last executing test programs: 2m32.825588629s ago: executing program 0 (id=1571): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000aca9277d950e77ac2020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000001c0000000100000000000000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) r3 = socket$kcm(0xa, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0xb, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000092000000300002201000000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001280), 0x0, 0x1, r8}, 0x38) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000080)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000140), &(0x7f00000004c0), 0x17, 0x7c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) ioctl$PERF_EVENT_IOC_ID(r6, 0x80082407, &(0x7f0000000740)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x10, r5}, 0x18) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r12, r10, 0x0, r9}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000a80)={0x4, 0x80, 0x5, 0x7f, 0x8, 0x99, 0x0, 0x7, 0xa0400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x70f653bd19b1182a, @perf_config_ext={0x7cbd3b56, 0xf}, 0x80, 0x0, 0x3, 0x9, 0xffffffff, 0x6612, 0x7, 0x0, 0x3, 0x0, 0xd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) 2m31.845269267s ago: executing program 0 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2m31.78105131s ago: executing program 0 (id=1582): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) (async) r1 = socket$kcm(0xa, 0x6, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x40010040) (async) r9 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x11b, 0x2, &(0x7f0000000900)=r8, 0x4) 2m31.580040259s ago: executing program 0 (id=1583): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open$cgroup(&(0x7f0000000680)={0x5, 0x80, 0x8, 0xe, 0x35, 0x7, 0x0, 0x4, 0x80080, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x4, 0x3, 0x7779, 0x8, 0xb, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x800000, &(0x7f0000000080)="f55aab9187581d4d9a94cb35e2612d71f67b31a128afc4522163912fe75569a2c14aea10535a2d5ab454d6092adad61e547ea9f98df742fc948ffa6e8c9b3cfcb6da001553072d37ceba9efc4d82a8e33ad9bcf9a743", 0x56, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7e353c2261d97466324e1062245201f7a0e966240864fc51426057fe07f82f9bc28a9211516b42c6e68bcf4ab89f5ed1676b822926e855bee83032311f221f86c8bfc6e5f909d5ecdab695fc3cd534f5e8a6e523e60c8f95d7a8541aabafdb134363e9f737fa3aff1506a58fd866480ee869845c") 2m31.483061064s ago: executing program 0 (id=1584): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x1, 0x7, 0x7, 0x4, 0x80, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m31.339427911s ago: executing program 0 (id=1585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {0x0}], 0x3}, 0x4000081) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000380)="f7b0b33a9d93926244c2f7689b7af3e0528f185a350411baa846d2e470b306083a57f19dfb980d91d416ac6b3238eddc146d901872a4f16ab10b438f713ee50f1692e20a945fba93c459cf6d7194244cd6d458735d493f66d97cb013423418b49e522d277482a4168fb5d9d974cc449f37ddf9e6519b851dce194d52c75dd8f805e627247fe319afc6c7daf58213e20d37f6911b454096b9f1a8e5183f222be90cc67cbcc235e0", &(0x7f0000000200)=""/50, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4c, 0x0, 0x4) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0xc61, 0x2000000005, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000500), &(0x7f0000000180)='%ps \x00'}, 0x20) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.260005195s ago: executing program 32 (id=1585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {0x0}], 0x3}, 0x4000081) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000380)="f7b0b33a9d93926244c2f7689b7af3e0528f185a350411baa846d2e470b306083a57f19dfb980d91d416ac6b3238eddc146d901872a4f16ab10b438f713ee50f1692e20a945fba93c459cf6d7194244cd6d458735d493f66d97cb013423418b49e522d277482a4168fb5d9d974cc449f37ddf9e6519b851dce194d52c75dd8f805e627247fe319afc6c7daf58213e20d37f6911b454096b9f1a8e5183f222be90cc67cbcc235e0", &(0x7f0000000200)=""/50, 0x4}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4c, 0x0, 0x4) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0xc61, 0x2000000005, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000500), &(0x7f0000000180)='%ps \x00'}, 0x20) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.477930582s ago: executing program 3 (id=2295): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.413962795s ago: executing program 3 (id=2296): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x5828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a55040e55a979e14"], &(0x7f0000000200)='GPL\x00', 0x0, 0xc4, &(0x7f0000000340)=""/196, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x9, 0x5658, 0x80000001}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f00000004c0)=[{0x3, 0x4, 0xe, 0x3}, {0x5, 0x5, 0x0, 0x8}, {0x3, 0x3, 0xe, 0x9}, {0x4, 0x1, 0x6, 0x3}, {0x5, 0x4, 0x8, 0x6}, {0x5, 0x3, 0x10, 0x8}], 0x10, 0xdef1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000600)=@o_path={&(0x7f0000000180)='./file0\x00', r7, 0x4000, r4}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r9, r8}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.194198516s ago: executing program 3 (id=2300): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd5"], 0xffdd) 4.141987448s ago: executing program 1 (id=2301): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.881939261s ago: executing program 1 (id=2303): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/27], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x95, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x118}, 0x48000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, r1, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x10010}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB="00000000e3ffffffffffffff0000000000000000", @ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$unix(r5, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0xa, 0xa, 0x2f4, &(0x7f00000001c0)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 3.799934035s ago: executing program 3 (id=2304): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80440, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.831422682s ago: executing program 3 (id=2306): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, 0x0, 0x0) 2.792008434s ago: executing program 1 (id=2307): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) (fail_nth: 63) 2.422998402s ago: executing program 3 (id=2310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9601"], 0x6e8a) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000fe7f00009500752297390000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c15", 0xdb}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 2.370062854s ago: executing program 1 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.2577385s ago: executing program 1 (id=2312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd5"], 0xffdd) 2.187808223s ago: executing program 4 (id=2313): socketpair(0xa, 0x1, 0x2f6, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20003}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x6, 0xfffc}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r3) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.932441966s ago: executing program 4 (id=2316): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/27], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x95, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x118}, 0x48000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, r1, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x10010}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB="00000000e3ffffffffffffff0000000000000000", @ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$unix(r5, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0xa, 0xa, 0x2f4, &(0x7f00000001c0)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 1.83978582s ago: executing program 1 (id=2318): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048050) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x16264}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.354426464s ago: executing program 4 (id=2321): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x44, @mcast2, 0xa}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="8fe70aa825cef2ec0ea3949451cf9d8c6a0a2e812bb011a4a2815bae7e26447fd441e11e44addfbc99f0ac9a8a20717414ff86b5e6ee3f73294f7f6cf49a04ab2462e79115ce4678b5b020cb1c15b68cb82dbc9f2bc5e3faef3c3c8fbbe1330efbb62be3417f7ce9e5804f05bdac277ec6913f34ece095c49de091aaf0eeedab90c3ed73b56c3c826a752b24fc12288aec9478d76f0803fb535adef8c23e6738ef3ad142c2f6560bd9c8dd52a2c182213ab7d4e04047544183d4e74227fcc178b9d75eed6bf9816674cfdb8bc74c90590babfd1535aa0bff0a763d", 0xdb}, {&(0x7f0000000240)="2e2515e51314cff4c7f23982e68505ced1f4c1be506575f83ace9ae89136d2744511a990069fe9471dbfbaadfb61e56d3a2c793c63015e4e4307726f54528bb76e13d80458bdb0c97d3920306b37c508769c426aead623a34b2f841c92da72390e2e2f7248929b7f6eaec4ce07040fc688763711d898f93388958de3a4291f5a8cca58d3f6ca5f50fcff16ff3a95ec6d0dfd4b3ae48c4bbbf48864afcce4d0e6a87aac6a80d0a3121a0197652a2d7876dd1d28af37b5383f069df77582ee9b8c22bd61e51c3c7665ce108faeec3cdb6d58426459cba4818138bca1d0c658926c4d50f7b7a355bb617c2d2f455c21b961336f31f0", 0xf4}], 0x2, &(0x7f0000000380)=[{0x50, 0xff, 0x1, "9d67e37b687037820be2acf2540804f38c8321bb2046c28242d795e1900b2901adeb3733fd827e2640338f1c1eaf9b1c4037479e0ecd83ceff"}, {0x18, 0x115, 0x1ff, "df20c34e2c"}], 0x68}, 0x4000050) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x94) 1.181841792s ago: executing program 2 (id=2322): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38) (fail_nth: 64) 887.043947ms ago: executing program 4 (id=2323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xd132}) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="9601"], 0x6e8a) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000fe7f00009500752297390000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x42}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x30004001) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9b98c15", 0xdb}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) 802.009461ms ago: executing program 2 (id=2324): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='rdma.current\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0xdf, 0x8, 0x4, 0x40eaa, 0x1, 0xffff11dd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x10, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x9, 0x8}, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc//0\x042\xf0\xc6\x00\x00\x82q\xee\x00'/32}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x14, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000005000000000000003e85000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000008520000005000000185000000d00000000000000000000003511f8ff00000000bf91000000000000b7020000010000008500000084000000b7000000000000007200000000000000"], &(0x7f0000000140)='GPL\x00', 0x80000001, 0xfb, &(0x7f0000000500)=""/251, 0x41000, 0x1, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x2f, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000800)=[r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000840)=[{0x4, 0x4, 0x8, 0x7}, {0x0, 0x2, 0xf, 0x6}], 0x10, 0x8000}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x82, &(0x7f0000000300), 0x52) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000008500000060000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 727.605485ms ago: executing program 2 (id=2325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd5"], 0xffdd) 582.040161ms ago: executing program 4 (id=2326): socketpair(0xa, 0x1, 0x2f6, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32], 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xfffffffffffffffb) socket$kcm(0x10, 0x2, 0x2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20003}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x6, 0xfffc}, 0x0, 0xffffffffffffbfff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYBLOB="1e000100110000001031bc22486b1ea92c3c4b1d6e576e016ba671b0", @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@map_fd={0x18, 0x3}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2ff12ef5, 0x18}, 0xc) close(r3) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 384.045301ms ago: executing program 2 (id=2327): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 325.739904ms ago: executing program 4 (id=2328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) (async, rerun: 32) r6 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 272.456706ms ago: executing program 2 (id=2329): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/27], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000340)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)=[0x0], 0x0, 0x95, &(0x7f0000000800)=[{}], 0x8, 0x10, &(0x7f0000000840), &(0x7f0000000940), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x118}, 0x48000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7ff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, r1, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x10010}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB="00000000e3ffffffffffffff0000000000000000", @ANYRESHEX=r2, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) sendmsg$unix(r5, 0x0, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0xa, 0xa, 0x2f4, &(0x7f00000001c0)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 0s ago: executing program 2 (id=2330): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) kernel console output (not intermixed with test programs): idate_nla: 1 callbacks suppressed [ 371.357451][T11563] netlink: 'syz.1.1790': attribute type 28 has an invalid length. [ 371.423216][T11564] __nla_validate_parse: 2 callbacks suppressed [ 371.423250][T11564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1789'. [ 371.431191][T11563] netlink: 'syz.1.1790': attribute type 29 has an invalid length. [ 371.492264][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1790'. [ 371.596373][T11566] netlink: 'syz.4.1791': attribute type 39 has an invalid length. [ 372.788031][ T9869] tipc: Subscription rejected, illegal request [ 372.850831][T11577] FAULT_INJECTION: forcing a failure. [ 372.850831][T11577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.877490][T11577] CPU: 0 PID: 11577 Comm: syz.2.1794 Not tainted syzkaller #0 [ 372.884997][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.895066][T11577] Call Trace: [ 372.898354][T11577] [ 372.901307][T11577] dump_stack_lvl+0x18c/0x250 [ 372.906016][T11577] ? show_regs_print_info+0x20/0x20 [ 372.911242][T11577] ? load_image+0x400/0x400 [ 372.915769][T11577] ? __might_fault+0xaa/0x120 [ 372.920462][T11577] ? __lock_acquire+0x7d40/0x7d40 [ 372.925507][T11577] should_fail_ex+0x39d/0x4d0 [ 372.930210][T11577] _copy_from_user+0x2f/0xe0 [ 372.934814][T11577] __sys_bpf+0x23e/0x890 [ 372.939083][T11577] ? bpf_link_show_fdinfo+0x390/0x390 [ 372.944477][T11577] ? lock_chain_count+0x20/0x20 [ 372.949334][T11577] __x64_sys_bpf+0x7c/0x90 [ 372.953749][T11577] do_syscall_64+0x55/0xa0 [ 372.958171][T11577] ? clear_bhb_loop+0x40/0x90 [ 372.962838][T11577] ? clear_bhb_loop+0x40/0x90 [ 372.967504][T11577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.973388][T11577] RIP: 0033:0x7fc72a79c799 [ 372.977974][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.997576][T11577] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.005980][T11577] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 373.013942][T11577] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000a [ 373.021986][T11577] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.029943][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.037907][T11577] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 373.045878][T11577] [ 373.277192][T11581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1796'. [ 373.339764][T11588] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.550809][T11599] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1802'. [ 373.576925][T11597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1801'. [ 373.727983][T11604] FAULT_INJECTION: forcing a failure. [ 373.727983][T11604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.750508][T11604] CPU: 0 PID: 11604 Comm: syz.4.1804 Not tainted syzkaller #0 [ 373.758019][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.768094][T11604] Call Trace: [ 373.771394][T11604] [ 373.774331][T11604] dump_stack_lvl+0x18c/0x250 [ 373.779035][T11604] ? show_regs_print_info+0x20/0x20 [ 373.784264][T11604] ? load_image+0x400/0x400 [ 373.788789][T11604] ? __might_fault+0xaa/0x120 [ 373.793487][T11604] ? __lock_acquire+0x7d40/0x7d40 [ 