last executing test programs: 5.626320695s ago: executing program 0 (id=2616): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a02b700030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xb7}, {&(0x7f00000000c0)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d738296240115e6f04fa340a7244", 0x21}], 0x2}, 0x0) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x8, 0x95c0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x50) (async) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ac0)={r6, 0x0, 0x0, 0x4}, 0x20) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x30}, 0x28) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22ffff) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xa5ba2b88, &(0x7f0000000080)=[{&(0x7f00000004c0)="e03f03003b000b05d25a806c8c6394f901800000000000000b020a00053582c137153e37000c0280fc80ecd8a3c138d90b1000f80b", 0x33fe0}], 0x1}, 0x40000) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (rerun: 32) 5.284119523s ago: executing program 0 (id=2621): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x10060) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback, 0xffffffffffffffff, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 4.822701481s ago: executing program 2 (id=2625): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x2c, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xbf9}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838", 0x22}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x400000002, 0x0) close(r5) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000080)}, 0x4004081) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0xb3503436ddae298) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r0, r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000c40)='cpuset.mems\x00') sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x1d, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.318747435s ago: executing program 0 (id=2627): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0x2, 0x4, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x8, 0x1, 0x1, 0x8002, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2, 0x803, 0x0, &(0x7f0000000680)={0x0, 0x0}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) close(r0) 4.024960674s ago: executing program 3 (id=2629): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000200)={'ip6_vti0\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb, 0x0, 0x9, 0x2, 0x0, 0x4, 0x0, 0xc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xc}, 0xf7e5) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000060000000000000002000000850000005f00000010d5060005000020181a0000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00 \x00\x00', @ANYRES32=0x1, @ANYBLOB="00000000ffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f00000007c0)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1189e, 0xffffffffffffffff, 0x1, &(0x7f0000001800)=[0x1, 0x1], &(0x7f0000001840)=[{0x2, 0x1, 0x10, 0x5}], 0x10, 0x7fffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="000000000000000000000000007b8af8ff00000000bca2000000000000a6020000f8ffffbfb703000008000000b704000000000000850000009500c8ec0aa0570265ba3adeadb4278b8600"/84], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10102, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r4}, 0x22) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000400), &(0x7f0000000440)=r3}, 0x20) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x12, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(r7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r5}, &(0x7f0000001a00), &(0x7f0000001a40)='%pi6 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r8, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x2447c9975bab3753, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r10}, 0x8) write$cgroup_int(r11, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 3.754245619s ago: executing program 0 (id=2630): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00'], 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x9, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009536ed206d837ee089cf82fe000000000000000000efb817d78c194d0c8f00f5f6666cc99a69f9f69c48f799dad8eef8b736e3056f16ae52ac9d4262429e2242373fc35eaa949376617c953396ba3246c3600e86f6f34a95062d7ef1582ecee06c393f85d98e08e490508119c834a4b99cbae0a3a61d5f57d23e05815fd01dd336cf322739b5b18f28b6f8e090f6f0e7bfd6cd37db00e854c26813d9856d00000000000000000000004d8596533b9bb08306c76cee65fba7d008da54dc73922e7cd4a07fb35bd7d7610690c4dfab299fb20643859b4a8db598a7e8f3afea3b2592ba002b814c634aa7a389d222a9028592264138e6393015c1eb0e111321e833ddede3ceede9afa63f40b82404e9d6c3a95b566d4a0742a848718ef3eec2478dfc53d827fc7e93152af7c0c923eb30fb9822d550f929c902b82f51f1a437129535ecb3cf928ba808dced9f335f976f8c36"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42e, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) close(0xffffffffffffffff) 3.688157901s ago: executing program 3 (id=2631): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'virt_wifi0\x00', 0x500}) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af7"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d"], 0x5) 3.465595628s ago: executing program 2 (id=2632): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="62132a3a2a2072"], 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd1, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1, 0x0, 0x0, 0x2d000000}, 0x0) 3.408567188s ago: executing program 0 (id=2633): recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRES8], 0x9a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80044943, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b23a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, 0x0, 0x0, 0x8f1f, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_devices(r3, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) socketpair(0x2b, 0x5, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=""/62, 0x3e}, 0x10060) 3.348603818s ago: executing program 3 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000007110430000000000950000070000f5de0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000980)=':\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='d', 0x1}], 0x1}, 0x22044880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x4}, 0x1, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) 2.481891493s ago: executing program 1 (id=2636): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x174b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0x15eda, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0, 0x300}, 0xe07e872420dfefca) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.431966511s ago: executing program 2 (id=2637): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)='memory.events\x00', 0x0, 0x0) recvmsg$unix(r2, 0x0, 0x10060) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback, 0xffffffffffffffff, 0x2f, 0x2030, 0x4, @void, @void, @value=r4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2.022369251s ago: executing program 0 (id=2638): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000000000000000000800d26b5f2f00"], 0x48) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r2, 0x0, 0x42) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x20, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r6, r6, 0x2e}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r9, r7, 0x4, r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001540)={r10, 0x58, &(0x7f0000000340)}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r11}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.96057544s ago: executing program 1 (id=2639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)="6d4216f35fa44f5cce4accea2daf491e6db5258ef66a60005ca401e34ec2591607a0434e2c6769b8990f1206000000000000009226de07416f7403e59fadb426654421451aaadba25016a111a7d0367a2da59eb52be9ec4900"/103, 0x67}], 0x4}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200000000000000000000008500000017000000850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8953, &(0x7f0000000040)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r0, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000140)=[{0x28, 0x1, 0x0, 0xfffff030}, {0x6, 0x1, 0xc, 0x3}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x87, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f0, &(0x7f0000000080)) openat$cgroup_devices(r5, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) 1.957952261s ago: executing program 2 (id=2640): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e", 0x9}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x6d, 0x29, 0x32}}, @ip_pktinfo={{0x0, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_pktinfo={{0x1c, 0x40000000, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x0) 1.610396229s ago: executing program 2 (id=2641): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x2c, 0x80000, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xbf9}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838", 0x22}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x10, 0x400000002, 0x0) close(r5) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000080)}, 0x4004081) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r8, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)}, 0xb3503436ddae298) recvmsg$kcm(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x2062) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r0, r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000c40)='cpuset.mems\x00') sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x1d, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.337369875s ago: executing program 3 (id=2642): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2b, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00'], 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000140), 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x9, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0xf, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42e, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r8, 