079197ms ago: executing program 0 (id=1337): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)}, 0xc001) 696.194113ms ago: executing program 1 (id=1338): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000", 0x6c}], 0x1}, 0x0) 674.883697ms ago: executing program 2 (id=1339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x3, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x7}, @ldst={0x3, 0x3, 0x3, 0x2, 0x6, 0x4, 0xfffffffffffffffc}], &(0x7f00000003c0)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0x80, 0x4}, 0x10, 0x18cad, r0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x5, 0xa, 0xc}, {0x0, 0x3, 0xa, 0x8}, {0x1, 0x1, 0xf, 0x6}, {0x4, 0x3, 0xb, 0x4}], 0x10, 0x5}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x3}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b40)={r8, &(0x7f0000000a40)="ea6c6869b7c57de362057372b5cdaa202d8cc2747c08da3dcd25777f84ef6612ba4a2255933e642f66b8ec9f0d23b0f52a9a716767c6b01a160c32ca4acbc5397c593ba591a5c5dfc69318de1776e293c7da96c050184796d3fdc677b692ad572b994b66f9506590aeddf0c08b5292dc418d3cad68dafb86e95aadc50cd0b6", &(0x7f0000000ac0)=""/75, 0x4}, 0x20) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x4, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1e6f}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x3d, &(0x7f0000000200)=""/61, 0x41000, 0x20, '\x00', r2, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x6, 0x7fff, 0x9}, 0x10, r3, r4, 0x0, &(0x7f00000008c0)=[r7, r8, r9, r10, r11, r12, 0xffffffffffffffff, r13, 0x1], 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b80006990300000004000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b030000000000001d440000000000007a0a00fe00ffffffc303000041000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) 573.529014ms ago: executing program 1 (id=1340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000}, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffa84, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x27) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0xfc40) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bc76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x6, 0x10, 0xb1, 0x2, 0x0, 0x6, 0x1800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10400, 0xbd, 0x7ff, 0x0, 0x7fff, 0x9b50, 0xd, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xf, r2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 532.098851ms ago: executing program 3 (id=1341): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f00000003c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 333.871484ms ago: executing program 3 (id=1342): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xe, {0x2, 0x0, @multicast2}}, 0x67, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x3, 0x452}, 0x100301, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffff4, 0x4}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/27], 0x48) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x1, 0x4, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x100021, 0x10000, 0x0, 0x5, 0x8, 0x80020005, 0x7, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000600)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x8001}, 0x4, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffb0001}, 0x0, 0xe, 0xffffffffffffffff, 0xf) sendmsg$inet(r5, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000240)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31, @ANYRES16=r6, @ANYRESOCT=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 200.937356ms ago: executing program 1 (id=1343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000072000000181100009621f2b66e706546b0e7c148d5a37428b7b565368a200d4e887560eb53f743f8e92cf9ef0af450b90f51b2db767f6ceb55d341bc382052721d56c154ca788e761633ab16b28bf6", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x100900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x6}, r2, 0x1, 0xffffffffffffffff, 0xc) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19ffffff}, 0x48) 0s ago: executing program 1 (id=1344): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180069d62ae708000080220000cf0eb345d600"/28], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r2}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611f5c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e9}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) recvmsg(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/239, 0xef}], 0x1}, 0x61) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r1, &(0x7f00000001c0)="e38d56be41c149aa94b48e96bb3fd45dea56f6ffb381f6416836d489d35f109807dbdfb5a4fc064b9c59d9c8c6b377a3e8c39d93e6548f5576da8ef5e9d2c5cf2ae3c35585644db45a8c67f13a02b1daa0076c3454387080fb8d36", &(0x7f0000000240)=""/172, 0x4}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000003000000000000000300000d00000000050000000200000008000000000000000b0000003eb658ae90602a00dac24f64030000000000000000000003000000000500000003000000000400000e000000000000130400000003000000002e00"], &(0x7f0000000340)=""/154, 0x67, 0x9a, 0x1, 0x80000001}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x4, 0xffffffffffffffff, 0x7f, '\x00', r11, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x9, 0x0, r10, 0x80000000, '\x00', r11, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@bloom_filter={0x1e, 0x9b, 0x2, 0x88, 0x2000, r7, 0xfffffffd, '\x00', r11, r9, 0x5, 0x4, 0x0, 0x3}, 0x50) kernel console output (not intermixed with test programs): yz.3.358': attribute type 6 has an invalid length. [ 169.720008][ T6961] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.358'. [ 169.744847][ T6960] netlink: 'syz.3.358': attribute type 10 has an invalid length. [ 169.781969][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.358'. [ 170.206968][ T6976] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.365'. [ 170.217213][ T6976] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.365'. [ 170.511538][ T6984] FAULT_INJECTION: forcing a failure. [ 170.511538][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.553175][ T6984] CPU: 0 PID: 6984 Comm: syz.3.368 Not tainted syzkaller #0 [ 170.560669][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.570813][ T6984] Call Trace: [ 170.574153][ T6984] [ 170.577263][ T6984] dump_stack_lvl+0x18c/0x250 [ 170.582109][ T6984] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 170.588409][ T6984] ? show_regs_print_info+0x20/0x20 [ 170.593937][ T6984] ? load_image+0x420/0x420 [ 170.598672][ T6984] should_fail_ex+0x39d/0x4d0 [ 170.603526][ T6984] _copy_from_user+0x2f/0xe0 [ 170.608273][ T6984] vmemdup_user+0xac/0x1e0 [ 170.613113][ T6984] map_get_next_key+0x228/0x620 [ 170.618379][ T6984] ? __might_fault+0xc6/0x120 [ 170.623292][ T6984] ? __might_fault+0xaa/0x120 [ 170.628214][ T6984] ? bpf_lsm_bpf+0x9/0x10 [ 170.632611][ T6984] __sys_bpf+0x715/0x890 [ 170.636923][ T6984] ? bpf_link_show_fdinfo+0x390/0x390 [ 170.642460][ T6984] ? lock_chain_count+0x20/0x20 [ 170.647475][ T6984] __x64_sys_bpf+0x7c/0x90 [ 170.652073][ T6984] do_syscall_64+0x55/0xa0 [ 170.656546][ T6984] ? clear_bhb_loop+0x40/0x90 [ 170.661327][ T6984] ? clear_bhb_loop+0x40/0x90 [ 170.666155][ T6984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.672221][ T6984] RIP: 0033:0x7f239c59c819 [ 170.676784][ T6984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.696718][ T6984] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.705294][ T6984] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 170.713705][ T6984] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000004 [ 170.722453][ T6984] RBP: 00007f239d4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 170.730596][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.738883][ T6984] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 170.747025][ T6984] [ 170.912401][ T6990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.370'. [ 170.962993][ T6990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.370'. [ 171.151474][ T6997] netlink: 'syz.3.372': attribute type 6 has an invalid length. [ 171.182802][ T6997] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.372'. [ 171.232260][ T7002] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 171.286312][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.372'. [ 171.725302][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 172.403211][ T7006] delete_channel: no stack [ 172.652039][ T7024] netlink: 'syz.2.380': attribute type 4 has an invalid length. [ 172.690053][ T7024] FAULT_INJECTION: forcing a failure. [ 172.690053][ T7024] name failslab, interval 1, probability 0, space 0, times 0 [ 172.732857][ T7024] CPU: 1 PID: 7024 Comm: syz.2.380 Not tainted syzkaller #0 [ 172.740267][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.750559][ T7024] Call Trace: [ 172.753896][ T7024] [ 172.756895][ T7024] dump_stack_lvl+0x18c/0x250 [ 172.761653][ T7024] ? show_regs_print_info+0x20/0x20 [ 172.767055][ T7024] ? load_image+0x420/0x420 [ 172.771639][ T7024] ? verify_lock_unused+0x140/0x140 [ 172.776907][ T7024] should_fail_ex+0x39d/0x4d0 [ 172.781658][ T7024] should_failslab+0x9/0x20 [ 172.786320][ T7024] slab_pre_alloc_hook+0x59/0x310 [ 172.791421][ T7024] ? lock_chain_count+0x20/0x20 [ 172.796337][ T7024] ? nsim_fib_event_nb+0x187/0x1080 [ 172.801604][ T7024] __kmem_cache_alloc_node+0x53/0x250 [ 172.807055][ T7024] ? nsim_fib_event_nb+0x187/0x1080 [ 172.812419][ T7024] kmalloc_trace+0x2a/0xe0 [ 172.816914][ T7024] nsim_fib_event_nb+0x187/0x1080 [ 172.822019][ T7024] ? read_lock_is_recursive+0x20/0x20 [ 172.827466][ T7024] notifier_call_chain+0x197/0x380 [ 172.832676][ T7024] ? atomic_notifier_call_chain+0x26/0x180 [ 172.838557][ T7024] atomic_notifier_call_chain+0xda/0x180 [ 172.844272][ T7024] call_fib_notifiers+0x31/0x60 [ 172.849213][ T7024] call_fib_entry_notifiers+0x159/0x200 [ 172.854933][ T7024] ? fib_find_node+0x2f0/0x2f0 [ 172.859957][ T7024] ? lockdep_rtnl_is_held+0x26/0x30 [ 172.865246][ T7024] fib_table_insert+0xcc7/0x1b20 [ 172.870353][ T7024] ? fib_trie_table+0x138/0x1c0 [ 172.875270][ T7024] ? fib_new_table+0x27f/0x2d0 [ 172.880198][ T7024] inet_rtm_newroute+0x14b/0x240 [ 172.885291][ T7024] ? rcu_read_unlock+0xa0/0xa0 [ 172.890127][ T7024] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 172.895298][ T7024] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 172.900511][ T7024] ? rcu_read_unlock+0xa0/0xa0 [ 172.905370][ T7024] rtnetlink_rcv_msg+0x869/0xfa0 [ 172.910379][ T7024] ? lockdep_hardirqs_on+0x98/0x150 [ 172.915735][ T7024] ? rtnetlink_bind+0x80/0x80 [ 172.920476][ T7024] ? perf_trace_preemptirq_template+0xac/0x330 [ 172.926707][ T7024] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 172.932885][ T7024] ? lock_chain_count+0x20/0x20 [ 172.937821][ T7024] ? __local_bh_enable_ip+0x13a/0x1c0 [ 172.943254][ T7024] ? lockdep_hardirqs_on+0x98/0x150 [ 172.948533][ T7024] ? __local_bh_enable_ip+0x13a/0x1c0 [ 172.954057][ T7024] ? _local_bh_enable+0xa0/0xa0 [ 172.959076][ T7024] ? __dev_queue_xmit+0x265/0x3660 [ 172.964344][ T7024] ? __dev_queue_xmit+0x265/0x3660 [ 172.969524][ T7024] ? __dev_queue_xmit+0x1b2c/0x3660 [ 172.974792][ T7024] ? __dev_queue_xmit+0x265/0x3660 [ 172.979977][ T7024] ? ref_tracker_free+0x690/0x840 [ 172.985061][ T7024] netlink_rcv_skb+0x241/0x4d0 [ 172.989963][ T7024] ? rtnetlink_bind+0x80/0x80 [ 172.994780][ T7024] ? netlink_ack+0x1180/0x1180 [ 172.999637][ T7024] ? __lock_acquire+0x7d40/0x7d40 [ 173.004806][ T7024] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.010066][ T7024] netlink_unicast+0x751/0x8d0 [ 173.014939][ T7024] netlink_sendmsg+0x8d0/0xbf0 [ 173.019777][ T7024] ? netlink_getsockopt+0x590/0x590 [ 173.025056][ T7024] ? aa_sock_msg_perm+0x94/0x150 [ 173.030240][ T7024] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 173.035949][ T7024] ? security_socket_sendmsg+0x80/0xa0 [ 173.041483][ T7024] ? netlink_getsockopt+0x590/0x590 [ 173.046857][ T7024] ____sys_sendmsg+0x5ba/0x960 [ 173.051863][ T7024] ? __asan_memset+0x22/0x40 [ 173.056623][ T7024] ? __sys_sendmsg_sock+0x30/0x30 [ 173.061826][ T7024] ? __import_iovec+0x5f2/0x850 [ 173.066842][ T7024] ? import_iovec+0x73/0xa0 [ 173.071516][ T7024] ___sys_sendmsg+0x2a6/0x360 [ 173.076442][ T7024] ? get_pid_task+0x20/0x1e0 [ 173.081387][ T7024] ? __sys_sendmsg+0x2a0/0x2a0 [ 173.086245][ T7024] ? __lock_acquire+0x7d40/0x7d40 [ 173.091643][ T7024] __se_sys_sendmsg+0x1c2/0x2b0 [ 173.096627][ T7024] ? __x64_sys_sendmsg+0x80/0x80 [ 173.101654][ T7024] ? lockdep_hardirqs_on+0x98/0x150 [ 173.106982][ T7024] do_syscall_64+0x55/0xa0 [ 173.111453][ T7024] ? clear_bhb_loop+0x40/0x90 [ 173.116196][ T7024] ? clear_bhb_loop+0x40/0x90 [ 173.120950][ T7024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.126907][ T7024] RIP: 0033:0x7fc94c59c819 [ 173.131641][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.151481][ T7024] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.159973][ T7024] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 173.168350][ T7024] RDX: 0000000020008040 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.177073][ T7024] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 173.185467][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.193768][ T7024] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 173.202001][ T7024] [ 174.049450][ T7044] netlink: 'syz.1.385': attribute type 6 has an invalid length. [ 174.087367][ T7047] FAULT_INJECTION: forcing a failure. [ 174.087367][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 174.093725][ T7042] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 174.101249][ T7047] CPU: 1 PID: 7047 Comm: syz.3.386 Not tainted syzkaller #0 [ 174.101295][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.101320][ T7047] Call Trace: [ 174.101329][ T7047] [ 174.101337][ T7047] dump_stack_lvl+0x18c/0x250 [ 174.101381][ T7047] ? show_regs_print_info+0x20/0x20 [ 174.101415][ T7047] ? load_image+0x420/0x420 [ 174.101440][ T7047] ? add_lock_to_list+0x191/0x280 [ 174.101478][ T7047] ? __lock_acquire+0x2b81/0x7d40 [ 174.101510][ T7047] should_fail_ex+0x39d/0x4d0 [ 174.101549][ T7047] should_failslab+0x9/0x20 [ 174.101579][ T7047] slab_pre_alloc_hook+0x59/0x310 [ 174.101616][ T7047] kmem_cache_alloc+0x5a/0x2d0 [ 174.101645][ T7047] ? radix_tree_node_alloc+0x7e/0x3a0 [ 174.101674][ T7047] radix_tree_node_alloc+0x7e/0x3a0 [ 174.101706][ T7047] idr_get_free+0x2b3/0xa60 [ 174.101744][ T7047] idr_alloc_cyclic+0x27b/0x5d0 [ 174.101779][ T7047] ? idr_alloc+0x2f0/0x2f0 [ 174.101804][ T7047] ? do_raw_spin_lock+0x11f/0x2c0 [ 174.101836][ T7047] ? __radix_tree_preload+0x82/0x880 [ 174.101861][ T7047] ? sctp_assoc_set_id+0xa1/0x350 [ 174.101890][ T7047] sctp_assoc_set_id+0xbd/0x350 [ 174.101920][ T7047] __sctp_connect+0x8a3/0xd80 [ 174.101959][ T7047] ? sctp_send_asconf+0x170/0x170 [ 174.101984][ T7047] ? __local_bh_enable_ip+0x13a/0x1c0 [ 174.102006][ T7047] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 174.102033][ T7047] ? security_sctp_bind_connect+0x89/0xb0 [ 174.102065][ T7047] sctp_setsockopt_connectx+0x104/0x1a0 [ 174.102096][ T7047] sctp_setsockopt+0x6d8/0x11e0 [ 174.102121][ T7047] ? sock_common_recvmsg+0x190/0x190 [ 174.102156][ T7047] do_sock_setsockopt+0x175/0x1a0 [ 174.102177][ T7047] ? __fdget+0x180/0x210 [ 174.102207][ T7047] __x64_sys_setsockopt+0x182/0x200 [ 174.102235][ T7047] do_syscall_64+0x55/0xa0 [ 174.285585][ T7047] ? clear_bhb_loop+0x40/0x90 [ 174.290495][ T7047] ? clear_bhb_loop+0x40/0x90 [ 174.295309][ T7047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.301847][ T7047] RIP: 0033:0x7f239c59c819 [ 174.306851][ T7047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.327754][ T7047] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.336220][ T7047] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 174.344333][ T7047] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 174.352346][ T7047] RBP: 00007f239d4a5090 R08: 0000000000000010 R09: 0000000000000000 [ 