373.798535][T11604] should_fail_ex+0x39d/0x4d0 [ 373.803244][T11604] _copy_from_user+0x2f/0xe0 [ 373.807857][T11604] generic_map_update_batch+0x54b/0x810 [ 373.813430][T11604] ? rcu_read_unlock+0xa0/0xa0 [ 373.818211][T11604] ? __fdget+0x180/0x210 [ 373.822478][T11604] ? rcu_read_unlock+0xa0/0xa0 [ 373.827250][T11604] bpf_map_do_batch+0x3d7/0x610 [ 373.832128][T11604] __sys_bpf+0x381/0x890 [ 373.836387][T11604] ? bpf_link_show_fdinfo+0x390/0x390 [ 373.841784][T11604] ? lock_chain_count+0x20/0x20 [ 373.846646][T11604] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 373.852651][T11604] __x64_sys_bpf+0x7c/0x90 [ 373.857087][T11604] do_syscall_64+0x55/0xa0 [ 373.861518][T11604] ? clear_bhb_loop+0x40/0x90 [ 373.866218][T11604] ? clear_bhb_loop+0x40/0x90 [ 373.870910][T11604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.876816][T11604] RIP: 0033:0x7f542cf9c799 [ 373.881244][T11604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.901043][T11604] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.909482][T11604] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 373.917475][T11604] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 373.925458][T11604] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 373.933530][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.941522][T11604] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 373.949530][T11604] [ 374.288664][T11615] FAULT_INJECTION: forcing a failure. [ 374.288664][T11615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.310716][T11615] CPU: 1 PID: 11615 Comm: syz.4.1808 Not tainted syzkaller #0 [ 374.318223][T11615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.328300][T11615] Call Trace: [ 374.331596][T11615] [ 374.334546][T11615] dump_stack_lvl+0x18c/0x250 [ 374.339256][T11615] ? show_regs_print_info+0x20/0x20 [ 374.344485][T11615] ? load_image+0x400/0x400 [ 374.349018][T11615] ? __might_fault+0xaa/0x120 [ 374.353715][T11615] ? __lock_acquire+0x7d40/0x7d40 [ 374.358782][T11615] should_fail_ex+0x39d/0x4d0 [ 374.363484][T11615] _copy_to_user+0x2f/0xa0 [ 374.367921][T11615] bpf_prog_test_run_raw_tp+0x4ca/0x660 [ 374.373498][T11615] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 374.378998][T11615] ? trace_bpf_test_finish+0x1a0/0x1a0 [ 374.382572][T11356] tipc: Subscription rejected, illegal request [ 374.384457][T11615] bpf_prog_test_run+0x321/0x390 [ 374.384484][T11615] __sys_bpf+0x49d/0x890 [ 374.384506][T11615] ? bpf_link_show_fdinfo+0x390/0x390 [ 374.405325][T11615] ? lock_chain_count+0x20/0x20 [ 374.410197][T11615] __x64_sys_bpf+0x7c/0x90 [ 374.414617][T11615] do_syscall_64+0x55/0xa0 [ 374.419035][T11615] ? clear_bhb_loop+0x40/0x90 [ 374.423706][T11615] ? clear_bhb_loop+0x40/0x90 [ 374.428383][T11615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.434275][T11615] RIP: 0033:0x7f542cf9c799 [ 374.438682][T11615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.458293][T11615] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.466702][T11615] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 374.474675][T11615] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000a [ 374.482635][T11615] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 374.490596][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.498557][T11615] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 374.506530][T11615] [ 374.607217][T11619] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1809'. [ 374.828247][ T9869] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 374.858454][ T9869] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 375.155646][T11635] netlink: 'syz.4.1815': attribute type 28 has an invalid length. [ 375.171233][T11635] netlink: 'syz.4.1815': attribute type 29 has an invalid length. [ 375.214110][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1815'. [ 375.253913][T11643] FAULT_INJECTION: forcing a failure. [ 375.253913][T11643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.288617][T11645] FAULT_INJECTION: forcing a failure. [ 375.288617][T11645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.304010][T11643] CPU: 1 PID: 11643 Comm: syz.1.1818 Not tainted syzkaller #0 [ 375.311517][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.321588][T11643] Call Trace: [ 375.324870][T11643] [ 375.327894][T11643] dump_stack_lvl+0x18c/0x250 [ 375.332595][T11643] ? show_regs_print_info+0x20/0x20 [ 375.337810][T11643] ? load_image+0x400/0x400 [ 375.342327][T11643] ? __might_fault+0xaa/0x120 [ 375.347027][T11643] ? __lock_acquire+0x7d40/0x7d40 [ 375.352070][T11643] should_fail_ex+0x39d/0x4d0 [ 375.356761][T11643] _copy_from_user+0x2f/0xe0 [ 375.361529][T11643] generic_map_update_batch+0x59a/0x810 [ 375.367084][T11643] ? rcu_read_unlock+0xa0/0xa0 [ 375.371862][T11643] ? __fdget+0x180/0x210 [ 375.376129][T11643] ? rcu_read_unlock+0xa0/0xa0 [ 375.380909][T11643] bpf_map_do_batch+0x3d7/0x610 [ 375.385768][T11643] __sys_bpf+0x381/0x890 [ 375.390013][T11643] ? bpf_link_show_fdinfo+0x390/0x390 [ 375.395409][T11643] ? lock_chain_count+0x20/0x20 [ 375.400391][T11643] __x64_sys_bpf+0x7c/0x90 [ 375.404896][T11643] do_syscall_64+0x55/0xa0 [ 375.409491][T11643] ? clear_bhb_loop+0x40/0x90 [ 375.414179][T11643] ? clear_bhb_loop+0x40/0x90 [ 375.418934][T11643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.424835][T11643] RIP: 0033:0x7f4c5b19c799 [ 375.429251][T11643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.448851][T11643] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.457253][T11643] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 375.465213][T11643] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 375.473172][T11643] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 375.481131][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.489176][T11643] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 375.497154][T11643] [ 375.501505][T11645] CPU: 0 PID: 11645 Comm: syz.3.1819 Not tainted syzkaller #0 [ 375.508996][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.519068][T11645] Call Trace: [ 375.522370][T11645] [ 375.522682][T11647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1820'. [ 375.525299][T11645] dump_stack_lvl+0x18c/0x250 [ 375.525333][T11645] ? show_regs_print_info+0x20/0x20 [ 375.525355][T11645] ? load_image+0x400/0x400 [ 375.525378][T11645] ? __lock_acquire+0x7d40/0x7d40 [ 375.525399][T11645] ? snprintf+0xe9/0x140 [ 375.525422][T11645] should_fail_ex+0x39d/0x4d0 [ 375.525450][T11645] _copy_to_user+0x2f/0xa0 [ 375.525473][T11645] simple_read_from_buffer+0xe7/0x150 [ 375.525502][T11645] proc_fail_nth_read+0x1e8/0x260 [ 375.525527][T11645] ? proc_fault_inject_write+0x360/0x360 [ 375.525551][T11645] ? fsnotify_perm+0x271/0x5e0 [ 375.525574][T11645] ? proc_fault_inject_write+0x360/0x360 [ 375.525598][T11645] vfs_read+0x28b/0x970 [ 375.525625][T11645] ? kernel_read+0x1e0/0x1e0 [ 375.602326][T11645] ? __fget_files+0x28/0x4b0 [ 375.606916][T11645] ? __fget_files+0x28/0x4b0 [ 375.611501][T11645] ? __fget_files+0x43d/0x4b0 [ 375.616192][T11645] ? __fdget_pos+0x2a3/0x330 [ 375.620783][T11645] ? ksys_read+0x75/0x260 [ 375.625115][T11645] ksys_read+0x150/0x260 [ 375.629458][T11645] ? vfs_write+0x990/0x990 [ 375.633956][T11645] ? lockdep_hardirqs_on+0x98/0x150 [ 375.639147][T11645] do_syscall_64+0x55/0xa0 [ 375.643552][T11645] ? clear_bhb_loop+0x40/0x90 [ 375.648243][T11645] ? clear_bhb_loop+0x40/0x90 [ 375.652914][T11645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.658797][T11645] RIP: 0033:0x7f6d5e15cfce [ 375.663214][T11645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.682982][T11645] RSP: 002b:00007f6d5ef90fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.691547][T11645] RAX: ffffffffffffffda RBX: 00007f6d5ef916c0 RCX: 00007f6d5e15cfce [ 375.699508][T11645] RDX: 000000000000000f RSI: 00007f6d5ef910a0 RDI: 0000000000000006 [ 375.707471][T11645] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 375.715633][T11645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.723688][T11645] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 375.731661][T11645] [ 375.825361][T11650] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 375.833517][T11650] netlink: 6307 bytes leftover after parsing attributes in process `syz.1.1821'. [ 375.844023][T11651] netlink: 'syz.1.1821': attribute type 3 has an invalid length. [ 375.856069][T11651] netlink: 6307 bytes leftover after parsing attributes in process `syz.1.1821'. [ 375.986821][ T2951] tipc: Subscription rejected, illegal request [ 376.556121][T11674] netlink: 'syz.3.1829': attribute type 28 has an invalid length. [ 376.564192][T11674] netlink: 'syz.3.1829': attribute type 29 has an invalid length. [ 376.566349][T11676] FAULT_INJECTION: forcing a failure. [ 376.566349][T11676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.588515][T11674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1829'. [ 376.603864][T11676] CPU: 1 PID: 11676 Comm: syz.2.1830 Not tainted syzkaller #0 [ 376.611368][T11676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.621428][T11676] Call Trace: [ 376.624712][T11676] [ 376.627642][T11676] dump_stack_lvl+0x18c/0x250 [ 376.632322][T11676] ? show_regs_print_info+0x20/0x20 [ 376.637525][T11676] ? load_image+0x400/0x400 [ 376.642023][T11676] ? __might_fault+0xaa/0x120 [ 376.646692][T11676] ? __lock_acquire+0x7d40/0x7d40 [ 376.651710][T11676] should_fail_ex+0x39d/0x4d0 [ 376.656398][T11676] _copy_from_user+0x2f/0xe0 [ 376.661012][T11676] generic_map_update_batch+0x54b/0x810 [ 376.666572][T11676] ? rcu_read_unlock+0xa0/0xa0 [ 376.671328][T11676] ? __fdget+0x180/0x210 [ 376.675576][T11676] ? rcu_read_unlock+0xa0/0xa0 [ 376.680331][T11676] bpf_map_do_batch+0x3d7/0x610 [ 376.685200][T11676] __sys_bpf+0x381/0x890 [ 376.689454][T11676] ? bpf_link_show_fdinfo+0x390/0x390 [ 376.694836][T11676] ? lock_chain_count+0x20/0x20 [ 376.699694][T11676] __x64_sys_bpf+0x7c/0x90 [ 376.704102][T11676] do_syscall_64+0x55/0xa0 [ 376.708526][T11676] ? clear_bhb_loop+0x40/0x90 [ 376.713227][T11676] ? clear_bhb_loop+0x40/0x90 [ 376.717908][T11676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.723795][T11676] RIP: 0033:0x7fc72a79c799 [ 376.728209][T11676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.747814][T11676] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 376.756219][T11676] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 376.764184][T11676] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 376.772143][T11676] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 376.780099][T11676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 376.788068][T11676] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 376.796058][T11676] [ 376.940055][T11679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1831'. [ 378.087964][T11692] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1836'. [ 378.143239][T11356] tipc: Subscription rejected, illegal request [ 378.756375][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.762714][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.819399][T11704] FAULT_INJECTION: forcing a failure. [ 378.819399][T11704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.858156][T11704] CPU: 1 PID: 11704 Comm: syz.1.1840 Not tainted syzkaller #0 [ 378.865664][T11704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.875734][T11704] Call Trace: [ 378.879021][T11704] [ 378.881969][T11704] dump_stack_lvl+0x18c/0x250 [ 378.886672][T11704] ? show_regs_print_info+0x20/0x20 [ 378.891892][T11704] ? load_image+0x400/0x400 [ 378.896413][T11704] ? __might_fault+0xaa/0x120 [ 378.901103][T11704] ? __lock_acquire+0x7d40/0x7d40 [ 378.906150][T11704] should_fail_ex+0x39d/0x4d0 [ 378.910848][T11704] _copy_from_user+0x2f/0xe0 [ 378.915458][T11704] generic_map_update_batch+0x59a/0x810 [ 378.921039][T11704] ? rcu_read_unlock+0xa0/0xa0 [ 378.925825][T11704] ? __fdget+0x180/0x210 [ 378.930092][T11704] ? rcu_read_unlock+0xa0/0xa0 [ 378.934869][T11704] bpf_map_do_batch+0x3d7/0x610 [ 378.939744][T11704] __sys_bpf+0x381/0x890 [ 378.944005][T11704] ? bpf_link_show_fdinfo+0x390/0x390 [ 378.949424][T11704] ? lock_chain_count+0x20/0x20 [ 378.954305][T11704] __x64_sys_bpf+0x7c/0x90 [ 378.958743][T11704] do_syscall_64+0x55/0xa0 [ 378.963178][T11704] ? clear_bhb_loop+0x40/0x90 [ 378.967951][T11704] ? clear_bhb_loop+0x40/0x90 [ 378.972628][T11704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.978518][T11704] RIP: 0033:0x7f4c5b19c799 [ 378.982922][T11704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.002535][T11704] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.010938][T11704] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 379.018900][T11704] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 379.026946][T11704] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 379.034905][T11704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.042863][T11704] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 379.050846][T11704] [ 379.227534][T11709] netlink: 'syz.2.1842': attribute type 28 has an invalid length. [ 379.231133][T11357] tipc: Subscription rejected, illegal request [ 379.297703][T11709] netlink: 'syz.2.1842': attribute type 29 has an invalid length. [ 379.310800][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 379.973184][T11745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1851'. [ 380.461261][T11757] FAULT_INJECTION: forcing a failure. [ 380.461261][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.505554][T11757] CPU: 1 PID: 11757 Comm: syz.4.1855 Not tainted syzkaller #0 [ 380.513069][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.523142][T11757] Call Trace: [ 380.526442][T11757] [ 380.529387][T11757] dump_stack_lvl+0x18c/0x250 [ 380.534093][T11757] ? show_regs_print_info+0x20/0x20 [ 380.539317][T11757] ? load_image+0x400/0x400 [ 380.543846][T11757] ? __might_fault+0xaa/0x120 [ 380.547678][T11754] netlink: 'syz.3.1854': attribute type 28 has an invalid length. [ 380.548546][T11757] ? __lock_acquire+0x7d40/0x7d40 [ 380.548576][T11757] should_fail_ex+0x39d/0x4d0 [ 380.548606][T11757] _copy_from_user+0x2f/0xe0 [ 380.548629][T11757] generic_map_update_batch+0x54b/0x810 [ 380.548658][T11757] ? rcu_read_unlock+0xa0/0xa0 [ 380.578784][T11754] netlink: 'syz.3.1854': attribute type 29 has an invalid length. [ 380.580959][T11757] ? __fdget+0x180/0x210 [ 380.580991][T11757] ? rcu_read_unlock+0xa0/0xa0 [ 380.581006][T11757] bpf_map_do_batch+0x3d7/0x610 [ 380.581030][T11757] __sys_bpf+0x381/0x890 [ 380.581050][T11757] ? bpf_link_show_fdinfo+0x390/0x390 [ 380.581083][T11757] ? lock_chain_count+0x20/0x20 [ 380.617186][T11757] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 380.623179][T11757] __x64_sys_bpf+0x7c/0x90 [ 380.627588][T11757] do_syscall_64+0x55/0xa0 [ 380.631996][T11757] ? clear_bhb_loop+0x40/0x90 [ 380.636664][T11757] ? clear_bhb_loop+0x40/0x90 [ 380.641331][T11757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.647305][T11757] RIP: 0033:0x7f542cf9c799 [ 380.651706][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.671300][T11757] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.679706][T11757] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 380.687666][T11757] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 380.695624][T11757] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 380.703579][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.711535][T11757] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 380.719512][T11757] [ 380.776523][T11754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1854'. [ 380.798806][T11759] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1856'. [ 380.813696][T11759] openvswitch: netlink: Duplicate key (type 0). [ 381.006002][T11763] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.284648][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1862'. [ 381.711873][T11793] FAULT_INJECTION: forcing a failure. [ 381.711873][T11793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.734744][T11793] CPU: 1 PID: 11793 Comm: syz.1.1865 Not tainted syzkaller #0 [ 381.742245][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.752313][T11793] Call Trace: [ 381.755602][T11793] [ 381.758535][T11793] dump_stack_lvl+0x18c/0x250 [ 381.763241][T11793] ? show_regs_print_info+0x20/0x20 [ 381.768461][T11793] ? load_image+0x400/0x400 [ 381.772987][T11793] ? __might_fault+0xaa/0x120 [ 381.777693][T11793] ? __lock_acquire+0x7d40/0x7d40 [ 381.782740][T11793] should_fail_ex+0x39d/0x4d0 [ 381.787440][T11793] _copy_from_user+0x2f/0xe0 [ 381.792055][T11793] generic_map_update_batch+0x59a/0x810 [ 381.797628][T11793] ? rcu_read_unlock+0xa0/0xa0 [ 381.802418][T11793] ? __fdget+0x180/0x210 [ 381.806687][T11793] ? rcu_read_unlock+0xa0/0xa0 [ 381.811462][T11793] bpf_map_do_batch+0x3d7/0x610 [ 