0x4) close(0xffffffffffffffff) 1.25073056s ago: executing program 1 (id=2643): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'virt_wifi0\x00', 0x500}) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af7"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d"], 0x5) 901.060318ms ago: executing program 3 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="00ea375918f5116c180080100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xa}, 0x102044, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000015c0)=@bpf_ext={0x1c, 0x2a, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000500000000000000000000001800000008000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000900100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000183a000003000000000000000000000018260000", @ANYRES32=r0, @ANYBLOB="00000000520000001811000055012bbfc3ca962c813940bd535bf3bcffffffff3cd9934c9e4113d009a2fed85d9344a3f9c56f1e993a24de867d17a74dfc9fbdb88237995667fb34f945bcd65892513be3c4699ec7b297114a1c3ce636363c1cdd241d8a8c6b7cfa81530a3f52d5c663084aec6802ad470b41145b3c4ce1cc12e62190a40fd659c1f5e761f7a5bbd544ac029717cdfabdf2a602ede534e5f5f85a30c51cf919b1340e11326ea8d274a7796a49f69723a18d1d0173fdf85a86fc4de1197a080a53f37c6385e722444d23f2508a775df0035976cb183ea784a727d28daea8865b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018130000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000023000000852000000300000018230000", @ANYRES32=r0, @ANYBLOB="00000000010000009500000000000000"], &(0x7f0000001480)='GPL\x00', 0x2, 0xf, &(0x7f00000014c0)=""/15, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xb, 0x4, 0x5}, 0x10, 0x27e93, 0xffffffffffffffff, 0x0, &(0x7f0000001580)=[r0, r0, r0]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003000)={r3, 0x0, 0xfc, 0xd, &(0x7f0000002d80)="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", &(0x7f0000002e80)=""/13, 0x7, 0x0, 0xd6, 0xe, &(0x7f0000002ec0)="6d34817dfce5bb91eba587530b99a49fba15ff7d58fcd9696cbe1146a72ae143aa1bbde052d6c0115ea96d6bd0a4a359e9421135bafccf386a6ba92f4bd5641363e0dc77d13a348ae3d09ec21bdc4b09644663a2383787b04ddb37c7886465538d6baf49d2d3109db3d4e5aa98d029eaf89f78266831fbb0eb3260c894c0ebc8309f312b48718269c8588357d8ef8c8a56d787c6411aea764571984947495cc9f3a29684a6ab73bcd34b436d9b1dba2ebf4b06acc332e4d311d26e0561c066655603e1441ca6a1eaf6246434429f371741f1a89a5fe5", &(0x7f0000002fc0)="93fc65a50048bb986d24bc75008a", 0x0, 0x0, 0xfff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 897.053279ms ago: executing program 1 (id=2652): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000380)={'virt_wifi0\x00', 0x500}) r0 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa1, 0xffffffffffffff80}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af7"], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d"], 0x5) 717.944749ms ago: executing program 2 (id=2645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003280)={@map, 0xffffffffffffffff, 0xc, 0x8}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f0000711060000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="df8500"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="080000ea1800001492d510000000000041fc5200565150271c915013505aaf26b253e518bb4960d48a4f9d620c682c8f8b95a67f4d204653e61645caaed94c9320547de690fb74b2664d9f449126964499974aa9c4e8942b26e41e0ded960c621a1a660bf7390f3a1b8f196d6a081814d36da05f31b0c340f83e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, @fallback=0xe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffff0, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x8, 0xa0, &(0x7f00000004c0)=""/160, 0x41000, 0x3, '\x00', r7, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x6, 0x80000000, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0, r5, r0, r1, r5, r5, r0], 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/18], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8983, &(0x7f0000000080)) 581.148732ms ago: executing program 1 (id=2646): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e12090004d844000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x35}, 0x60044084) 221.477292ms ago: executing program 3 (id=2647): socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f8, &(0x7f0000000080)) 0s ago: executing program 1 (id=2648): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000006000000c3124000f100000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r0}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x1b, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000004c0)="232545fc19d6dc95b5f937788482360d4e30d485928b8ce4dbaa121dbfbb7f3f67b445ef03fa72544f05423fd2b6a45d60badd6036a0f1d83ad36adf1d7d017c7bb199e6951fb9693220e74d48544c858b8ea155f1af8b", 0x57}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="02fcdfe234bbffdbc47c242287be59e80e19bbd9d389a6dc54143c11f55116b1b4053528c1d2004c32fc1b088136058f51f16a9f8c20b93d938e0279172489e8d6fd53f4e6569e2b7aa2ce0da81cdf735534e4c3bd942906f591954d03311d964dc8007ada0b6f6bf2225921cb61f6a6f0aac68975319692136aab2dee82584f2b3aba7ea0cbc5b1e18370784ad30c8c4d693cee824446a9ca66365328846a463e8e4b79da01a6f4a5db9c836dc286ecf8f918b27a8b8ea6193ad199927cb4b38c0eb918fc1c78d35a1e659f1528f924", 0xd0}], 0x3, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r4, @ANYRES32=r3, @ANYBLOB="e0000001ffffffff0000000038000000000000000000000007000000890b14ffffffffac1414bb940401004418f290000000000000b1920000000200000200fffffff9001400000000000000000000000200000000020000000000001c000000000000000000000008000000", @ANYBLOB="2d723c0cce054ed0ab90b58f89e8861ee7b1a3a710379a098665652a8b1dac8c710c5636535488fdd3fd4bdc946e4787bb3768c68223edf746683e7f9695486f84027458921f1907b58e6e6e374856ed70c806c9c67c7f1ccca61b60b12df137e6c32d2afbecf5fec6c87f77bcb8040d7c11812fb2becc3f97c75e959df4cb6a61a6b5f6d112", @ANYBLOB="ac1414aaac1414bb00000000"], 0xc0}, 0x20000080) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000140060404000a0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @restrict={0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @fwd={0xe}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000015c0)=""/4096, 0x64, 0x1000, 0x0, 0xb}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r3, r6, 0x5, 0x1, 0x5}, 0x50) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x73) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r7, 0x29, 0x37, &(0x7f0000000100)=r8, 0x120) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x8, @empty, 0x2, 0x1}, 0x80, 0x0}, 0x4008040) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') kernel console output (not intermixed with test programs): th. [ 381.650353][T10846] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 382.673617][T10855] netlink: 'syz.2.1490': attribute type 10 has an invalid length. [ 382.929823][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 383.278745][T10867] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1494'. [ 383.307127][T10867] bridge_slave_1: default FDB implementation only supports local addresses [ 383.404878][T10865] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.1493'. [ 383.884418][T10876] netlink: 'syz.2.1498': attribute type 10 has an invalid length. [ 383.911275][T10878] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 384.033769][T10881] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 384.599047][T10884] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 384.723323][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 385.816786][T10902] syzkaller0: entered promiscuous mode [ 385.858026][T10902] syzkaller0: entered allmulticast mode [ 387.809648][T10928] FAULT_INJECTION: forcing a failure. [ 387.809648][T10928] name failslab, interval 1, probability 0, space 0, times 0 [ 387.840299][T10928] CPU: 1 PID: 10928 Comm: syz.3.1515 Not tainted syzkaller #0 [ 387.847848][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.857945][T10928] Call Trace: [ 387.861258][T10928] [ 387.864437][T10928] dump_stack_lvl+0x18c/0x250 [ 387.869181][T10928] ? show_regs_print_info+0x20/0x20 [ 387.874436][T10928] ? load_image+0x420/0x420 [ 387.878985][T10928] ? __lock_acquire+0x7d40/0x7d40 [ 387.884056][T10928] should_fail_ex+0x39d/0x4d0 [ 387.888787][T10928] should_failslab+0x9/0x20 [ 387.893337][T10928] slab_pre_alloc_hook+0x59/0x310 [ 387.898417][T10928] ? __build_skb_around+0x255/0x3d0 [ 387.903661][T10928] kmem_cache_alloc+0x5a/0x2d0 [ 387.908477][T10928] ? _sctp_make_chunk+0x14e/0x420 [ 387.913562][T10928] _sctp_make_chunk+0x14e/0x420 [ 387.919008][T10928] sctp_make_datafrag_empty+0x12b/0x240 [ 387.924700][T10928] ? sctp_make_ecne+0x340/0x340 [ 387.929596][T10928] ? sctp_user_addto_chunk+0xb0/0x220 [ 387.935099][T10928] sctp_datamsg_from_user+0x722/0xee0 [ 387.940618][T10928] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 387.946027][T10928] ? __asan_memcpy+0x40/0x70 [ 387.950667][T10928] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 387.956175][T10928] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 387.962017][T10928] ? __sctp_connect+0xd80/0xd80 [ 387.966928][T10928] ? __local_bh_enable_ip+0x13a/0x1c0 [ 387.972341][T10928] ? _local_bh_enable+0xa0/0xa0 [ 387.977222][T10928] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 387.983065][T10928] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 387.988912][T10928] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 387.994490][T10928] ? security_sctp_bind_connect+0x89/0xb0 [ 388.000261][T10928] sctp_sendmsg+0x1b83/0x28c0 [ 388.005163][T10928] ? sctp_getsockopt+0xb60/0xb60 [ 388.010130][T10928] ? aa_sk_perm+0x83c/0x970 [ 388.014681][T10928] ? aa_af_perm+0x330/0x330 [ 388.019218][T10928] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 388.025673][T10928] ? sock_rps_record_flow+0x19/0x3f0 [ 388.031092][T10928] ? inet_sendmsg+0x7c/0x2f0 [ 388.035718][T10928] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 388.041049][T10928] ? security_socket_sendmsg+0x80/0xa0 [ 388.046569][T10928] ? inet_send_prepare+0x260/0x260 [ 388.051733][T10928] ____sys_sendmsg+0x5ba/0x960 [ 