174.360345][ T7047] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.368354][ T7047] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 174.376378][ T7047] [ 174.738499][ T7054] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 174.786959][ T7054] team0: Device veth1_macvtap failed to register rx_handler [ 174.795511][ T5774] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 176.027322][ T7073] FAULT_INJECTION: forcing a failure. [ 176.027322][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 176.117524][ T7073] CPU: 1 PID: 7073 Comm: syz.0.395 Not tainted syzkaller #0 [ 176.125189][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.135567][ T7073] Call Trace: [ 176.139445][ T7073] [ 176.142536][ T7073] dump_stack_lvl+0x18c/0x250 [ 176.147816][ T7073] ? show_regs_print_info+0x20/0x20 [ 176.153462][ T7073] ? load_image+0x420/0x420 [ 176.158234][ T7073] ? __might_sleep+0xe0/0xe0 [ 176.163517][ T7073] ? __lock_acquire+0x7d40/0x7d40 [ 176.168606][ T7073] should_fail_ex+0x39d/0x4d0 [ 176.173358][ T7073] should_failslab+0x9/0x20 [ 176.176519][ T7070] netlink: 'syz.3.394': attribute type 12 has an invalid length. [ 176.178082][ T7073] slab_pre_alloc_hook+0x59/0x310 [ 176.191325][ T7073] kmem_cache_alloc_node+0x60/0x320 [ 176.196695][ T7073] ? __alloc_skb+0x103/0x2c0 [ 176.202167][ T7073] __alloc_skb+0x103/0x2c0 [ 176.208854][ T7073] tcp_stream_alloc_skb+0x3d/0x330 [ 176.214186][ T7073] tcp_connect+0x16a5/0x5190 [ 176.219075][ T7073] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 176.226301][ T7073] ? tcp_options_write+0xc70/0xc70 [ 176.233729][ T7073] ? get_random_u32+0x4d1/0x910 [ 176.239282][ T7073] ? lockdep_hardirqs_on+0x98/0x150 [ 176.243574][ T7070] __nla_validate_parse: 3 callbacks suppressed [ 176.243629][ T7070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.394'. [ 176.245712][ T7073] ? read_tsc+0x9/0x20 [ 176.245756][ T7073] ? __asan_memset+0x22/0x40 [ 176.272850][ T7073] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 176.281989][ T7073] ? inet6_hash_connect+0x7b/0xe0 [ 176.288774][ T7073] tcp_v6_connect+0x11ae/0x18d0 [ 176.293891][ T7073] ? tcp_v6_pre_connect+0xf0/0xf0 [ 176.299263][ T7073] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 176.304471][ T7073] ? do_syscall_64+0x55/0xa0 [ 176.309152][ T7073] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.315322][ T7073] __inet_stream_connect+0x254/0xdc0 [ 176.320881][ T7073] ? inet_dgram_connect+0x360/0x360 [ 176.326620][ T7073] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 176.331952][ T7073] tcp_sendmsg_locked+0x4621/0x4bd0 [ 176.337231][ T7073] ? verify_lock_unused+0x140/0x140 [ 176.342680][ T7073] ? verify_lock_unused+0x140/0x140 [ 176.348055][ T7073] ? perf_trace_lock+0xfc/0x3b0 [ 176.352993][ T7073] ? trace_event_raw_event_lock+0x250/0x250 [ 176.358950][ T7073] ? mark_lock+0x94/0x320 [ 176.363354][ T7073] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 176.370158][ T7073] ? lock_chain_count+0x20/0x20 [ 176.375194][ T7073] ? tcp_set_state+0x680/0x680 [ 176.380229][ T7073] tcp_sendmsg+0x2f/0x50 [ 176.385460][ T7073] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 176.391354][ T7073] ____sys_sendmsg+0x5ba/0x960 [ 176.396307][ T7073] ? __lock_acquire+0x7d40/0x7d40 [ 176.401497][ T7073] ? __asan_memset+0x22/0x40 [ 176.406159][ T7073] ? __sys_sendmsg_sock+0x30/0x30 [ 176.411234][ T7073] ? __import_iovec+0x3fa/0x850 [ 176.416230][ T7073] ? import_iovec+0x73/0xa0 [ 176.420805][ T7073] ___sys_sendmsg+0x2a6/0x360 [ 176.425561][ T7073] ? __sys_sendmsg+0x2a0/0x2a0 [ 176.430406][ T7073] ? __lock_acquire+0x7d40/0x7d40 [ 176.435529][ T7073] __se_sys_sendmsg+0x1c2/0x2b0 [ 176.440439][ T7073] ? __x64_sys_sendmsg+0x80/0x80 [ 176.445894][ T7073] ? lockdep_hardirqs_on+0x98/0x150 [ 176.451528][ T7073] do_syscall_64+0x55/0xa0 [ 176.456000][ T7073] ? clear_bhb_loop+0x40/0x90 [ 176.461042][ T7073] ? clear_bhb_loop+0x40/0x90 [ 176.465795][ T7073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.471857][ T7073] RIP: 0033:0x7f41e199c819 [ 176.476488][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.496684][ T7073] RSP: 002b:00007f41e2802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.505353][ T7073] RAX: ffffffffffffffda RBX: 00007f41e1c15fa0 RCX: 00007f41e199c819 [ 176.513662][ T7073] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 176.521957][ T7073] RBP: 00007f41e2802090 R08: 0000000000000000 R09: 0000000000000000 [ 176.530189][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.538375][ T7073] R13: 00007f41e1c16038 R14: 00007f41e1c15fa0 R15: 00007ffce47a8518 [ 176.546430][ T7073] [ 176.820750][ T7080] netlink: 'syz.2.398': attribute type 6 has an invalid length. [ 176.840673][ T7080] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.398'. [ 176.864054][ T5774] Bluetooth: hci2: command tx timeout [ 176.878014][ T7080] netlink: 'syz.2.398': attribute type 10 has an invalid length. [ 176.886646][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.2.398'. [ 176.976196][ T7084] netlink: 'syz.1.399': attribute type 2 has an invalid length. [ 177.031136][ T7084] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.399'. [ 177.048486][ T7088] netlink: 'syz.0.401': attribute type 2 has an invalid length. [ 177.087260][ T7088] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.401'. [ 177.157879][ T5774] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 178.267953][ T7111] netlink: 'syz.3.411': attribute type 6 has an invalid length. [ 178.334638][ T7111] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.411'. [ 178.384178][ T7114] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 178.392024][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.411'. [ 178.800609][ T7122] netlink: 'syz.0.413': attribute type 2 has an invalid length. [ 178.810556][ T7122] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.413'. [ 179.183082][ T5774] Bluetooth: hci1: command tx timeout [ 179.913337][ T7134] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.417'. [ 179.963172][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 181.465491][ T7164] FAULT_INJECTION: forcing a failure. [ 181.465491][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 181.512970][ T7164] CPU: 0 PID: 7164 Comm: syz.2.420 Not tainted syzkaller #0 [ 181.520370][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.530675][ T7164] Call Trace: [ 181.534122][ T7164] [ 181.537127][ T7164] dump_stack_lvl+0x18c/0x250 [ 181.541884][ T7164] ? sctp_sendmsg+0x1575/0x28c0 [ 181.546811][ T7164] ? ___sys_sendmsg+0x2a6/0x360 [ 181.551739][ T7164] ? show_regs_print_info+0x20/0x20 [ 181.557032][ T7164] ? load_image+0x420/0x420 [ 181.561630][ T7164] should_fail_ex+0x39d/0x4d0 [ 181.566391][ T7164] should_failslab+0x9/0x20 [ 181.570976][ T7164] slab_pre_alloc_hook+0x59/0x310 [ 181.576085][ T7164] ? sctp_add_bind_addr+0x8c/0x360 [ 181.581256][ T7164] __kmem_cache_alloc_node+0x53/0x250 [ 181.586710][ T7164] ? sctp_add_bind_addr+0x8c/0x360 [ 181.591904][ T7164] kmalloc_trace+0x2a/0xe0 [ 181.596377][ T7164] sctp_add_bind_addr+0x8c/0x360 [ 181.601438][ T7164] sctp_copy_local_addr_list+0x315/0x4f0 [ 181.607107][ T7164] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 181.613310][ T7164] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 181.619629][ T7164] ? sctp_v6_is_any+0x64/0x70 [ 181.624432][ T7164] ? sctp_copy_one_addr+0x8c/0x350 [ 181.629603][ T7164] sctp_bind_addr_copy+0xb3/0x3c0 [ 181.634696][ T7164] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 181.641212][ T7164] sctp_connect_new_asoc+0x2f9/0x6a0 [ 181.646557][ T7164] ? __sctp_connect+0xd80/0xd80 [ 181.651448][ T7164] ? __local_bh_enable_ip+0x13a/0x1c0 [ 181.656860][ T7164] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 181.662450][ T7164] ? security_sctp_bind_connect+0x89/0xb0 [ 181.668220][ T7164] sctp_sendmsg+0x1575/0x28c0 [ 181.672962][ T7164] ? sctp_getsockopt+0xb60/0xb60 [ 181.677938][ T7164] ? aa_sk_perm+0x83c/0x970 [ 181.682510][ T7164] ? aa_af_perm+0x330/0x330 [ 181.687091][ T7164] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 181.693747][ T7164] ? sock_rps_record_flow+0x19/0x3f0 [ 181.699318][ T7164] ? inet_sendmsg+0xe9/0x2f0 [ 181.704059][ T7164] ? inet_send_prepare+0x260/0x260 [ 181.709422][ T7164] ____sys_sendmsg+0x5ba/0x960 [ 181.714241][ T7164] ? __lock_acquire+0x7d40/0x7d40 [ 181.719402][ T7164] ? __sys_sendmsg_sock+0x30/0x30 [ 181.724746][ T7164] ? __import_iovec+0x5f2/0x850 [ 181.729822][ T7164] ? import_iovec+0x73/0xa0 [ 181.734865][ T7164] ___sys_sendmsg+0x2a6/0x360 [ 181.739616][ T7164] ? get_pid_task+0x20/0x1e0 [ 181.744334][ T7164] ? __sys_sendmsg+0x2a0/0x2a0 [ 181.749245][ T7164] ? __lock_acquire+0x7d40/0x7d40 [ 181.754414][ T7164] __se_sys_sendmsg+0x1c2/0x2b0 [ 181.759383][ T7164] ? __x64_sys_sendmsg+0x80/0x80 [ 181.764458][ T7164] ? lockdep_hardirqs_on+0x98/0x150 [ 181.769879][ T7164] do_syscall_64+0x55/0xa0 [ 181.774358][ T7164] ? clear_bhb_loop+0x40/0x90 [ 181.779254][ T7164] ? clear_bhb_loop+0x40/0x90 [ 181.783979][ T7164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.789910][ T7164] RIP: 0033:0x7fc94c59c819 [ 181.794352][ T7164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.814887][ T7164] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.823466][ T7164] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 181.831844][ T7164] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 181.840371][ T7164] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 181.848413][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.856878][ T7164] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 181.864928][ T7164] [ 182.301126][ T5774] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 182.448875][ T7183] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 182.488253][ T7183] __nla_validate_parse: 2 callbacks suppressed [ 182.488272][ T7183] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.424'. [ 184.039362][ T7209] netlink: 'syz.0.430': attribute type 6 has an invalid length. [ 184.092962][ T7209] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.430'. [ 184.119770][ T7213] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 184.130479][ T7213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.430'. [ 184.303081][ T5774] Bluetooth: hci0: command tx timeout [ 184.447530][ T7215] FAULT_INJECTION: forcing a failure. [ 184.447530][ T7215] name failslab, interval 1, probability 0, space 0, times 0 [ 184.486911][ T7215] CPU: 0 PID: 7215 Comm: syz.0.432 Not tainted syzkaller #0 [ 184.494293][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.504449][ T7215] Call Trace: [ 184.507775][ T7215] [ 184.510757][ T7215] dump_stack_lvl+0x18c/0x250 [ 184.515505][ T7215] ? fib_rules_lookup+0x9c/0xb40 [ 184.520508][ T7215] ? show_regs_print_info+0x20/0x20 [ 184.525781][ T7215] ? load_image+0x420/0x420 [ 184.530356][ T7215] ? fib_rules_lookup+0x9c/0xb40 [ 184.535431][ T7215] should_fail_ex+0x39d/0x4d0 [ 184.540286][ T7215] should_failslab+0x9/0x20 [ 184.544959][ T7215] slab_pre_alloc_hook+0x59/0x310 [ 184.550049][ T7215] kmem_cache_alloc+0x5a/0x2d0 [ 184.554880][ T7215] ? dst_alloc+0x105/0x170 [ 184.559407][ T7215] dst_alloc+0x105/0x170 [ 184.563830][ T7215] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 184.570059][ T7215] ? ip_route_output_key_hash_rcu+0x1311/0x2370 [ 184.576384][ T7215] ? ip_route_output_key_hash+0x13d/0x330 [ 184.582177][ T7215] ip_route_output_key_hash+0x1f3/0x330 [ 184.588183][ T7215] ? ip_route_input_rcu+0x30f0/0x30f0 [ 184.593632][ T7215] ? crng_make_state+0x350/0x700 [ 184.598635][ T7215] ? lockdep_hardirqs_on+0x98/0x150 [ 184.603910][ T7215] ip_route_output_flow+0x2a/0x150 [ 184.609099][ T7215] sctp_v4_get_dst+0x400/0x1230 [ 184.614066][ T7215] ? sctp_v4_xmit+0xde0/0xde0 [ 184.618810][ T7215] ? _get_random_bytes+0x1e8/0x250 [ 184.624026][ T7215] ? _raw_spin_unlock+0x40/0x40 [ 184.629042][ T7215] ? dst_release+0x72/0x1a0 [ 184.633613][ T7215] sctp_transport_route+0x10b/0x2c0 [ 184.639043][ T7215] sctp_assoc_add_peer+0x650/0x1390 [ 184.644443][ T7215] sctp_connect_new_asoc+0x323/0x6a0 [ 184.649774][ T7215] ? __sctp_connect+0xd80/0xd80 [ 184.654664][ T7215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 184.660603][ T7215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 184.666621][ T7215] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 184.672551][ T7215] __sctp_connect+0x5b7/0xd80 [ 184.677303][ T7215] ? sctp_send_asconf+0x170/0x170 [ 184.682471][ T7215] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.687902][ T7215] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 184.693494][ T7215] ? security_sctp_bind_connect+0x89/0xb0 [ 184.699260][ T7215] sctp_setsockopt_connectx+0x104/0x1a0 [ 184.704853][ T7215] sctp_setsockopt+0x6d8/0x11e0 [ 184.710095][ T7215] ? sock_common_recvmsg+0x190/0x190 [ 184.715433][ T7215] do_sock_setsockopt+0x175/0x1a0 [ 184.720486][ T7215] ? __fdget+0x180/0x210 [ 184.724790][ T7215] __x64_sys_setsockopt+0x182/0x200 [ 184.730107][ T7215] do_syscall_64+0x55/0xa0 [ 184.734637][ T7215] ? clear_bhb_loop+0x40/0x90 [ 184.739357][ T7215] ? clear_bhb_loop+0x40/0x90 [ 184.744070][ T7215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.750100][ T7215] RIP: 0033:0x7f41e199c819 [ 184.754568][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.774315][ T7215] RSP: 002b:00007f41e2802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.782762][ T7215] RAX: ffffffffffffffda RBX: 00007f41e1c15fa0 RCX: 00007f41e199c819 [ 184.790932][ T7215] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000004 [ 184.799020][ T7215] RBP: 00007f41e2802090 R08: 0000000000000010 R09: 0000000000000000 [ 184.807033][ T7215] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.815124][ T7215] R13: 00007f41e1c16038 R14: 00007f41e1c15fa0 R15: 00007ffce47a8518 [ 184.823241][ T7215] [ 184.877335][ T7217] FAULT_INJECTION: forcing a failure. [ 184.877335][ T7217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.945834][ T7217] CPU: 0 PID: 7217 Comm: syz.1.434 Not tainted syzkaller #0 [ 184.953217][ T7217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.963421][ T7217] Call Trace: [ 184.966769][ T7217] [ 184.969752][ T7217] dump_stack_lvl+0x18c/0x250 [ 184.974502][ T7217] ? show_regs_print_info+0x20/0x20 [ 184.979768][ T7217] ? load_image+0x420/0x420 [ 184.984341][ T7217] ? __lock_acquire+0x7d40/0x7d40 [ 184.989512][ T7217] ? lockdep_hardirqs_on+0x98/0x150 [ 184.994775][ T7217] should_fail_ex+0x39d/0x4d0 [ 184.999571][ T7217] _copy_to_user+0x2f/0xa0 [ 185.004076][ T7217] simple_read_from_buffer+0xe7/0x150 [ 185.009519][ T7217] proc_fail_nth_read+0x1e8/0x260 [ 185.014604][ T7217] ? proc_fault_inject_write+0x360/0x360 [ 185.020574][ T7217] ? proc_fault_inject_write+0x360/0x360 [ 185.026276][ T7217] vfs_read+0x28b/0x970 [ 185.030502][ T7217] ? kernel_read+0x1e0/0x1e0 [ 185.035153][ T7217] ? __fget_files+0x28/0x4b0 [ 185.039802][ T7217] ? __fget_files+0x28/0x4b0 [ 185.044461][ T7217] ? __fget_files+0x43d/0x4b0 [ 185.049214][ T7217] ? __fdget_pos+0x2a3/0x330 [ 185.053872][ T7217] ? ksys_read+0x75/0x260 [ 185.058356][ T7217] ksys_read+0x150/0x260 [ 185.062671][ T7217] ? vfs_write+0x990/0x990 [ 185.063635][ T7219] netlink: 'syz.2.433': attribute type 2 has an invalid length. [ 185.067229][ T7217] ? lockdep_hardirqs_on+0x98/0x150 [ 185.080261][ T7217] do_syscall_64+0x55/0xa0 [ 185.084804][ T7217] ? clear_bhb_loop+0x40/0x90 [ 185.089527][ T7217] ? clear_bhb_loop+0x40/0x90 [ 185.094332][ T7217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.100396][ T7217] RIP: 0033:0x7efeaf75d04e [ 185.104847][ T7217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.124586][ T7217] RSP: 002b:00007efeb05b8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.133033][ T7217] RAX: ffffffffffffffda RBX: 00007efeb05b96c0 RCX: 00007efeaf75d04e [ 185.141118][ T7217] RDX: 000000000000000f RSI: 00007efeb05b90a0 RDI: 0000000000000008 [ 185.149296][ T7217] RBP: 00007efeb05b9090 R08: 