381.816340][T11793] __sys_bpf+0x381/0x890 [ 381.820613][T11793] ? bpf_link_show_fdinfo+0x390/0x390 [ 381.826020][T11793] ? lock_chain_count+0x20/0x20 [ 381.829812][T11796] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1866'. [ 381.830884][T11793] __x64_sys_bpf+0x7c/0x90 [ 381.844579][T11793] do_syscall_64+0x55/0xa0 [ 381.849013][T11793] ? clear_bhb_loop+0x40/0x90 [ 381.853814][T11793] ? clear_bhb_loop+0x40/0x90 [ 381.858490][T11793] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.864378][T11793] RIP: 0033:0x7f4c5b19c799 [ 381.868782][T11793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.888388][T11793] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.896812][T11793] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 381.904797][T11793] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 381.912801][T11793] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.920780][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.928746][T11793] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 381.936755][T11793] [ 382.328919][ T5775] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 383.181670][T11841] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 383.295433][T11845] FAULT_INJECTION: forcing a failure. [ 383.295433][T11845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.311092][T11845] CPU: 0 PID: 11845 Comm: syz.4.1877 Not tainted syzkaller #0 [ 383.318581][T11845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.328655][T11845] Call Trace: [ 383.331942][T11845] [ 383.334878][T11845] dump_stack_lvl+0x18c/0x250 [ 383.339590][T11845] ? show_regs_print_info+0x20/0x20 [ 383.344806][T11845] ? load_image+0x400/0x400 [ 383.349325][T11845] ? __might_fault+0xaa/0x120 [ 383.354015][T11845] ? __lock_acquire+0x7d40/0x7d40 [ 383.359057][T11845] should_fail_ex+0x39d/0x4d0 [ 383.363758][T11845] _copy_from_user+0x2f/0xe0 [ 383.368368][T11845] generic_map_update_batch+0x54b/0x810 [ 383.373957][T11845] ? rcu_read_unlock+0xa0/0xa0 [ 383.379010][T11845] ? __fdget+0x180/0x210 [ 383.383274][T11845] ? rcu_read_unlock+0xa0/0xa0 [ 383.388054][T11845] bpf_map_do_batch+0x3d7/0x610 [ 383.392937][T11845] __sys_bpf+0x381/0x890 [ 383.397194][T11845] ? bpf_link_show_fdinfo+0x390/0x390 [ 383.402601][T11845] ? lock_chain_count+0x20/0x20 [ 383.407470][T11845] __x64_sys_bpf+0x7c/0x90 [ 383.411917][T11845] do_syscall_64+0x55/0xa0 [ 383.416353][T11845] ? clear_bhb_loop+0x40/0x90 [ 383.421045][T11845] ? clear_bhb_loop+0x40/0x90 [ 383.425745][T11845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.431671][T11845] RIP: 0033:0x7f542cf9c799 [ 383.436117][T11845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.455832][T11845] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.464273][T11845] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 383.472269][T11845] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 383.480259][T11845] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 383.488339][T11845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.496335][T11845] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 383.504353][T11845] [ 383.548910][T11852] netlink: 'syz.2.1878': attribute type 3 has an invalid length. [ 383.571288][T11852] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1878'. [ 384.044317][T11856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1880'. [ 384.166983][T11856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1880'. [ 384.280912][T11859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1880'. [ 384.481074][T11867] netlink: 'syz.1.1881': attribute type 6 has an invalid length. [ 384.554896][T11867] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1881'. [ 384.588535][T11872] netlink: 'syz.1.1881': attribute type 11 has an invalid length. [ 384.649031][T11872] netlink: 126332 bytes leftover after parsing attributes in process `syz.1.1881'. [ 385.131890][T11888] FAULT_INJECTION: forcing a failure. [ 385.131890][T11888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.158889][T11888] CPU: 0 PID: 11888 Comm: syz.1.1888 Not tainted syzkaller #0 [ 385.166406][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.176468][T11888] Call Trace: [ 385.179750][T11888] [ 385.182687][T11888] dump_stack_lvl+0x18c/0x250 [ 385.187391][T11888] ? show_regs_print_info+0x20/0x20 [ 385.192607][T11888] ? load_image+0x400/0x400 [ 385.197123][T11888] ? __might_fault+0xaa/0x120 [ 385.201813][T11888] ? __lock_acquire+0x7d40/0x7d40 [ 385.206855][T11888] should_fail_ex+0x39d/0x4d0 [ 385.211551][T11888] _copy_from_user+0x2f/0xe0 [ 385.216152][T11888] generic_map_update_batch+0x59a/0x810 [ 385.221725][T11888] ? rcu_read_unlock+0xa0/0xa0 [ 385.226505][T11888] ? __fdget+0x180/0x210 [ 385.230851][T11888] ? rcu_read_unlock+0xa0/0xa0 [ 385.235617][T11888] bpf_map_do_batch+0x3d7/0x610 [ 385.240480][T11888] __sys_bpf+0x381/0x890 [ 385.244736][T11888] ? bpf_link_show_fdinfo+0x390/0x390 [ 385.250131][T11888] ? lock_chain_count+0x20/0x20 [ 385.254994][T11888] __x64_sys_bpf+0x7c/0x90 [ 385.259425][T11888] do_syscall_64+0x55/0xa0 [ 385.263832][T11888] ? clear_bhb_loop+0x40/0x90 [ 385.268497][T11888] ? clear_bhb_loop+0x40/0x90 [ 385.273162][T11888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.279045][T11888] RIP: 0033:0x7f4c5b19c799 [ 385.283445][T11888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.303039][T11888] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.311451][T11888] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 385.319500][T11888] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 385.327458][T11888] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.335423][T11888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.343553][T11888] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 385.351523][T11888] [ 385.394124][T11889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1886'. [ 390.203513][T11920] FAULT_INJECTION: forcing a failure. [ 390.203513][T11920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.223335][T11920] CPU: 1 PID: 11920 Comm: syz.4.1898 Not tainted syzkaller #0 [ 390.230842][T11920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.240934][T11920] Call Trace: [ 390.244215][T11920] [ 390.247162][T11920] dump_stack_lvl+0x18c/0x250 [ 390.251851][T11920] ? show_regs_print_info+0x20/0x20 [ 390.257061][T11920] ? load_image+0x400/0x400 [ 390.261573][T11920] ? __might_fault+0xaa/0x120 [ 390.266244][T11920] ? __lock_acquire+0x7d40/0x7d40 [ 390.271266][T11920] should_fail_ex+0x39d/0x4d0 [ 390.275949][T11920] _copy_from_user+0x2f/0xe0 [ 390.280542][T11920] generic_map_update_batch+0x54b/0x810 [ 390.286088][T11920] ? rcu_read_unlock+0xa0/0xa0 [ 390.290855][T11920] ? rcu_read_unlock+0xa0/0xa0 [ 390.295606][T11920] bpf_map_do_batch+0x3d7/0x610 [ 390.300456][T11920] __sys_bpf+0x381/0x890 [ 390.304688][T11920] ? bpf_link_show_fdinfo+0x390/0x390 [ 390.310061][T11920] ? lock_chain_count+0x20/0x20 [ 390.314934][T11920] __x64_sys_bpf+0x7c/0x90 [ 390.319338][T11920] do_syscall_64+0x55/0xa0 [ 390.323746][T11920] ? clear_bhb_loop+0x40/0x90 [ 390.328426][T11920] ? clear_bhb_loop+0x40/0x90 [ 390.333104][T11920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.339075][T11920] RIP: 0033:0x7f542cf9c799 [ 390.343483][T11920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.363096][T11920] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.371519][T11920] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 390.379488][T11920] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 390.387462][T11920] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 390.395428][T11920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.403394][T11920] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 390.411376][T11920] [ 390.705830][T11927] netlink: 'syz.2.1901': attribute type 39 has an invalid length. [ 391.086549][T11934] netlink: 'syz.3.1904': attribute type 28 has an invalid length. [ 391.101871][T11934] netlink: 'syz.3.1904': attribute type 29 has an invalid length. [ 391.111089][T11934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1904'. [ 391.544520][T11938] netlink: 'syz.1.1905': attribute type 28 has an invalid length. [ 391.578651][T11938] netlink: 'syz.1.1905': attribute type 29 has an invalid length. [ 391.609949][T11938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1905'. [ 391.638667][T11941] netlink: 'syz.4.1906': attribute type 3 has an invalid length. [ 391.652474][T11941] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1906'. [ 391.677575][T11941] netlink: 'syz.4.1906': attribute type 9 has an invalid length. [ 391.702858][T11941] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1906'. [ 391.953099][T11945] FAULT_INJECTION: forcing a failure. [ 391.953099][T11945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.982946][T11946] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1908'. [ 392.012291][T11945] CPU: 1 PID: 11945 Comm: syz.1.1907 Not tainted syzkaller #0 [ 392.019797][T11945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.029866][T11945] Call Trace: [ 392.033164][T11945] [ 392.036107][T11945] dump_stack_lvl+0x18c/0x250 [ 392.040810][T11945] ? show_regs_print_info+0x20/0x20 [ 392.046035][T11945] ? load_image+0x400/0x400 [ 392.050651][T11945] ? __might_fault+0xaa/0x120 [ 392.055344][T11945] ? __lock_acquire+0x7d40/0x7d40 [ 392.060388][T11945] should_fail_ex+0x39d/0x4d0 [ 392.065085][T11945] _copy_from_user+0x2f/0xe0 [ 392.069687][T11945] generic_map_update_batch+0x59a/0x810 [ 392.075269][T11945] ? rcu_read_unlock+0xa0/0xa0 [ 392.080059][T11945] ? __fdget+0x180/0x210 [ 392.084321][T11945] ? rcu_read_unlock+0xa0/0xa0 [ 392.089094][T11945] bpf_map_do_batch+0x3d7/0x610 [ 392.093965][T11945] __sys_bpf+0x381/0x890 [ 392.098228][T11945] ? bpf_link_show_fdinfo+0x390/0x390 [ 392.103620][T11945] ? lock_chain_count+0x20/0x20 [ 392.108470][T11945] __x64_sys_bpf+0x7c/0x90 [ 392.112879][T11945] do_syscall_64+0x55/0xa0 [ 392.117293][T11945] ? clear_bhb_loop+0x40/0x90 [ 392.121960][T11945] ? clear_bhb_loop+0x40/0x90 [ 392.126623][T11945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.132509][T11945] RIP: 0033:0x7f4c5b19c799 [ 392.136917][T11945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.156597][T11945] RSP: 002b:00007f4c5c03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.165000][T11945] RAX: ffffffffffffffda RBX: 00007f4c5b416090 RCX: 00007f4c5b19c799 [ 392.172955][T11945] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 392.180919][T11945] RBP: 00007f4c5c03e090 R08: 0000000000000000 R09: 0000000000000000 [ 392.188877][T11945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.196838][T11945] R13: 00007f4c5b416128 R14: 00007f4c5b416090 R15: 00007ffff76e8338 [ 392.204814][T11945] [ 392.333990][T11955] netlink: 'syz.4.1911': attribute type 39 has an invalid length. [ 392.751102][T11965] netlink: 'syz.4.1916': attribute type 28 has an invalid length. [ 392.761616][T11965] netlink: 'syz.4.1916': attribute type 29 has an invalid length. [ 392.781914][T11965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1916'. [ 392.926878][T11975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1918'. [ 393.039967][T11979] FAULT_INJECTION: forcing a failure. [ 393.039967][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.054073][T11979] CPU: 0 PID: 11979 Comm: syz.2.1920 Not tainted syzkaller #0 [ 393.061556][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.071620][T11979] Call Trace: [ 393.074910][T11979] [ 393.077849][T11979] dump_stack_lvl+0x18c/0x250 [ 393.082553][T11979] ? show_regs_print_info+0x20/0x20 [ 393.087782][T11979] ? _printk+0x11d/0x130 [ 393.092044][T11979] should_fail_ex+0x39d/0x4d0 [ 393.096750][T11979] _copy_from_user+0x2f/0xe0 [ 393.101364][T11979] generic_map_update_batch+0x54b/0x810 [ 393.106938][T11979] ? rcu_read_unlock+0xa0/0xa0 [ 393.111721][T11979] ? __fdget+0x180/0x210 [ 393.115986][T11979] ? rcu_read_unlock+0xa0/0xa0 [ 393.120759][T11979] bpf_map_do_batch+0x3d7/0x610 [ 393.125632][T11979] __sys_bpf+0x381/0x890 [ 393.129891][T11979] ? bpf_link_show_fdinfo+0x390/0x390 [ 393.135293][T11979] ? lock_chain_count+0x20/0x20 [ 393.139968][T11981] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1921'. [ 393.140152][T11979] __x64_sys_bpf+0x7c/0x90 [ 393.140175][T11979] do_syscall_64+0x55/0xa0 [ 393.140199][T11979] ? clear_bhb_loop+0x40/0x90 [ 393.149836][T11981] `: renamed from team0 (while UP) [ 393.153599][T11979] ? clear_bhb_loop+0x40/0x90 [ 393.153630][T11979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.153650][T11979] RIP: 0033:0x7fc72a79c799 [ 393.153667][T11979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.153681][T11979] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 393.153702][T11979] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 393.153714][T11979] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 393.153726][T11979] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.153737][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.153748][T11979] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 393.153773][T11979] [ 395.391907][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1928'. [ 395.416236][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1928'. [ 395.591390][T12015] FAULT_INJECTION: forcing a failure. [ 395.591390][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.637698][T12015] CPU: 0 PID: 12015 Comm: syz.2.1931 Not tainted syzkaller #0 [ 395.645217][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.655304][T12015] Call Trace: [ 395.658593][T12015] [ 395.661525][T12015] dump_stack_lvl+0x18c/0x250 [ 395.666226][T12015] ? show_regs_print_info+0x20/0x20 [ 395.671438][T12015] ? load_image+0x400/0x400 [ 395.675952][T12015] ? __might_fault+0xaa/0x120 [ 395.680725][T12015] ? __lock_acquire+0x7d40/0x7d40 [ 395.685770][T12015] should_fail_ex+0x39d/0x4d0 [ 395.690467][T12015] _copy_from_user+0x2f/0xe0 [ 395.695073][T12015] generic_map_update_batch+0x59a/0x810 [ 395.700642][T12015] ? rcu_read_unlock+0xa0/0xa0 [ 395.705424][T12015] ? __fdget+0x180/0x210 [ 395.709681][T12015] ? rcu_read_unlock+0xa0/0xa0 [ 395.714453][T12015] bpf_map_do_batch+0x3d7/0x610 [ 395.719333][T12015] __sys_bpf+0x381/0x890 [ 395.723589][T12015] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.728966][T12015] ? __fdget_pos+0x236/0x330 [ 395.733587][T12015] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.739766][T12015] __x64_sys_bpf+0x7c/0x90 [ 395.744221][T12015] do_syscall_64+0x55/0xa0 [ 395.748656][T12015] ? clear_bhb_loop+0x40/0x90 [ 395.753344][T12015] ? clear_bhb_loop+0x40/0x90 [ 395.758036][T12015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.763941][T12015] RIP: 0033:0x7fc72a79c799 [ 395.768365][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.787989][T12015] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 395.796425][T12015] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 395.804592][T12015] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 395.812575][T12015] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 395.820556][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.828746][T12015] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 395.836838][T12015] [ 396.335473][T12027] bridge0: port 3(team0) entered blocking state [ 396.379600][T12027] bridge0: port 3(team0) entered disabled state [ 396.405049][T12027] team0: entered allmulticast mode [ 396.420057][T12027] team_slave_0: entered allmulticast mode [ 396.445251][T12027] team_slave_1: entered allmulticast mode [ 396.476929][T12027] team0: entered promiscuous mode [ 396.482019][T12027] team_slave_0: entered promiscuous mode [ 396.499819][T12027] team_slave_1: entered promiscuous mode [ 396.509629][T12027] bridge0: port 3(team0) entered blocking state [ 396.516134][T12027] bridge0: port 3(team0) entered forwarding state [ 396.536911][T12030] team0: left allmulticast mode [ 396.568555][T12030] team_slave_0: left allmulticast mode [ 396.583244][T12030] team_slave_1: left allmulticast mode [ 396.591326][T12030] team0: left promiscuous mode [ 396.601161][T12030] team_slave_0: left promiscuous mode [ 396.610028][T12030] team_slave_1: left promiscuous mode [ 396.618328][T12030] bridge0: port 3(team0) entered disabled state [ 397.492406][T12057] validate_nla: 5 callbacks suppressed [ 397.492420][T12057] netlink: 'syz.3.1943': attribute type 28 has an invalid length. [ 397.533219][T12057] netlink: 'syz.3.1943': attribute type 29 has an invalid length. [ 397.543702][T12057] __nla_validate_parse: 1 callbacks suppressed [ 397.543716][T12057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1943'. [ 398.749494][T12053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1942'. [ 398.869321][T12060] FAULT_INJECTION: forcing a failure. [ 398.869321][T12060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.895931][T12060] CPU: 