388.056527][T10928] ? __lock_acquire+0x7d40/0x7d40 [ 388.061677][T10928] ? __asan_memset+0x22/0x40 [ 388.066304][T10928] ? __sys_sendmsg_sock+0x30/0x30 [ 388.071458][T10928] ? __import_iovec+0x5f2/0x850 [ 388.076359][T10928] ? import_iovec+0x73/0xa0 [ 388.080899][T10928] ___sys_sendmsg+0x2a6/0x360 [ 388.085618][T10928] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.090437][T10928] ? trace_call_bpf+0xc3/0x6c0 [ 388.095295][T10928] __se_sys_sendmsg+0x1c2/0x2b0 [ 388.100185][T10928] ? __x64_sys_sendmsg+0x80/0x80 [ 388.105178][T10928] ? lockdep_hardirqs_on+0x98/0x150 [ 388.110428][T10928] do_syscall_64+0x55/0xa0 [ 388.114902][T10928] ? clear_bhb_loop+0x40/0x90 [ 388.119634][T10928] ? clear_bhb_loop+0x40/0x90 [ 388.124354][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.130369][T10928] RIP: 0033:0x7f23ba59c819 [ 388.134820][T10928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.154638][T10928] RSP: 002b:00007f23bb42f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.163435][T10928] RAX: ffffffffffffffda RBX: 00007f23ba815fa0 RCX: 00007f23ba59c819 [ 388.171444][T10928] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 388.179445][T10928] RBP: 00007f23bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.187533][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.196075][T10928] R13: 00007f23ba816038 R14: 00007f23ba815fa0 R15: 00007ffeaaa5a858 [ 388.204112][T10928] [ 388.273821][T10933] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 389.651714][T10948] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 392.755968][T10969] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1523'. [ 393.682987][T10980] netlink: 'syz.0.1528': attribute type 10 has an invalid length. [ 393.877591][T10981] netlink: 'syz.3.1527': attribute type 10 has an invalid length. [ 395.322307][T11002] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 396.886192][T11021] netlink: 'syz.2.1541': attribute type 1 has an invalid length. [ 397.973549][T11045] netlink: 'syz.0.1548': attribute type 10 has an invalid length. [ 401.106104][T11074] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 401.114483][T11078] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 401.238655][T11078] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 401.405450][T11093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.635007][ T9680] tipc: Subscription rejected, illegal request [ 401.894202][T11102] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1570'. [ 402.230159][T11109] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 402.437205][T11114] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1574'. [ 402.930530][T11133] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 402.990866][T11135] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 403.002940][T11135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1579'. [ 403.089940][T11137] netlink: 'syz.0.1580': attribute type 10 has an invalid length. [ 403.398882][T11145] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 404.868976][T11161] FAULT_INJECTION: forcing a failure. [ 404.868976][T11161] name failslab, interval 1, probability 0, space 0, times 0 [ 404.924805][T11161] CPU: 0 PID: 11161 Comm: syz.1.1589 Not tainted syzkaller #0 [ 404.932372][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.942546][T11161] Call Trace: [ 404.945867][T11161] [ 404.948827][T11161] dump_stack_lvl+0x18c/0x250 [ 404.953557][T11161] ? show_regs_print_info+0x20/0x20 [ 404.958803][T11161] ? load_image+0x420/0x420 [ 404.963349][T11161] ? __might_sleep+0xe0/0xe0 [ 404.967968][T11161] ? __lock_acquire+0x7d40/0x7d40 [ 404.973016][T11161] should_fail_ex+0x39d/0x4d0 [ 404.977719][T11161] should_failslab+0x9/0x20 [ 404.982240][T11161] slab_pre_alloc_hook+0x59/0x310 [ 404.987284][T11161] ? sk_prot_alloc+0xe7/0x210 [ 404.992156][T11161] ? sk_prot_alloc+0xe7/0x210 [ 404.996852][T11161] __kmem_cache_alloc_node+0x53/0x250 [ 405.002248][T11161] ? sk_prot_alloc+0xe7/0x210 [ 405.006952][T11161] __kmalloc+0xa4/0x230 [ 405.011134][T11161] sk_prot_alloc+0xe7/0x210 [ 405.015998][T11161] ? sk_alloc+0x24/0x360 [ 405.020260][T11161] sk_alloc+0x3a/0x360 [ 405.024348][T11161] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 405.029743][T11161] ? lockdep_hardirqs_on+0x98/0x150 [ 405.034970][T11161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.041145][T11161] ? cpu_online+0x60/0x60 [ 405.045491][T11161] bpf_prog_test_run+0x321/0x390 [ 405.050447][T11161] __sys_bpf+0x49d/0x890 [ 405.054703][T11161] ? bpf_link_show_fdinfo+0x390/0x390 [ 405.060185][T11161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.066374][T11161] __x64_sys_bpf+0x7c/0x90 [ 405.070816][T11161] do_syscall_64+0x55/0xa0 [ 405.075240][T11161] ? clear_bhb_loop+0x40/0x90 [ 405.080016][T11161] ? clear_bhb_loop+0x40/0x90 [ 405.084807][T11161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.090891][T11161] RIP: 0033:0x7fea40d9c819 [ 405.095408][T11161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.115037][T11161] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.123471][T11161] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 405.131629][T11161] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 405.139699][T11161] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 405.147800][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.155815][T11161] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 405.163992][T11161] [ 405.312421][T11168] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1593'. [ 405.502392][T11179] netlink: 'syz.0.1595': attribute type 10 has an invalid length. [ 407.011027][T11207] netlink: 'syz.2.1607': attribute type 10 has an invalid length. [ 408.140194][T11242] netlink: 'syz.3.1616': attribute type 10 has an invalid length. [ 408.394001][T11249] netlink: 'syz.3.1619': attribute type 4 has an invalid length. [ 408.415372][T11249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'. [ 408.428245][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1620'. [ 408.438397][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1620'. [ 408.453676][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1620'. [ 409.638309][T11272] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 412.450418][T11282] syzkaller0: entered promiscuous mode [ 412.456640][T11282] syzkaller0: entered allmulticast mode [ 412.816603][T11325] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 413.702213][T11345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1645'. [ 414.415111][T11367] netlink: 'syz.1.1652': attribute type 21 has an invalid length. [ 414.593044][T11372] netlink: 'syz.3.1655': attribute type 21 has an invalid length. [ 414.602089][T11372] netlink: 'syz.3.1655': attribute type 1 has an invalid length. [ 414.609865][T11372] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1655'. [ 415.561794][T11388] syzkaller0: entered promiscuous mode [ 415.569595][T11388] syzkaller0: entered allmulticast mode [ 417.916393][T11420] netlink: 'syz.0.1671': attribute type 9 has an invalid length. [ 417.952373][T11420] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1671'. [ 419.694845][T11433] delete_channel: no stack [ 420.012006][T11459] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 420.115905][T11461] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 420.344835][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 421.043944][T11485] netlink: 'syz.0.1691': attribute type 21 has an invalid length. [ 421.068728][T11485] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1691'. [ 421.142102][T11485] netlink: 'syz.0.1691': attribute type 5 has an invalid length. [ 421.160545][T11485] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1691'. [ 421.807123][T11486] delete_channel: no stack [ 422.109859][T11509] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 422.299420][T11512] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 422.312588][T11512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1697'. [ 422.565327][T11517] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1699'. [ 424.057799][T11536] netlink: 'syz.3.1707': attribute type 4 has an invalid length. [ 424.966459][T11538] delete_channel: no stack [ 425.336441][T11553] syzkaller0: entered promiscuous mode [ 425.344850][T11553] syzkaller0: entered allmulticast mode [ 425.363470][T11558] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 429.357506][T11603] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 429.654292][T11595] delete_channel: no stack [ 430.165425][T11644] FAULT_INJECTION: forcing a failure. [ 430.165425][T11644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.194534][T11644] CPU: 1 PID: 11644 Comm: syz.3.1738 Not tainted syzkaller #0 [ 430.202103][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.212247][T11644] Call Trace: [ 430.215576][T11644] [ 430.218549][T11644] dump_stack_lvl+0x18c/0x250 [ 430.223296][T11644] ? show_regs_print_info+0x20/0x20 [ 430.228560][T11644] ? load_image+0x420/0x420 [ 430.233130][T11644] ? __lock_acquire+0x7d40/0x7d40 [ 430.238217][T11644] ? perf_trace_preemptirq_template+0xac/0x330 [ 430.244535][T11644] should_fail_ex+0x39d/0x4d0 [ 430.249278][T11644] prepare_alloc_pages+0x1e2/0x5f0 [ 430.254452][T11644] __alloc_pages+0x134/0x460 [ 430.259081][T11644] ? zone_statistics+0x170/0x170 [ 430.264053][T11644] ? alloc_pages+0x4dc/0x740 [ 430.268670][T11644] ? do_raw_spin_unlock+0x121/0x230 [ 430.273962][T11644] __get_free_pages+0xc/0x30 [ 430.278565][T11644] kasan_populate_vmalloc_pte+0x35/0x100 [ 430.284218][T11644] __apply_to_page_range+0x860/0xdd0 [ 430.289536][T11644] ? kasan_populate_vmalloc+0x70/0x70 [ 430.294929][T11644] ? apply_to_page_range+0x50/0x50 [ 430.300082][T11644] ? do_raw_spin_unlock+0x121/0x230 [ 430.305307][T11644] alloc_vmap_area+0x1d0c/0x1e30 [ 430.310281][T11644] ? vm_map_ram+0xcb0/0xcb0 [ 430.314802][T11644] ? rcu_is_watching+0x15/0xb0 [ 430.319588][T11644] __get_vm_area_node+0x162/0x370 [ 430.324641][T11644] __vmalloc_node_range+0x36e/0x1330 [ 430.330031][T11644] ? sock_hash_alloc+0x261/0x4d0 [ 430.335023][T11644] ? free_vm_area+0x50/0x50 [ 430.339543][T11644] ? bpf_map_area_alloc+0x5e/0x110 [ 430.344673][T11644] ? rcu_is_watching+0x15/0xb0 [ 430.349456][T11644] ? bpf_map_area_alloc+0x5e/0x110 [ 430.354591][T11644] bpf_map_area_alloc+0xf1/0x110 [ 430.359700][T11644] ? sock_hash_alloc+0x261/0x4d0 [ 430.364739][T11644] sock_hash_alloc+0x261/0x4d0 [ 430.369525][T11644] map_create+0x877/0x12f0 [ 430.373958][T11644] ? bpf_lsm_bpf+0x9/0x10 [ 430.378313][T11644] __sys_bpf+0x651/0x890 [ 430.382574][T11644] ? bpf_link_show_fdinfo+0x390/0x390 [ 430.387985][T11644] ? lock_chain_count+0x20/0x20 [ 430.392863][T11644] __x64_sys_bpf+0x7c/0x90 [ 430.397318][T11644] do_syscall_64+0x55/0xa0 [ 430.401800][T11644] ? clear_bhb_loop+0x40/0x90 [ 430.406507][T11644] ? clear_bhb_loop+0x40/0x90 [ 430.411292][T11644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.417290][T11644] RIP: 0033:0x7f23ba59c819 [ 430.421718][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.441449][T11644] RSP: 002b:00007f23bb42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 430.449891][T11644] RAX: ffffffffffffffda RBX: 00007f23ba815fa0 RCX: 00007f23ba59c819 [ 430.457887][T11644] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 430.465973][T11644] RBP: 00007f23bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 430.473965][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.481951][T11644] R13: 00007f23ba816038 R14: 00007f23ba815fa0 R15: 00007ffeaaa5a858 [ 430.489971][T11644] [ 430.833256][T11651] netlink: 'syz.0.1740': attribute type 10 has an invalid length. [ 432.247043][T11669] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1747'. [ 433.074233][T11692] netlink: 'syz.1.1753': attribute type 10 has an invalid length. [ 433.751584][T11707] netlink: 153344 bytes leftover after parsing attributes in process `syz.3.1757'. [ 435.111766][T11730] netlink: 'syz.1.1764': attribute type 10 has an invalid length. [ 436.297080][T11746] netlink: 'syz.0.1769': attribute type 13 has an invalid length. [ 436.321988][T11746] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1769'. [ 436.835996][T11755] FAULT_INJECTION: forcing a failure. [ 436.835996][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 436.850295][T11755] CPU: 1 PID: 11755 Comm: syz.2.1771 Not tainted syzkaller #0 [ 436.857908][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 436.868017][T11755] Call Trace: [ 436.871370][T11755] [ 436.874346][T11755] dump_stack_lvl+0x18c/0x250 [ 436.879074][T11755] ? sctp_sendmsg+0x1575/0x28c0 [ 436.883964][T11755] ? ___sys_sendmsg+0x2a6/0x360 [ 436.888850][T11755] ? show_regs_print_info+0x20/0x20 [ 436.894352][T11755] ? load_image+0x420/0x420 [ 436.898914][T11755] should_fail_ex+0x39d/0x4d0 [ 436.903640][T11755] should_failslab+0x9/0x20 [ 436.908188][T11755] slab_pre_alloc_hook+0x59/0x310 [ 436.913257][T11755] ? sctp_add_bind_addr+0x8c/0x360 [ 436.918407][T11755] __kmem_cache_alloc_node+0x53/0x250 [ 436.923831][T11755] ? sctp_add_bind_addr+0x8c/0x360 [ 436.929071][T11755] kmalloc_trace+0x2a/0xe0 [ 436.933537][T11755] sctp_add_bind_addr+0x8c/0x360 [ 436.938564][T11755] sctp_copy_local_addr_list+0x315/0x4f0 [ 436.944262][T11755] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 436.950025][T11755] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 436.956846][T11755] ? sctp_v4_is_any+0x35/0x60 [ 436.961558][T11755] ? sctp_copy_one_addr+0x8c/0x350 [ 436.966735][T11755] sctp_bind_addr_copy+0xb3/0x3c0 [ 436.971902][T11755] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 436.978289][T11755] sctp_connect_new_asoc+0x2f9/0x6a0 [ 436.983639][T11755] ? __sctp_connect+0xd80/0xd80 [ 436.988522][T11755] ? __local_bh_enable_ip+0x13a/0x1c0 [ 436.993952][T11755] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 436.999544][T11755] ? security_sctp_bind_connect+0x89/0xb0 [ 437.005507][T11755] sctp_sendmsg+0x1575/0x28c0 [ 437.010249][T11755] ? sctp_getsockopt+0xb60/0xb60 [ 437.015323][T11755] ? aa_sk_perm+0x83c/0x970 [ 437.019965][T11755] ? aa_af_perm+0x330/0x330 [ 437.024510][T11755] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 437.030970][T11755] ? sock_rps_record_flow+0x19/0x3f0 [ 437.036430][T11755] ? inet_sendmsg+0xe9/0x2f0 [ 437.041145][T11755] ? inet_send_prepare+0x260/0x260 [ 437.046391][T11755] ____sys_sendmsg+0x5ba/0x960 [ 437.051205][T11755] ? __lock_acquire+0x7d40/0x7d40 [ 437.056292][T11755] ? __asan_memset+0x22/0x40 [ 437.060937][T11755] ? __sys_sendmsg_sock+0x30/0x30 [ 437.066177][T11755] ? __import_iovec+0x5f2/0x850 [ 437.071095][T11755] ? import_iovec+0x73/0xa0 [ 437.075649][T11755] ___sys_sendmsg+0x2a6/0x360 [ 437.080364][T11755] ? get_pid_task+0x20/0x1e0 [ 437.085002][T11755] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.090091][T11755] ? __lock_acquire+0x7d40/0x7d40 [ 437.095180][T11755] __se_sys_sendmsg+0x1c2/0x2b0 [ 437.100074][T11755] ? __x64_sys_sendmsg+0x80/0x80 [ 437.105155][T11755] ? lockdep_hardirqs_on+0x98/0x150 [ 437.110408][T11755] do_syscall_64+0x55/0xa0 [ 437.114859][T11755] ? clear_bhb_loop+0x40/0x90 [ 437.119575][T11755] ? clear_bhb_loop+0x40/0x90 [ 437.124308][T11755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.130255][T11755] RIP: 0033:0x7f0ab499c819 [ 437.134719][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.154381][T11755] RSP: 002b:00007f0ab2bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.162858][T11755] RAX: ffffffffffffffda RBX: 00007f0ab4c15fa0 RCX: 00007f0ab499c819 [ 437.170885][T11755] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 437.178906][T11755] RBP: 00007f0ab2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.186924][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.194951][T11755] R13: 00007f0ab4c16038 R14: 00007f0ab4c15fa0 R15: 00007ffec2e3b538 [ 437.203643][T11755] [ 438.417524][T11769] netlink: 'syz.1.1777': attribute type 10 has an invalid length. [ 439.742831][T11794] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1786'. [ 439.784048][T11795] FAULT_INJECTION: forcing a failure. [ 439.784048][T11795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.831246][T11795] CPU: 0 PID: 11795 Comm: syz.0.1784 Not tainted syzkaller #0 [ 439.838847][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 439.848967][T11795] Call Trace: [ 439.852550][T11795] [ 439.855519][T11795] dump_stack_lvl+0x18c/0x250 [ 439.860256][T11795] ? show_regs_print_info+0x20/0x20 [ 439.865591][T11795] ? load_image+0x420/0x420 [ 439.870148][T11795] ? __might_fault+0xaa/0x120 [ 439.874875][T11795] ? __lock_acquire+0x7d40/0x7d40 [ 439.879949][T11795] should_fail_ex+0x39d/0x4d0 [ 439.884697][T11795] _copy_from_iter+0x1d9/0x12e0 [ 439.889643][T11795] ? __virt_addr_valid+0x18c/0x540 [ 439.894836][T11795] ? __lock_acquire+0x7d40/0x7d40 [ 439.899917][T11795] ? __asan_memcpy+0x40/0x70 [ 439.904656][T11795] ? copyout_mc+0x70/0x70 [ 439.909036][T11795] ? __virt_addr_valid+0x18c/0x540 [ 439.914201][T11795] ? __virt_addr_valid+0x18c/0x540 [ 439.919359][T11795] ? __virt_addr_valid+0x469/0x540 [ 439.924517][T11795] ? __phys_addr_symbol+0x2f/0x70 [ 439.929589][T11795] ? __check_object_size+0x506/0xa20 [ 439.934936][T11795] sctp_user_addto_chunk+0x8f/0x220 [ 439.940206][T11795] sctp_datamsg_from_user+0x741/0xee0 [ 439.945656][T11795] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 439.951169][T11795] ? __asan_memcpy+0x40/0x70 [ 439.955834][T11795] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 439.961456][T11795] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 439.967334][T11795] ? __sctp_connect+0xd80/0xd80 [ 439.972259][T11795] ? __local_bh_enable_ip+0x13a/0x1c0 [ 439.977693][T11795] ? _local_bh_enable+0xa0/0xa0 [ 439.982608][T11795] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 439.988533][T11795] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 439.994484][T11795] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 440.000084][T11795] ? security_sctp_bind_connect+0x89/0xb0 [ 440.005872][T11795] sctp_sendmsg+0x1b83/0x28c0 [ 440.010721][T11795] ? sctp_getsockopt+0xb60/0xb60 [ 440.015712][T11795] ? aa_sk_perm+0x83c/0x970 [ 440.020278][T11795] ? aa_af_perm+0x330/0x330 [ 440.024914][T11795] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 440.031402][T11795] ? sock_rps_record_flow+0x19/0x3f0 [ 440.036749][T11795] ? inet_sendmsg+0x7c/0x2f0 [ 440.041387][T11795] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 440.046833][T11795] ? security_socket_sendmsg+0x80/0xa0 [ 440.052343][T11795] ? inet_send_prepare+0x260/0x260 [ 440.057510][T11795] ____sys_sendmsg+0x5ba/0x960 [ 440.062324][T11795] ? __lock_acquire+0x7d40/0x7d40 [ 440.067501][T11795] ? __asan_memset+0x22/0x40 [ 440.072151][T11795] ? __sys_sendmsg_sock+0x30/0x30 [ 440.077309][T11795] ? __import_iovec+0x5f2/0x850 [ 440.082217][T11795] ? import_iovec+0x73/0xa0 [ 440.086771][T11795] ___sys_sendmsg+0x2a6/0x360 [ 440.091500][T11795] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.096365][T11795] ? trace_call_bpf+0xc3/0x6c0 [ 440.101181][T11795] __se_sys_sendmsg+0x1c2/0x2b0 [ 440.106066][T11795] ? __x64_sys_sendmsg+0x80/0x80 [ 440.111048][T11795] ? lockdep_hardirqs_on+0x98/0x150 [ 440.116361][T11795] do_syscall_64+0x55/0xa0 [ 440.120844][T11795] ? clear_bhb_loop+0x40/0x90 [ 440.125888][T11795] ? clear_bhb_loop+0x40/0x90 [ 440.130594][T11795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.136501][T11795] RIP: 0033:0x7f469839c819 [ 440.140933][T11795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.160644][T11795] RSP: 002b:00007f4699228028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.169081][T11795] RAX: ffffffffffffffda RBX: 00007f4698615fa0 RCX: 00007f469839c819 [ 440.177071][T11795] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 440.185054][T11795] RBP: 00007f4699228090 R08: 0000000000000000 R09: 0000000000000000 [ 440.193042][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.201112][T11795] R13: 00007f4698616038 R14: 00007f4698615fa0 R15: 00007fffcd2dd308 [ 440.209125][T11795] [ 440.253039][T11804] netlink: 'syz.2.1787': attribute type 13 has an invalid length. [ 