0000000000000000 R09: 0000000000000000 [ 185.157388][ T7217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.165405][ T7217] R13: 00007efeafa16038 R14: 00007efeafa15fa0 R15: 00007ffefe587b18 [ 185.173455][ T7217] [ 185.216230][ T7219] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.433'. [ 185.609913][ T7225] netlink: 'syz.0.445': attribute type 6 has an invalid length. [ 185.628916][ T7225] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.445'. [ 185.662765][ T5774] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 185.677798][ T7225] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 185.738980][ T7225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.445'. [ 186.791193][ T7254] netlink: 'syz.0.447': attribute type 2 has an invalid length. [ 186.815263][ T7254] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.447'. [ 187.363097][ T7263] netlink: 'syz.1.450': attribute type 2 has an invalid length. [ 187.393559][ T7263] netlink: 'syz.1.450': attribute type 8 has an invalid length. [ 187.401554][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.450'. [ 187.456557][ T7262] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 187.493110][ T7262] netlink: 40 bytes leftover after parsing attributes in process `syz.0.449'. [ 187.509087][ T7259] netlink: 'syz.0.449': attribute type 6 has an invalid length. [ 187.629486][ T7259] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.449'. [ 187.742781][ T5774] Bluetooth: hci3: command tx timeout [ 188.392920][ T7285] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 188.422819][ T7285] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.457'. [ 188.768722][ T7298] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 189.128468][ T7309] FAULT_INJECTION: forcing a failure. [ 189.128468][ T7309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.199721][ T7309] CPU: 1 PID: 7309 Comm: syz.1.466 Not tainted syzkaller #0 [ 189.207147][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 189.217611][ T7309] Call Trace: [ 189.221202][ T7309] [ 189.224302][ T7309] dump_stack_lvl+0x18c/0x250 [ 189.229050][ T7309] ? show_regs_print_info+0x20/0x20 [ 189.234500][ T7309] ? load_image+0x420/0x420 [ 189.239082][ T7309] ? __lock_acquire+0x7d40/0x7d40 [ 189.244181][ T7309] should_fail_ex+0x39d/0x4d0 [ 189.248943][ T7309] prepare_alloc_pages+0x1e2/0x5f0 [ 189.254426][ T7309] __alloc_pages+0x134/0x460 [ 189.259102][ T7309] ? zone_statistics+0x170/0x170 [ 189.264111][ T7309] ? alloc_pages+0x4dc/0x740 [ 189.268755][ T7309] ? do_raw_spin_unlock+0x121/0x230 [ 189.274109][ T7309] __get_free_pages+0xc/0x30 [ 189.278732][ T7309] kasan_populate_vmalloc_pte+0x35/0x100 [ 189.284417][ T7309] __apply_to_page_range+0x860/0xdd0 [ 189.290022][ T7309] ? kasan_populate_vmalloc+0x70/0x70 [ 189.295612][ T7309] ? apply_to_page_range+0x50/0x50 [ 189.300765][ T7309] ? do_raw_spin_unlock+0x121/0x230 [ 189.306117][ T7309] alloc_vmap_area+0x1d0c/0x1e30 [ 189.311112][ T7309] ? vm_map_ram+0xcb0/0xcb0 [ 189.315658][ T7309] ? rcu_is_watching+0x15/0xb0 [ 189.320624][ T7309] __get_vm_area_node+0x162/0x370 [ 189.325693][ T7309] __vmalloc_node_range+0x36e/0x1330 [ 189.331013][ T7309] ? htab_map_alloc+0x3da/0xe80 [ 189.335907][ T7309] ? _raw_spin_unlock+0x40/0x40 [ 189.340809][ T7309] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 189.346138][ T7309] ? free_vm_area+0x50/0x50 [ 189.350950][ T7309] bpf_map_area_alloc+0xf1/0x110 [ 189.356033][ T7309] ? htab_map_alloc+0x3da/0xe80 [ 189.360932][ T7309] htab_map_alloc+0x3da/0xe80 [ 189.365657][ T7309] map_create+0x877/0x12f0 [ 189.370106][ T7309] ? bpf_lsm_bpf+0x9/0x10 [ 189.374488][ T7309] __sys_bpf+0x651/0x890 [ 189.378808][ T7309] ? bpf_link_show_fdinfo+0x390/0x390 [ 189.384232][ T7309] ? lock_chain_count+0x20/0x20 [ 189.389296][ T7309] __x64_sys_bpf+0x7c/0x90 [ 189.393751][ T7309] do_syscall_64+0x55/0xa0 [ 189.398193][ T7309] ? clear_bhb_loop+0x40/0x90 [ 189.402994][ T7309] ? clear_bhb_loop+0x40/0x90 [ 189.407712][ T7309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.413654][ T7309] RIP: 0033:0x7efeaf79c819 [ 189.418099][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.437735][ T7309] RSP: 002b:00007efeb05b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.446181][ T7309] RAX: ffffffffffffffda RBX: 00007efeafa15fa0 RCX: 00007efeaf79c819 [ 189.454291][ T7309] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000000 [ 189.462552][ T7309] RBP: 00007efeb05b9090 R08: 0000000000000000 R09: 0000000000000000 [ 189.470735][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.478824][ T7309] R13: 00007efeafa16038 R14: 00007efeafa15fa0 R15: 00007ffefe587b18 [ 189.486929][ T7309] [ 190.110378][ T7323] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 190.130151][ T7323] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.470'. [ 190.845109][ T7333] TCP: TCP_TX_DELAY enabled [ 191.339799][ T7346] netlink: 830 bytes leftover after parsing attributes in process `syz.0.480'. [ 191.393253][ T7351] netlink: 'syz.3.481': attribute type 2 has an invalid length. [ 191.422755][ T7351] netlink: 17255 bytes leftover after parsing attributes in process `syz.3.481'. [ 191.840637][ T7359] FAULT_INJECTION: forcing a failure. [ 191.840637][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 191.937727][ T7359] CPU: 0 PID: 7359 Comm: syz.3.484 Not tainted syzkaller #0 [ 191.945121][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 191.955407][ T7359] Call Trace: [ 191.958743][ T7359] [ 191.961721][ T7359] dump_stack_lvl+0x18c/0x250 [ 191.966616][ T7359] ? show_regs_print_info+0x20/0x20 [ 191.971889][ T7359] ? load_image+0x420/0x420 [ 191.976638][ T7359] ? __might_sleep+0xe0/0xe0 [ 191.981292][ T7359] ? __lock_acquire+0x7d40/0x7d40 [ 191.986378][ T7359] should_fail_ex+0x39d/0x4d0 [ 191.991137][ T7359] should_failslab+0x9/0x20 [ 191.995728][ T7359] slab_pre_alloc_hook+0x59/0x310 [ 192.000891][ T7359] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.007117][ T7359] ? apparmor_sk_alloc_security+0x77/0x100 [ 192.012989][ T7359] __kmem_cache_alloc_node+0x53/0x250 [ 192.018447][ T7359] ? apparmor_sk_alloc_security+0x77/0x100 [ 192.024469][ T7359] kmalloc_trace+0x2a/0xe0 [ 192.028929][ T7359] apparmor_sk_alloc_security+0x77/0x100 [ 192.034690][ T7359] security_sk_alloc+0x6e/0xa0 [ 192.039617][ T7359] sk_prot_alloc+0x101/0x210 [ 192.044380][ T7359] ? sk_alloc+0x24/0x360 [ 192.048677][ T7359] sk_alloc+0x3a/0x360 [ 192.052967][ T7359] ? bpf_ctx_init+0x163/0x1a0 [ 192.057681][ T7359] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 192.063357][ T7359] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 192.068862][ T7359] ? lockdep_hardirqs_on+0x98/0x150 [ 192.074196][ T7359] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.080400][ T7359] ? cpu_online+0x60/0x60 [ 192.084772][ T7359] ? cpu_online+0x60/0x60 [ 192.089217][ T7359] bpf_prog_test_run+0x321/0x390 [ 192.094201][ T7359] __sys_bpf+0x49d/0x890 [ 192.098481][ T7359] ? bpf_link_show_fdinfo+0x390/0x390 [ 192.104069][ T7359] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.110282][ T7359] __x64_sys_bpf+0x7c/0x90 [ 192.114822][ T7359] do_syscall_64+0x55/0xa0 [ 192.119271][ T7359] ? clear_bhb_loop+0x40/0x90 [ 192.123990][ T7359] ? clear_bhb_loop+0x40/0x90 [ 192.128797][ T7359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.134822][ T7359] RIP: 0033:0x7f239c59c819 [ 192.139360][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.159102][ T7359] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.167640][ T7359] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 192.175702][ T7359] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 192.183969][ T7359] RBP: 00007f239d4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 192.191966][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.199973][ T7359] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 192.208000][ T7359] [ 192.739275][ T7369] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.487'. [ 193.040953][ T7374] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 193.194822][ T7374] team0: Device hsr_slave_0 failed to register rx_handler [ 193.221002][ T7378] FAULT_INJECTION: forcing a failure. [ 193.221002][ T7378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.238471][ T7378] CPU: 1 PID: 7378 Comm: syz.2.490 Not tainted syzkaller #0 [ 193.245851][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.255966][ T7378] Call Trace: [ 193.259282][ T7378] [ 193.262374][ T7378] dump_stack_lvl+0x18c/0x250 [ 193.267127][ T7378] ? show_regs_print_info+0x20/0x20 [ 193.272396][ T7378] ? load_image+0x420/0x420 [ 193.277006][ T7378] ? __might_fault+0xaa/0x120 [ 193.281736][ T7378] ? __lock_acquire+0x7d40/0x7d40 [ 193.286819][ T7378] should_fail_ex+0x39d/0x4d0 [ 193.291638][ T7378] _copy_from_iter+0x1d9/0x12e0 [ 193.296617][ T7378] ? __might_fault+0xaa/0x120 [ 193.301538][ T7378] ? _copy_from_iter+0x24e/0x12e0 [ 193.306645][ T7378] ? __virt_addr_valid+0x18c/0x540 [ 193.311799][ T7378] ? __lock_acquire+0x7d40/0x7d40 [ 193.316863][ T7378] ? copyout_mc+0x70/0x70 [ 193.321239][ T7378] ? copyout_mc+0x70/0x70 [ 193.325689][ T7378] ? __virt_addr_valid+0x18c/0x540 [ 193.330856][ T7378] ? page_copy_sane+0x16a/0x270 [ 193.335750][ T7378] copy_page_from_iter+0x7b/0x100 [ 193.340905][ T7378] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 193.346840][ T7378] tun_get_user+0x15db/0x3ca0 [ 193.351588][ T7378] ? aa_file_perm+0x11b/0xee0 [ 193.356316][ T7378] ? rcu_read_unlock+0xa0/0xa0 [ 193.361123][ T7378] ? tun_get+0x1c/0x2e0 [ 193.365311][ T7378] ? __lock_acquire+0x7d40/0x7d40 [ 193.370373][ T7378] ? tun_get+0x1c/0x2e0 [ 193.374570][ T7378] tun_chr_write_iter+0x119/0x200 [ 193.379635][ T7378] vfs_write+0x46c/0x990 [ 193.384011][ T7378] ? file_end_write+0x250/0x250 [ 193.388902][ T7378] ? __fget_files+0x43d/0x4b0 [ 193.393636][ T7378] ? __fdget_pos+0x1d8/0x330 [ 193.398268][ T7378] ? ksys_write+0x75/0x260 [ 193.402727][ T7378] ksys_write+0x150/0x260 [ 193.407103][ T7378] ? __ia32_sys_read+0x90/0x90 [ 193.412085][ T7378] ? lockdep_hardirqs_on+0x98/0x150 [ 193.417345][ T7378] do_syscall_64+0x55/0xa0 [ 193.421784][ T7378] ? clear_bhb_loop+0x40/0x90 [ 193.426679][ T7378] ? clear_bhb_loop+0x40/0x90 [ 193.431393][ T7378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.437418][ T7378] RIP: 0033:0x7fc94c59c819 [ 193.441862][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.461508][ T7378] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.470172][ T7378] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 193.478273][ T7378] RDX: 000000000000fdef RSI: 00002000000004c0 RDI: 00000000000000c8 [ 193.486277][ T7378] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 193.494349][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 193.502444][ T7378] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 193.510472][ T7378] [ 193.698231][ T7373] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 193.739428][ T7373] team0: Device hsr_slave_0 failed to register rx_handler [ 194.218176][ T7373] syz.1.488 (7373) used greatest stack depth: 19184 bytes left [ 194.369410][ T7394] netlink: 'syz.1.494': attribute type 6 has an invalid length. [ 194.413752][ T7394] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.494'. [ 194.470188][ T7394] netlink: 'syz.1.494': attribute type 10 has an invalid length. [ 194.486970][ T7394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.494'. [ 194.709151][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.716250][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.938255][ T7407] netlink: 'syz.3.497': attribute type 46 has an invalid length. [ 194.969925][ T7407] netlink: 'syz.3.497': attribute type 46 has an invalid length. [ 195.540464][ T7417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.501'. [ 195.954124][ T7428] netlink: 'syz.1.507': attribute type 6 has an invalid length. [ 195.961936][ T7428] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.507'. [ 195.998645][ T7434] netlink: 'syz.1.507': attribute type 10 has an invalid length. [ 196.007249][ T7434] netlink: 40 bytes leftover after parsing attributes in process `syz.1.507'. [ 196.149392][ T7436] netlink: 'syz.0.509': attribute type 2 has an invalid length. [ 196.158950][ T7436] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.509'. [ 196.569767][ T7447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.513'. [ 197.484024][ T7463] netlink: 'syz.2.520': attribute type 6 has an invalid length. [ 197.502498][ T7463] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.520'. [ 197.590395][ T7467] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.521'. [ 197.817861][ T7464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.520'. [ 198.310893][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.525'. [ 198.604644][ T7489] validate_nla: 2 callbacks suppressed [ 198.604663][ T7489] netlink: 'syz.1.530': attribute type 2 has an invalid length. [ 198.636919][ T7489] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.530'. [ 199.464245][ T7501] bridge_slave_1: left allmulticast mode [ 199.470094][ T7501] bridge_slave_1: left promiscuous mode [ 199.513098][ T7501] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.530493][ T7501] bridge_slave_0: left allmulticast mode [ 199.572807][ T7501] bridge_slave_0: left promiscuous mode [ 199.604229][ T7501] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.726604][ T7513] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.538'. [ 199.825375][ T7501] team0: Port device bridge0 removed [ 199.920251][ T7514] netlink: 'syz.3.536': attribute type 23 has an invalid length. [ 199.929066][ T7518] netlink: 152 bytes leftover after parsing attributes in process `syz.0.540'. [ 199.939964][ T7518] netlink: 6 bytes leftover after parsing attributes in process `syz.0.540'. [ 200.735318][ T7539] netlink: 'syz.2.547': attribute type 46 has an invalid length. [ 200.761592][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.547'. [ 200.819783][ T7544] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 200.828736][ T7544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.549'. [ 201.863815][ T7571] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 201.955350][ T7574] netlink: 'syz.2.558': attribute type 2 has an invalid length. [ 201.963224][ T7574] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.558'. [ 202.015836][ T7567] sctp: [Deprecated]: syz.0.556 (pid 7567) Use of int in maxseg socket option. [ 202.015836][ T7567] Use struct sctp_assoc_value instead [ 205.906686][ T7614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.572'. [ 205.915818][ T7612] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 205.915846][ T7612] netlink: 17255 bytes leftover after parsing attributes in process `syz.3.571'. [ 206.119447][ T7616] netlink: 'syz.1.573': attribute type 6 has an invalid length. [ 206.141995][ T7620] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 206.155014][ T7616] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.573'. [ 206.188615][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.206589][ T7620] team0: Port device bond0 added [ 206.212195][ T7621] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 206.220244][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.573'. [ 206.753854][ T7640] netlink: 'syz.0.582': attribute type 2 has an invalid length. [ 206.784069][ T7640] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.582'. [ 207.104011][ T7647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.584'. [ 207.818083][ T7671] netlink: 'syz.2.592': attribute type 2 has an invalid length. [ 207.842096][ T7671] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.592'. [ 208.433983][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.594'. [ 209.145066][ T7687] netlink: 'syz.3.597': attribute type 10 has an invalid length. [ 210.047678][ T7687] hsr_slave_0: left promiscuous mode [ 210.259517][ T7687] hsr_slave_1: left promiscuous mode [ 210.562415][ T7698] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 210.595574][ T7698] hsr_slave_0: left promiscuous mode [ 210.665366][ T7698] hsr_slave_1: left promiscuous mode [ 210.689521][ T7709] netlink: 'syz.1.602': attribute type 2 has an invalid length. [ 210.697566][ T7709] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.602'. [ 210.913277][ T7704] netlink: 'syz.2.601': attribute type 5 has an invalid length. [ 211.007655][ T7712] netlink: 'syz.1.603': attribute type 6 has an invalid length. [ 211.018255][ T7712] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.603'. [ 211.083043][ T7712] netlink: 'syz.1.603': attribute type 10 has an invalid length. [ 211.097539][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.1.603'. [ 211.165811][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.3.604'. [ 211.617481][ T7737] FAULT_INJECTION: forcing a failure. [ 211.617481][ T7737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.651116][ T7737] CPU: 0 PID: 7737 Comm: syz.1.611 Not tainted syzkaller #0 [ 211.658500][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 211.668613][ T7737] Call Trace: [ 211.671966][ T7737] [ 211.674953][ T7737] dump_stack_lvl+0x18c/0x250 [ 211.679713][ T7737] ? show_regs_print_info+0x20/0x20 [ 211.684982][ T7737] ? load_image+0x420/0x420 [ 211.689675][ T7737] ? __might_fault+0xaa/0x120 [ 211.694414][ T7737] should_fail_ex+0x39d/0x4d0 [ 211.699159][ T7737] copyin+0x1a/0x90 [ 211.703069][ T7737] _copy_from_iter+0x404/0x12e0 [ 211.708189][ T7737] ? __virt_addr_valid+0x18c/0x540 [ 211.713533][ T7737] ? __lock_acquire+0x7d40/0x7d40 [ 211.718613][ T7737] ? copyout_mc+0x70/0x70 [ 211.723069][ T7737] ? __virt_addr_valid+0x18c/0x540 [ 211.728264][ T7737] ? __virt_addr_valid+0x18c/0x540 [ 211.733498][ T7737] ? __virt_addr_valid+0x469/0x540 [ 211.739496][ T7737] ? __check_object_size+0x506/0xa20 [ 211.745000][ T7737] tipc_msg_build+0x45b/0xee0 [ 211.749762][ T7737] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 211.755993][ T7737] ? verify_lock_unused+0x140/0x140 [ 211.761229][ T7737] ? tipc_sk_filtering+0x13c/0x510 [ 211.766552][ T7737] __tipc_sendstream+0x8a9/0x1270 [ 211.771612][ T7737] ? __kmalloc+0xb4/0x230 [ 211.776012][ T7737] ? tsk_advance_rx_queue+0x310/0x310 [ 211.781514][ T7737] ? wait_woken+0x180/0x180 [ 211.786152][ T7737] ? _local_bh_enable+0xa0/0xa0 [ 211.791075][ T7737] tipc_sendstream+0x55/0x70 [ 211.795711][ T7737] ? tipc_getsockopt+0x5a0/0x5a0 [ 211.800990][ T7737] ____sys_sendmsg+0x5ba/0x960 [ 211.805923][ T7737] ? __asan_memset+0x22/0x40 [ 211.810764][ T7737] ? __sys_sendmsg_sock+0x30/0x30 [ 211.815833][ T7737] ? __import_iovec+0x3fa/0x850 [ 211.820815][ T7737] ? import_iovec+0x73/0xa0 [ 211.825377][ T7737] ___sys_sendmsg+0x2a6/0x360 [ 211.830108][ T7737] ? get_pid_task+0x20/0x1e0 [ 211.834750][ T7737] ? __sys_sendmsg+0x2a0/0x2a0 [ 211.839567][ T7737] ? __lock_acquire+0x7d40/0x7d40 [ 211.844720][ T7737] __se_sys_sendmsg+0x1c2/0x2b0 [ 211.849711][ T7737] ? __x64_sys_sendmsg+0x80/0x80 [ 211.854804][ T7737] ? lockdep_hardirqs_on+0x98/0x150 [ 211.860048][ T7737] do_syscall_64+0x55/0xa0 [ 211.864593][ T7737] ? clear_bhb_loop+0x40/0x90 [ 211.869406][ T7737] ? clear_bhb_loop+0x40/0x90 [ 211.874139][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.880109][ T7737] RIP: 0033:0x7efeaf79c819 [ 211.884574][ T7737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.904597][ T7737] RSP: 002b:00007efeb0598028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.913156][ T7737] RAX: ffffffffffffffda RBX: 00007efeafa16090 RCX: 00007efeaf79c819 [ 211.921169][ T7737] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 211.929264][ T7737] RBP: 00007efeb0598090 R08: 0000000000000000 R09: 0000000000000000 [ 211.937295][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.945483][ T7737] R13: 00007efeafa16128 R14: 00007efeafa16090 R15: 00007ffefe587b18 [ 211.953809][ T7737] [ 212.338278][ T7753] netlink: 'syz.3.617': attribute type 6 has an invalid length. [ 212.350456][ T7753] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.617'. [ 212.362000][ T7757] netlink: 'syz.2.618': attribute type 5 has an invalid length. [ 212.389324][ T7754] netlink: 'syz.3.617': attribute type 10 has an invalid length. [ 212.412504][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 212.436174][ T7758] netlink: 'syz.2.618': attribute type 5 has an invalid length. [ 212.812370][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 212.851538][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 213.581407][ T7785] netlink: 'syz.2.628': attribute type 6 has an invalid length. [ 213.646483][ T7785] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.628'. [ 213.670334][ T7789] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 213.680927][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 213.703952][ T7790] netlink: 'syz.1.631': attribute type 2 has an invalid length. [ 213.711885][ T7790] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.631'. [ 213.891631][ T7797] FAULT_INJECTION: forcing a failure. [ 213.891631][ T7797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.959546][ T7797] CPU: 1 PID: 7797 Comm: syz.2.632 Not tainted syzkaller #0 [ 213.967044][ T7797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 213.977436][ T7797] Call Trace: [ 213.980796][ T7797] [ 213.983818][ T7797] dump_stack_lvl+0x18c/0x250 [ 213.988679][ T7797] ? show_regs_print_info+0x20/0x20 [ 213.994158][ T7797] ? load_image+0x420/0x420 [ 213.998750][ T7797] ? __might_fault+0xaa/0x120 [ 214.003521][ T7797] ? __lock_acquire+0x7d40/0x7d40 [ 214.008646][ T7797] should_fail_ex+0x39d/0x4d0 [ 214.013621][ T7797] _copy_from_iter+0x1d9/0x12e0 [ 214.018648][ T7797] ? rep_movs_alternative+0x4a/0x90 [ 214.024027][ T7797] ? _copy_from_iter+0x24e/0x12e0 [ 214.029245][ T7797] ? __virt_addr_valid+0x18c/0x540 [ 214.034451][ T7797] ? __lock_acquire+0x7d40/0x7d40 [ 214.039562][ T7797] ? copyout_mc+0x70/0x70 [ 214.044000][ T7797] ? copyout_mc+0x70/0x70 [ 214.048415][ T7797] ? __virt_addr_valid+0x18c/0x540 [ 214.053709][ T7797] ? page_copy_sane+0x16a/0x270 [ 214.058698][ T7797] copy_page_from_iter+0x7b/0x100 [ 214.063832][ T7797] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 214.069748][ T7797] tun_get_user+0x15db/0x3ca0 [ 214.074513][ T7797] ? aa_file_perm+0x11b/0xee0 [ 214.079308][ T7797] ? rcu_read_unlock+0xa0/0xa0 [ 214.084180][ T7797] ? tun_get+0x1c/0x2e0 [ 214.088449][ T7797] ? __lock_acquire+0x7d40/0x7d40 [ 214.093545][ T7797] ? tun_get+0x1c/0x2e0 [ 214.097770][ T7797] tun_chr_write_iter+0x119/0x200 [ 214.102870][ T7797] vfs_write+0x46c/0x990 [ 214.107194][ T7797] ? file_end_write+0x250/0x250 [ 214.112146][ T7797] ? __fget_files+0x43d/0x4b0 [ 214.116961][ T7797] ? __fdget_pos+0x1d8/0x330 [ 214.121625][ T7797] ? ksys_write+0x75/0x260 [ 214.126218][ T7797] ksys_write+0x150/0x260 [ 214.130686][ T7797] ? __ia32_sys_read+0x90/0x90 [ 214.135613][ T7797] ? lockdep_hardirqs_on+0x98/0x150 [ 214.140996][ T7797] do_syscall_64+0x55/0xa0 [ 214.145566][ T7797] ? clear_bhb_loop+0x40/0x90 [ 214.150315][ T7797] ? clear_bhb_loop+0x40/0x90 [ 214.155180][ T7797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.161137][ T7797] RIP: 0033:0x7fc94c59c819 [ 214.165697][ T7797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.185839][ T7797] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.194583][ T7797] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 214.202797][ T7797] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 214.211199][ T7797] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 214.219511][ T7797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.227587][ T7797] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 214.235761][ T7797] [ 215.122563][ T7821] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 216.369322][ T7844] __nla_validate_parse: 5 callbacks suppressed [ 216.369344][ T7844] netlink: 830 bytes leftover after parsing attributes in process `syz.0.649'. [ 216.415612][ T7845] syz.1.650[7845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.415761][ T7845] syz.1.650[7845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.593610][ T7849] netlink: 'syz.2.652': attribute type 2 has an invalid length. [ 216.627537][ T7849] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.652'. [ 217.055601][ T7862] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.655'. [ 217.091967][ T7862] netlink: 'syz.0.655': attribute type 2 has an invalid length. [ 217.129117][ T7864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.656'. [ 217.178957][ T7862] pim6reg1: entered promiscuous mode [ 217.187096][ T7862] pim6reg1: entered allmulticast mode [ 217.267611][ T5771] Bluetooth: hci1: command 0x0406 tx timeout [ 217.274731][ T5771] Bluetooth: hci2: command 0x0406 tx timeout [ 217.281015][ T7825] Bluetooth: hci0: command 0x0406 tx timeout [ 217.287198][ T5771] Bluetooth: hci3: command 0x0406 tx timeout [ 220.360021][ T7893] netlink: 'syz.1.662': attribute type 2 has an invalid length. [ 220.371876][ T7893] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.662'. [ 220.410159][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 220.971988][ T7903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.666'. [ 220.987869][ T7905] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.667'. [ 221.022218][ T7905] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.667'. [ 221.276667][ T7914] netlink: 'syz.3.672': attribute type 2 has an invalid length. [ 221.294786][ T7914] netlink: 17255 bytes leftover after parsing attributes in process `syz.3.672'. [ 221.527564][ T7920] FAULT_INJECTION: forcing a failure. [ 221.527564][ T7920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.541671][ T7920] CPU: 1 PID: 7920 Comm: syz.2.673 Not tainted syzkaller #0 [ 221.549557][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.559678][ T7920] Call Trace: [ 221.563097][ T7920] [ 221.566070][ T7920] dump_stack_lvl+0x18c/0x250 [ 221.571021][ T7920] ? show_regs_print_info+0x20/0x20 [ 221.576445][ T7920] ? load_image+0x420/0x420 [ 221.581005][ T7920] ? __lock_acquire+0x7d40/0x7d40 [ 221.586070][ T7920] ? perf_trace_lock+0xfc/0x3b0 [ 221.590992][ T7920] should_fail_ex+0x39d/0x4d0 [ 221.595993][ T7920] prepare_alloc_pages+0x1e2/0x5f0 [ 221.601185][ T7920] __alloc_pages+0x134/0x460 [ 221.605822][ T7920] ? zone_statistics+0x170/0x170 [ 221.610979][ T7920] ? alloc_pages+0x4dc/0x740 [ 221.615694][ T7920] ? do_raw_spin_unlock+0x121/0x230 [ 221.620951][ T7920] __get_free_pages+0xc/0x30 [ 221.625600][ T7920] kasan_populate_vmalloc_pte+0x35/0x100 [ 221.631477][ T7920] __apply_to_page_range+0x860/0xdd0 [ 221.637299][ T7920] ? kasan_populate_vmalloc+0x70/0x70 [ 221.642777][ T7920] ? apply_to_page_range+0x50/0x50 [ 221.647963][ T7920] ? do_raw_spin_unlock+0x121/0x230 [ 221.653210][ T7920] alloc_vmap_area+0x1d0c/0x1e30 [ 221.658303][ T7920] ? vm_map_ram+0xcb0/0xcb0 [ 221.662854][ T7920] ? rcu_is_watching+0x15/0xb0 [ 221.667672][ T7920] __get_vm_area_node+0x162/0x370 [ 221.672749][ T7920] __vmalloc_node_range+0x36e/0x1330 [ 221.678099][ T7920] ? sock_hash_alloc+0x261/0x4d0 [ 221.683187][ T7920] ? free_vm_area+0x50/0x50 [ 221.687729][ T7920] ? bpf_map_area_alloc+0x5e/0x110 [ 221.692885][ T7920] ? rcu_is_watching+0x15/0xb0 [ 221.697733][ T7920] ? bpf_map_area_alloc+0x5e/0x110 [ 221.703179][ T7920] bpf_map_area_alloc+0xf1/0x110 [ 221.708597][ T7920] ? sock_hash_alloc+0x261/0x4d0 [ 221.713583][ T7920] sock_hash_alloc+0x261/0x4d0 [ 221.718507][ T7920] map_create+0x877/0x12f0 [ 221.723230][ T7920] ? bpf_lsm_bpf+0x9/0x10 [ 221.727734][ T7920] __sys_bpf+0x651/0x890 [ 221.732048][ T7920] ? bpf_link_show_fdinfo+0x390/0x390 [ 221.737760][ T7920] ? lock_chain_count+0x20/0x20 [ 221.742731][ T7920] __x64_sys_bpf+0x7c/0x90 [ 221.747639][ T7920] do_syscall_64+0x55/0xa0 [ 221.752223][ T7920] ? clear_bhb_loop+0x40/0x90 [ 221.757198][ T7920] ? clear_bhb_loop+0x40/0x90 [ 221.761996][ T7920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.767932][ T7920] RIP: 0033:0x7fc94c59c819 [ 221.772380][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.792366][ T7920] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.801235][ T7920] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 221.809520][ T7920] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 221.817808][ T7920] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 221.825923][ T7920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.834010][ T7920] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 221.842034][ T7920] [ 223.274726][ T7947] netlink: 'syz.0.679': attribute type 21 has an invalid length. [ 223.333693][ T7947] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 223.342104][ T7947] netlink: 100 bytes leftover after parsing attributes in process `syz.0.679'. [ 223.377397][ T7938] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 223.392106][ T7945] netlink: 1 bytes leftover after parsing attributes in process `syz.0.679'. [ 223.429648][ T7949] netlink: 1 bytes leftover after parsing attributes in process `syz.3.680'. [ 223.654249][ T7956] netlink: 'syz.0.682': attribute type 2 has an invalid length. [ 223.673011][ T7956] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.682'. [ 224.359802][ T7970] netlink: 'syz.1.689': attribute type 5 has an invalid length. [ 224.661391][ T7980] netlink: 'syz.1.694': attribute type 2 has an invalid length. [ 224.672236][ T7980] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.694'. [ 224.960617][ T7983] netlink: 'syz.0.692': attribute type 6 has an invalid length. [ 224.983694][ T7983] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.692'. [ 225.011356][ T7978] netlink: 'syz.3.693': attribute type 6 has an invalid length. [ 225.046914][ T7978] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.693'. [ 225.082625][ T7977] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 225.115012][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.692'. [ 225.138119][ T7981] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 225.163419][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.693'. [ 225.459928][ T7994] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.697'. [ 225.524928][ T7993] netlink: 'syz.3.698': attribute type 2 has an invalid length. [ 225.563964][ T7995] pim6reg1: entered promiscuous mode [ 225.572785][ T7995] pim6reg1: entered allmulticast mode [ 227.936986][ T8028] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 228.568174][ T8051] validate_nla: 3 callbacks suppressed [ 228.568193][ T8051] netlink: 'syz.2.714': attribute type 2 has an invalid length. [ 228.613642][ T8051] __nla_validate_parse: 4 callbacks suppressed [ 228.613661][ T8051] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.714'. [ 229.131311][ T8054] netlink: 'syz.1.715': attribute type 6 has an invalid length. [ 229.145807][ T8054] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.715'. [ 229.167524][ T8054] netlink: 'syz.1.715': attribute type 10 has an invalid length. [ 229.176304][ T8054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.715'. [ 229.420334][ T8058] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.716'. [ 229.478234][ T8058] netlink: 'syz.2.716': attribute type 2 has an invalid length. [ 229.536758][ T8060] pim6reg1: entered promiscuous mode [ 229.542204][ T8060] pim6reg1: entered allmulticast mode [ 229.660517][ T59] tipc: Subscription rejected, illegal request [ 229.887962][ T8070] netlink: 'syz.3.720': attribute type 39 has an invalid length. [ 230.187425][ T8075] IPv6: ÿÿÿÿ: Disabled Multicast RS [ 231.056854][ T8083] netlink: 'syz.3.728': attribute type 6 has an invalid length. [ 231.103108][ T8083] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.728'. [ 231.113766][ T8088] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 231.134768][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.3.728'. [ 