0 PID: 12060 Comm: syz.4.1944 Not tainted syzkaller #0 [ 398.903451][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.913513][T12060] Call Trace: [ 398.916807][T12060] [ 398.919753][T12060] dump_stack_lvl+0x18c/0x250 [ 398.924466][T12060] ? show_regs_print_info+0x20/0x20 [ 398.929697][T12060] ? load_image+0x400/0x400 [ 398.934224][T12060] ? __might_fault+0xaa/0x120 [ 398.938917][T12060] ? __lock_acquire+0x7d40/0x7d40 [ 398.943974][T12060] should_fail_ex+0x39d/0x4d0 [ 398.948686][T12060] _copy_from_user+0x2f/0xe0 [ 398.953301][T12060] generic_map_update_batch+0x54b/0x810 [ 398.958884][T12060] ? rcu_read_unlock+0xa0/0xa0 [ 398.963753][T12060] ? __fdget+0x180/0x210 [ 398.968018][T12060] ? rcu_read_unlock+0xa0/0xa0 [ 398.972791][T12060] bpf_map_do_batch+0x3d7/0x610 [ 398.977660][T12060] __sys_bpf+0x381/0x890 [ 398.981918][T12060] ? bpf_link_show_fdinfo+0x390/0x390 [ 398.987408][T12060] ? lock_chain_count+0x20/0x20 [ 398.992288][T12060] __x64_sys_bpf+0x7c/0x90 [ 398.996748][T12060] do_syscall_64+0x55/0xa0 [ 399.001186][T12060] ? clear_bhb_loop+0x40/0x90 [ 399.005898][T12060] ? clear_bhb_loop+0x40/0x90 [ 399.010645][T12060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.016562][T12060] RIP: 0033:0x7f542cf9c799 [ 399.020974][T12060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.040592][T12060] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 399.049000][T12060] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 399.056965][T12060] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 399.064927][T12060] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 399.072886][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.080850][T12060] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 399.088905][T12060] [ 399.989829][T12073] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1950'. [ 400.159939][T12073] netlink: 'syz.2.1950': attribute type 39 has an invalid length. [ 401.921118][T12082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1954'. [ 402.301114][T12085] netlink: 'syz.4.1955': attribute type 39 has an invalid length. [ 403.064099][T12092] FAULT_INJECTION: forcing a failure. [ 403.064099][T12092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.130195][T12091] netlink: 'syz.3.1957': attribute type 3 has an invalid length. [ 403.160370][T12092] CPU: 0 PID: 12092 Comm: syz.4.1958 Not tainted syzkaller #0 [ 403.167900][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.177987][T12092] Call Trace: [ 403.181296][T12092] [ 403.184261][T12092] dump_stack_lvl+0x18c/0x250 [ 403.188989][T12092] ? show_regs_print_info+0x20/0x20 [ 403.194230][T12092] ? load_image+0x400/0x400 [ 403.198790][T12092] ? __might_fault+0xaa/0x120 [ 403.203510][T12092] ? __lock_acquire+0x7d40/0x7d40 [ 403.208594][T12092] should_fail_ex+0x39d/0x4d0 [ 403.213328][T12092] _copy_from_user+0x2f/0xe0 [ 403.217962][T12092] generic_map_update_batch+0x59a/0x810 [ 403.223586][T12092] ? rcu_read_unlock+0xa0/0xa0 [ 403.228416][T12092] ? __fdget+0x180/0x210 [ 403.232715][T12092] ? rcu_read_unlock+0xa0/0xa0 [ 403.237694][T12092] bpf_map_do_batch+0x3d7/0x610 [ 403.242620][T12092] __sys_bpf+0x381/0x890 [ 403.246912][T12092] ? bpf_link_show_fdinfo+0x390/0x390 [ 403.252370][T12092] ? lock_chain_count+0x20/0x20 [ 403.257287][T12092] __x64_sys_bpf+0x7c/0x90 [ 403.261748][T12092] do_syscall_64+0x55/0xa0 [ 403.266213][T12092] ? clear_bhb_loop+0x40/0x90 [ 403.270926][T12092] ? clear_bhb_loop+0x40/0x90 [ 403.275730][T12092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.281694][T12092] RIP: 0033:0x7f542cf9c799 [ 403.286155][T12092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.305813][T12092] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.314282][T12092] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 403.322302][T12092] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 403.330416][T12092] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 403.338426][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.346430][T12092] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 403.354495][T12092] [ 403.373323][T12091] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1957'. [ 403.821299][T12103] netlink: 'syz.2.1961': attribute type 10 has an invalid length. [ 403.849418][T12103] bond0: (slave bond_slave_0): Releasing backup interface [ 403.872170][T12103] bond_slave_0: left promiscuous mode [ 404.257034][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1965'. [ 404.432600][T12118] FAULT_INJECTION: forcing a failure. [ 404.432600][T12118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.451672][T12118] CPU: 1 PID: 12118 Comm: syz.3.1967 Not tainted syzkaller #0 [ 404.459168][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 404.469236][T12118] Call Trace: [ 404.472510][T12118] [ 404.475440][T12118] dump_stack_lvl+0x18c/0x250 [ 404.480118][T12118] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 404.486269][T12118] ? show_regs_print_info+0x20/0x20 [ 404.491473][T12118] ? load_image+0x400/0x400 [ 404.495998][T12118] should_fail_ex+0x39d/0x4d0 [ 404.500678][T12118] _copy_from_user+0x2f/0xe0 [ 404.505265][T12118] generic_map_update_batch+0x54b/0x810 [ 404.510815][T12118] ? rcu_read_unlock+0xa0/0xa0 [ 404.515671][T12118] ? __fdget+0x180/0x210 [ 404.519913][T12118] ? rcu_read_unlock+0xa0/0xa0 [ 404.524666][T12118] bpf_map_do_batch+0x3d7/0x610 [ 404.529517][T12118] __sys_bpf+0x381/0x890 [ 404.533773][T12118] ? bpf_link_show_fdinfo+0x390/0x390 [ 404.539152][T12118] ? lock_chain_count+0x20/0x20 [ 404.544102][T12118] __x64_sys_bpf+0x7c/0x90 [ 404.548597][T12118] do_syscall_64+0x55/0xa0 [ 404.553008][T12118] ? clear_bhb_loop+0x40/0x90 [ 404.557678][T12118] ? clear_bhb_loop+0x40/0x90 [ 404.562347][T12118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.568229][T12118] RIP: 0033:0x7f6d5e19c799 [ 404.572636][T12118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.592250][T12118] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.600746][T12118] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 404.608710][T12118] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 404.616672][T12118] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 404.624632][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.632594][T12118] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 404.640574][T12118] [ 404.790018][T12123] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1968'. [ 405.292845][T12148] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1974'. [ 405.484471][T12150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1976'. [ 405.969526][ T9752] tipc: Subscription rejected, illegal request [ 405.983750][T12163] FAULT_INJECTION: forcing a failure. [ 405.983750][T12163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.085130][T12163] CPU: 0 PID: 12163 Comm: syz.2.1980 Not tainted syzkaller #0 [ 406.092639][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.102712][T12163] Call Trace: [ 406.106006][T12163] [ 406.108946][T12163] dump_stack_lvl+0x18c/0x250 [ 406.113649][T12163] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.119836][T12163] ? show_regs_print_info+0x20/0x20 [ 406.125068][T12163] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.131263][T12163] should_fail_ex+0x39d/0x4d0 [ 406.135992][T12163] _copy_from_user+0x2f/0xe0 [ 406.140709][T12163] generic_map_update_batch+0x59a/0x810 [ 406.146281][T12163] ? rcu_read_unlock+0xa0/0xa0 [ 406.150382][T12164] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 406.151096][T12163] ? __fdget+0x180/0x210 [ 406.151126][T12163] ? rcu_read_unlock+0xa0/0xa0 [ 406.151142][T12163] bpf_map_do_batch+0x3d7/0x610 [ 406.173034][T12163] __sys_bpf+0x381/0x890 [ 406.177296][T12163] ? bpf_link_show_fdinfo+0x390/0x390 [ 406.182705][T12163] ? lock_chain_count+0x20/0x20 [ 406.187606][T12163] __x64_sys_bpf+0x7c/0x90 [ 406.192046][T12163] do_syscall_64+0x55/0xa0 [ 406.196482][T12163] ? clear_bhb_loop+0x40/0x90 [ 406.201194][T12163] ? clear_bhb_loop+0x40/0x90 [ 406.206074][T12163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.211989][T12163] RIP: 0033:0x7fc72a79c799 [ 406.216421][T12163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.236045][T12163] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.244490][T12163] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 406.252475][T12163] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 406.260442][T12163] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 406.268411][T12163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.276464][T12163] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 406.284443][T12163] [ 406.389413][T12164] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 406.426877][T12170] netlink: 'syz.3.1981': attribute type 29 has an invalid length. [ 406.616305][T12175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1983'. [ 406.998456][T12185] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1987'. [ 407.499859][T12193] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 407.704979][T12193] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1989'. [ 407.714327][T12193] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1989'. [ 407.727008][T12196] netlink: 'syz.2.1988': attribute type 28 has an invalid length. [ 407.744981][T12196] netlink: 'syz.2.1988': attribute type 29 has an invalid length. [ 407.773336][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1988'. [ 409.033228][T11359] tipc: Subscription rejected, illegal request [ 409.331746][T12215] FAULT_INJECTION: forcing a failure. [ 409.331746][T12215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.387961][T12215] CPU: 1 PID: 12215 Comm: syz.4.1994 Not tainted syzkaller #0 [ 409.395501][T12215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.405601][T12215] Call Trace: [ 409.408928][T12215] [ 409.411909][T12215] dump_stack_lvl+0x18c/0x250 [ 409.416635][T12215] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 409.422829][T12215] ? show_regs_print_info+0x20/0x20 [ 409.428078][T12215] ? load_image+0x400/0x400 [ 409.432669][T12215] should_fail_ex+0x39d/0x4d0 [ 409.437419][T12215] _copy_from_user+0x2f/0xe0 [ 409.442061][T12215] generic_map_update_batch+0x54b/0x810 [ 409.447681][T12215] ? rcu_read_unlock+0xa0/0xa0 [ 409.452496][T12215] ? __fdget+0x180/0x210 [ 409.456967][T12215] ? rcu_read_unlock+0xa0/0xa0 [ 409.461776][T12215] bpf_map_do_batch+0x3d7/0x610 [ 409.466757][T12215] __sys_bpf+0x381/0x890 [ 409.471015][T12215] ? bpf_link_show_fdinfo+0x390/0x390 [ 409.476424][T12215] ? lock_chain_count+0x20/0x20 [ 409.481299][T12215] __x64_sys_bpf+0x7c/0x90 [ 409.485728][T12215] do_syscall_64+0x55/0xa0 [ 409.490151][T12215] ? clear_bhb_loop+0x40/0x90 [ 409.494842][T12215] ? clear_bhb_loop+0x40/0x90 [ 409.499542][T12215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.505440][T12215] RIP: 0033:0x7f542cf9c799 [ 409.509860][T12215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.529481][T12215] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.537905][T12215] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 409.545911][T12215] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 409.553886][T12215] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 409.561860][T12215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.569832][T12215] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 409.577853][T12215] [ 409.959641][T12219] netlink: 'syz.3.1995': attribute type 10 has an invalid length. [ 409.969183][T12219] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1995'. [ 409.983590][T12219] hsr0: entered promiscuous mode [ 409.992824][T12219] bridge0: port 3(hsr0) entered blocking state [ 410.005313][T12219] bridge0: port 3(hsr0) entered disabled state [ 410.020205][T12219] hsr0: entered allmulticast mode [ 410.029037][T12219] hsr_slave_0: entered allmulticast mode [ 410.041878][T12219] hsr_slave_1: entered allmulticast mode [ 410.090048][T12219] bridge0: port 3(hsr0) entered blocking state [ 410.098014][T12219] bridge0: port 3(hsr0) entered forwarding state [ 410.731122][T12225] netlink: 'syz.3.1999': attribute type 9 has an invalid length. [ 410.752252][T12225] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1999'. [ 410.770974][T12229] FAULT_INJECTION: forcing a failure. [ 410.770974][T12229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.793332][T12229] CPU: 0 PID: 12229 Comm: syz.4.2006 Not tainted syzkaller #0 [ 410.800845][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.811018][T12229] Call Trace: [ 410.814312][T12229] [ 410.817254][T12229] dump_stack_lvl+0x18c/0x250 [ 410.821964][T12229] ? show_regs_print_info+0x20/0x20 [ 410.827187][T12229] ? load_image+0x400/0x400 [ 410.831728][T12229] ? __might_fault+0xaa/0x120 [ 410.836420][T12229] ? __lock_acquire+0x7d40/0x7d40 [ 410.841470][T12229] should_fail_ex+0x39d/0x4d0 [ 410.846174][T12229] _copy_from_user+0x2f/0xe0 [ 410.850789][T12229] generic_map_update_batch+0x59a/0x810 [ 410.856361][T12229] ? rcu_read_unlock+0xa0/0xa0 [ 410.861148][T12229] ? __fdget+0x180/0x210 [ 410.865413][T12229] ? rcu_read_unlock+0xa0/0xa0 [ 410.870184][T12229] bpf_map_do_batch+0x3d7/0x610 [ 410.875047][T12229] __sys_bpf+0x381/0x890 [ 410.879295][T12229] ? bpf_link_show_fdinfo+0x390/0x390 [ 410.884677][T12229] ? lock_chain_count+0x20/0x20 [ 410.889521][T12229] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 410.895503][T12229] __x64_sys_bpf+0x7c/0x90 [ 410.899921][T12229] do_syscall_64+0x55/0xa0 [ 410.904347][T12229] ? clear_bhb_loop+0x40/0x90 [ 410.909021][T12229] ? clear_bhb_loop+0x40/0x90 [ 410.913690][T12229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.919582][T12229] RIP: 0033:0x7f542cf9c799 [ 410.923988][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.943585][T12229] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 410.952019][T12229] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 410.959985][T12229] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 410.967954][T12229] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 410.975918][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.983878][T12229] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 410.991853][T12229] [ 411.049033][T12224] delete_channel: no stack [ 411.302612][T12245] FAULT_INJECTION: forcing a failure. [ 411.302612][T12245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.327567][T12245] CPU: 0 PID: 12245 Comm: syz.3.2012 Not tainted syzkaller #0 [ 411.335080][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.345171][T12245] Call Trace: [ 411.348559][T12245] [ 411.351504][T12245] dump_stack_lvl+0x18c/0x250 [ 411.356201][T12245] ? show_regs_print_info+0x20/0x20 [ 411.361417][T12245] ? load_image+0x400/0x400 [ 411.365940][T12245] ? __might_fault+0xaa/0x120 [ 411.370633][T12245] ? __lock_acquire+0x7d40/0x7d40 [ 411.375693][T12245] should_fail_ex+0x39d/0x4d0 [ 411.380401][T12245] _copy_from_user+0x2f/0xe0 [ 411.385011][T12245] generic_map_update_batch+0x54b/0x810 [ 411.390586][T12245] ? rcu_read_unlock+0xa0/0xa0 [ 411.395388][T12245] ? __fdget+0x180/0x210 [ 411.399656][T12245] ? rcu_read_unlock+0xa0/0xa0 [ 411.404427][T12245] bpf_map_do_batch+0x3d7/0x610 [ 411.409297][T12245] __sys_bpf+0x381/0x890 [ 411.413549][T12245] ? bpf_link_show_fdinfo+0x390/0x390 [ 411.418940][T12245] ? lock_chain_count+0x20/0x20 [ 411.423801][T12245] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 411.429793][T12245] __x64_sys_bpf+0x7c/0x90 [ 411.434212][T12245] do_syscall_64+0x55/0xa0 [ 411.438637][T12245] ? clear_bhb_loop+0x40/0x90 [ 411.443321][T12245] ? clear_bhb_loop+0x40/0x90 [ 411.448011][T12245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.453907][T12245] RIP: 0033:0x7f6d5e19c799 [ 411.458329][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.478210][T12245] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.486645][T12245] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 411.494620][T12245] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 411.502589][T12245] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 411.510573][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.518651][T12245] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 411.526823][T12245] [ 411.533551][T12241] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 411.541022][T12241] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 411.559483][T12248] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 411.566661][T12248] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 412.185476][ T9874] tipc: Subscription rejected, illegal request [ 412.475775][T12263] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2009'. [ 412.514480][T12263] netlink: 'syz.2.2009': attribute type 3 has an invalid length. [ 