440.261183][T11804] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1787'. [ 440.285790][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.292561][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.372163][T11803] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 440.891622][T11812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.742591][T11811] netlink: 151740 bytes leftover after parsing attributes in process `syz.3.1791'. [ 444.247651][T11835] tap0: tun_chr_ioctl cmd 1074025677 [ 444.280174][T11835] tap0: linktype set to 778 [ 449.554905][T11931] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 449.791742][T11931] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 450.166852][ T5910] tipc: Subscription rejected, illegal request [ 450.294483][T11949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.735952][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.940863][T11964] netlink: 'syz.2.1834': attribute type 10 has an invalid length. [ 450.960875][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1834'. [ 451.080061][T11967] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 451.990536][T11989] netlink: 'syz.0.1843': attribute type 41 has an invalid length. [ 452.040092][T11983] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 452.081666][T11989] netlink: 'syz.0.1843': attribute type 41 has an invalid length. [ 452.095027][T11992] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1844'. [ 452.859088][T12005] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 453.407695][T12023] netlink: 'syz.3.1853': attribute type 3 has an invalid length. [ 453.452217][T12023] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1853'. [ 455.591170][T12061] netlink: 'syz.2.1868': attribute type 10 has an invalid length. [ 455.769075][T12067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'. [ 455.778891][T12067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'. [ 455.789571][T12067] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1870'. [ 457.245091][T12093] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 458.054182][T12111] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 458.094476][T12111] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 458.105192][T12116] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 458.134815][T12111] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 458.178343][T12111] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 458.293854][T12116] netlink: 'syz.3.1883': attribute type 29 has an invalid length. [ 459.761205][T12141] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.818993][T12141] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1892'. [ 459.969969][T12143] netlink: 'syz.3.1893': attribute type 10 has an invalid length. [ 460.399708][T12152] syzkaller0: entered promiscuous mode [ 460.405478][T12152] syzkaller0: entered allmulticast mode [ 461.357578][T12178] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 461.382261][T12180] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1906'. [ 462.056036][T12193] netlink: 'syz.1.1917': attribute type 10 has an invalid length. [ 462.468393][T12207] netlink: 'syz.1.1912': attribute type 28 has an invalid length. [ 462.485661][T12207] netlink: 'syz.1.1912': attribute type 29 has an invalid length. [ 462.501690][T12207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1912'. [ 463.213559][T12227] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 463.560255][T12237] netlink: 'syz.0.1926': attribute type 9 has an invalid length. [ 463.570847][T12237] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1926'. [ 464.000314][T12242] netlink: 'syz.1.1927': attribute type 21 has an invalid length. [ 464.274021][T12243] netlink: 'syz.1.1927': attribute type 10 has an invalid length. [ 464.336483][T12243] batman_adv: batadv0: Adding interface: netdevsim0 [ 464.406292][T12243] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.442149][T12243] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 465.238899][T12262] netlink: 'syz.1.1934': attribute type 1 has an invalid length. [ 465.255355][T12262] netlink: 60179 bytes leftover after parsing attributes in process `syz.1.1934'. [ 465.761784][T12274] FAULT_INJECTION: forcing a failure. [ 465.761784][T12274] name failslab, interval 1, probability 0, space 0, times 0 [ 465.798404][T12274] CPU: 1 PID: 12274 Comm: syz.2.1937 Not tainted syzkaller #0 [ 465.806230][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 465.816430][T12274] Call Trace: [ 465.819750][T12274] [ 465.822711][T12274] dump_stack_lvl+0x18c/0x250 [ 465.827459][T12274] ? show_regs_print_info+0x20/0x20 [ 465.832785][T12274] ? load_image+0x420/0x420 [ 465.837430][T12274] should_fail_ex+0x39d/0x4d0 [ 465.842259][T12274] should_failslab+0x9/0x20 [ 465.846795][T12274] slab_pre_alloc_hook+0x59/0x310 [ 465.851867][T12274] ? __build_skb_around+0x255/0x3d0 [ 465.857098][T12274] kmem_cache_alloc+0x5a/0x2d0 [ 465.861986][T12274] ? _sctp_make_chunk+0x14e/0x420 [ 465.867058][T12274] _sctp_make_chunk+0x14e/0x420 [ 465.871959][T12274] sctp_make_init+0x5f3/0xfc0 [ 465.876704][T12274] ? sctp_addto_chunk+0x230/0x230 [ 465.881769][T12274] ? kernel_text_address+0xa0/0xd0 [ 465.886926][T12274] ? __kernel_text_address+0xd/0x30 [ 465.892164][T12274] ? stack_trace_save+0x100/0x100 [ 465.897222][T12274] ? arch_stack_walk+0x160/0x190 [ 465.902206][T12274] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 465.907280][T12274] sctp_do_sm+0x23a/0x5a60 [ 465.911723][T12274] ? sctp_cname+0x110/0x110 [ 465.916252][T12274] ? __stack_depot_save+0x1f/0x630 [ 465.921407][T12274] ? kasan_set_track+0x4e/0x70 [ 465.926205][T12274] ? __kasan_kmalloc+0x8f/0xa0 [ 465.931000][T12274] ? sctp_stream_init_ext+0x57/0x170 [ 465.936310][T12274] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 465.942005][T12274] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 465.947946][T12274] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 465.953008][T12274] ? do_syscall_64+0x55/0xa0 [ 465.957717][T12274] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.963876][T12274] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 465.969820][T12274] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 465.975239][T12274] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 465.980653][T12274] ? __asan_memcpy+0x40/0x70 [ 465.985289][T12274] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 465.990714][T12274] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 465.996574][T12274] ? __sctp_connect+0xd80/0xd80 [ 466.001464][T12274] ? __local_bh_enable_ip+0x13a/0x1c0 [ 466.006879][T12274] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 466.012457][T12274] ? security_sctp_bind_connect+0x89/0xb0 [ 466.018216][T12274] sctp_sendmsg+0x1b83/0x28c0 [ 466.022950][T12274] ? sctp_getsockopt+0xb60/0xb60 [ 466.027919][T12274] ? aa_sk_perm+0x83c/0x970 [ 466.032512][T12274] ? aa_af_perm+0x330/0x330 [ 466.037072][T12274] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 466.043666][T12274] ? sock_rps_record_flow+0x19/0x3f0 [ 466.048992][T12274] ? inet_sendmsg+0xe9/0x2f0 [ 466.053620][T12274] ? inet_send_prepare+0x260/0x260 [ 466.058783][T12274] ____sys_sendmsg+0x5ba/0x960 [ 466.063600][T12274] ? __asan_memset+0x22/0x40 [ 466.068310][T12274] ? __sys_sendmsg_sock+0x30/0x30 [ 466.073362][T12274] ? __import_iovec+0x3fa/0x850 [ 466.078250][T12274] ? import_iovec+0x73/0xa0 [ 466.082791][T12274] ___sys_sendmsg+0x2a6/0x360 [ 466.087499][T12274] ? get_pid_task+0x20/0x1e0 [ 466.092129][T12274] ? __sys_sendmsg+0x2a0/0x2a0 [ 466.096960][T12274] ? __lock_acquire+0x7d40/0x7d40 [ 466.102163][T12274] __se_sys_sendmsg+0x1c2/0x2b0 [ 466.107069][T12274] ? __x64_sys_sendmsg+0x80/0x80 [ 466.112085][T12274] ? lockdep_hardirqs_on+0x98/0x150 [ 466.117410][T12274] do_syscall_64+0x55/0xa0 [ 466.121967][T12274] ? clear_bhb_loop+0x40/0x90 [ 466.126806][T12274] ? clear_bhb_loop+0x40/0x90 [ 466.131805][T12274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.137764][T12274] RIP: 0033:0x7f0ab499c819 [ 466.142222][T12274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.162154][T12274] RSP: 002b:00007f0ab2bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.170816][T12274] RAX: ffffffffffffffda RBX: 00007f0ab4c15fa0 RCX: 00007f0ab499c819 [ 466.178831][T12274] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000006 [ 466.186830][T12274] RBP: 00007f0ab2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 466.194836][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.202843][T12274] R13: 00007f0ab4c16038 R14: 00007f0ab4c15fa0 R15: 00007ffec2e3b538 [ 466.210861][T12274] [ 466.775832][T12282] netlink: 'syz.2.1939': attribute type 21 has an invalid length. [ 466.803324][T12282] netlink: 'syz.2.1939': attribute type 1 has an invalid length. [ 466.811157][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1939'. [ 468.335402][T12305] netlink: 'syz.0.1947': attribute type 29 has an invalid length. [ 469.850322][T12305] netlink: 'syz.0.1947': attribute type 29 has an invalid length. [ 470.731553][T12335] netlink: 'syz.3.1959': attribute type 29 has an invalid length. [ 470.800745][T12335] netlink: 'syz.3.1959': attribute type 29 has an invalid length. [ 470.864704][T12342] netlink: 'syz.1.1958': attribute type 10 has an invalid length. [ 470.902002][T12344] netlink: 'syz.3.1959': attribute type 29 has an invalid length. [ 470.957972][T12335] netlink: 'syz.3.1959': attribute type 29 has an invalid length. [ 471.018545][T12341] netlink: 'syz.3.1959': attribute type 29 has an invalid length. [ 472.017439][T12355] FAULT_INJECTION: forcing a failure. [ 472.017439][T12355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 472.050936][T12355] CPU: 1 PID: 12355 Comm: syz.3.1964 Not tainted syzkaller #0 [ 472.058574][T12355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 472.068783][T12355] Call Trace: [ 472.072134][T12355] [ 472.075108][T12355] dump_stack_lvl+0x18c/0x250 [ 472.079845][T12355] ? show_regs_print_info+0x20/0x20 [ 472.085082][T12355] ? load_image+0x420/0x420 [ 472.089647][T12355] ? __lock_acquire+0x7d40/0x7d40 [ 472.094722][T12355] should_fail_ex+0x39d/0x4d0 [ 472.099452][T12355] prepare_alloc_pages+0x1e2/0x5f0 [ 472.104593][T12355] __alloc_pages+0x134/0x460 [ 472.109317][T12355] ? zone_statistics+0x170/0x170 [ 472.114484][T12355] ? alloc_pages+0x4dc/0x740 [ 472.119210][T12355] ? do_raw_spin_unlock+0x121/0x230 [ 472.124472][T12355] __get_free_pages+0xc/0x30 [ 472.129191][T12355] kasan_populate_vmalloc_pte+0x35/0x100 [ 472.134832][T12355] __apply_to_page_range+0x860/0xdd0 [ 472.140214][T12355] ? kasan_populate_vmalloc+0x70/0x70 [ 472.145611][T12355] ? apply_to_page_range+0x50/0x50 [ 472.150863][T12355] ? do_raw_spin_unlock+0x121/0x230 [ 472.156087][T12355] alloc_vmap_area+0x1d0c/0x1e30 [ 472.161062][T12355] ? vm_map_ram+0xcb0/0xcb0 [ 472.165589][T12355] ? rcu_is_watching+0x15/0xb0 [ 472.170346][T12355] __get_vm_area_node+0x162/0x370 [ 472.175368][T12355] __vmalloc_node_range+0x36e/0x1330 [ 472.180647][T12355] ? sock_hash_alloc+0x261/0x4d0 [ 472.185605][T12355] ? free_vm_area+0x50/0x50 [ 472.190101][T12355] ? bpf_map_area_alloc+0x5e/0x110 [ 472.195201][T12355] ? rcu_is_watching+0x15/0xb0 [ 472.199956][T12355] ? bpf_map_area_alloc+0x5e/0x110 [ 472.205086][T12355] bpf_map_area_alloc+0xf1/0x110 [ 472.210071][T12355] ? sock_hash_alloc+0x261/0x4d0 [ 472.215050][T12355] sock_hash_alloc+0x261/0x4d0 [ 472.219862][T12355] map_create+0x877/0x12f0 [ 472.224313][T12355] ? bpf_lsm_bpf+0x9/0x10 [ 472.228691][T12355] __sys_bpf+0x651/0x890 [ 472.232956][T12355] ? bpf_link_show_fdinfo+0x390/0x390 [ 472.238355][T12355] ? lock_chain_count+0x20/0x20 [ 472.243230][T12355] __x64_sys_bpf+0x7c/0x90 [ 472.247664][T12355] do_syscall_64+0x55/0xa0 [ 472.252097][T12355] ? clear_bhb_loop+0x40/0x90 [ 472.256789][T12355] ? clear_bhb_loop+0x40/0x90 [ 472.261483][T12355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 472.267388][T12355] RIP: 0033:0x7f23ba59c819 [ 472.271827][T12355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.291449][T12355] RSP: 002b:00007f23bb42f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.299978][T12355] RAX: ffffffffffffffda RBX: 00007f23ba815fa0 RCX: 00007f23ba59c819 [ 472.307967][T12355] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 472.315951][T12355] RBP: 00007f23bb42f090 R08: 0000000000000000 R09: 0000000000000000 [ 472.323944][T12355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 472.331922][T12355] R13: 00007f23ba816038 R14: 00007f23ba815fa0 R15: 00007ffeaaa5a858 [ 472.339917][T12355] [ 472.625343][T12364] validate_nla: 1 callbacks suppressed [ 472.625367][T12364] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 472.742213][T12370] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 472.919981][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 472.936237][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 472.981700][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 473.005709][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 473.028838][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 473.054263][T12375] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 473.399095][T12392] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1976'. [ 473.954159][T12402] netlink: 'syz.2.1979': attribute type 10 has an invalid length. [ 474.344980][T12407] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 474.644744][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 474.749165][T12415] FAULT_INJECTION: forcing a failure. [ 474.749165][T12415] name failslab, interval 1, probability 0, space 0, times 0 [ 474.772169][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 474.794756][T12415] CPU: 0 PID: 12415 Comm: syz.1.1984 Not tainted syzkaller #0 [ 474.802310][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 474.812404][T12415] Call Trace: [ 474.815721][T12415] [ 474.818687][T12415] dump_stack_lvl+0x18c/0x250 [ 474.823551][T12415] ? sctp_sendmsg+0x1575/0x28c0 [ 474.828641][T12415] ? ___sys_sendmsg+0x2a6/0x360 [ 474.833539][T12415] ? show_regs_print_info+0x20/0x20 [ 474.838889][T12415] ? load_image+0x420/0x420 [ 474.843477][T12415] should_fail_ex+0x39d/0x4d0 [ 474.848219][T12415] should_failslab+0x9/0x20 [ 474.852765][T12415] slab_pre_alloc_hook+0x59/0x310 [ 474.857836][T12415] ? sctp_add_bind_addr+0x8c/0x360 [ 474.862982][T12415] __kmem_cache_alloc_node+0x53/0x250 [ 474.868514][T12415] ? sctp_add_bind_addr+0x8c/0x360 [ 474.873766][T12415] kmalloc_trace+0x2a/0xe0 [ 474.878232][T12415] sctp_add_bind_addr+0x8c/0x360 [ 474.883211][T12415] sctp_copy_local_addr_list+0x315/0x4f0 [ 474.888893][T12415] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 474.894708][T12415] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 474.900899][T12415] ? sctp_v4_is_any+0x35/0x60 [ 474.905599][T12415] ? sctp_copy_one_addr+0x8c/0x350 [ 474.910731][T12415] sctp_bind_addr_copy+0xb3/0x3c0 [ 474.915780][T12415] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 474.922218][T12415] sctp_connect_new_asoc+0x2f9/0x6a0 [ 474.927534][T12415] ? __sctp_connect+0xd80/0xd80 [ 474.932661][T12415] ? __local_bh_enable_ip+0x13a/0x1c0 [ 474.938055][T12415] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 474.943629][T12415] ? security_sctp_bind_connect+0x89/0xb0 [ 474.949553][T12415] sctp_sendmsg+0x1575/0x28c0 [ 474.954285][T12415] ? sctp_getsockopt+0xb60/0xb60 [ 474.959323][T12415] ? aa_sk_perm+0x83c/0x970 [ 474.963940][T12415] ? aa_af_perm+0x330/0x330 [ 474.968473][T12415] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 474.974996][T12415] ? sock_rps_record_flow+0x19/0x3f0 [ 474.980328][T12415] ? inet_sendmsg+0xe9/0x2f0 [ 474.984930][T12415] ? inet_send_prepare+0x260/0x260 [ 474.990056][T12415] ____sys_sendmsg+0x5ba/0x960 [ 474.994832][T12415] ? __lock_acquire+0x7d40/0x7d40 [ 474.999872][T12415] ? __asan_memset+0x22/0x40 [ 475.004483][T12415] ? __sys_sendmsg_sock+0x30/0x30 [ 475.009516][T12415] ? __import_iovec+0x5f2/0x850 [ 475.014386][T12415] ? import_iovec+0x73/0xa0 [ 475.018905][T12415] ___sys_sendmsg+0x2a6/0x360 [ 475.023597][T12415] ? get_pid_task+0x20/0x1e0 [ 475.028221][T12415] ? __sys_sendmsg+0x2a0/0x2a0 [ 475.033017][T12415] ? __lock_acquire+0x7d40/0x7d40 [ 475.038086][T12415] __se_sys_sendmsg+0x1c2/0x2b0 [ 475.042980][T12415] ? __x64_sys_sendmsg+0x80/0x80 [ 475.048134][T12415] ? lockdep_hardirqs_on+0x98/0x150 [ 475.053349][T12415] do_syscall_64+0x55/0xa0 [ 475.057775][T12415] ? clear_bhb_loop+0x40/0x90 [ 475.062484][T12415] ? clear_bhb_loop+0x40/0x90 [ 475.067177][T12415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.073087][T12415] RIP: 0033:0x7fea40d9c819 [ 475.077614][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.097256][T12415] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.105879][T12415] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 475.113863][T12415] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 475.121851][T12415] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 475.129854][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.137924][T12415] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 475.145927][T12415] [ 475.940573][T12441] syzkaller0: entered promiscuous mode [ 475.953313][T12441] syzkaller0: entered allmulticast mode [ 479.571148][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 479.580471][T12473] validate_nla: 5 callbacks suppressed [ 479.580485][T12473] netlink: 'syz.0.2007': attribute type 10 has an invalid length. [ 479.815444][T12477] syzkaller0: entered promiscuous mode [ 479.821440][T12477] syzkaller0: entered allmulticast mode [ 480.094520][T12484] tap0: tun_chr_ioctl cmd 1074025677 [ 480.100174][T12484] tap0: linktype set to 6 [ 480.253972][T12489] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 480.551714][T12495] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 480.565557][T12497] netlink: 'syz.2.2009': attribute type 10 has an invalid length. [ 481.142783][T12514] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2013'. [ 481.250694][T12516] netlink: 'syz.2.2015': attribute type 4 has an invalid length. [ 481.259932][T12518] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2013'. [ 481.291656][T12516] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2015'. [ 481.591054][T12527] netlink: 'syz.2.2016': attribute type 10 has an invalid length. [ 482.622525][T12538] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 482.636140][T12538] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 482.656834][T12542] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 482.690838][T12544] netlink: 'syz.1.2021': attribute type 29 has an invalid length. [ 485.713429][T12577] validate_nla: 4 callbacks suppressed [ 485.713452][T12577] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 485.777390][T12583] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 485.926947][T12584] tap0: tun_chr_ioctl cmd 1074025677 [ 485.940432][T12584] tap0: linktype set to 6 [ 486.320574][T12587] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 486.343601][T12587] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 486.396135][T12590] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 486.447762][T12594] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 486.473614][T12587] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 486.553068][T12595] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 486.579532][T12587] netlink: 'syz.0.2035': attribute type 29 has an invalid length. [ 487.044547][T12605] netlink: 'syz.1.2041': attribute type 10 has an invalid length. [ 487.902811][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 490.705508][T12632] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 490.753412][T12632] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 490.795765][T12635] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 490.824707][T12632] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 490.871342][T12632] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 490.940399][T12632] netlink: 'syz.2.2048': attribute type 29 has an invalid