231.856711][ T8102] FAULT_INJECTION: forcing a failure. [ 231.856711][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 231.884307][ T8102] CPU: 1 PID: 8102 Comm: syz.2.733 Not tainted syzkaller #0 [ 231.891701][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 231.901813][ T8102] Call Trace: [ 231.905229][ T8102] [ 231.908216][ T8102] dump_stack_lvl+0x18c/0x250 [ 231.912967][ T8102] ? fib_rules_lookup+0x9c/0xb40 [ 231.917973][ T8102] ? show_regs_print_info+0x20/0x20 [ 231.923323][ T8102] ? load_image+0x420/0x420 [ 231.927982][ T8102] ? fib_rules_lookup+0x9c/0xb40 [ 231.933346][ T8102] ? fib_rules_unregister+0x340/0x340 [ 231.938830][ T8102] should_fail_ex+0x39d/0x4d0 [ 231.943602][ T8102] should_failslab+0x9/0x20 [ 231.948225][ T8102] slab_pre_alloc_hook+0x59/0x310 [ 231.953492][ T8102] ? find_exception+0x175/0xa30 [ 231.958501][ T8102] kmem_cache_alloc+0x5a/0x2d0 [ 231.963421][ T8102] ? dst_alloc+0x105/0x170 [ 231.967963][ T8102] dst_alloc+0x105/0x170 [ 231.972371][ T8102] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 231.978607][ T8102] ? ip_route_output_key_hash+0x13d/0x330 [ 231.984595][ T8102] ip_route_output_key_hash+0x1f3/0x330 [ 231.990258][ T8102] ? ip_route_input_rcu+0x30f0/0x30f0 [ 231.995907][ T8102] ? mark_lock+0x94/0x320 [ 232.000313][ T8102] ip_route_output_flow+0x2a/0x150 [ 232.005505][ T8102] sctp_v4_get_dst+0x400/0x1230 [ 232.010517][ T8102] ? sctp_v4_xmit+0xde0/0xde0 [ 232.015348][ T8102] ? rcu_force_quiescent_state+0x230/0x230 [ 232.021425][ T8102] ? dst_release+0x121/0x1a0 [ 232.026305][ T8102] sctp_transport_pmtu+0x12c/0x580 [ 232.031705][ T8102] sctp_transport_route+0x184/0x2c0 [ 232.037082][ T8102] sctp_assoc_add_peer+0x650/0x1390 [ 232.042418][ T8102] sctp_connect_new_asoc+0x323/0x6a0 [ 232.047791][ T8102] ? __sctp_connect+0xd80/0xd80 [ 232.052725][ T8102] ? security_sctp_bind_connect+0x82/0xb0 [ 232.058601][ T8102] ? security_sctp_bind_connect+0x31/0xb0 [ 232.064503][ T8102] ? security_sctp_bind_connect+0x89/0xb0 [ 232.070294][ T8102] sctp_sendmsg+0x1575/0x28c0 [ 232.075034][ T8102] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.081292][ T8102] ? sctp_getsockopt+0xb60/0xb60 [ 232.086319][ T8102] ? aa_sk_perm+0x83c/0x970 [ 232.091032][ T8102] ? aa_af_perm+0x330/0x330 [ 232.096129][ T8102] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 232.102704][ T8102] ? sock_rps_record_flow+0x19/0x3f0 [ 232.108340][ T8102] ? inet_sendmsg+0x7c/0x2f0 [ 232.113367][ T8102] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.118877][ T8102] ? security_socket_sendmsg+0x80/0xa0 [ 232.124506][ T8102] ? inet_send_prepare+0x260/0x260 [ 232.130048][ T8102] ____sys_sendmsg+0x5ba/0x960 [ 232.135147][ T8102] ? __lock_acquire+0x7d40/0x7d40 [ 232.140236][ T8102] ? __asan_memset+0x22/0x40 [ 232.144900][ T8102] ? __sys_sendmsg_sock+0x30/0x30 [ 232.150005][ T8102] ? __import_iovec+0x5f2/0x850 [ 232.155020][ T8102] ? import_iovec+0x73/0xa0 [ 232.159687][ T8102] ___sys_sendmsg+0x2a6/0x360 [ 232.164431][ T8102] ? __sys_sendmsg+0x2a0/0x2a0 [ 232.169364][ T8102] ? check_preemption_disabled+0x2e/0x110 [ 232.175450][ T8102] __se_sys_sendmsg+0x1c2/0x2b0 [ 232.180371][ T8102] ? __x64_sys_sendmsg+0x80/0x80 [ 232.185563][ T8102] ? lockdep_hardirqs_on+0x98/0x150 [ 232.190854][ T8102] do_syscall_64+0x55/0xa0 [ 232.195317][ T8102] ? clear_bhb_loop+0x40/0x90 [ 232.200231][ T8102] ? clear_bhb_loop+0x40/0x90 [ 232.205094][ T8102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.211256][ T8102] RIP: 0033:0x7fc94c59c819 [ 232.215723][ T8102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.235541][ T8102] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.244196][ T8102] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 232.253061][ T8102] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 232.261174][ T8102] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 232.269411][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.277443][ T8102] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 232.285600][ T8102] [ 233.133942][ T8127] netlink: 'syz.2.739': attribute type 6 has an invalid length. [ 233.142486][ T8127] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.739'. [ 233.156195][ T8129] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 233.218082][ T8129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.739'. [ 233.279367][ T8130] netlink: 'syz.0.740': attribute type 6 has an invalid length. [ 233.320045][ T8132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.740'. [ 233.338119][ T8130] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.740'. [ 234.342296][ T8145] validate_nla: 1 callbacks suppressed [ 234.342313][ T8145] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 234.401950][ T8145] team0: Port device dummy0 added [ 234.824932][ T8151] netlink: 'syz.3.747': attribute type 19 has an invalid length. [ 234.833158][ T8151] netlink: 40 bytes leftover after parsing attributes in process `syz.3.747'. [ 234.849314][ T8151] FAULT_INJECTION: forcing a failure. [ 234.849314][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 234.872881][ T8151] CPU: 0 PID: 8151 Comm: syz.3.747 Not tainted syzkaller #0 [ 234.880390][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.890628][ T8151] Call Trace: [ 234.893987][ T8151] [ 234.896978][ T8151] dump_stack_lvl+0x18c/0x250 [ 234.901840][ T8151] ? show_regs_print_info+0x20/0x20 [ 234.907118][ T8151] ? load_image+0x420/0x420 [ 234.911746][ T8151] ? __might_sleep+0xe0/0xe0 [ 234.916686][ T8151] ? __lock_acquire+0x7d40/0x7d40 [ 234.921811][ T8151] should_fail_ex+0x39d/0x4d0 [ 234.926671][ T8151] should_failslab+0x9/0x20 [ 234.931300][ T8151] slab_pre_alloc_hook+0x59/0x310 [ 234.936418][ T8151] ? lockdep_hardirqs_on+0x98/0x150 [ 234.941818][ T8151] kmem_cache_alloc_node+0x60/0x320 [ 234.947291][ T8151] ? __alloc_skb+0x103/0x2c0 [ 234.952041][ T8151] __alloc_skb+0x103/0x2c0 [ 234.956504][ T8151] netlink_ack+0x376/0x1180 [ 234.961092][ T8151] ? __dev_queue_xmit+0x265/0x3660 [ 234.966262][ T8151] ? netlink_dump+0xe50/0xe50 [ 234.971001][ T8151] ? perf_trace_lock+0xfc/0x3b0 [ 234.975920][ T8151] netlink_rcv_skb+0x2c5/0x4d0 [ 234.980763][ T8151] ? rtnetlink_bind+0x80/0x80 [ 234.985554][ T8151] ? netlink_ack+0x1180/0x1180 [ 234.990383][ T8151] ? __lock_acquire+0x7d40/0x7d40 [ 234.995559][ T8151] ? netlink_deliver_tap+0x2e/0x1b0 [ 235.001070][ T8151] netlink_unicast+0x751/0x8d0 [ 235.005895][ T8151] netlink_sendmsg+0x8d0/0xbf0 [ 235.010778][ T8151] ? netlink_getsockopt+0x590/0x590 [ 235.016227][ T8151] ? aa_sock_msg_perm+0x94/0x150 [ 235.021385][ T8151] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 235.026713][ T8151] ? security_socket_sendmsg+0x80/0xa0 [ 235.032224][ T8151] ? netlink_getsockopt+0x590/0x590 [ 235.037571][ T8151] ____sys_sendmsg+0x5ba/0x960 [ 235.042422][ T8151] ? __asan_memset+0x22/0x40 [ 235.047069][ T8151] ? __sys_sendmsg_sock+0x30/0x30 [ 235.052141][ T8151] ? __import_iovec+0x5f2/0x850 [ 235.057062][ T8151] ? import_iovec+0x73/0xa0 [ 235.061696][ T8151] ___sys_sendmsg+0x2a6/0x360 [ 235.066422][ T8151] ? __sys_sendmsg+0x2a0/0x2a0 [ 235.071505][ T8151] ? __lock_acquire+0x7d40/0x7d40 [ 235.076865][ T8151] __se_sys_sendmsg+0x1c2/0x2b0 [ 235.081862][ T8151] ? __x64_sys_sendmsg+0x80/0x80 [ 235.087074][ T8151] ? lockdep_hardirqs_on+0x98/0x150 [ 235.092326][ T8151] do_syscall_64+0x55/0xa0 [ 235.096786][ T8151] ? clear_bhb_loop+0x40/0x90 [ 235.101610][ T8151] ? clear_bhb_loop+0x40/0x90 [ 235.106340][ T8151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.112282][ T8151] RIP: 0033:0x7f239c59c819 [ 235.116748][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.136794][ T8151] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.145532][ T8151] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 235.153557][ T8151] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 235.161574][ T8151] RBP: 00007f239d4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 235.169598][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.177792][ T8151] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 235.186015][ T8151] [ 235.466687][ T8162] netlink: 60 bytes leftover after parsing attributes in process `syz.3.749'. [ 235.613646][ T8168] IPv6: Can't replace route, no match found [ 235.691025][ T8165] netlink: 'syz.0.750': attribute type 6 has an invalid length. [ 235.712840][ T8165] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.750'. [ 235.739454][ T8165] netlink: 'syz.0.750': attribute type 10 has an invalid length. [ 235.767433][ T8165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.750'. [ 236.883609][ T8190] netlink: 'syz.2.759': attribute type 6 has an invalid length. [ 236.891722][ T8190] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.759'. [ 236.930326][ T8190] netlink: 'syz.2.759': attribute type 10 has an invalid length. [ 236.938803][ T8190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.759'. [ 236.984127][ T8198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.762'. [ 237.137448][ T8200] netlink: 830 bytes leftover after parsing attributes in process `syz.0.771'. [ 237.309967][ T8204] netlink: 'syz.1.763': attribute type 6 has an invalid length. [ 237.321605][ T8204] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.763'. [ 237.362421][ T8206] netlink: 'syz.3.765': attribute type 6 has an invalid length. [ 237.376459][ T8206] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.765'. [ 237.390225][ T8204] netlink: 'syz.1.763': attribute type 10 has an invalid length. [ 237.405567][ T8207] netlink: 'syz.3.765': attribute type 10 has an invalid length. [ 237.803103][ T8223] team0: Port device dummy0 added [ 238.125063][ T8229] FAULT_INJECTION: forcing a failure. [ 238.125063][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 238.152747][ T8229] CPU: 0 PID: 8229 Comm: syz.2.774 Not tainted syzkaller #0 [ 238.160158][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 238.170373][ T8229] Call Trace: [ 238.173742][ T8229] [ 238.176743][ T8229] dump_stack_lvl+0x18c/0x250 [ 238.181585][ T8229] ? sctp_sendmsg+0x1575/0x28c0 [ 238.186773][ T8229] ? ___sys_sendmsg+0x2a6/0x360 [ 238.191710][ T8229] ? show_regs_print_info+0x20/0x20 [ 238.197068][ T8229] ? load_image+0x420/0x420 [ 238.201932][ T8229] should_fail_ex+0x39d/0x4d0 [ 238.206799][ T8229] should_failslab+0x9/0x20 [ 238.211746][ T8229] slab_pre_alloc_hook+0x59/0x310 [ 238.217303][ T8229] ? sctp_add_bind_addr+0x8c/0x360 [ 238.222498][ T8229] __kmem_cache_alloc_node+0x53/0x250 [ 238.228091][ T8229] ? sctp_add_bind_addr+0x8c/0x360 [ 238.233273][ T8229] kmalloc_trace+0x2a/0xe0 [ 238.237765][ T8229] sctp_add_bind_addr+0x8c/0x360 [ 238.243062][ T8229] sctp_copy_local_addr_list+0x315/0x4f0 [ 238.248967][ T8229] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 238.254765][ T8229] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 238.260897][ T8229] ? sctp_v4_is_any+0x35/0x60 [ 238.265896][ T8229] ? sctp_copy_one_addr+0x8c/0x350 [ 238.271179][ T8229] sctp_bind_addr_copy+0xb3/0x3c0 [ 238.276342][ T8229] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 238.282749][ T8229] sctp_connect_new_asoc+0x2f9/0x6a0 [ 238.288076][ T8229] ? __sctp_connect+0xd80/0xd80 [ 238.293169][ T8229] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.298755][ T8229] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 238.304534][ T8229] ? security_sctp_bind_connect+0x89/0xb0 [ 238.310583][ T8229] sctp_sendmsg+0x1575/0x28c0 [ 238.315423][ T8229] ? sctp_getsockopt+0xb60/0xb60 [ 238.320497][ T8229] ? aa_sk_perm+0x83c/0x970 [ 238.325591][ T8229] ? aa_af_perm+0x330/0x330 [ 238.330222][ T8229] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 238.336820][ T8229] ? sock_rps_record_flow+0x19/0x3f0 [ 238.342342][ T8229] ? inet_sendmsg+0xe9/0x2f0 [ 238.347461][ T8229] ? inet_send_prepare+0x260/0x260 [ 238.352777][ T8229] ____sys_sendmsg+0x5ba/0x960 [ 238.357588][ T8229] ? __lock_acquire+0x7d40/0x7d40 [ 238.362664][ T8229] ? __asan_memset+0x22/0x40 [ 238.367296][ T8229] ? __sys_sendmsg_sock+0x30/0x30 [ 238.372474][ T8229] ? __import_iovec+0x5f2/0x850 [ 238.377498][ T8229] ? import_iovec+0x73/0xa0 [ 238.382224][ T8229] ___sys_sendmsg+0x2a6/0x360 [ 238.386936][ T8229] ? get_pid_task+0x20/0x1e0 [ 238.391692][ T8229] ? __sys_sendmsg+0x2a0/0x2a0 [ 238.396599][ T8229] ? __lock_acquire+0x7d40/0x7d40 [ 238.401701][ T8229] __se_sys_sendmsg+0x1c2/0x2b0 [ 238.406600][ T8229] ? __x64_sys_sendmsg+0x80/0x80 [ 238.411603][ T8229] ? lockdep_hardirqs_on+0x98/0x150 [ 238.416935][ T8229] do_syscall_64+0x55/0xa0 [ 238.421389][ T8229] ? clear_bhb_loop+0x40/0x90 [ 238.426124][ T8229] ? clear_bhb_loop+0x40/0x90 [ 238.430954][ T8229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.436976][ T8229] RIP: 0033:0x7fc94c59c819 [ 238.441485][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.461336][ T8229] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.469897][ T8229] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 238.478006][ T8229] RDX: 0000000000008091 RSI: 0000200000000140 RDI: 0000000000000003 [ 238.486295][ T8229] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 238.494300][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.502676][ T8229] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 238.510796][ T8229] [ 239.412014][ T8254] validate_nla: 4 callbacks suppressed [ 239.412036][ T8254] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 239.809783][ T8254] team0: Port device dummy0 added [ 240.450392][ T8270] netlink: 'syz.3.789': attribute type 39 has an invalid length. [ 240.617920][ T8276] netlink: 'syz.0.790': attribute type 6 has an invalid length. [ 240.637594][ T8276] __nla_validate_parse: 6 callbacks suppressed [ 240.637612][ T8276] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.790'. [ 240.663006][ T8279] netlink: 'syz.0.790': attribute type 10 has an invalid length. [ 240.676996][ T8279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.790'. [ 241.366610][ T8294] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 242.192040][ T8305] netlink: 'syz.0.801': attribute type 6 has an invalid length. [ 242.219950][ T8306] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 242.242979][ T8305] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.801'. [ 242.284745][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.801'. [ 243.044184][ T8332] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 244.514037][ T8351] netlink: 'syz.2.817': attribute type 39 has an invalid length. [ 244.773829][ T8363] netlink: 'syz.1.822': attribute type 6 has an invalid length. [ 244.781866][ T8363] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.822'. [ 244.815358][ T8364] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 244.846373][ T8364] netlink: 40 bytes leftover after parsing attributes in process `syz.1.822'. [ 245.546734][ T8379] FAULT_INJECTION: forcing a failure. [ 245.546734][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 245.590132][ T8379] CPU: 1 PID: 8379 Comm: syz.3.828 Not tainted syzkaller #0 [ 245.597707][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.607889][ T8379] Call Trace: [ 245.611284][ T8379] [ 245.614256][ T8379] dump_stack_lvl+0x18c/0x250 [ 245.618999][ T8379] ? show_regs_print_info+0x20/0x20 [ 245.624368][ T8379] ? load_image+0x420/0x420 [ 245.628996][ T8379] ? __might_sleep+0xe0/0xe0 [ 245.633771][ T8379] ? __lock_acquire+0x7d40/0x7d40 [ 245.638924][ T8379] should_fail_ex+0x39d/0x4d0 [ 245.643662][ T8379] should_failslab+0x9/0x20 [ 245.648237][ T8379] slab_pre_alloc_hook+0x59/0x310 [ 245.653305][ T8379] ? __get_vm_area_node+0x125/0x370 [ 245.658639][ T8379] __kmem_cache_alloc_node+0x53/0x250 [ 245.664070][ T8379] ? __get_vm_area_node+0x125/0x370 [ 245.669428][ T8379] kmalloc_node_trace+0x26/0xe0 [ 245.674585][ T8379] __get_vm_area_node+0x125/0x370 [ 245.679677][ T8379] __vmalloc_node_range+0x36e/0x1330 [ 245.685189][ T8379] ? netlink_sendmsg+0x602/0xbf0 [ 245.690168][ T8379] ? netlink_insert+0x109f/0x13a0 [ 245.695249][ T8379] ? netlink_data_ready+0x10/0x10 [ 245.700404][ T8379] ? free_vm_area+0x50/0x50 [ 245.705216][ T8379] ? netlink_sendmsg+0x602/0xbf0 [ 245.710282][ T8379] vmalloc+0x79/0x90 [ 245.714388][ T8379] ? netlink_sendmsg+0x602/0xbf0 [ 245.719464][ T8379] netlink_sendmsg+0x602/0xbf0 [ 245.724306][ T8379] ? netlink_getsockopt+0x590/0x590 [ 245.729656][ T8379] ? aa_sock_msg_perm+0x94/0x150 [ 245.734838][ T8379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.740158][ T8379] ? security_socket_sendmsg+0x80/0xa0 [ 245.745746][ T8379] ? netlink_getsockopt+0x590/0x590 [ 245.751097][ T8379] ____sys_sendmsg+0x5ba/0x960 [ 245.755909][ T8379] ? __asan_memset+0x22/0x40 [ 245.760923][ T8379] ? __sys_sendmsg_sock+0x30/0x30 [ 245.766499][ T8379] ? __import_iovec+0x5f2/0x850 [ 245.771397][ T8379] ? import_iovec+0x73/0xa0 [ 245.775935][ T8379] ___sys_sendmsg+0x2a6/0x360 [ 245.780682][ T8379] ? get_pid_task+0x20/0x1e0 [ 245.785327][ T8379] ? __sys_sendmsg+0x2a0/0x2a0 [ 245.790143][ T8379] ? __lock_acquire+0x7d40/0x7d40 [ 245.795833][ T8379] __se_sys_sendmsg+0x1c2/0x2b0 [ 245.800772][ T8379] ? __x64_sys_sendmsg+0x80/0x80 [ 245.805849][ T8379] ? lockdep_hardirqs_on+0x98/0x150 [ 245.811178][ T8379] do_syscall_64+0x55/0xa0 [ 245.815891][ T8379] ? clear_bhb_loop+0x40/0x90 [ 245.820714][ T8379] ? clear_bhb_loop+0x40/0x90 [ 245.825530][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.831483][ T8379] RIP: 0033:0x7f239c59c819 [ 245.836101][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.856218][ T8379] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.864698][ T8379] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 245.873062][ T8379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 245.881159][ T8379] RBP: 00007f239d4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 245.889874][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.897971][ T8379] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 245.906176][ T8379] [ 245.923534][ T8379] syz.3.828: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 245.981765][ T8379] CPU: 1 PID: 8379 Comm: syz.3.828 Not tainted syzkaller #0 [ 245.989156][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 245.999270][ T8379] Call Trace: [ 246.002604][ T8379] [ 246.005681][ T8379] dump_stack_lvl+0x18c/0x250 [ 246.010634][ T8379] ? show_regs_print_info+0x20/0x20 [ 246.016122][ T8379] ? load_image+0x420/0x420 [ 246.020878][ T8379] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.027461][ T8379] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 246.034389][ T8379] warn_alloc+0x246/0x340 [ 246.038811][ T8379] ? __get_vm_area_node+0x125/0x370 [ 246.044174][ T8379] ? zone_watermark_ok_safe+0x230/0x230 [ 246.050540][ T8379] ? rcu_is_watching+0x15/0xb0 [ 246.055390][ T8379] ? __get_vm_area_node+0x356/0x370 [ 246.060690][ T8379] __vmalloc_node_range+0x393/0x1330 [ 246.066058][ T8379] ? netlink_insert+0x109f/0x13a0 [ 246.071264][ T8379] ? netlink_data_ready+0x10/0x10 [ 246.076400][ T8379] ? free_vm_area+0x50/0x50 [ 246.080999][ T8379] ? netlink_sendmsg+0x602/0xbf0 [ 246.086108][ T8379] vmalloc+0x79/0x90 [ 246.090165][ T8379] ? netlink_sendmsg+0x602/0xbf0 [ 246.095251][ T8379] netlink_sendmsg+0x602/0xbf0 [ 246.100095][ T8379] ? netlink_getsockopt+0x590/0x590 [ 246.105373][ T8379] ? aa_sock_msg_perm+0x94/0x150 [ 246.110421][ T8379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 246.115885][ T8379] ? security_socket_sendmsg+0x80/0xa0 [ 246.121415][ T8379] ? netlink_getsockopt+0x590/0x590 [ 246.126814][ T8379] ____sys_sendmsg+0x5ba/0x960 [ 246.131646][ T8379] ? __asan_memset+0x22/0x40 [ 246.136399][ T8379] ? __sys_sendmsg_sock+0x30/0x30 [ 246.141836][ T8379] ? __import_iovec+0x5f2/0x850 [ 246.146760][ T8379] ? import_iovec+0x73/0xa0 [ 246.151518][ T8379] ___sys_sendmsg+0x2a6/0x360 [ 246.156268][ T8379] ? get_pid_task+0x20/0x1e0 [ 246.160936][ T8379] ? __sys_sendmsg+0x2a0/0x2a0 [ 246.165782][ T8379] ? __lock_acquire+0x7d40/0x7d40 [ 246.170901][ T8379] __se_sys_sendmsg+0x1c2/0x2b0 [ 246.176086][ T8379] ? __x64_sys_sendmsg+0x80/0x80 [ 246.181300][ T8379] ? lockdep_hardirqs_on+0x98/0x150 [ 246.186753][ T8379] do_syscall_64+0x55/0xa0 [ 246.191245][ T8379] ? clear_bhb_loop+0x40/0x90 [ 246.196036][ T8379] ? clear_bhb_loop+0x40/0x90 [ 246.200785][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.207002][ T8379] RIP: 0033:0x7f239c59c819 [ 246.211487][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.231272][ T8379] RSP: 002b:00007f239d4a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.239862][ T8379] RAX: ffffffffffffffda RBX: 00007f239c815fa0 RCX: 00007f239c59c819 [ 246.248188][ T8379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 246.256237][ T8379] RBP: 00007f239d4a5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.264623][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.273041][ T8379] R13: 00007f239c816038 R14: 00007f239c815fa0 R15: 00007ffd58ed60e8 [ 246.281285][ T8379] [ 246.342945][ T8379] Mem-Info: [ 246.346275][ T8379] active_anon:5810 inactive_anon:0 isolated_anon:0 [ 246.346275][ T8379] active_file:18010 inactive_file:39994 isolated_file:0 [ 246.346275][ T8379] unevictable:768 dirty:199 writeback:0 [ 246.346275][ T8379] slab_reclaimable:10118 slab_unreclaimable:91757 [ 246.346275][ T8379] mapped:24523 shmem:1361 pagetables:580 [ 246.346275][ T8379] sec_pagetables:0 bounce:0 [ 246.346275][ T8379] kernel_misc_reclaimable:0 [ 246.346275][ T8379] free:1349832 free_pcp:9340 free_cma:0 [ 246.399716][ T8379] Node 0 active_anon:23240kB inactive_anon:0kB active_file:72040kB inactive_file:159776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98092kB dirty:796kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10520kB pagetables:2320kB sec_pagetables:0kB all_unreclaimable? no [ 246.435581][ T8379] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 246.500109][ T8379] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.550229][ T8379] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 246.556753][ T8379] Node 0 DMA32 free:1480072kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23196kB inactive_anon:0kB active_file:72040kB inactive_file:158948kB unevictable:1536kB writepending:796kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:19796kB local_pcp:13360kB free_cma:0kB [ 246.588672][ T8379] lowmem_reserve[]: 0 0 0 0 0 [ 246.593699][ T8379] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 246.669107][ T8379] lowmem_reserve[]: 0 0 0 0 0 [ 246.702486][ T8379] Node 1 Normal free:3903896kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17348kB local_pcp:10528kB free_cma:0kB [ 246.734006][ T8379] lowmem_reserve[]: 0 0 0 0 0 [ 246.739253][ T8379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 246.757126][ T8379] Node 0 DMA32: 334*4kB (UM) 832*8kB (UM) 975*16kB (UME) 1457*32kB (UME) 865*64kB (UME) 244*128kB (UME) 97*256kB (UM) 28*512kB (UME) 6*1024kB (UM) 4*2048kB (UM) 310*4096kB (UM) = 1480072kB [ 246.822773][ T8379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 246.852864][ T8379] Node 1 Normal: 190*4kB (UME) 62*8kB (UME) 41*16kB (UME) 31*32kB (UME) 15*64kB (UE) 5*128kB (UME) 0*256kB 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 951*4096kB (UM) = 3903896kB [ 246.892322][ T8379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.913832][ T8379] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.928764][ T8379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 246.949243][ T8379] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 246.994890][ T8379] 59365 total pagecache pages [ 246.999868][ T8379] 0 pages in swap cache [ 247.057130][ T8379] Free swap = 124996kB [ 247.061781][ T8379] Total swap = 124996kB [ 247.102781][ T8379] 2097051 pages RAM [ 247.106737][ T8379] 0 pages HighMem/MovableOnly [ 247.124685][ T8379] 416927 pages reserved [ 247.134089][ T8379] 0 pages cma reserved [ 247.274655][ T8394] netlink: 60 bytes leftover after parsing attributes in process `syz.1.833'. [ 247.318794][ T8396] netlink: 830 bytes leftover after parsing attributes in process `syz.3.834'. [ 248.229478][ T8415] FAULT_INJECTION: forcing a failure. [ 248.229478][ T8415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.252021][ T8415] CPU: 0 PID: 8415 Comm: syz.1.843 Not tainted syzkaller #0 [ 248.259672][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.270133][ T8415] Call Trace: [ 248.273543][ T8415] [ 248.276744][ T8415] dump_stack_lvl+0x18c/0x250 [ 248.281674][ T8415] ? lockdep_hardirqs_on+0x98/0x150 [ 248.287034][ T8415] ? show_regs_print_info+0x20/0x20 [ 248.292322][ T8415] ? _printk+0x121/0x130 [ 248.296633][ T8415] should_fail_ex+0x39d/0x4d0 [ 248.301658][ T8415] _copy_from_user+0x2f/0xe0 [ 248.306417][ T8415] ___sys_sendmsg+0x1c7/0x360 [ 248.311710][ T8415] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.316987][ T8415] __se_sys_sendmsg+0x1c2/0x2b0 [ 248.322515][ T8415] ? __x64_sys_sendmsg+0x80/0x80 [ 248.327920][ T8415] ? lockdep_hardirqs_on+0x98/0x150 [ 248.334434][ T8415] do_syscall_64+0x55/0xa0 [ 248.339454][ T8415] ? clear_bhb_loop+0x40/0x90 [ 248.344775][ T8415] ? clear_bhb_loop+0x40/0x90 [ 248.349844][ T8415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.356228][ T8415] RIP: 0033:0x7efeaf79c819 [ 248.360963][ T8415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.382548][ T8415] RSP: 002b:00007efeb0598028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.391125][ T8415] RAX: ffffffffffffffda RBX: 00007efeafa16090 RCX: 00007efeaf79c819 [ 248.399412][ T8415] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000006 [ 248.407724][ T8415] RBP: 00007efeb0598090 R08: 0000000000000000 R09: 0000000000000000 [ 248.416825][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.425139][ T8415] R13: 00007efeafa16128 R14: 00007efeafa16090 R15: 00007ffefe587b18 [ 248.433354][ T8415] [ 248.794161][ T8426] netlink: 156 bytes leftover after parsing attributes in process `syz.3.847'. [ 249.102227][ T8429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.848'. [ 249.319134][ T8433] netlink: 'syz.1.850': attribute type 6 has an invalid length. [ 249.328125][ T8433] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.850'. [ 249.411563][ T8433] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 249.432758][ T8433] netlink: 40 bytes leftover after parsing attributes in process `syz.1.850'. [ 249.651915][ T8441] macsec0: entered promiscuous mode [ 249.678077][ T8441] macsec0: entered allmulticast mode [ 249.684454][ T8441] veth1_macvtap: entered allmulticast mode [ 249.708965][ T8441] netlink: 156 bytes leftover after parsing attributes in process `syz.2.852'. [ 249.869652][ T8450] FAULT_INJECTION: forcing a failure. [ 249.869652][ T8450] name failslab, interval 1, probability 0, space 0, times 0 [ 249.883903][ T8450] CPU: 1 PID: 8450 Comm: syz.0.855 Not tainted syzkaller #0 [ 249.891307][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 249.901692][ T8450] Call Trace: [ 249.905023][ T8450] [ 249.908004][ T8450] dump_stack_lvl+0x18c/0x250 [ 249.912856][ T8450] ? show_regs_print_info+0x20/0x20 [ 249.919301][ T8450] ? load_image+0x420/0x420 [ 249.923961][ T8450] ? __might_sleep+0xe0/0xe0 [ 249.928865][ T8450] ? __lock_acquire+0x7d40/0x7d40 [ 249.934150][ T8450] ? perf_trace_lock+0xfc/0x3b0 [ 249.939693][ T8450] should_fail_ex+0x39d/0x4d0 [ 249.945643][ T8450] should_failslab+0x9/0x20 [ 249.950770][ T8450] slab_pre_alloc_hook+0x59/0x310 [ 249.956970][ T8450] ? __get_vm_area_node+0x125/0x370 [ 249.962652][ T8450] __kmem_cache_alloc_node+0x53/0x250 [ 249.969074][ T8450] ? __get_vm_area_node+0x125/0x370 [ 249.974794][ T8450] kmalloc_node_trace+0x26/0xe0 [ 249.980608][ T8450] __get_vm_area_node+0x125/0x370 [ 249.986071][ T8450] __vmalloc_node_range+0x36e/0x1330 [ 249.991962][ T8450] ? netlink_sendmsg+0x602/0xbf0 [ 249.997326][ T8450] ? netlink_insert+0x109f/0x13a0 [ 250.002867][ T8450] ? netlink_data_ready+0x10/0x10 [ 250.008517][ T8450] ? free_vm_area+0x50/0x50 [ 250.013502][ T8450] ? netlink_sendmsg+0x602/0xbf0 [ 250.019003][ T8450] vmalloc+0x79/0x90 [ 250.023281][ T8450] ? netlink_sendmsg+0x602/0xbf0 [ 250.028325][ T8450] netlink_sendmsg+0x602/0xbf0 [ 250.033152][ T8450] ? netlink_getsockopt+0x590/0x590 [ 250.038589][ T8450] ? aa_sock_msg_perm+0x94/0x150 [ 250.043769][ T8450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 250.049236][ T8450] ? security_socket_sendmsg+0x80/0xa0 [ 250.054926][ T8450] ? netlink_getsockopt+0x590/0x590 [ 250.060358][ T8450] ____sys_sendmsg+0x5ba/0x960 [ 250.065265][ T8450] ? __asan_memset+0x22/0x40 [ 250.069897][ T8450] ? __sys_sendmsg_sock+0x30/0x30 [ 250.075169][ T8450] ? __import_iovec+0x5f2/0x850 [ 250.080161][ T8450] ? import_iovec+0x73/0xa0 [ 250.084724][ T8450] ___sys_sendmsg+0x2a6/0x360 [ 250.089459][ T8450] ? __sys_sendmsg+0x2a0/0x2a0 [ 250.094282][ T8450] ? __lock_acquire+0x7d40/0x7d40 [ 250.099428][ T8450] __se_sys_sendmsg+0x1c2/0x2b0 [ 250.104334][ T8450] ? __x64_sys_sendmsg+0x80/0x80 [ 250.109330][ T8450] ? lockdep_hardirqs_on+0x98/0x150 [ 250.114669][ T8450] do_syscall_64+0x55/0xa0 [ 250.119505][ T8450] ? clear_bhb_loop+0x40/0x90 [ 250.124401][ T8450] ? clear_bhb_loop+0x40/0x90 [ 250.129215][ T8450] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.135155][ T8450] RIP: 0033:0x7f41e199c819 [ 250.139607][ T8450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.159715][ T8450] RSP: 002b:00007f41e2802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.168649][ T8450] RAX: ffffffffffffffda RBX: 00007f41e1c15fa0 RCX: 00007f41e199c819 [ 250.177280][ T8450] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 250.185444][ T8450] RBP: 00007f41e2802090 R08: 0000000000000000 R09: 0000000000000000 [ 250.193644][ T8450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.202225][ T8450] R13: 00007f41e1c16038 R14: 00007f41e1c15fa0 R15: 00007ffce47a8518 [ 250.210587][ T8450] [ 250.744071][ T8456] netlink: 'syz.0.857': attribute type 10 has an invalid length. [ 250.780809][ T8458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.858'. [ 251.101183][ T8464] netlink: 'syz.1.861': attribute type 6 has an invalid length. [ 251.130788][ T8468] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 251.149777][ T8464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.861'. [ 251.171114][ T8468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.861'. [ 252.412343][ T8489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.868'. [ 252.500513][ T8487] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 252.687283][ T8496] netlink: 'syz.0.869': attribute type 27 has an invalid length. [ 252.716295][ T8496] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.869'. [ 254.070356][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.880'. [ 254.109394][ T8519] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 254.144239][ T8519] team0: Port device dummy0 added [ 256.157930][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.167761][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.601721][ T8554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.891'. [ 256.926520][ T8557] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.892'. [ 257.478147][ T8561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.894'. [ 257.499318][ T8561] FAULT_INJECTION: forcing a failure. [ 257.499318][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 257.512868][ T8561] CPU: 0 PID: 8561 Comm: syz.0.894 Not tainted syzkaller #0 [ 257.520693][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.530832][ T8561] Call Trace: [ 257.534187][ T8561] [ 257.537559][ T8561] dump_stack_lvl+0x18c/0x250 [ 257.542778][ T8561] ? show_regs_print_info+0x20/0x20 [ 257.548299][ T8561] ? load_image+0x420/0x420 [ 257.553052][ T8561] should_fail_ex+0x39d/0x4d0 [ 257.557849][ T8561] should_failslab+0x9/0x20 [ 257.562457][ T8561] slab_pre_alloc_hook+0x59/0x310 [ 257.567729][ T8561] kmem_cache_alloc_node+0x60/0x320 [ 