412.552184][T12263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2009'. [ 412.563111][T12261] netlink: 'syz.1.2008': attribute type 28 has an invalid length. [ 412.575861][T12261] netlink: 'syz.1.2008': attribute type 29 has an invalid length. [ 412.607631][T12261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2008'. [ 412.660498][T12269] netlink: 32067 bytes leftover after parsing attributes in process `syz.4.2010'. [ 412.689279][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 412.776177][T12276] netlink: 'syz.1.2013': attribute type 46 has an invalid length. [ 412.802310][T12276] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2013'. [ 412.921066][T12279] FAULT_INJECTION: forcing a failure. [ 412.921066][T12279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.961683][T12279] CPU: 1 PID: 12279 Comm: syz.4.2015 Not tainted syzkaller #0 [ 412.969197][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.979267][T12279] Call Trace: [ 412.982557][T12279] [ 412.985486][T12279] dump_stack_lvl+0x18c/0x250 [ 412.990258][T12279] ? show_regs_print_info+0x20/0x20 [ 412.995456][T12279] ? load_image+0x400/0x400 [ 412.999953][T12279] ? __might_fault+0xaa/0x120 [ 413.004619][T12279] ? __lock_acquire+0x7d40/0x7d40 [ 413.009633][T12279] ? __phys_addr+0x99/0x170 [ 413.014134][T12279] should_fail_ex+0x39d/0x4d0 [ 413.018815][T12279] _copy_from_user+0x2f/0xe0 [ 413.023402][T12279] generic_map_update_batch+0x59a/0x810 [ 413.028956][T12279] ? rcu_read_unlock+0xa0/0xa0 [ 413.033806][T12279] ? __fdget+0x180/0x210 [ 413.038043][T12279] ? rcu_read_unlock+0xa0/0xa0 [ 413.042792][T12279] bpf_map_do_batch+0x3d7/0x610 [ 413.047645][T12279] __sys_bpf+0x381/0x890 [ 413.051884][T12279] ? bpf_link_show_fdinfo+0x390/0x390 [ 413.057265][T12279] ? lock_chain_count+0x20/0x20 [ 413.062109][T12279] __x64_sys_bpf+0x7c/0x90 [ 413.066516][T12279] do_syscall_64+0x55/0xa0 [ 413.070925][T12279] ? clear_bhb_loop+0x40/0x90 [ 413.075593][T12279] ? clear_bhb_loop+0x40/0x90 [ 413.080264][T12279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.086145][T12279] RIP: 0033:0x7f542cf9c799 [ 413.090556][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.110159][T12279] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 413.118566][T12279] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 413.126526][T12279] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 413.134484][T12279] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 413.142441][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.150400][T12279] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 413.158376][T12279] [ 413.388092][T11359] tipc: Subscription rejected, illegal request [ 413.677726][T12301] netlink: 'syz.2.2021': attribute type 28 has an invalid length. [ 413.685959][T12301] netlink: 'syz.2.2021': attribute type 29 has an invalid length. [ 413.695334][T12301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2021'. [ 414.565113][T12313] netlink: 'syz.3.2022': attribute type 3 has an invalid length. [ 414.573006][T12313] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2022'. [ 415.240276][T12320] __nla_validate_parse: 1 callbacks suppressed [ 415.240298][T12320] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2024'. [ 415.457664][T12326] FAULT_INJECTION: forcing a failure. [ 415.457664][T12326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.494971][T12326] CPU: 1 PID: 12326 Comm: syz.4.2026 Not tainted syzkaller #0 [ 415.502480][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.512559][T12326] Call Trace: [ 415.515920][T12326] [ 415.518858][T12326] dump_stack_lvl+0x18c/0x250 [ 415.523556][T12326] ? show_regs_print_info+0x20/0x20 [ 415.528773][T12326] ? load_image+0x400/0x400 [ 415.533329][T12326] ? __might_fault+0xaa/0x120 [ 415.538015][T12326] ? __lock_acquire+0x7d40/0x7d40 [ 415.543048][T12326] should_fail_ex+0x39d/0x4d0 [ 415.547749][T12326] _copy_from_user+0x2f/0xe0 [ 415.552351][T12326] generic_map_update_batch+0x54b/0x810 [ 415.557912][T12326] ? rcu_read_unlock+0xa0/0xa0 [ 415.562696][T12326] ? __fdget+0x180/0x210 [ 415.566950][T12326] ? rcu_read_unlock+0xa0/0xa0 [ 415.571716][T12326] bpf_map_do_batch+0x3d7/0x610 [ 415.576580][T12326] __sys_bpf+0x381/0x890 [ 415.580832][T12326] ? bpf_link_show_fdinfo+0x390/0x390 [ 415.586227][T12326] ? lock_chain_count+0x20/0x20 [ 415.591098][T12326] __x64_sys_bpf+0x7c/0x90 [ 415.595517][T12326] do_syscall_64+0x55/0xa0 [ 415.599944][T12326] ? clear_bhb_loop+0x40/0x90 [ 415.604628][T12326] ? clear_bhb_loop+0x40/0x90 [ 415.609315][T12326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.615216][T12326] RIP: 0033:0x7f542cf9c799 [ 415.619639][T12326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.639255][T12326] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.647678][T12326] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 415.655655][T12326] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 415.663631][T12326] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 415.671612][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.679688][T12326] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 415.687693][T12326] [ 415.893639][T12333] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 415.905003][T12333] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 416.479327][ T9864] tipc: Subscription rejected, illegal request [ 417.582088][T12358] FAULT_INJECTION: forcing a failure. [ 417.582088][T12358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.655630][T12358] CPU: 0 PID: 12358 Comm: syz.4.2037 Not tainted syzkaller #0 [ 417.663137][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.673212][T12358] Call Trace: [ 417.676513][T12358] [ 417.679455][T12358] dump_stack_lvl+0x18c/0x250 [ 417.684164][T12358] ? show_regs_print_info+0x20/0x20 [ 417.689391][T12358] ? load_image+0x400/0x400 [ 417.693927][T12358] ? __might_fault+0xaa/0x120 [ 417.698625][T12358] ? __lock_acquire+0x7d40/0x7d40 [ 417.703676][T12358] should_fail_ex+0x39d/0x4d0 [ 417.708383][T12358] _copy_from_user+0x2f/0xe0 [ 417.713019][T12358] generic_map_update_batch+0x59a/0x810 [ 417.718592][T12358] ? rcu_read_unlock+0xa0/0xa0 [ 417.723373][T12358] ? __fdget+0x180/0x210 [ 417.727634][T12358] ? rcu_read_unlock+0xa0/0xa0 [ 417.732404][T12358] bpf_map_do_batch+0x3d7/0x610 [ 417.737273][T12358] __sys_bpf+0x381/0x890 [ 417.741520][T12358] ? bpf_link_show_fdinfo+0x390/0x390 [ 417.746911][T12358] ? lock_chain_count+0x20/0x20 [ 417.751784][T12358] __x64_sys_bpf+0x7c/0x90 [ 417.756229][T12358] do_syscall_64+0x55/0xa0 [ 417.760675][T12358] ? clear_bhb_loop+0x40/0x90 [ 417.765367][T12358] ? clear_bhb_loop+0x40/0x90 [ 417.770147][T12358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.776065][T12358] RIP: 0033:0x7f542cf9c799 [ 417.780495][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.800118][T12358] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.808547][T12358] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 417.816534][T12358] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 417.824508][T12358] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 417.832493][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.840472][T12358] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 417.848466][T12358] [ 417.986734][T12361] netlink: 'syz.1.2038': attribute type 7 has an invalid length. [ 418.494006][T12375] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 418.519205][T12375] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2041'. [ 418.548956][T12375] hsr0: entered promiscuous mode [ 418.578890][T12375] bridge0: port 4(hsr0) entered blocking state [ 418.601138][T12375] bridge0: port 4(hsr0) entered disabled state [ 418.610158][T12387] netlink: 'syz.2.2044': attribute type 28 has an invalid length. [ 418.629026][T12375] hsr0: entered allmulticast mode [ 418.645586][T12387] netlink: 'syz.2.2044': attribute type 29 has an invalid length. [ 418.653432][T12387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2044'. [ 418.679550][T12375] hsr_slave_0: entered allmulticast mode [ 418.686344][T12375] hsr_slave_1: entered allmulticast mode [ 418.792568][T12390] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2046'. [ 418.941876][T12392] FAULT_INJECTION: forcing a failure. [ 418.941876][T12392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.975107][T12392] CPU: 1 PID: 12392 Comm: syz.1.2047 Not tainted syzkaller #0 [ 418.982618][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.992687][T12392] Call Trace: [ 418.995981][T12392] [ 418.998922][T12392] dump_stack_lvl+0x18c/0x250 [ 419.003620][T12392] ? show_regs_print_info+0x20/0x20 [ 419.008827][T12392] ? load_image+0x400/0x400 [ 419.013339][T12392] ? __might_fault+0xaa/0x120 [ 419.018015][T12392] ? __lock_acquire+0x7d40/0x7d40 [ 419.023039][T12392] should_fail_ex+0x39d/0x4d0 [ 419.027738][T12392] _copy_from_user+0x2f/0xe0 [ 419.032344][T12392] generic_map_update_batch+0x54b/0x810 [ 419.037925][T12392] ? rcu_read_unlock+0xa0/0xa0 [ 419.042684][T12392] ? __fdget+0x180/0x210 [ 419.046922][T12392] ? rcu_read_unlock+0xa0/0xa0 [ 419.051670][T12392] bpf_map_do_batch+0x3d7/0x610 [ 419.056514][T12392] __sys_bpf+0x381/0x890 [ 419.060745][T12392] ? bpf_link_show_fdinfo+0x390/0x390 [ 419.066209][T12392] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.072382][T12392] __x64_sys_bpf+0x7c/0x90 [ 419.076789][T12392] do_syscall_64+0x55/0xa0 [ 419.081200][T12392] ? clear_bhb_loop+0x40/0x90 [ 419.085864][T12392] ? clear_bhb_loop+0x40/0x90 [ 419.090533][T12392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.096426][T12392] RIP: 0033:0x7f4c5b19c799 [ 419.100840][T12392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.120445][T12392] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.128954][T12392] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 419.136936][T12392] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 419.144914][T12392] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 419.152883][T12392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.160855][T12392] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 419.168835][T12392] [ 419.797322][T12405] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2051'. [ 420.110214][T12413] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2055'. [ 420.314668][T12414] netlink: 'syz.4.2056': attribute type 10 has an invalid length. [ 420.328217][T12414] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2056'. [ 420.343455][T12414] hsr0: entered promiscuous mode [ 420.359950][T12414] bridge0: port 3(hsr0) entered blocking state [ 420.368526][T12414] bridge0: port 3(hsr0) entered disabled state [ 420.386951][T12414] hsr0: entered allmulticast mode [ 420.398283][T12414] hsr_slave_0: entered allmulticast mode [ 420.412025][T12414] hsr_slave_1: entered allmulticast mode [ 420.447766][T12414] bridge0: port 3(hsr0) entered blocking state [ 420.455612][T12414] bridge0: port 3(hsr0) entered forwarding state [ 420.496491][T12425] FAULT_INJECTION: forcing a failure. [ 420.496491][T12425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.538872][T12425] CPU: 0 PID: 12425 Comm: syz.3.2059 Not tainted syzkaller #0 [ 420.546385][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.556457][T12425] Call Trace: [ 420.559741][T12425] [ 420.562678][T12425] dump_stack_lvl+0x18c/0x250 [ 420.567388][T12425] ? show_regs_print_info+0x20/0x20 [ 420.572609][T12425] ? load_image+0x400/0x400 [ 420.577137][T12425] ? __might_fault+0xaa/0x120 [ 420.581827][T12425] ? __lock_acquire+0x7d40/0x7d40 [ 420.586884][T12425] should_fail_ex+0x39d/0x4d0 [ 420.591594][T12425] _copy_from_user+0x2f/0xe0 [ 420.596200][T12425] generic_map_update_batch+0x59a/0x810 [ 420.601771][T12425] ? rcu_read_unlock+0xa0/0xa0 [ 420.606531][T12425] ? bpf_map_do_batch+0x382/0x610 [ 420.611551][T12425] ? rcu_read_unlock+0xa0/0xa0 [ 420.616302][T12425] bpf_map_do_batch+0x3d7/0x610 [ 420.621180][T12425] __sys_bpf+0x381/0x890 [ 420.625429][T12425] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.630811][T12425] ? lock_chain_count+0x20/0x20 [ 420.635660][T12425] __x64_sys_bpf+0x7c/0x90 [ 420.640068][T12425] do_syscall_64+0x55/0xa0 [ 420.644480][T12425] ? clear_bhb_loop+0x40/0x90 [ 420.649154][T12425] ? clear_bhb_loop+0x40/0x90 [ 420.653833][T12425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.659742][T12425] RIP: 0033:0x7f6d5e19c799 [ 420.664147][T12425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.683745][T12425] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.692147][T12425] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 420.700106][T12425] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 420.708153][T12425] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 420.716110][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.724068][T12425] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 420.732040][T12425] [ 421.081861][T12441] netlink: 'syz.1.2064': attribute type 10 has an invalid length. [ 421.093720][T12441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2064'. [ 421.500211][T12449] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2066'. [ 422.836855][T12480] netlink: 'syz.1.2075': attribute type 28 has an invalid length. [ 422.865065][T12480] netlink: 'syz.1.2075': attribute type 29 has an invalid length. [ 422.873066][T12480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2075'. [ 422.993814][T12483] netlink: 'syz.3.2076': attribute type 3 has an invalid length. [ 423.023665][T12483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2076'. [ 423.054660][T12488] netlink: 'syz.3.2076': attribute type 19 has an invalid length. [ 423.325732][ T9875] tipc: Subscription rejected, illegal request [ 426.128594][T12507] netlink: 'syz.2.2082': attribute type 10 has an invalid length. [ 426.160988][T12507] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2082'. [ 426.280675][T12507] hsr0: entered promiscuous mode [ 426.684922][T12516] netlink: 'syz.2.2085': attribute type 10 has an invalid length. [ 426.692995][T12516] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2085'. [ 426.785859][T12523] FAULT_INJECTION: forcing a failure. [ 426.785859][T12523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.805215][T12523] CPU: 1 PID: 12523 Comm: syz.4.2086 Not tainted syzkaller #0 [ 426.812734][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.822796][T12523] Call Trace: [ 426.826698][T12523] [ 426.829638][T12523] dump_stack_lvl+0x18c/0x250 [ 426.834383][T12523] ? show_regs_print_info+0x20/0x20 [ 426.839608][T12523] ? load_image+0x400/0x400 [ 426.844139][T12523] ? __might_fault+0xaa/0x120 [ 426.848832][T12523] ? __lock_acquire+0x7d40/0x7d40 [ 426.853882][T12523] should_fail_ex+0x39d/0x4d0 [ 426.858589][T12523] _copy_from_user+0x2f/0xe0 [ 426.863200][T12523] generic_map_update_batch+0x59a/0x810 [ 426.868771][T12523] ? rcu_read_unlock+0xa0/0xa0 [ 426.873639][T12523] ? __fdget+0x180/0x210 [ 426.877897][T12523] ? rcu_read_unlock+0xa0/0xa0 [ 426.882683][T12523] bpf_map_do_batch+0x3d7/0x610 [ 426.887554][T12523] __sys_bpf+0x381/0x890 [ 426.891810][T12523] ? bpf_link_show_fdinfo+0x390/0x390 [ 426.897206][T12523] ? lock_chain_count+0x20/0x20 [ 426.902068][T12523] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 426.908076][T12523] __x64_sys_bpf+0x7c/0x90 [ 426.912545][T12523] do_syscall_64+0x55/0xa0 [ 426.916997][T12523] ? clear_bhb_loop+0x40/0x90 [ 426.921702][T12523] ? clear_bhb_loop+0x40/0x90 [ 426.926496][T12523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.932408][T12523] RIP: 0033:0x7f542cf9c799 [ 426.936840][T12523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.956468][T12523] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.964906][T12523] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 426.972893][T12523] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 426.980888][T12523] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 426.988671][ T9874] tipc: Subscription rejected, illegal request [ 426.988862][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.003178][T12523] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 427.011190][T12523] [ 427.491889][T12545] netlink: 'syz.3.2092': attribute type 28 has an invalid length. [ 427.499891][T12545] netlink: 'syz.3.2092': attribute type 29 has an invalid length. [ 427.509799][T12545] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2092'. [ 427.717349][T12546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2093'. [ 427.973655][T12556] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2097'. [ 428.096410][ T9874] tipc: Subscription rejected, illegal request [ 428.109486][T12560] netlink: 'syz.2.2098': attribute type 21 has an invalid length. [ 428.117982][T12560] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2098'. [ 