length. [ 491.212529][ T5910] tipc: Subscription rejected, illegal request [ 491.227609][T12651] netlink: 'syz.3.2053': attribute type 10 has an invalid length. [ 491.656328][T12666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.898818][T12670] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 492.268962][T12672] netlink: 'syz.2.2061': attribute type 10 has an invalid length. [ 493.153286][T12690] netlink: 'syz.2.2066': attribute type 29 has an invalid length. [ 493.177699][T12690] netlink: 'syz.2.2066': attribute type 29 has an invalid length. [ 493.374823][T12697] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2069'. [ 493.636634][T12705] FAULT_INJECTION: forcing a failure. [ 493.636634][T12705] name failslab, interval 1, probability 0, space 0, times 0 [ 493.651397][T12705] CPU: 1 PID: 12705 Comm: syz.1.2073 Not tainted syzkaller #0 [ 493.658921][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.669057][T12705] Call Trace: [ 493.672376][T12705] [ 493.675345][T12705] dump_stack_lvl+0x18c/0x250 [ 493.680090][T12705] ? show_regs_print_info+0x20/0x20 [ 493.685352][T12705] ? load_image+0x420/0x420 [ 493.689919][T12705] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 493.696050][T12705] ? lock_chain_count+0x20/0x20 [ 493.700950][T12705] should_fail_ex+0x39d/0x4d0 [ 493.705685][T12705] should_failslab+0x9/0x20 [ 493.710241][T12705] slab_pre_alloc_hook+0x59/0x310 [ 493.715336][T12705] kmem_cache_alloc+0x5a/0x2d0 [ 493.720340][T12705] ? slab_build_skb+0x2b/0x3f0 [ 493.725235][T12705] slab_build_skb+0x2b/0x3f0 [ 493.729866][T12705] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 493.735421][T12705] ? lockdep_hardirqs_on+0x98/0x150 [ 493.740681][T12705] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.746909][T12705] ? cpu_online+0x60/0x60 [ 493.751288][T12705] bpf_prog_test_run+0x321/0x390 [ 493.756277][T12705] __sys_bpf+0x49d/0x890 [ 493.760546][T12705] ? bpf_link_show_fdinfo+0x390/0x390 [ 493.765948][T12705] ? lock_chain_count+0x20/0x20 [ 493.770813][T12705] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 493.776815][T12705] __x64_sys_bpf+0x7c/0x90 [ 493.781248][T12705] do_syscall_64+0x55/0xa0 [ 493.785684][T12705] ? clear_bhb_loop+0x40/0x90 [ 493.790419][T12705] ? clear_bhb_loop+0x40/0x90 [ 493.795114][T12705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.801023][T12705] RIP: 0033:0x7fea40d9c819 [ 493.805553][T12705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.825193][T12705] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.833711][T12705] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 493.841689][T12705] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 493.849669][T12705] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 493.857651][T12705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.865638][T12705] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 493.873720][T12705] [ 501.427800][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.434547][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.698985][T12836] validate_nla: 12 callbacks suppressed [ 501.699026][T12836] netlink: 'syz.0.2116': attribute type 10 has an invalid length. [ 501.735342][T12836] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2116'. [ 503.483678][T12862] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.515548][T12862] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.611292][T12856] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.662250][T12862] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.724574][T12856] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.838888][T12862] netlink: 'syz.1.2122': attribute type 29 has an invalid length. [ 503.969041][T12869] netlink: 'syz.0.2126': attribute type 2 has an invalid length. [ 504.046113][T12869] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 504.084818][T12869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.300394][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 506.602090][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 507.361694][T12907] netlink: 'syz.2.2134': attribute type 10 has an invalid length. [ 508.139080][T12913] netlink: 115020 bytes leftover after parsing attributes in process `syz.0.2136'. [ 508.416925][T12917] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 508.441705][T12917] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 508.582168][T12922] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 508.638876][T12917] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 508.742251][T12922] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 508.765576][T12917] netlink: 'syz.3.2137': attribute type 29 has an invalid length. [ 509.485200][T12938] netlink: 'syz.3.2146': attribute type 10 has an invalid length. [ 510.516784][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 511.520369][T12975] netlink: 'syz.2.2154': attribute type 29 has an invalid length. [ 511.565092][T12975] netlink: 'syz.2.2154': attribute type 29 has an invalid length. [ 512.616339][T12998] validate_nla: 5 callbacks suppressed [ 512.616364][T12998] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 513.028508][T13001] netlink: 'syz.0.2160': attribute type 10 has an invalid length. [ 513.048760][T13001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2160'. [ 514.265686][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2162'. [ 515.233831][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'. [ 516.999243][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 517.097543][T13053] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.152633][T13053] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.182168][T13054] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.223739][T13055] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.290206][T13053] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.377803][T13053] netlink: 'syz.0.2166': attribute type 29 has an invalid length. [ 517.704720][T13059] netlink: 'syz.0.2168': attribute type 4 has an invalid length. [ 517.975334][T13061] netlink: 'syz.3.2169': attribute type 10 has an invalid length. [ 518.094994][T13061] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.226606][T13061] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.248094][T13061] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.257778][T13061] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.996740][T13097] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2181'. [ 520.066528][T13096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2181'. [ 520.082109][T13096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2181'. [ 520.103865][T13096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2181'. [ 520.317748][T13100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.325750][T13100] IPv6: NLM_F_CREATE should be set when creating new route [ 520.333524][T13100] IPv6: NLM_F_CREATE should be set when creating new route [ 520.341249][T13100] IPv6: NLM_F_CREATE should be set when creating new route [ 520.764827][T13108] netlink: 'syz.0.2186': attribute type 10 has an invalid length. [ 523.359421][T13155] FAULT_INJECTION: forcing a failure. [ 523.359421][T13155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.394229][T13155] CPU: 1 PID: 13155 Comm: syz.1.2204 Not tainted syzkaller #0 [ 523.401777][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 523.411957][T13155] Call Trace: [ 523.415264][T13155] [ 523.418223][T13155] dump_stack_lvl+0x18c/0x250 [ 523.422961][T13155] ? show_regs_print_info+0x20/0x20 [ 523.428202][T13155] ? load_image+0x420/0x420 [ 523.432749][T13155] ? __lock_acquire+0x7d40/0x7d40 [ 523.437834][T13155] should_fail_ex+0x39d/0x4d0 [ 523.442594][T13155] prepare_alloc_pages+0x1e2/0x5f0 [ 523.447770][T13155] __alloc_pages+0x134/0x460 [ 523.452425][T13155] ? zone_statistics+0x170/0x170 [ 523.457422][T13155] ? alloc_pages+0x4dc/0x740 [ 523.462064][T13155] ? do_raw_spin_unlock+0x121/0x230 [ 523.467311][T13155] __get_free_pages+0xc/0x30 [ 523.472042][T13155] kasan_populate_vmalloc_pte+0x35/0x100 [ 523.477732][T13155] __apply_to_page_range+0x860/0xdd0 [ 523.483077][T13155] ? kasan_populate_vmalloc+0x70/0x70 [ 523.488510][T13155] ? apply_to_page_range+0x50/0x50 [ 523.493662][T13155] ? do_raw_spin_unlock+0x121/0x230 [ 523.498907][T13155] alloc_vmap_area+0x1d0c/0x1e30 [ 523.503926][T13155] ? vm_map_ram+0xcb0/0xcb0 [ 523.508668][T13155] ? rcu_is_watching+0x15/0xb0 [ 523.513488][T13155] __get_vm_area_node+0x162/0x370 [ 523.518557][T13155] __vmalloc_node_range+0x36e/0x1330 [ 523.523885][T13155] ? sock_hash_alloc+0x261/0x4d0 [ 523.528901][T13155] ? free_vm_area+0x50/0x50 [ 523.533470][T13155] ? bpf_map_area_alloc+0x5e/0x110 [ 523.538723][T13155] ? rcu_is_watching+0x15/0xb0 [ 523.543525][T13155] ? bpf_map_area_alloc+0x5e/0x110 [ 523.548687][T13155] bpf_map_area_alloc+0xf1/0x110 [ 523.553664][T13155] ? sock_hash_alloc+0x261/0x4d0 [ 523.558903][T13155] sock_hash_alloc+0x261/0x4d0 [ 523.563707][T13155] map_create+0x877/0x12f0 [ 523.568426][T13155] ? bpf_lsm_bpf+0x9/0x10 [ 523.572796][T13155] __sys_bpf+0x651/0x890 [ 523.577157][T13155] ? bpf_link_show_fdinfo+0x390/0x390 [ 523.582677][T13155] ? lock_chain_count+0x20/0x20 [ 523.587560][T13155] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 523.593591][T13155] __x64_sys_bpf+0x7c/0x90 [ 523.598041][T13155] do_syscall_64+0x55/0xa0 [ 523.602485][T13155] ? clear_bhb_loop+0x40/0x90 [ 523.607199][T13155] ? clear_bhb_loop+0x40/0x90 [ 523.611934][T13155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.617865][T13155] RIP: 0033:0x7fea40d9c819 [ 523.622400][T13155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.642220][T13155] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.650753][T13155] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 523.658752][T13155] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 523.666846][T13155] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 523.674861][T13155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.682880][T13155] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 