257.573130][ T8561] ? __alloc_skb+0x103/0x2c0 [ 257.577917][ T8561] __alloc_skb+0x103/0x2c0 [ 257.582473][ T8561] fdb_notify+0xa6/0x160 [ 257.586922][ T8561] fdb_delete+0xdd6/0x1060 [ 257.591478][ T8561] ? fdb_delete+0x33a/0x1060 [ 257.596193][ T8561] ? fdb_notify+0x160/0x160 [ 257.600828][ T8561] br_fdb_changeaddr+0x1fe/0x420 [ 257.605902][ T8561] br_device_event+0x60c/0x900 [ 257.610868][ T8561] ? br_switchdev_event+0x550/0x550 [ 257.616383][ T8561] notifier_call_chain+0x197/0x380 [ 257.621654][ T8561] dev_set_mac_address+0x39a/0x4d0 [ 257.627019][ T8561] ? dev_pre_changeaddr_notify+0x120/0x120 [ 257.633029][ T8561] ? down_write+0x16e/0x200 [ 257.637708][ T8561] ? rcu_is_watching+0x15/0xb0 [ 257.642612][ T8561] dev_set_mac_address_user+0x31/0x50 [ 257.648190][ T8561] do_setlink+0x7ac/0x4130 [ 257.652823][ T8561] ? __lock_acquire+0x1273/0x7d40 [ 257.657950][ T8561] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 257.664292][ T8561] ? rcu_is_watching+0x15/0xb0 [ 257.669196][ T8561] ? do_trace_netlink_extack+0x7e/0x1a0 [ 257.674845][ T8561] ? __nla_validate_parse+0x262c/0x2ea0 [ 257.680660][ T8561] ? __nla_validate+0x50/0x50 [ 257.685454][ T8561] ? perf_trace_lock+0x198/0x3b0 [ 257.690697][ T8561] ? mark_lock+0x94/0x320 [ 257.695174][ T8561] ? __lock_acquire+0x1347/0x7d40 [ 257.700476][ T8561] ? validate_linkmsg+0x719/0x910 [ 257.705721][ T8561] rtnl_setlink+0x3d9/0x4e0 [ 257.710425][ T8561] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 257.715706][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.720668][ T8561] ? trace_call_bpf+0x5e9/0x6c0 [ 257.725624][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.730595][ T8561] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 257.736984][ T8561] ? mutex_lock_nested+0x20/0x20 [ 257.742232][ T8561] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 257.747450][ T8561] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 257.752771][ T8561] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 257.758256][ T8561] rtnetlink_rcv_msg+0x869/0xfa0 [ 257.763320][ T8561] ? rtnetlink_bind+0x80/0x80 [ 257.768103][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.773011][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.777945][ T8561] ? __lock_acquire+0x7d40/0x7d40 [ 257.783059][ T8561] ? __local_bh_enable_ip+0x13a/0x1c0 [ 257.788570][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.793727][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.798687][ T8561] ? trace_call_bpf+0x5e9/0x6c0 [ 257.803722][ T8561] ? __dev_queue_xmit+0x265/0x3660 [ 257.809091][ T8561] ? trace_call_bpf+0xc3/0x6c0 [ 257.814178][ T8561] ? __dev_queue_xmit+0x1b2c/0x3660 [ 257.819728][ T8561] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 257.826124][ T8561] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 257.832229][ T8561] ? perf_trace_lock+0x304/0x3b0 [ 257.837506][ T8561] netlink_rcv_skb+0x241/0x4d0 [ 257.842439][ T8561] ? rtnetlink_bind+0x80/0x80 [ 257.847403][ T8561] ? netlink_ack+0x1180/0x1180 [ 257.852518][ T8561] ? __lock_acquire+0x7d40/0x7d40 [ 257.857666][ T8561] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.862991][ T8561] netlink_unicast+0x751/0x8d0 [ 257.867910][ T8561] netlink_sendmsg+0x8d0/0xbf0 [ 257.872773][ T8561] ? perf_trace_lock+0x304/0x3b0 [ 257.877841][ T8561] ? netlink_getsockopt+0x590/0x590 [ 257.883158][ T8561] ? aa_sock_msg_perm+0x94/0x150 [ 257.888207][ T8561] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 257.893683][ T8561] ? security_socket_sendmsg+0x80/0xa0 [ 257.899234][ T8561] ? netlink_getsockopt+0x590/0x590 [ 257.904550][ T8561] ____sys_sendmsg+0x5ba/0x960 [ 257.909603][ T8561] ? __asan_memset+0x22/0x40 [ 257.914313][ T8561] ? __sys_sendmsg_sock+0x30/0x30 [ 257.919605][ T8561] ? __import_iovec+0x5f2/0x850 [ 257.924615][ T8561] ? import_iovec+0x73/0xa0 [ 257.929228][ T8561] ___sys_sendmsg+0x2a6/0x360 [ 257.934044][ T8561] ? __sys_sendmsg+0x2a0/0x2a0 [ 257.938999][ T8561] ? __lock_acquire+0x7d40/0x7d40 [ 257.944225][ T8561] __se_sys_sendmsg+0x1c2/0x2b0 [ 257.949187][ T8561] ? __x64_sys_sendmsg+0x80/0x80 [ 257.954284][ T8561] ? lockdep_hardirqs_on+0x98/0x150 [ 257.959684][ T8561] do_syscall_64+0x55/0xa0 [ 257.964186][ T8561] ? clear_bhb_loop+0x40/0x90 [ 257.968974][ T8561] ? clear_bhb_loop+0x40/0x90 [ 257.973784][ T8561] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.979771][ T8561] RIP: 0033:0x7f41e199c819 [ 257.984283][ T8561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.004160][ T8561] RSP: 002b:00007f41e2802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.012774][ T8561] RAX: ffffffffffffffda RBX: 00007f41e1c15fa0 RCX: 00007f41e199c819 [ 258.020934][ T8561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 258.029176][ T8561] RBP: 00007f41e2802090 R08: 0000000000000000 R09: 0000000000000000 [ 258.037861][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.046107][ T8561] R13: 00007f41e1c16038 R14: 00007f41e1c15fa0 R15: 00007ffce47a8518 [ 258.054592][ T8561] [ 260.463343][ T8592] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.905'. [ 262.703038][ T8629] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.916'. [ 264.080914][ T8656] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.925'. [ 264.203908][ T8654] À: port 1(vlan0) entered blocking state [ 264.240189][ T8654] À: port 1(vlan0) entered disabled state [ 264.266545][ T8654] vlan0: entered allmulticast mode [ 264.277963][ T8654] veth0_vlan: entered allmulticast mode [ 264.312529][ T8654] vlan0: entered promiscuous mode [ 265.410290][ T8685] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.935'. [ 266.636215][ T8718] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.946'. [ 267.269725][ T8731] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 267.890552][ T8744] netlink: 'syz.0.957': attribute type 6 has an invalid length. [ 267.919654][ T8744] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.957'. [ 267.965253][ T8751] netlink: 'syz.0.957': attribute type 10 has an invalid length. [ 268.058530][ T8751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.957'. [ 268.632096][ T8756] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 268.819898][ T8774] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 269.051397][ T8777] syz.1.970[8777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.051538][ T8777] syz.1.970[8777] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.149623][ T8779] netlink: 'syz.0.971': attribute type 6 has an invalid length. [ 269.190413][ T8779] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.971'. [ 269.203898][ T8782] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 269.225375][ T8782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 270.341016][ T8808] netlink: 17255 bytes leftover after parsing attributes in process `syz.2.982'. [ 270.793780][ T8809] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 271.011260][ T8816] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.984'. [ 271.039521][ T8821] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 271.250842][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 271.273348][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 271.292192][ T8825] netlink: 33 bytes leftover after parsing attributes in process `syz.2.988'. [ 271.319497][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.988'. [ 272.740513][ T8852] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 273.282237][ T8873] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 273.476990][ T8877] __nla_validate_parse: 2 callbacks suppressed [ 273.477014][ T8877] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.1006'. [ 274.036616][ T8883] syz.2.1009[8883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.036800][ T8883] syz.2.1009[8883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.765722][ T8916] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 275.838215][ T8925] netlink: 'syz.0.1019': attribute type 10 has an invalid length. [ 275.885919][ T8919] netlink: 'syz.2.1018': attribute type 6 has an invalid length. [ 275.894348][ T8919] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1018'. [ 276.460417][ T8934] netlink: 'syz.3.1023': attribute type 6 has an invalid length. [ 276.515542][ T8934] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1023'. [ 276.535160][ T8935] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 276.576520][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1023'. [ 278.105975][ T8970] netlink: 'syz.1.1033': attribute type 10 has an invalid length. [ 278.242569][ T8971] netlink: 'syz.2.1034': attribute type 6 has an invalid length. [ 278.275743][ T8974] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 278.295348][ T8971] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1034'. [ 278.305986][ T8974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1034'. [ 278.768898][ T8986] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1040'. [ 278.885832][ T8986] netlink: 'syz.3.1040': attribute type 3 has an invalid length. [ 278.917156][ T8986] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1040'. [ 279.193558][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 279.431242][ T9004] netlink: 'syz.3.1047': attribute type 6 has an invalid length. [ 279.441196][ T9004] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1047'. [ 279.478766][ T9007] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 279.501891][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 279.914957][ T9021] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 279.940437][ T9022] netlink: 'syz.0.1053': attribute type 6 has an invalid length. [ 279.992784][ T9022] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1053'. [ 280.564249][ T9035] netlink: 'syz.1.1059': attribute type 10 has an invalid length. [ 280.688980][ T9035] team0: Port device syz_tun added [ 281.017920][ T9041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1062'. [ 281.879517][ T9058] netlink: 'syz.0.1069': attribute type 10 has an invalid length. [ 282.247726][ T9072] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1074'. [ 282.645082][ T9081] netlink: 'syz.2.1078': attribute type 10 has an invalid length. [ 282.857572][ T9084] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1079'. [ 282.922252][ T9084] netlink: 'syz.1.1079': attribute type 3 has an invalid length. [ 282.979875][ T9084] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1079'. [ 283.744838][ T9110] netlink: 'syz.3.1089': attribute type 10 has an invalid length. [ 283.800847][ T9097] delete_channel: no stack [ 284.475445][ T9133] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 284.602562][ T9133] team0: Port device syz_tun added [ 284.615570][ T9138] netlink: 'syz.2.1099': attribute type 10 has an invalid length. [ 286.170941][ T9170] netlink: 'syz.3.1111': attribute type 10 has an invalid length. [ 286.960373][ T9193] netlink: 'syz.0.1117': attribute type 10 has an invalid length. [ 287.193916][ T9196] netlink: 'syz.1.1121': attribute type 6 has an invalid length. [ 287.225626][ T9196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1121'. [ 287.247472][ T9197] netlink: 'syz.1.1121': attribute type 10 has an invalid length. [ 287.283000][ T9197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1121'. [ 287.531897][ T9202] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 287.544106][ T9201] netlink: 'syz.3.1122': attribute type 2 has an invalid length. [ 288.454393][ T9223] netlink: 'syz.0.1131': attribute type 5 has an invalid length. [ 288.543915][ T9227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1133'. [ 289.052935][ T9241] netlink: 'syz.1.1138': attribute type 2 has an invalid length. [ 289.078684][ T9241] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1138'. [ 289.211910][ T9241] team0: Port device dummy0 removed [ 290.773797][ T9276] netlink: 'syz.0.1150': attribute type 10 has an invalid length. [ 293.131773][ T9298] netlink: 'syz.3.1159': attribute type 5 has an invalid length. [ 293.462463][ T9308] netlink: 'syz.0.1162': attribute type 10 has an invalid length. [ 293.810201][ T9314] netlink: 'syz.1.1165': attribute type 6 has an invalid length. [ 293.827004][ T9314] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1165'. [ 293.938693][ T9314] netlink: 'syz.1.1165': attribute type 10 has an invalid length. [ 293.961805][ T9314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1165'. [ 294.459051][ T9324] netlink: 'syz.0.1169': attribute type 2 has an invalid length. [ 294.511683][ T9324] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1169'. [ 294.677532][ T9324] team0: Port device dummy0 removed [ 294.843202][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1168'. [ 295.604733][ T9347] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 295.618099][ T9345] netlink: 'syz.2.1177': attribute type 6 has an invalid length. [ 295.653163][ T9347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'. [ 295.697815][ T9345] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1177'. [ 295.773175][ T9353] netlink: 'syz.3.1178': attribute type 10 has an invalid length. [ 296.762848][ T9372] netlink: 'syz.2.1185': attribute type 2 has an invalid length. [ 296.879656][ T9381] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1186'. [ 297.012836][ T9372] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1185'. [ 297.345509][ T9372] team0: Port device dummy0 removed [ 297.967357][ T9405] netlink: 'syz.3.1196': attribute type 10 has an invalid length. [ 298.257739][ T9409] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1199'. [ 298.317070][ T5780] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 299.215035][ T9410] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1198'. [ 303.465246][ T9439] netlink: 'syz.1.1209': attribute type 6 has an invalid length. [ 303.475830][ T9439] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1209'. [ 303.519845][ T9439] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 303.542878][ T9439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1209'. [ 305.172563][ T9466] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1219'. [ 305.251127][ T9466] netlink: 'syz.1.1219': attribute type 10 has an invalid length. [ 305.260254][ T9466] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 305.276178][ T9466] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.660844][ T9477] netlink: 'syz.1.1224': attribute type 6 has an invalid length. [ 305.706325][ T9477] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1224'. [ 305.753079][ T9485] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 305.796487][ T9485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 305.855802][ T9489] FAULT_INJECTION: forcing a failure. [ 305.855802][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.938847][ T9489] CPU: 1 PID: 9489 Comm: syz.0.1228 Not tainted syzkaller #0 [ 305.946334][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 305.956537][ T9489] Call Trace: [ 305.960134][ T9489] [ 305.963117][ T9489] dump_stack_lvl+0x18c/0x250 [ 305.967878][ T9489] ? show_regs_print_info+0x20/0x20 [ 305.973160][ T9489] ? load_image+0x420/0x420 [ 305.977727][ T9489] ? __might_fault+0xaa/0x120 [ 305.982452][ T9489] ? __lock_acquire+0x7d40/0x7d40 [ 305.987528][ T9489] should_fail_ex+0x39d/0x4d0 [ 305.992307][ T9489] _copy_from_user+0x2f/0xe0 [ 305.996957][ T9489] generic_map_update_batch+0x59a/0x810 [ 306.002574][ T9489] ? rcu_read_unlock+0xa0/0xa0 [ 306.007391][ T9489] ? __fdget+0x180/0x210 [ 306.011819][ T9489] ? rcu_read_unlock+0xa0/0xa0 [ 306.016653][ T9489] bpf_map_do_batch+0x3d7/0x610 [ 306.021655][ T9489] __sys_bpf+0x381/0x890 [ 306.025955][ T9489] ? bpf_link_show_fdinfo+0x390/0x390 [ 306.031591][ T9489] ? lock_chain_count+0x20/0x20 [ 306.036612][ T9489] __x64_sys_bpf+0x7c/0x90 [ 306.041271][ T9489] do_syscall_64+0x55/0xa0 [ 306.045737][ T9489] ? clear_bhb_loop+0x40/0x90 [ 