428.561464][T12564] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.2100'. [ 429.302273][T12578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2104'. [ 429.628759][T12582] netlink: 'syz.4.2105': attribute type 39 has an invalid length. [ 429.690987][T11359] tipc: Subscription rejected, illegal request [ 429.760022][T12587] netlink: 'syz.1.2107': attribute type 39 has an invalid length. [ 430.225877][T12603] FAULT_INJECTION: forcing a failure. [ 430.225877][T12603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.259101][T12603] CPU: 1 PID: 12603 Comm: syz.4.2113 Not tainted syzkaller #0 [ 430.266612][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.276680][T12603] Call Trace: [ 430.279973][T12603] [ 430.282910][T12603] dump_stack_lvl+0x18c/0x250 [ 430.287612][T12603] ? show_regs_print_info+0x20/0x20 [ 430.292845][T12603] ? load_image+0x400/0x400 [ 430.297370][T12603] ? __might_fault+0xaa/0x120 [ 430.302068][T12603] ? __lock_acquire+0x7d40/0x7d40 [ 430.307123][T12603] should_fail_ex+0x39d/0x4d0 [ 430.311832][T12603] _copy_from_user+0x2f/0xe0 [ 430.316541][T12603] generic_map_update_batch+0x59a/0x810 [ 430.322117][T12603] ? rcu_read_unlock+0xa0/0xa0 [ 430.326901][T12603] ? __fdget+0x180/0x210 [ 430.331162][T12603] ? rcu_read_unlock+0xa0/0xa0 [ 430.335934][T12603] bpf_map_do_batch+0x3d7/0x610 [ 430.340805][T12603] __sys_bpf+0x381/0x890 [ 430.345062][T12603] ? bpf_link_show_fdinfo+0x390/0x390 [ 430.350470][T12603] ? lock_chain_count+0x20/0x20 [ 430.355338][T12603] __x64_sys_bpf+0x7c/0x90 [ 430.359768][T12603] do_syscall_64+0x55/0xa0 [ 430.364204][T12603] ? clear_bhb_loop+0x40/0x90 [ 430.368903][T12603] ? clear_bhb_loop+0x40/0x90 [ 430.373662][T12603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.379583][T12603] RIP: 0033:0x7f542cf9c799 [ 430.384016][T12603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.403646][T12603] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.412090][T12603] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 430.420080][T12603] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 430.428067][T12603] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 430.436055][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.444043][T12603] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 430.452051][T12603] [ 431.040996][T12613] netlink: 'syz.1.2117': attribute type 3 has an invalid length. [ 431.072346][T12613] netlink: 'syz.1.2117': attribute type 5 has an invalid length. [ 431.169007][T12613] netlink: 12431 bytes leftover after parsing attributes in process `syz.1.2117'. [ 431.181609][T12615] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2116'. [ 431.290214][T12618] netlink: 'syz.2.2118': attribute type 39 has an invalid length. [ 431.680637][T12625] netlink: 'syz.4.2120': attribute type 39 has an invalid length. [ 431.764090][T12628] netlink: 'syz.2.2122': attribute type 28 has an invalid length. [ 431.773759][T12628] netlink: 'syz.2.2122': attribute type 29 has an invalid length. [ 431.815128][T12628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2122'. [ 431.946024][T12633] FAULT_INJECTION: forcing a failure. [ 431.946024][T12633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.982486][T12633] CPU: 0 PID: 12633 Comm: syz.3.2125 Not tainted syzkaller #0 [ 431.989985][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.000062][T12633] Call Trace: [ 432.003359][T12633] [ 432.006306][T12633] dump_stack_lvl+0x18c/0x250 [ 432.011014][T12633] ? show_regs_print_info+0x20/0x20 [ 432.012004][T12635] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2126'. [ 432.016218][T12633] ? load_image+0x400/0x400 [ 432.016247][T12633] ? __might_fault+0xaa/0x120 [ 432.016265][T12633] ? __lock_acquire+0x7d40/0x7d40 [ 432.016289][T12633] should_fail_ex+0x39d/0x4d0 [ 432.016318][T12633] _copy_from_user+0x2f/0xe0 [ 432.016340][T12633] generic_map_update_batch+0x54b/0x810 [ 432.016369][T12633] ? rcu_read_unlock+0xa0/0xa0 [ 432.059359][T12633] ? __fdget+0x180/0x210 [ 432.063632][T12633] ? rcu_read_unlock+0xa0/0xa0 [ 432.068410][T12633] bpf_map_do_batch+0x3d7/0x610 [ 432.073280][T12633] __sys_bpf+0x381/0x890 [ 432.077542][T12633] ? bpf_link_show_fdinfo+0x390/0x390 [ 432.082950][T12633] ? lock_chain_count+0x20/0x20 [ 432.087824][T12633] __x64_sys_bpf+0x7c/0x90 [ 432.092269][T12633] do_syscall_64+0x55/0xa0 [ 432.096712][T12633] ? clear_bhb_loop+0x40/0x90 [ 432.101404][T12633] ? clear_bhb_loop+0x40/0x90 [ 432.106102][T12633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.112021][T12633] RIP: 0033:0x7f6d5e19c799 [ 432.116452][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.136077][T12633] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.144513][T12633] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 432.152503][T12633] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 432.160490][T12633] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 432.168477][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.176465][T12633] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 432.184470][T12633] [ 432.568738][T12648] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2130'. [ 432.711465][T12651] netlink: 'syz.3.2130': attribute type 21 has an invalid length. [ 433.138169][T12661] validate_nla: 1 callbacks suppressed [ 433.138202][T12661] netlink: 'syz.2.2134': attribute type 28 has an invalid length. [ 433.184122][T12661] netlink: 'syz.2.2134': attribute type 29 has an invalid length. [ 433.227931][T12658] netlink: 'syz.3.2133': attribute type 39 has an invalid length. [ 433.237363][T12661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2134'. [ 433.762902][T12674] FAULT_INJECTION: forcing a failure. [ 433.762902][T12674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.788512][T12674] CPU: 0 PID: 12674 Comm: syz.4.2138 Not tainted syzkaller #0 [ 433.796016][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.806100][T12674] Call Trace: [ 433.809387][T12674] [ 433.812328][T12674] dump_stack_lvl+0x18c/0x250 [ 433.817047][T12674] ? show_regs_print_info+0x20/0x20 [ 433.822276][T12674] ? load_image+0x400/0x400 [ 433.826799][T12674] ? __might_fault+0xaa/0x120 [ 433.831492][T12674] ? __lock_acquire+0x7d40/0x7d40 [ 433.836537][T12674] should_fail_ex+0x39d/0x4d0 [ 433.841244][T12674] _copy_from_user+0x2f/0xe0 [ 433.845867][T12674] generic_map_update_batch+0x59a/0x810 [ 433.851451][T12674] ? rcu_read_unlock+0xa0/0xa0 [ 433.856238][T12674] ? __fdget+0x180/0x210 [ 433.860507][T12674] ? rcu_read_unlock+0xa0/0xa0 [ 433.865282][T12674] bpf_map_do_batch+0x3d7/0x610 [ 433.870167][T12674] __sys_bpf+0x381/0x890 [ 433.874508][T12674] ? bpf_link_show_fdinfo+0x390/0x390 [ 433.879901][T12674] ? lock_chain_count+0x20/0x20 [ 433.884765][T12674] __x64_sys_bpf+0x7c/0x90 [ 433.889184][T12674] do_syscall_64+0x55/0xa0 [ 433.893627][T12674] ? clear_bhb_loop+0x40/0x90 [ 433.898323][T12674] ? clear_bhb_loop+0x40/0x90 [ 433.903025][T12674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.908992][T12674] RIP: 0033:0x7f542cf9c799 [ 433.913462][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.933088][T12674] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 433.941515][T12674] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 433.949591][T12674] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 433.958091][T12674] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 433.966198][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.974175][T12674] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 433.982168][T12674] [ 437.696483][T12702] FAULT_INJECTION: forcing a failure. [ 437.696483][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.735093][T12702] CPU: 0 PID: 12702 Comm: syz.3.2149 Not tainted syzkaller #0 [ 437.742768][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.752929][T12702] Call Trace: [ 437.756227][T12702] [ 437.759185][T12702] dump_stack_lvl+0x18c/0x250 [ 437.763897][T12702] ? show_regs_print_info+0x20/0x20 [ 437.769562][T12702] ? load_image+0x400/0x400 [ 437.774108][T12702] ? __might_fault+0xaa/0x120 [ 437.778813][T12702] ? __lock_acquire+0x7d40/0x7d40 [ 437.783855][T12702] should_fail_ex+0x39d/0x4d0 [ 437.788549][T12702] _copy_from_user+0x2f/0xe0 [ 437.793164][T12702] generic_map_update_batch+0x54b/0x810 [ 437.798734][T12702] ? rcu_read_unlock+0xa0/0xa0 [ 437.803574][T12702] ? __fdget+0x180/0x210 [ 437.807820][T12702] ? rcu_read_unlock+0xa0/0xa0 [ 437.812588][T12702] bpf_map_do_batch+0x3d7/0x610 [ 437.817452][T12702] __sys_bpf+0x381/0x890 [ 437.821708][T12702] ? bpf_link_show_fdinfo+0x390/0x390 [ 437.827110][T12702] ? lock_chain_count+0x20/0x20 [ 437.832010][T12702] __x64_sys_bpf+0x7c/0x90 [ 437.836453][T12702] do_syscall_64+0x55/0xa0 [ 437.840888][T12702] ? clear_bhb_loop+0x40/0x90 [ 437.845672][T12702] ? clear_bhb_loop+0x40/0x90 [ 437.850367][T12702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.856279][T12702] RIP: 0033:0x7f6d5e19c799 [ 437.860711][T12702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.880337][T12702] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.888780][T12702] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 437.896770][T12702] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 437.904756][T12702] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 437.912753][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.920741][T12702] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 437.928728][T12702] [ 438.288681][T12715] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2153'. [ 438.873562][T12738] netlink: 'syz.4.2160': attribute type 28 has an invalid length. [ 438.889144][T12738] netlink: 'syz.4.2160': attribute type 29 has an invalid length. [ 438.906109][T12738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2160'. [ 438.910776][T12743] netlink: 'syz.2.2162': attribute type 13 has an invalid length. [ 438.929753][T12743] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2162'. [ 439.077526][T12745] FAULT_INJECTION: forcing a failure. [ 439.077526][T12745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.097931][T12745] CPU: 1 PID: 12745 Comm: syz.2.2163 Not tainted syzkaller #0 [ 439.105418][T12745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.115467][T12745] Call Trace: [ 439.118742][T12745] [ 439.121671][T12745] dump_stack_lvl+0x18c/0x250 [ 439.126347][T12745] ? show_regs_print_info+0x20/0x20 [ 439.131537][T12745] ? load_image+0x400/0x400 [ 439.136031][T12745] ? __might_fault+0xaa/0x120 [ 439.140787][T12745] ? __lock_acquire+0x7d40/0x7d40 [ 439.145804][T12745] should_fail_ex+0x39d/0x4d0 [ 439.150476][T12745] _copy_from_user+0x2f/0xe0 [ 439.155054][T12745] generic_map_update_batch+0x59a/0x810 [ 439.160613][T12745] ? rcu_read_unlock+0xa0/0xa0 [ 439.165368][T12745] ? __fdget+0x180/0x210 [ 439.169602][T12745] ? rcu_read_unlock+0xa0/0xa0 [ 439.174347][T12745] bpf_map_do_batch+0x3d7/0x610 [ 439.179200][T12745] __sys_bpf+0x381/0x890 [ 439.183431][T12745] ? bpf_link_show_fdinfo+0x390/0x390 [ 439.188808][T12745] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.194963][T12745] __x64_sys_bpf+0x7c/0x90 [ 439.199370][T12745] do_syscall_64+0x55/0xa0 [ 439.203805][T12745] ? clear_bhb_loop+0x40/0x90 [ 439.208485][T12745] ? clear_bhb_loop+0x40/0x90 [ 439.213169][T12745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.219062][T12745] RIP: 0033:0x7fc72a79c799 [ 439.223473][T12745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.243164][T12745] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.251568][T12745] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 439.259614][T12745] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 439.267571][T12745] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 439.275529][T12745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.283484][T12745] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 439.291539][T12745] [ 440.192182][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.198797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.029177][T12777] FAULT_INJECTION: forcing a failure. [ 441.029177][T12777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.060691][T12777] CPU: 0 PID: 12777 Comm: syz.2.2174 Not tainted syzkaller #0 [ 441.068198][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.078265][T12777] Call Trace: [ 441.081556][T12777] [ 441.084497][T12777] dump_stack_lvl+0x18c/0x250 [ 441.089194][T12777] ? show_regs_print_info+0x20/0x20 [ 441.094407][T12777] ? load_image+0x400/0x400 [ 441.098926][T12777] ? __might_fault+0xaa/0x120 [ 441.103612][T12777] ? __lock_acquire+0x7d40/0x7d40 [ 441.108651][T12777] should_fail_ex+0x39d/0x4d0 [ 441.113346][T12777] _copy_from_user+0x2f/0xe0 [ 441.117950][T12777] generic_map_update_batch+0x54b/0x810 [ 441.123517][T12777] ? rcu_read_unlock+0xa0/0xa0 [ 441.128291][T12777] ? __fdget+0x180/0x210 [ 441.132553][T12777] ? rcu_read_unlock+0xa0/0xa0 [ 441.137326][T12777] bpf_map_do_batch+0x3d7/0x610 [ 441.142191][T12777] __sys_bpf+0x381/0x890 [ 441.146447][T12777] ? bpf_link_show_fdinfo+0x390/0x390 [ 441.151842][T12777] ? lock_chain_count+0x20/0x20 [ 441.156709][T12777] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 441.162719][T12777] __x64_sys_bpf+0x7c/0x90 [ 441.167148][T12777] do_syscall_64+0x55/0xa0 [ 441.171579][T12777] ? clear_bhb_loop+0x40/0x90 [ 441.176269][T12777] ? clear_bhb_loop+0x40/0x90 [ 441.180956][T12777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.186867][T12777] RIP: 0033:0x7fc72a79c799 [ 441.191297][T12777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.210916][T12777] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 441.219358][T12777] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 441.227353][T12777] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 441.235341][T12777] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 441.243325][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 441.251311][T12777] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 441.259310][T12777] [ 441.287782][T12779] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2175'. [ 444.660268][T12791] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 444.858091][T12791] team0 (unregistering): Port device C removed [ 444.893213][T12791] team0 (unregistering): Port device team_slave_1 removed [ 445.002722][T12807] netlink: 'syz.2.2184': attribute type 13 has an invalid length. [ 445.011745][T12807] netlink: 'syz.2.2184': attribute type 58 has an invalid length. [ 445.025550][T12807] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2184'. [ 445.039182][T12809] FAULT_INJECTION: forcing a failure. [ 445.039182][T12809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.063639][T12809] CPU: 0 PID: 12809 Comm: syz.4.2185 Not tainted syzkaller #0 [ 445.071139][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.081207][T12809] Call Trace: [ 445.084495][T12809] [ 445.087434][T12809] dump_stack_lvl+0x18c/0x250 [ 445.092145][T12809] ? show_regs_print_info+0x20/0x20 [ 445.097361][T12809] ? load_image+0x400/0x400 [ 445.101883][T12809] ? __might_fault+0xaa/0x120 [ 445.106581][T12809] ? __lock_acquire+0x7d40/0x7d40 [ 445.111629][T12809] should_fail_ex+0x39d/0x4d0 [ 445.116332][T12809] _copy_from_user+0x2f/0xe0 [ 445.120925][T12809] generic_map_update_batch+0x59a/0x810 [ 445.126737][T12809] ? rcu_read_unlock+0xa0/0xa0 [ 445.131505][T12809] ? __fdget+0x180/0x210 [ 445.135747][T12809] ? rcu_read_unlock+0xa0/0xa0 [ 445.140505][T12809] bpf_map_do_batch+0x3d7/0x610 [ 445.145348][T12809] __sys_bpf+0x381/0x890 [ 445.149579][T12809] ? bpf_link_show_fdinfo+0x390/0x390 [ 445.154948][T12809] ? lock_chain_count+0x20/0x20 [ 445.159791][T12809] __x64_sys_bpf+0x7c/0x90 [ 445.164200][T12809] do_syscall_64+0x55/0xa0 [ 445.168611][T12809] ? clear_bhb_loop+0x40/0x90 [ 445.173276][T12809] ? clear_bhb_loop+0x40/0x90 [ 445.177941][T12809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.183823][T12809] RIP: 0033:0x7f542cf9c799 [ 445.188229][T12809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.207823][T12809] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 445.216235][T12809] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 445.224208][T12809] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 445.232188][T12809] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 445.240157][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.248126][T12809] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 445.256123][T12809] [ 445.590471][T12822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2189'. [ 446.014360][ T9853] tipc: Subscription rejected, illegal request [ 446.184546][ T9875] tipc: Subscription rejected, illegal request [ 446.870751][T12840] netlink: 'syz.2.2196': attribute type 39 has an invalid length. [ 447.080864][T12847] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2197'. [ 447.680722][T12862] netlink: 'syz.2.2200': attribute type 28 has an invalid length. [ 447.686673][T12852] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2199'. [ 447.719153][T12859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2201'. [ 447.740926][T12862] netlink: 'syz.2.2200': attribute type 29 has an invalid length. [ 447.782961][T12862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2200'. [ 448.523232][ T9875] tipc: Subscription rejected, illegal request [ 448.921509][T12880] FAULT_INJECTION: forcing a failure. [ 448.921509][T12880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.938443][T11360] tipc: Subscription rejected, illegal request [ 449.018785][T12880] CPU: 0 PID: 12880 Comm: syz.3.2207 Not tainted syzkaller #0 [ 449.026315][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.036398][T12880] Call Trace: [ 449.039691][T12880] [ 449.042641][T12880] dump_stack_lvl+0x18c/0x250 [ 449.047351][T12880] ? show_regs_print_info+0x20/0x20 [ 449.052573][T12880] ? load_image+0x400/0x400 [ 449.057100][T12880] ? __might_fault+0xaa/0x120 [ 449.061820][T12880] ? __lock_acquire+0x7d40/0x7d40 [ 449.066871][T12880] should_fail_ex+0x39d/0x4d0 [ 449.071667][T12880] _copy_from_user+0x2f/0xe0 [ 449.076289][T12880] generic_map_update_batch+0x54b/0x810 [ 449.081842][T12880] ? rcu_read_unlock+0xa0/0xa0 [ 449.086604][T12880] ? __fdget+0x180/0x210 [ 449.090838][T12880] ? rcu_read_unlock+0xa0/0xa0 [ 449.095589][T12880] bpf_map_do_batch+0x3d7/0x610 [ 449.100607][T12880] __sys_bpf+0x381/0x890 [ 449.104838][T12880] ? bpf_link_show_fdinfo+0x390/0x390 [ 449.110638][T12880] ? lock_chain_count+0x20/0x20 [ 449.115481][T12880] __x64_sys_bpf+0x7c/0x90 [ 449.119885][T12880] do_syscall_64+0x55/0xa0 [ 449.124294][T12880] ? clear_bhb_loop+0x40/0x90 [ 449.128959][T12880] ? clear_bhb_loop+0x40/0x90 [ 449.133721][T12880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.139707][T12880] RIP: 0033:0x7f6d5e19c799 [ 449.144125][T12880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.163730][T12880] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.172136][T12880] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 449.180101][T12880] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 449.188077][T12880] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 449.196049][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.204016][T12880] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 449.211994][T12880] [ 449.398107][T12882] netlink: 'syz.4.2209': attribute type 39 has an invalid length. [ 449.721099][T12884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2211'. [ 449.832119][T12886] syzkaller0: entered promiscuous mode [ 449.840253][T12886] syzkaller0: entered allmulticast mode [ 449.903183][T12886] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 449.997117][T12892] netlink: 'syz.4.2220': attribute type 39 has an invalid length. [ 450.078001][T12890] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2212'. [ 451.472246][T12915] FAULT_INJECTION: forcing a failure. [ 451.472246][T12915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.484225][T11360] tipc: Subscription rejected, illegal request [ 451.496558][T12901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.517306][T12915] CPU: 1 PID: 12915 Comm: syz.1.2218 Not tainted syzkaller #0 [ 451.524812][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.534887][T12915] Call Trace: [ 451.538182][T12915] [ 451.541125][T12915] dump_stack_lvl+0x18c/0x250 [ 451.545835][T12915] ? show_regs_print_info+0x20/0x20 [ 451.551062][T12915] ? load_image+0x400/0x400 [ 451.555590][T12915] ? __might_fault+0xaa/0x120 [ 451.560285][T12915] ? __lock_acquire+0x7d40/0x7d40 [ 451.565340][T12915] should_fail_ex+0x39d/0x4d0 [ 451.570052][T12915] _copy_from_user+0x2f/0xe0 [ 451.574646][T12915] generic_map_update_batch+0x59a/0x810 [ 451.580208][T12915] ? rcu_read_unlock+0xa0/0xa0 [ 451.584970][T12915] ? __fdget+0x180/0x210 [ 451.589215][T12915] ? rcu_read_unlock+0xa0/0xa0 [ 451.593972][T12915] bpf_map_do_batch+0x3d7/0x610 [ 451.598819][T12915] __sys_bpf+0x381/0x890 [ 451.603058][T12915] ? bpf_link_show_fdinfo+0x390/0x390 [ 451.608430][T12915] ? lock_chain_count+0x20/0x20 [ 451.613281][T12915] __x64_sys_bpf+0x7c/0x90 [ 451.617698][T12915] do_syscall_64+0x55/0xa0 [ 451.622197][T12915] ? clear_bhb_loop+0x40/0x90 [ 451.626950][T12915] ? clear_bhb_loop+0x40/0x90 [ 451.631620][T12915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.637593][T12915] RIP: 0033:0x7f4c5b19c799 [ 451.641998][T12915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.661600][T12915] RSP: 002b:00007f4c5c03e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.670031][T12915] RAX: ffffffffffffffda RBX: 00007f4c5b416090 RCX: 00007f4c5b19c799 [ 451.677988][T12915] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 451.685947][T12915] RBP: 00007f4c5c03e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.693903][T12915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.701862][T12915] R13: 00007f4c5b416128 R14: 00007f4c5b416090 R15: 00007ffff76e8338 [ 451.709869][T12915] [ 452.131536][T12919] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2221'. [ 452.374974][T12921] netlink: 'syz.3.2223': attribute type 39 has an invalid length. [ 452.493604][T12926] netlink: 'syz.2.2224': attribute type 28 has an invalid length. [ 452.550843][T12926] netlink: 'syz.2.2224': attribute type 29 has an invalid length. [ 452.645101][T12926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2224'. [ 455.741319][T12946] FAULT_INJECTION: forcing a failure. [ 455.741319][T12946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.770418][T12946] CPU: 0 PID: 12946 Comm: syz.2.2230 Not tainted syzkaller #0 [ 455.778020][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.788534][T12946] Call Trace: [ 455.791914][T12946] [ 455.795044][T12946] dump_stack_lvl+0x18c/0x250 [ 455.795469][ T9864] tipc: Subscription rejected, illegal request [ 455.799735][T12946] ? show_regs_print_info+0x20/0x20 [ 455.799762][T12946] ? load_image+0x400/0x400 [ 455.815696][T12946] ? __might_fault+0xaa/0x120 [ 455.820393][T12946] ? __lock_acquire+0x7d40/0x7d40 [ 455.825434][T12946] should_fail_ex+0x39d/0x4d0 [ 455.830120][T12946] _copy_from_user+0x2f/0xe0 [ 455.834724][T12946] generic_map_update_batch+0x54b/0x810 [ 455.840290][T12946] ? rcu_read_unlock+0xa0/0xa0 [ 455.845061][T12946] ? __fdget+0x180/0x210 [ 455.849399][T12946] ? rcu_read_unlock+0xa0/0xa0 [ 455.854157][T12946] bpf_map_do_batch+0x3d7/0x610 [ 455.859003][T12946] __sys_bpf+0x381/0x890 [ 455.863235][T12946] ? bpf_link_show_fdinfo+0x390/0x390 [ 455.868606][T12946] ? lock_chain_count+0x20/0x20 [ 455.873455][T12946] __x64_sys_bpf+0x7c/0x90 [ 455.877865][T12946] do_syscall_64+0x55/0xa0 [ 455.882305][T12946] ? clear_bhb_loop+0x40/0x90 [ 455.887233][T12946] ? clear_bhb_loop+0x40/0x90 [ 455.891917][T12946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.897801][T12946] RIP: 0033:0x7fc72a79c799 [ 455.902292][T12946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.921977][T12946] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.930380][T12946] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 455.938338][T12946] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 455.946296][T12946] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.954250][T12946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.962209][T12946] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 455.970201][T12946] [ 456.406892][T12960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2233'. [ 456.817403][T12966] netlink: 'syz.4.2237': attribute type 39 has an invalid length. [ 456.937438][T12964] netlink: 'syz.3.2236': attribute type 28 has an invalid length. [ 456.956425][T12964] netlink: 'syz.3.2236': attribute type 29 has an invalid length. [ 456.964492][T12964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2236'. [ 457.430170][T12978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2241'. [ 457.634963][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 457.661795][T12989] FAULT_INJECTION: forcing a failure. [ 457.661795][T12989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.744665][T12989] CPU: 0 PID: 12989 Comm: syz.4.2244 Not tainted syzkaller #0 [ 457.752180][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.762270][T12989] Call Trace: [ 457.765564][T12989] [ 457.768507][T12989] dump_stack_lvl+0x18c/0x250 [ 457.773491][T12989] ? show_regs_print_info+0x20/0x20 [ 457.778709][T12989] ? load_image+0x400/0x400 [ 457.783238][T12989] ? __might_fault+0xaa/0x120 [ 457.788017][T12989] ? __lock_acquire+0x7d40/0x7d40 [ 457.793072][T12989] should_fail_ex+0x39d/0x4d0 [ 457.797787][T12989] _copy_from_user+0x2f/0xe0 [ 457.802401][T12989] generic_map_update_batch+0x59a/0x810 [ 457.807997][T12989] ? rcu_read_unlock+0xa0/0xa0 [ 457.812793][T12989] ? __fdget+0x180/0x210 [ 457.817062][T12989] ? rcu_read_unlock+0xa0/0xa0 [ 457.821842][T12989] bpf_map_do_batch+0x3d7/0x610 [ 457.826711][T12989] __sys_bpf+0x381/0x890 [ 457.831060][T12989] ? bpf_link_show_fdinfo+0x390/0x390 [ 457.836466][T12989] ? lock_chain_count+0x20/0x20 [ 457.836904][ T9853] tipc: Subscription rejected, illegal request [ 457.841494][T12989] __x64_sys_bpf+0x7c/0x90 [ 457.841516][T12989] do_syscall_64+0x55/0xa0 [ 457.841539][T12989] ? clear_bhb_loop+0x40/0x90 [ 457.861224][T12989] ? clear_bhb_loop+0x40/0x90 [ 457.865934][T12989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 457.871857][T12989] RIP: 0033:0x7f542cf9c799 [ 457.876311][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.895932][T12989] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.904386][T12989] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 457.912464][T12989] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 457.920458][T12989] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 457.928450][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.936525][T12989] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 457.944539][T12989] [ 458.215706][T13000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2246'. [ 458.249189][T12999] netlink: 'syz.4.2248': attribute type 39 has an invalid length. [ 459.041076][T11359] tipc: Subscription rejected, illegal request [ 459.719963][T13043] FAULT_INJECTION: forcing a failure. [ 459.719963][T13043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.734040][T13043] CPU: 1 PID: 13043 Comm: syz.3.2261 Not tainted syzkaller #0 [ 459.741531][T13043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.751601][T13043] Call Trace: [ 459.754877][T13043] [ 459.757798][T13043] dump_stack_lvl+0x18c/0x250 [ 459.762472][T13043] ? show_regs_print_info+0x20/0x20 [ 459.767668][T13043] ? load_image+0x400/0x400 [ 459.772162][T13043] ? __might_fault+0xaa/0x120 [ 459.776825][T13043] ? __lock_acquire+0x7d40/0x7d40 [ 459.781846][T13043] should_fail_ex+0x39d/0x4d0 [ 459.786519][T13043] _copy_from_user+0x2f/0xe0 [ 459.791104][T13043] generic_map_update_batch+0x54b/0x810 [ 459.796655][T13043] ? rcu_read_unlock+0xa0/0xa0 [ 459.801407][T13043] ? __fdget+0x180/0x210 [ 459.805665][T13043] ? rcu_read_unlock+0xa0/0xa0 [ 459.810410][T13043] bpf_map_do_batch+0x3d7/0x610 [ 459.815254][T13043] __sys_bpf+0x381/0x890 [ 459.819485][T13043] ? bpf_link_show_fdinfo+0x390/0x390 [ 459.824858][T13043] ? lock_chain_count+0x20/0x20 [ 459.829711][T13043] __x64_sys_bpf+0x7c/0x90 [ 459.834113][T13043] do_syscall_64+0x55/0xa0 [ 459.838530][T13043] ? clear_bhb_loop+0x40/0x90 [ 459.843195][T13043] ? clear_bhb_loop+0x40/0x90 [ 459.847863][T13043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.853747][T13043] RIP: 0033:0x7f6d5e19c799 [ 459.858151][T13043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.877751][T13043] RSP: 002b:00007f6d5ef91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.886154][T13043] RAX: ffffffffffffffda RBX: 00007f6d5e415fa0 RCX: 00007f6d5e19c799 [ 459.894112][T13043] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 459.902070][T13043] RBP: 00007f6d5ef91090 R08: 0000000000000000 R09: 0000000000000000 [ 459.910030][T13043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.917989][T13043] R13: 00007f6d5e416038 R14: 00007f6d5e415fa0 R15: 00007ffe0aa67478 [ 459.925965][T13043] [ 461.143745][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2259'. [ 461.153477][T13046] netlink: 'syz.3.2262': attribute type 39 has an invalid length. [ 461.324597][T13050] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2263'. [ 461.686402][T13068] netlink: 'syz.2.2269': attribute type 28 has an invalid length. [ 461.701480][T13068] netlink: 'syz.2.2269': attribute type 29 has an invalid length. [ 461.734223][T13068] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2269'. [ 461.827698][ T9874] tipc: Subscription rejected, illegal request [ 462.078899][T13081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2274'. [ 462.200139][T13079] netlink: 'syz.3.2273': attribute type 39 has an invalid length. [ 462.349457][T13090] FAULT_INJECTION: forcing a failure. [ 462.349457][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.366355][T13090] CPU: 1 PID: 13090 Comm: syz.2.2277 Not tainted syzkaller #0 [ 462.373869][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.383947][T13090] Call Trace: [ 462.387334][T13090] [ 462.390275][T13090] dump_stack_lvl+0x18c/0x250 [ 462.394989][T13090] ? show_regs_print_info+0x20/0x20 [ 462.400228][T13090] ? load_image+0x400/0x400 [ 462.404758][T13090] ? __might_fault+0xaa/0x120 [ 462.409450][T13090] ? __lock_acquire+0x7d40/0x7d40 [ 462.414488][T13090] should_fail_ex+0x39d/0x4d0 [ 462.419174][T13090] _copy_from_user+0x2f/0xe0 [ 462.423786][T13090] generic_map_update_batch+0x59a/0x810 [ 462.429339][T13090] ? rcu_read_unlock+0xa0/0xa0 [ 462.434114][T13090] ? __fdget+0x180/0x210 [ 462.438373][T13090] ? rcu_read_unlock+0xa0/0xa0 [ 462.443133][T13090] bpf_map_do_batch+0x3d7/0x610 [ 462.447990][T13090] __sys_bpf+0x381/0x890 [ 462.452240][T13090] ? bpf_link_show_fdinfo+0x390/0x390 [ 462.457625][T13090] ? lock_chain_count+0x20/0x20 [ 462.462484][T13090] __x64_sys_bpf+0x7c/0x90 [ 462.466897][T13090] do_syscall_64+0x55/0xa0 [ 462.471312][T13090] ? clear_bhb_loop+0x40/0x90 [ 462.475982][T13090] ? clear_bhb_loop+0x40/0x90 [ 462.480667][T13090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.486552][T13090] RIP: 0033:0x7fc72a79c799 [ 462.490975][T13090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.510581][T13090] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 462.518990][T13090] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 462.526955][T13090] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 462.535452][T13090] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 462.543430][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 462.551394][T13090] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 462.559372][T13090] [ 462.814221][T13098] netlink: 'syz.2.2280': attribute type 28 has an invalid length. [ 462.822496][T13098] netlink: 'syz.2.2280': attribute type 29 has an invalid length. [ 462.831095][T13098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2280'. [ 462.989391][T11359] tipc: Subscription rejected, illegal request [ 463.204342][T13118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2287'. [ 463.506216][T13132] netlink: 'syz.1.2290': attribute type 39 has an invalid length. [ 463.611320][T13138] FAULT_INJECTION: forcing a failure. [ 463.611320][T13138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.628940][T13138] CPU: 1 PID: 13138 Comm: syz.4.2292 Not tainted syzkaller #0 [ 463.636442][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.646517][T13138] Call Trace: [ 463.649828][T13138] [ 463.652771][T13138] dump_stack_lvl+0x18c/0x250 [ 463.657474][T13138] ? show_regs_print_info+0x20/0x20 [ 463.662694][T13138] ? load_image+0x400/0x400 [ 463.667217][T13138] ? __might_fault+0xaa/0x120 [ 463.671905][T13138] ? __lock_acquire+0x7d40/0x7d40 [ 463.676946][T13138] should_fail_ex+0x39d/0x4d0 [ 463.681643][T13138] _copy_from_user+0x2f/0xe0 [ 463.686251][T13138] generic_map_update_batch+0x54b/0x810 [ 463.691803][T13138] ? rcu_read_unlock+0xa0/0xa0 [ 463.696569][T13138] ? __fdget+0x180/0x210 [ 463.700808][T13138] ? rcu_read_unlock+0xa0/0xa0 [ 463.705560][T13138] bpf_map_do_batch+0x3d7/0x610 [ 463.710406][T13138] __sys_bpf+0x381/0x890 [ 463.714640][T13138] ? bpf_link_show_fdinfo+0x390/0x390 [ 463.720009][T13138] ? lock_chain_count+0x20/0x20 [ 463.724852][T13138] __x64_sys_bpf+0x7c/0x90 [ 463.729257][T13138] do_syscall_64+0x55/0xa0 [ 463.733665][T13138] ? clear_bhb_loop+0x40/0x90 [ 463.738333][T13138] ? clear_bhb_loop+0x40/0x90 [ 463.743006][T13138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.748890][T13138] RIP: 0033:0x7f542cf9c799 [ 