306.050642][ T9489] ? clear_bhb_loop+0x40/0x90 [ 306.055379][ T9489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.061429][ T9489] RIP: 0033:0x7f41e199c819 [ 306.065892][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.086341][ T9489] RSP: 002b:00007f41e2802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.094815][ T9489] RAX: ffffffffffffffda RBX: 00007f41e1c15fa0 RCX: 00007f41e199c819 [ 306.102838][ T9489] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 306.110953][ T9489] RBP: 00007f41e2802090 R08: 0000000000000000 R09: 0000000000000000 [ 306.118970][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.126990][ T9489] R13: 00007f41e1c16038 R14: 00007f41e1c15fa0 R15: 00007ffce47a8518 [ 306.135027][ T9489] [ 307.197955][ T9509] netlink: 'syz.0.1234': attribute type 3 has an invalid length. [ 307.208235][ T9509] netlink: 56188 bytes leftover after parsing attributes in process `syz.0.1234'. [ 307.314187][ T9517] netlink: 'syz.3.1237': attribute type 6 has an invalid length. [ 307.324140][ T9517] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1237'. [ 307.340554][ T9517] netlink: 'syz.3.1237': attribute type 10 has an invalid length. [ 307.368248][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1237'. [ 308.403118][ T9544] netlink: 'syz.2.1247': attribute type 21 has an invalid length. [ 309.798177][ T9576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1258'. [ 310.080192][ T9587] sctp: [Deprecated]: syz.3.1260 (pid 9587) Use of int in maxseg socket option. [ 310.080192][ T9587] Use struct sctp_assoc_value instead [ 310.138560][ T9581] netlink: 'syz.2.1259': attribute type 3 has an invalid length. [ 310.151809][ T9581] netlink: 56188 bytes leftover after parsing attributes in process `syz.2.1259'. [ 311.241514][ T9593] syzkaller0: entered promiscuous mode [ 311.259030][ T9593] syzkaller0: entered allmulticast mode [ 312.232144][ T9620] netlink: 'syz.3.1272': attribute type 3 has an invalid length. [ 312.249878][ T9620] netlink: 56188 bytes leftover after parsing attributes in process `syz.3.1272'. [ 314.240229][ T9628] netlink: 'syz.1.1275': attribute type 6 has an invalid length. [ 314.266181][ T9628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1275'. [ 314.289029][ T9639] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 314.308145][ T9639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'. [ 315.545594][ T9662] netlink: 'syz.1.1283': attribute type 3 has an invalid length. [ 315.574990][ T9662] netlink: 56188 bytes leftover after parsing attributes in process `syz.1.1283'. [ 315.829644][ T9678] FAULT_INJECTION: forcing a failure. [ 315.829644][ T9678] name failslab, interval 1, probability 0, space 0, times 0 [ 315.861893][ T9678] CPU: 0 PID: 9678 Comm: syz.2.1289 Not tainted syzkaller #0 [ 315.869426][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 315.879551][ T9678] Call Trace: [ 315.882882][ T9678] [ 315.885861][ T9678] dump_stack_lvl+0x18c/0x250 [ 315.890618][ T9678] ? show_regs_print_info+0x20/0x20 [ 315.895973][ T9678] ? load_image+0x420/0x420 [ 315.900553][ T9678] ? __lock_acquire+0x7d40/0x7d40 [ 315.905643][ T9678] ? kasan_set_track+0x5f/0x70 [ 315.910680][ T9678] should_fail_ex+0x39d/0x4d0 [ 315.915434][ T9678] should_failslab+0x9/0x20 [ 315.920015][ T9678] slab_pre_alloc_hook+0x59/0x310 [ 315.925113][ T9678] ? __kthread_create_on_node+0x1d0/0x3f0 [ 315.930887][ T9678] ? __kthread_create_on_node+0x1d0/0x3f0 [ 315.936659][ T9678] __kmem_cache_alloc_node+0x53/0x250 [ 315.942192][ T9678] ? __kthread_create_on_node+0x1d0/0x3f0 [ 315.947979][ T9678] __kmalloc_node_track_caller+0xa2/0x230 [ 315.953867][ T9678] kvasprintf+0xec/0x1a0 [ 315.958204][ T9678] ? bust_spinlocks+0xd0/0xd0 [ 315.963069][ T9678] __kthread_create_on_node+0x1d0/0x3f0 [ 315.968839][ T9678] ? kthread_create_on_node+0x140/0x140 [ 315.974436][ T9678] ? trace_contention_end+0x39/0xe0 [ 315.979683][ T9678] ? __mutex_lock+0x315/0xcc0 [ 315.984495][ T9678] ? psi_trigger_create+0xb60/0xb60 [ 315.989751][ T9678] ? psi_trigger_create+0xb60/0xb60 [ 315.995132][ T9678] kthread_create_on_node+0xec/0x140 [ 316.000478][ T9678] ? psi_trigger_create+0x4f4/0xb60 [ 316.005849][ T9678] ? tsk_fork_get_node+0x70/0x70 [ 316.011130][ T9678] psi_trigger_create+0x542/0xb60 [ 316.016238][ T9678] ? update_averages+0x4d0/0x4d0 [ 316.021260][ T9678] ? css_put+0x57/0x290 [ 316.025563][ T9678] ? css_put+0x1be/0x290 [ 316.029882][ T9678] pressure_write+0x271/0x2e0 [ 316.034636][ T9678] ? cgroup_cpu_pressure_show+0x230/0x230 [ 316.040437][ T9678] cgroup_file_write+0x2c9/0x690 [ 316.045434][ T9678] ? read_lock_is_recursive+0x20/0x20 [ 316.050862][ T9678] ? cgroup_seqfile_stop+0xd0/0xd0 [ 316.056235][ T9678] ? cgroup_seqfile_stop+0xd0/0xd0 [ 316.061423][ T9678] kernfs_fop_write_iter+0x3b6/0x520 [ 316.066871][ T9678] vfs_write+0x46c/0x990 [ 316.071275][ T9678] ? file_end_write+0x250/0x250 [ 316.076189][ T9678] ? __fget_files+0x43d/0x4b0 [ 316.081483][ T9678] ? __fdget_pos+0x2a3/0x330 [ 316.086389][ T9678] ? ksys_write+0x75/0x260 [ 316.091166][ T9678] ksys_write+0x150/0x260 [ 316.095563][ T9678] ? __ia32_sys_read+0x90/0x90 [ 316.100392][ T9678] ? syscall_enter_from_user_mode+0x2e/0x80 [ 316.106685][ T9678] do_syscall_64+0x55/0xa0 [ 316.111159][ T9678] ? clear_bhb_loop+0x40/0x90 [ 316.115888][ T9678] ? clear_bhb_loop+0x40/0x90 [ 316.120629][ T9678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.126747][ T9678] RIP: 0033:0x7fc94c59c819 [ 316.131211][ T9678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.151152][ T9678] RSP: 002b:00007fc94d486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.159718][ T9678] RAX: ffffffffffffffda RBX: 00007fc94c815fa0 RCX: 00007fc94c59c819 [ 316.167839][ T9678] RDX: 000000000000002f RSI: 00002000000001c0 RDI: 0000000000000007 [ 316.175959][ T9678] RBP: 00007fc94d486090 R08: 0000000000000000 R09: 0000000000000000 [ 316.183977][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.192088][ T9678] R13: 00007fc94c816038 R14: 00007fc94c815fa0 R15: 00007ffff31752c8 [ 316.200143][ T9678] [ 316.280222][ T9679] netlink: 'syz.3.1290': attribute type 6 has an invalid length. [ 316.288804][ T9679] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1290'. [ 316.313839][ T9679] netlink: 'syz.3.1290': attribute type 10 has an invalid length. [ 316.322831][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1290'. [ 317.633115][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.639565][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.856164][ T9722] netlink: 'syz.3.1301': attribute type 6 has an invalid length. [ 318.896246][ T9722] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1301'. [ 318.939015][ T9722] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 318.950522][ T9722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1301'. [ 319.123549][ T9692] delete_channel: no stack [ 319.240688][ T9733] syzkaller0: entered promiscuous mode [ 319.293791][ T9733] syzkaller0: entered allmulticast mode [ 322.932760][ T9765] IPv6: Can't replace route, no match found [ 322.970845][ T9761] netlink: 'syz.1.1315': attribute type 6 has an invalid length. [ 322.984186][ T9761] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1315'. [ 323.024199][ T9761] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 323.049382][ T9761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1315'. [ 323.886888][ T9795] FAULT_INJECTION: forcing a failure. [ 323.886888][ T9795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.902264][ T9795] CPU: 1 PID: 9795 Comm: syz.1.1330 Not tainted syzkaller #0 [ 323.909713][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.919808][ T9795] Call Trace: [ 323.923128][ T9795] [ 323.926076][ T9795] dump_stack_lvl+0x18c/0x250 [ 323.930882][ T9795] ? show_regs_print_info+0x20/0x20 [ 323.936124][ T9795] ? load_image+0x420/0x420 [ 323.940745][ T9795] ? __might_fault+0xaa/0x120 [ 323.945649][ T9795] ? __lock_acquire+0x7d40/0x7d40 [ 323.950698][ T9795] should_fail_ex+0x39d/0x4d0 [ 323.955424][ T9795] _copy_to_user+0x2f/0xa0 [ 323.959977][ T9795] ip_tunnel_siocdevprivate+0x162/0x1f0 [ 323.965554][ T9795] ? dev_ioctl+0x83c/0x1140 [ 323.970093][ T9795] ? ip_tunnel_update+0xb10/0xb10 [ 323.975157][ T9795] ? dev_ifsioc+0x958/0xc40 [ 323.979718][ T9795] dev_ioctl+0x84c/0x1140 [ 323.984110][ T9795] sock_ioctl+0x74c/0x7e0 [ 323.988495][ T9795] ? sock_poll+0x3e0/0x3e0 [ 323.993254][ T9795] ? bpf_lsm_file_ioctl+0x9/0x10 [ 323.998277][ T9795] ? security_file_ioctl+0x80/0xa0 [ 324.003436][ T9795] ? sock_poll+0x3e0/0x3e0 [ 324.007899][ T9795] __se_sys_ioctl+0xfd/0x170 [ 324.012534][ T9795] do_syscall_64+0x55/0xa0 [ 324.016984][ T9795] ? clear_bhb_loop+0x40/0x90 [ 324.021814][ T9795] ? clear_bhb_loop+0x40/0x90 [ 324.026613][ T9795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.032548][ T9795] RIP: 0033:0x7efeaf79c819 [ 324.037014][ T9795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.057140][ T9795] RSP: 002b:00007efeb05b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.065602][ T9795] RAX: ffffffffffffffda RBX: 00007efeafa15fa0 RCX: 00007efeaf79c819 [ 324.073875][ T9795] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 324.081874][ T9795] RBP: 00007efeb05b9090 R08: 0000000000000000 R09: 0000000000000000 [ 324.089888][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.098079][ T9795] R13: 00007efeafa16038 R14: 00007efeafa15fa0 R15: 00007ffefe587b18 [ 324.106311][ T9795] [ 324.251405][ T9793] netlink: 'syz.3.1329': attribute type 6 has an invalid length. [ 324.262831][ T9793] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1329'. [ 324.277702][ T9797] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 324.290070][ T9797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1329'. [ 325.349905][ T9830] netlink: 'syz.1.1344': attribute type 11 has an invalid length. [ 325.362191][ T9830] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1344'. [ 325.388169][ C1] [ 325.388180][ C1] ================================ [ 325.388188][ C1] WARNING: inconsistent lock state [ 325.388199][ C1] syzkaller #0 Not tainted [ 325.388211][ C1] -------------------------------- [ 325.388216][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 325.388225][ C1] syz.1.1344/9830 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 325.388252][ C1] ffff888022260a18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 325.388312][ C1] {INITIAL USE} state was registered at: [ 325.388324][ C1] lock_acquire+0x19e/0x420 [ 325.388347][ C1] _raw_spin_lock+0x2e/0x40 [ 325.388376][ C1] htab_lock_bucket+0x17d/0x300 [ 325.388396][ C1] htab_map_update_elem+0x229/0x1040 [ 325.388415][ C1] bpf_map_update_value+0x660/0x720 [ 325.388432][ C1] generic_map_update_batch+0x5ec/0x810 [ 325.388449][ C1] bpf_map_do_batch+0x3d7/0x610 [ 325.388469][ C1] __sys_bpf+0x381/0x890 [ 325.388486][ C1] __x64_sys_bpf+0x7c/0x90 [ 325.388503][ C1] do_syscall_64+0x55/0xa0 [ 325.388518][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.388540][ C1] irq event stamp: 2880 [ 325.388546][ C1] hardirqs last enabled at (2879): [] syscall_enter_from_user_mode+0x25/0x80 [ 325.388576][ C1] hardirqs last disabled at (2880): [] exc_debug+0x73/0x140 [ 325.388599][ C1] softirqs last enabled at (2840): [] bpf_prog_load+0x1266/0x1670 [ 325.388625][ C1] softirqs last disabled at (2838): [] bpf_ksym_add+0x2d/0x340 [ 325.388652][ C1] [ 325.388652][ C1] other info that might help us debug this: [ 325.388657][ C1] Possible unsafe locking scenario: [ 325.388657][ C1] [ 325.388662][ C1] CPU0 [ 325.388666][ C1] ---- [ 325.388669][ C1] lock(&htab->lockdep_key); [ 325.388683][ C1] [ 325.388686][ C1] lock(&htab->lockdep_key); [ 325.388698][ C1] [ 325.388698][ C1] *** DEADLOCK *** [ 325.388698][ C1] [ 325.388701][ C1] no locks held by syz.1.1344/9830. [ 325.388710][ C1] [ 325.388710][ C1] stack backtrace: [ 325.388716][ C1] CPU: 1 PID: 9830 Comm: syz.1.1344 Not tainted syzkaller #0 [ 325.388735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.388747][ C1] Call Trace: [ 325.388755][ C1] <#DB> [ 325.388763][ C1] dump_stack_lvl+0x18c/0x250 [ 325.388798][ C1] ? show_regs_print_info+0x20/0x20 [ 325.388835][ C1] ? print_usage_bug+0x475/0x690 [ 325.388859][ C1] ? verify_lock_unused+0x18/0x140 [ 325.388885][ C1] lock_acquire+0x2c2/0x420 [ 325.388911][ C1] ? htab_lock_bucket+0x17d/0x300 [ 325.388936][ C1] ? read_lock_is_recursive+0x20/0x20 [ 325.388964][ C1] ? perf_trace_lock_acquire+0x104/0x410 [ 325.388999][ C1] _raw_spin_lock+0x2e/0x40 [ 325.389022][ C1] ? htab_lock_bucket+0x17d/0x300 [ 325.389043][ C1] htab_lock_bucket+0x17d/0x300 [ 325.389069][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 325.389091][ C1] ? look_up_lock_class+0x75/0x140 [ 325.389117][ C1] ? verify_lock_unused+0x18/0x140 [ 325.389142][ C1] ? htab_map_hash+0x1d7/0x330 [ 325.389166][ C1] htab_map_delete_elem+0x1a4/0x650 [ 325.389192][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 325.389213][ C1] ? perf_callchain+0x220/0x220 [ 325.389241][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 325.389264][ C1] bpf_overflow_handler+0x1fc/0x510 [ 325.389296][ C1] ? bpf_overflow_handler+0xde/0x510 [ 325.389325][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 325.389367][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 325.389393][ C1] __perf_event_overflow+0x447/0x630 [ 325.389423][ C1] perf_swevent_overflow+0x268/0x340 [ 325.389455][ C1] ? perf_event_switch_output+0x790/0x790 [ 325.389492][ C1] perf_swevent_event+0x45c/0x570 [ 325.389518][ C1] ? perf_tp_event+0x1520/0x1520 [ 325.389551][ C1] perf_bp_event+0x319/0x430 [ 325.389580][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 325.389629][ C1] ? lock_acquire+0x2c2/0x420 [ 325.389658][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 325.389689][ C1] notifier_call_chain+0x197/0x380 [ 325.389718][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 325.389746][ C1] atomic_notifier_call_chain+0xda/0x180 [ 325.389774][ C1] notify_die+0x145/0x1a0 [ 325.389802][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 325.389835][ C1] ? rcu_is_watching+0x15/0xb0 [ 325.389865][ C1] notify_debug+0x2e/0x50 [ 325.389884][ C1] exc_debug+0xde/0x140 [ 325.389907][ C1] asm_exc_debug+0x1e/0x40 [ 325.389931][ C1] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 325.389954][ C1] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 325.389972][ C1] RSP: 0018:ffffc9000b7cfd50 EFLAGS: 00040216 [ 325.389989][ C1] RAX: 00000014ffffffff RBX: 0000000000000020 RCX: 0000000000000020 [ 325.390003][ C1] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000b7cfdc0 [ 325.390018][ C1] RBP: ffffc9000b7cfee8 R08: ffffc9000b7cfddf R09: 1ffff920016f9fbb [ 325.390032][ C1] R10: dffffc0000000000 R11: fffff520016f9fbc R12: 0000200000000320 [ 325.390047][ C1] R13: 0000000000000020 R14: ffffc9000b7cfdc0 R15: 0000200000000300 [ 325.390076][ C1] [ 325.390082][ C1] [ 325.390087][ C1] _copy_from_user+0x8b/0xe0 [ 325.390116][ C1] __sys_bpf+0x23e/0x890 [ 325.390139][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 325.390174][ C1] ? lock_chain_count+0x20/0x20 [ 325.390204][ C1] __x64_sys_bpf+0x7c/0x90 [ 325.390225][ C1] do_syscall_64+0x55/0xa0 [ 325.390242][ C1] ? clear_bhb_loop+0x40/0x90 [ 325.390266][ C1] ? clear_bhb_loop+0x40/0x90 [ 325.390293][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.390317][ C1] RIP: 0033:0x7efeaf79c819 [ 325.390333][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.390356][ C1] RSP: 002b:00007efeb05b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.390376][ C1] RAX: ffffffffffffffda RBX: 00007efeafa15fa0 RCX: 00007efeaf79c819 [ 325.390391][ C1] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000015 [ 325.390404][ C1] RBP: 00007efeaf832c91 R08: 0000000000000000 R09: 0000000000000000 [ 325.390416][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.390428][ C1] R13: 00007efeafa16038 R14: 00007efeafa15fa0 R15: 00007ffefe587b18 [ 325.390455][ C1]