463.753296][T13138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.772895][T13138] RSP: 002b:00007f542dddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.781298][T13138] RAX: ffffffffffffffda RBX: 00007f542d215fa0 RCX: 00007f542cf9c799 [ 463.789258][T13138] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 463.797219][T13138] RBP: 00007f542dddd090 R08: 0000000000000000 R09: 0000000000000000 [ 463.805180][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.813135][T13138] R13: 00007f542d216038 R14: 00007f542d215fa0 R15: 00007fff33e83aa8 [ 463.821192][T13138] [ 464.057504][T13148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2298'. [ 464.131281][ T9853] tipc: Subscription rejected, illegal request [ 465.423797][T13168] netlink: 'syz.1.2303': attribute type 39 has an invalid length. [ 465.533667][T13174] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2305'. [ 465.588959][T13178] FAULT_INJECTION: forcing a failure. [ 465.588959][T13178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.620254][T13178] CPU: 1 PID: 13178 Comm: syz.1.2307 Not tainted syzkaller #0 [ 465.627757][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.637818][T13178] Call Trace: [ 465.641087][T13178] [ 465.644003][T13178] dump_stack_lvl+0x18c/0x250 [ 465.648678][T13178] ? show_regs_print_info+0x20/0x20 [ 465.653877][T13178] ? load_image+0x400/0x400 [ 465.658367][T13178] ? __might_fault+0xaa/0x120 [ 465.663038][T13178] ? __lock_acquire+0x7d40/0x7d40 [ 465.668052][T13178] should_fail_ex+0x39d/0x4d0 [ 465.672723][T13178] _copy_from_user+0x2f/0xe0 [ 465.677303][T13178] generic_map_update_batch+0x59a/0x810 [ 465.682850][T13178] ? rcu_read_unlock+0xa0/0xa0 [ 465.687605][T13178] ? __fdget+0x180/0x210 [ 465.691836][T13178] ? rcu_read_unlock+0xa0/0xa0 [ 465.696584][T13178] bpf_map_do_batch+0x3d7/0x610 [ 465.701424][T13178] __sys_bpf+0x381/0x890 [ 465.705655][T13178] ? bpf_link_show_fdinfo+0x390/0x390 [ 465.711024][T13178] ? lock_chain_count+0x20/0x20 [ 465.715859][T13178] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 465.721830][T13178] __x64_sys_bpf+0x7c/0x90 [ 465.726243][T13178] do_syscall_64+0x55/0xa0 [ 465.730652][T13178] ? clear_bhb_loop+0x40/0x90 [ 465.735315][T13178] ? clear_bhb_loop+0x40/0x90 [ 465.739986][T13178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.745875][T13178] RIP: 0033:0x7f4c5b19c799 [ 465.750281][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.769879][T13178] RSP: 002b:00007f4c5c05f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.778286][T13178] RAX: ffffffffffffffda RBX: 00007f4c5b415fa0 RCX: 00007f4c5b19c799 [ 465.786279][T13178] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 465.794258][T13178] RBP: 00007f4c5c05f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.802234][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.810286][T13178] R13: 00007f4c5b416038 R14: 00007f4c5b415fa0 R15: 00007ffff76e8338 [ 465.818259][T13178] [ 465.912769][T13181] netlink: 'syz.4.2308': attribute type 39 has an invalid length. [ 465.994393][T13183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2310'. [ 466.017108][T13185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2309'. [ 466.183400][ T9874] tipc: Subscription rejected, illegal request [ 466.299187][T13197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2314'. [ 466.611852][T13204] netlink: 'syz.1.2318': attribute type 28 has an invalid length. [ 466.618459][T13199] netlink: 'syz.4.2316': attribute type 39 has an invalid length. [ 466.620153][T13204] netlink: 'syz.1.2318': attribute type 29 has an invalid length. [ 466.636181][T13204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2318'. [ 467.065825][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.095201][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.104620][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.127672][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.137817][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 467.155602][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.198604][T13215] FAULT_INJECTION: forcing a failure. [ 467.198604][T13215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.218931][T13215] CPU: 1 PID: 13215 Comm: syz.2.2322 Not tainted syzkaller #0 [ 467.226441][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.236512][T13215] Call Trace: [ 467.239808][T13215] [ 467.242747][T13215] dump_stack_lvl+0x18c/0x250 [ 467.247452][T13215] ? show_regs_print_info+0x20/0x20 [ 467.252676][T13215] ? load_image+0x400/0x400 [ 467.257214][T13215] ? __might_fault+0xaa/0x120 [ 467.261911][T13215] ? __lock_acquire+0x7d40/0x7d40 [ 467.266961][T13215] should_fail_ex+0x39d/0x4d0 [ 467.271656][T13215] _copy_from_user+0x2f/0xe0 [ 467.276253][T13215] generic_map_update_batch+0x54b/0x810 [ 467.281812][T13215] ? rcu_read_unlock+0xa0/0xa0 [ 467.286581][T13215] ? __fdget+0x180/0x210 [ 467.290821][T13215] ? rcu_read_unlock+0xa0/0xa0 [ 467.295574][T13215] bpf_map_do_batch+0x3d7/0x610 [ 467.300422][T13215] __sys_bpf+0x381/0x890 [ 467.304679][T13215] ? bpf_link_show_fdinfo+0x390/0x390 [ 467.310063][T13215] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.316224][T13215] __x64_sys_bpf+0x7c/0x90 [ 467.320642][T13215] do_syscall_64+0x55/0xa0 [ 467.325057][T13215] ? clear_bhb_loop+0x40/0x90 [ 467.329728][T13215] ? clear_bhb_loop+0x40/0x90 [ 467.334400][T13215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.340284][T13215] RIP: 0033:0x7fc72a79c799 [ 467.344685][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.364295][T13215] RSP: 002b:00007fc7289f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.372708][T13215] RAX: ffffffffffffffda RBX: 00007fc72aa15fa0 RCX: 00007fc72a79c799 [ 467.380671][T13215] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 467.388635][T13215] RBP: 00007fc7289f6090 R08: 0000000000000000 R09: 0000000000000000 [ 467.396597][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.404816][T13215] R13: 00007fc72aa16038 R14: 00007fc72aa15fa0 R15: 00007ffdf44009d8 [ 467.412789][T13215] [ 467.504650][ T9875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.576200][T13218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2323'. [ 467.647531][ T9875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.807852][ T9875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.815416][T11359] tipc: Subscription rejected, illegal request [ 467.902312][ T9875] batman_adv: batadv0: Removing interface: netdevsim0 [ 467.917716][ T9875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.943761][T13210] chnl_net:caif_netlink_parms(): no params data found [ 468.121853][T13239] netlink: 'syz.2.2329': attribute type 39 has an invalid length. [ 468.167291][T13238] netlink: 'syz.4.2328': attribute type 9 has an invalid length. [ 468.176460][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.191382][T13210] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.200061][T13238] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2328'. [ 468.201533][T13210] bridge_slave_0: entered allmulticast mode [ 468.221244][T13210] bridge_slave_0: entered promiscuous mode [ 468.249470][T13210] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.266888][T13210] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.274663][T13210] bridge_slave_1: entered allmulticast mode [ 468.282299][T13210] bridge_slave_1: entered promiscuous mode [ 468.355730][ T29] INFO: task syz.0.1585:10858 blocked for more than 143 seconds. [ 468.367596][ T29] Not tainted syzkaller #0 [ 468.374514][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.384249][ T29] task:syz.0.1585 state:D stack:22376 pid:10858 ppid:5762 flags:0x00004006 [ 468.401151][ T29] Call Trace: [ 468.404539][ T29] [ 468.409493][ T29] __schedule+0x1553/0x45a0 [ 468.414205][ T29] ? rcu_is_watching+0x15/0xb0 [ 468.421740][ T29] ? asan.module_dtor+0x20/0x20 [ 468.428702][ T29] ? trace_contention_end+0x39/0xe0 [ 468.434561][ T29] ? perf_event_ctx_lock_nested+0x490/0x490 [ 468.441105][ T29] ? task_work_cancel+0xa5/0x220 [ 468.446777][ T29] ? task_work_cancel_func+0x210/0x210 [ 468.463283][ T29] schedule+0xbd/0x170 [ 468.481020][T13241] netlink: 'syz.4.2328': attribute type 9 has an invalid length. [ 468.490970][ T29] ? _free_event+0xfe/0xf30 [ 468.498690][T13210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.508378][ T29] _free_event+0x174/0xf30 [ 468.512996][ T29] perf_event_release_kernel+0x842/0x8d0 [ 468.520164][T13241] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2328'. [ 468.528091][T13210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.534901][ T29] ? __might_sleep+0xe0/0xe0 [ 468.543394][ T29] ? calc_timer_values+0x400/0x400 [ 468.550382][ T29] ? __fput+0x61c/0x970 [ 468.564142][ T29] ? perf_mmap+0x15c0/0x15c0 [ 468.573468][ T29] perf_release+0x3b/0x40 [ 468.583598][ T29] __fput+0x234/0x970 [ 468.591395][ T29] task_work_run+0x1d4/0x260 [ 468.600619][ T29] ? task_work_cancel+0x220/0x220 [ 468.608347][ T29] get_signal+0x1235/0x13f0 [ 468.612977][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 468.615498][T13210] team0: Port device team_slave_0 added [ 468.623571][ T29] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 468.630038][T13210] team0: Port device team_slave_1 added [ 468.636664][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 468.648314][ T29] ? get_sigframe_size+0x20/0x20 [ 468.658941][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 468.674942][ T29] exit_to_user_mode_loop+0x70/0x110 [ 468.679080][T13210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.681443][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 468.694510][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.700876][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 468.722356][T13210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.739541][T13210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.745186][ T29] do_syscall_64+0x61/0xa0 [ 468.750994][ T29] ? clear_bhb_loop+0x40/0x90 [ 468.751844][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.764923][ T29] ? clear_bhb_loop+0x40/0x90 [ 468.791027][T13210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.801986][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.808109][ T29] RIP: 0033:0x7f861cf9c799 [ 468.812646][ T29] RSP: 002b:00007f861dd70fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 468.821303][ T29] RAX: fffffffffffffffc RBX: 00007f861d215fa0 RCX: 00007f861cf9c799 [ 468.834900][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000400c0000 [ 468.842998][ T29] RBP: 00007f861d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 468.851243][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 468.859449][ T29] R13: 00007f861d216038 R14: 00007f861d215fa0 R15: 00007ffc93e01118 [ 468.875441][ T29] [ 468.884328][ T29] [ 468.884328][ T29] Showing all locks held in the system: [ 468.901535][ T29] 1 lock held by khungtaskd/29: [ 468.918462][T13210] hsr_slave_0: entered promiscuous mode [ 468.922647][ T29] #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 468.945954][ T29] 2 locks held by getty/5522: [ 468.953861][ T29] #0: ffff8880313ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 468.968763][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 468.979567][ T29] 3 locks held by kworker/0:5/5803: [ 468.989956][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.009096][ T29] #1: ffffc900046efd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.024463][ T29] #2: ffff888142e79240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x286/0x31b0 [ 469.040452][ T29] 4 locks held by kworker/u4:25/9875: [ 469.046261][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.063248][ T29] #1: ffffc90004b3fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.074515][ T29] #2: ffffffff8e3b4950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 469.089754][ T29] #3: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x612/0xbb0 [ 469.099194][ T29] 2 locks held by kworker/1:2/12505: [ 469.104670][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.123646][ T29] #1: ffffc9000531fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 469.136437][ T29] 2 locks held by syz-executor/13210: [ 469.141921][ T29] #0: ffffffff8e3c1988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 469.151957][ T29] #1: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 469.171088][ T29] 1 lock held by rm/13256: [ 469.176131][ T29] [ 469.176542][T13210] hsr_slave_1: entered promiscuous mode [ 469.178561][ T29] ============================================= [ 469.178561][ T29] [ 469.193026][T13210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.199316][ T29] NMI backtrace for cpu 0 [ 469.200769][T13210] Cannot create hsr debugfs directory [ 469.204885][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 469.204903][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.204913][ T29] Call Trace: [ 469.204920][ T29] [ 469.204928][ T29] dump_stack_lvl+0x18c/0x250 [ 469.238424][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 469.243554][ T29] ? show_regs_print_info+0x20/0x20 [ 469.248776][ T29] ? load_image+0x400/0x400 [ 469.253310][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 469.258263][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 469.264431][ T29] ? _printk+0xde/0x130 [ 469.268602][ T29] ? load_image+0x400/0x400 [ 469.273298][ T29] ? load_image+0x400/0x400 [ 469.277822][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 469.283915][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 469.289914][ T29] watchdog+0xf3d/0xf80 [ 469.294096][ T29] ? watchdog+0x1e1/0xf80 [ 469.298451][ T29] kthread+0x2fa/0x390 [ 469.302533][ T29] ? hungtask_pm_notify+0x90/0x90 [ 469.307582][ T29] ? kthread_blkcg+0xd0/0xd0 [ 469.312176][ T29] ret_from_fork+0x48/0x80 [ 469.316601][ T29] ? kthread_blkcg+0xd0/0xd0 [ 469.321175][ T29] ret_from_fork_asm+0x11/0x20 [ 469.325929][ T29] [ 469.329192][ T5774] Bluetooth: hci3: command tx timeout [ 469.329601][ T29] Sending NMI from CPU 0 to CPUs 1: [ 469.340285][ C1] NMI backtrace for cpu 1 [ 469.340295][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 469.340310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.340318][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 469.340342][ C1] Code: 6f 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 39 42 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 469.340355][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 469.340368][ C1] RAX: a13eed71c6396400 RBX: ffffffff8162a9dd RCX: a13eed71c6396400 [ 469.340380][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c89a0 [ 469.340390][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 469.340401][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 469.340413][ C1] R13: dffffc0000000000 R14: 1ffff110037ce780 R15: 0000000000000000 [ 469.340423][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 469.340436][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.340446][ C1] CR2: 0000560ec86d40c0 CR3: 0000000061d79000 CR4: 00000000003506e0 [ 469.340459][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 469.340469][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 469.340479][ C1] Call Trace: [ 469.340485][ C1] [ 469.340489][ C1] default_idle+0x13/0x20 [ 469.340508][ C1] default_idle_call+0x6c/0xa0 [ 469.340527][ C1] do_idle+0x33d/0x590 [ 469.340547][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 469.340565][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 469.340592][ C1] cpu_startup_entry+0x43/0x60 [ 469.340609][ C1] start_secondary+0xee/0xf0 [ 469.340626][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 469.340654][ C1] [ 469.351338][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 469.351351][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 469.351367][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.351376][ T29] Call Trace: [ 469.351382][ T29] [ 469.351389][ T29] dump_stack_lvl+0x18c/0x250 [ 469.351419][ T29] ? show_regs_print_info+0x20/0x20 [ 469.351442][ T29] ? load_image+0x400/0x400 [ 469.351472][ T29] panic+0x2dc/0x730 [ 469.351489][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 469.351514][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 469.351531][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 469.351554][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 469.351575][ T29] watchdog+0xf7c/0xf80 [ 469.351597][ T29] ? watchdog+0x1e1/0xf80 [ 469.351622][ T29] kthread+0x2fa/0x390 [ 469.351636][ T29] ? hungtask_pm_notify+0x90/0x90 [ 469.351656][ T29] ? kthread_blkcg+0xd0/0xd0 [ 469.351671][ T29] ret_from_fork+0x48/0x80 [ 469.351704][ T29] ? kthread_blkcg+0xd0/0xd0 [ 469.351720][ T29] ret_from_fork_asm+0x11/0x20 [ 469.351751][ T29] [ 469.356465][ T29] Kernel Offset: disabled [ 469.639125][ T29] Rebooting in 86400 seconds..