523.690904][T13155] [ 525.318623][T13171] netlink: 'syz.0.2210': attribute type 10 has an invalid length. [ 526.948613][T13177] netlink: 'syz.1.2212': attribute type 21 has an invalid length. [ 529.169146][T13190] netlink: 'syz.2.2215': attribute type 2 has an invalid length. [ 529.191670][T13190] netlink: 'syz.2.2215': attribute type 1 has an invalid length. [ 529.590198][T13193] netlink: 'syz.2.2216': attribute type 10 has an invalid length. [ 529.743682][T13199] netlink: 'syz.0.2218': attribute type 29 has an invalid length. [ 529.772278][T13199] netlink: 'syz.0.2218': attribute type 29 has an invalid length. [ 529.805676][T13199] netlink: 'syz.0.2218': attribute type 29 has an invalid length. [ 529.843093][T13199] netlink: 'syz.0.2218': attribute type 29 has an invalid length. [ 529.987309][T13205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 530.286474][T13213] netlink: 'syz.1.2226': attribute type 2 has an invalid length. [ 530.605052][T13218] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2228'. [ 530.975883][T13223] validate_nla: 1 callbacks suppressed [ 530.975901][T13223] netlink: 'syz.2.2230': attribute type 10 has an invalid length. [ 531.076641][T13225] FAULT_INJECTION: forcing a failure. [ 531.076641][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 531.107448][T13227] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2232'. [ 531.117628][T13225] CPU: 1 PID: 13225 Comm: syz.1.2231 Not tainted syzkaller #0 [ 531.125144][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.135368][T13225] Call Trace: [ 531.138699][T13225] [ 531.141758][T13225] dump_stack_lvl+0x18c/0x250 [ 531.146758][T13225] ? sctp_sendmsg+0x1575/0x28c0 [ 531.151652][T13225] ? ___sys_sendmsg+0x2a6/0x360 [ 531.156558][T13225] ? show_regs_print_info+0x20/0x20 [ 531.161819][T13225] ? load_image+0x420/0x420 [ 531.166400][T13225] should_fail_ex+0x39d/0x4d0 [ 531.171140][T13225] should_failslab+0x9/0x20 [ 531.175715][T13225] slab_pre_alloc_hook+0x59/0x310 [ 531.180762][T13225] ? sctp_add_bind_addr+0x8c/0x360 [ 531.185980][T13225] __kmem_cache_alloc_node+0x53/0x250 [ 531.191381][T13225] ? sctp_add_bind_addr+0x8c/0x360 [ 531.196518][T13225] kmalloc_trace+0x2a/0xe0 [ 531.200956][T13225] sctp_add_bind_addr+0x8c/0x360 [ 531.205917][T13225] sctp_copy_local_addr_list+0x315/0x4f0 [ 531.211654][T13225] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 531.217387][T13225] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 531.223479][T13225] ? sctp_v4_is_any+0x35/0x60 [ 531.228166][T13225] ? sctp_copy_one_addr+0x8c/0x350 [ 531.233296][T13225] sctp_bind_addr_copy+0xb3/0x3c0 [ 531.238333][T13225] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 531.244801][T13225] sctp_connect_new_asoc+0x2f9/0x6a0 [ 531.250100][T13225] ? __sctp_connect+0xd80/0xd80 [ 531.254965][T13225] ? __local_bh_enable_ip+0x13a/0x1c0 [ 531.260363][T13225] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 531.265937][T13225] ? security_sctp_bind_connect+0x89/0xb0 [ 531.271675][T13225] sctp_sendmsg+0x1575/0x28c0 [ 531.276483][T13225] ? sctp_getsockopt+0xb60/0xb60 [ 531.281455][T13225] ? aa_sk_perm+0x83c/0x970 [ 531.286109][T13225] ? aa_af_perm+0x330/0x330 [ 531.290655][T13225] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 531.297210][T13225] ? sock_rps_record_flow+0x19/0x3f0 [ 531.302533][T13225] ? inet_sendmsg+0xe9/0x2f0 [ 531.307233][T13225] ? inet_send_prepare+0x260/0x260 [ 531.312456][T13225] ____sys_sendmsg+0x5ba/0x960 [ 531.317256][T13225] ? __lock_acquire+0x7d40/0x7d40 [ 531.322311][T13225] ? __asan_memset+0x22/0x40 [ 531.327187][T13225] ? __sys_sendmsg_sock+0x30/0x30 [ 531.332234][T13225] ? __import_iovec+0x5f2/0x850 [ 531.337103][T13225] ? import_iovec+0x73/0xa0 [ 531.341619][T13225] ___sys_sendmsg+0x2a6/0x360 [ 531.346361][T13225] ? get_pid_task+0x20/0x1e0 [ 531.351058][T13225] ? __sys_sendmsg+0x2a0/0x2a0 [ 531.355868][T13225] ? __lock_acquire+0x7d40/0x7d40 [ 531.361050][T13225] __se_sys_sendmsg+0x1c2/0x2b0 [ 531.366037][T13225] ? __x64_sys_sendmsg+0x80/0x80 [ 531.371011][T13225] ? lockdep_hardirqs_on+0x98/0x150 [ 531.376235][T13225] do_syscall_64+0x55/0xa0 [ 531.380761][T13225] ? clear_bhb_loop+0x40/0x90 [ 531.385463][T13225] ? clear_bhb_loop+0x40/0x90 [ 531.390163][T13225] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.396085][T13225] RIP: 0033:0x7fea40d9c819 [ 531.400638][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.420374][T13225] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.429761][T13225] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 531.437749][T13225] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000004 [ 531.445881][T13225] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 531.453877][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.461976][T13225] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 531.470002][T13225] [ 531.539998][T13232] netlink: 'syz.2.2233': attribute type 10 has an invalid length. [ 533.227890][T13245] netlink: 'syz.2.2236': attribute type 21 has an invalid length. [ 533.244374][T13245] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2236'. [ 533.724297][T13254] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2239'. [ 534.160621][T13256] FAULT_INJECTION: forcing a failure. [ 534.160621][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 534.175827][T13256] CPU: 1 PID: 13256 Comm: syz.2.2240 Not tainted syzkaller #0 [ 534.183746][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 534.194020][T13256] Call Trace: [ 534.197432][T13256] [ 534.200552][T13256] dump_stack_lvl+0x18c/0x250 [ 534.205240][T13256] ? sctp_sendmsg+0x1575/0x28c0 [ 534.210363][T13256] ? ___sys_sendmsg+0x2a6/0x360 [ 534.215666][T13256] ? show_regs_print_info+0x20/0x20 [ 534.220991][T13256] ? load_image+0x420/0x420 [ 534.225624][T13256] should_fail_ex+0x39d/0x4d0 [ 534.230371][T13256] should_failslab+0x9/0x20 [ 534.234871][T13256] slab_pre_alloc_hook+0x59/0x310 [ 534.239910][T13256] ? sctp_add_bind_addr+0x8c/0x360 [ 534.245025][T13256] __kmem_cache_alloc_node+0x53/0x250 [ 534.250407][T13256] ? sctp_add_bind_addr+0x8c/0x360 [ 534.255511][T13256] kmalloc_trace+0x2a/0xe0 [ 534.259930][T13256] sctp_add_bind_addr+0x8c/0x360 [ 534.264873][T13256] sctp_copy_local_addr_list+0x315/0x4f0 [ 534.270515][T13256] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 534.276498][T13256] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 534.282759][T13256] ? sctp_v4_is_any+0x35/0x60 [ 534.287535][T13256] ? sctp_copy_one_addr+0x8c/0x350 [ 534.292668][T13256] sctp_bind_addr_copy+0xb3/0x3c0 [ 534.297707][T13256] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 534.304208][T13256] sctp_connect_new_asoc+0x2f9/0x6a0 [ 534.309522][T13256] ? __sctp_connect+0xd80/0xd80 [ 534.314378][T13256] ? __local_bh_enable_ip+0x13a/0x1c0 [ 534.319768][T13256] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 534.325343][T13256] ? security_sctp_bind_connect+0x89/0xb0 [ 534.331210][T13256] sctp_sendmsg+0x1575/0x28c0 [ 534.335975][T13256] ? sctp_getsockopt+0xb60/0xb60 [ 534.340926][T13256] ? aa_sk_perm+0x83c/0x970 [ 534.345550][T13256] ? aa_af_perm+0x330/0x330 [ 534.350062][T13256] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 534.356532][T13256] ? sock_rps_record_flow+0x19/0x3f0 [ 534.361828][T13256] ? inet_sendmsg+0xe9/0x2f0 [ 534.366414][T13256] ? inet_send_prepare+0x260/0x260 [ 534.371518][T13256] ____sys_sendmsg+0x5ba/0x960 [ 534.376311][T13256] ? __lock_acquire+0x7d40/0x7d40 [ 534.381364][T13256] ? __asan_memset+0x22/0x40 [ 534.385948][T13256] ? __sys_sendmsg_sock+0x30/0x30 [ 534.390959][T13256] ? __import_iovec+0x5f2/0x850 [ 534.395892][T13256] ? import_iovec+0x73/0xa0 [ 534.400385][T13256] ___sys_sendmsg+0x2a6/0x360 [ 534.405088][T13256] ? __sys_sendmsg+0x2a0/0x2a0 [ 534.410028][T13256] ? __lock_acquire+0x7d40/0x7d40 [ 534.415202][T13256] __se_sys_sendmsg+0x1c2/0x2b0 [ 534.420041][T13256] ? __x64_sys_sendmsg+0x80/0x80 [ 534.425098][T13256] ? lockdep_hardirqs_on+0x98/0x150 [ 534.430359][T13256] do_syscall_64+0x55/0xa0 [ 534.434790][T13256] ? clear_bhb_loop+0x40/0x90 [ 534.439577][T13256] ? clear_bhb_loop+0x40/0x90 [ 534.444251][T13256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.450139][T13256] RIP: 0033:0x7f0ab499c819 [ 534.454556][T13256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.474280][T13256] RSP: 002b:00007f0ab2bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.482713][T13256] RAX: ffffffffffffffda RBX: 00007f0ab4c15fa0 RCX: 00007f0ab499c819 [ 534.490768][T13256] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 534.498738][T13256] RBP: 00007f0ab2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 534.506739][T13256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 534.514798][T13256] R13: 00007f0ab4c16038 R14: 00007f0ab4c15fa0 R15: 00007ffec2e3b538 [ 534.522816][T13256] [ 534.768729][T13262] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2243'. [ 534.790605][T13262] openvswitch: netlink: Flow actions attr not present in new flow. [ 534.812656][T13264] netlink: 'syz.3.2244': attribute type 10 has an invalid length. [ 535.495176][T13271] tun0: tun_chr_ioctl cmd 1074025678 [ 535.513621][T13271] tun0: group set to 0 [ 535.867513][T13280] netlink: 'syz.3.2248': attribute type 10 has an invalid length. [ 536.092175][T13284] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2249'. [ 536.214756][T13286] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.242315][T13286] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.317447][T13285] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.351691][T13285] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.377801][T13285] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.548822][T13286] netlink: 'syz.1.2257': attribute type 29 has an invalid length. [ 536.684410][T13296] netlink: 'syz.3.2253': attribute type 3 has an invalid length. [ 536.703861][T13296] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2253'. [ 536.904812][T13304] netlink: 'syz.2.2256': attribute type 10 has an invalid length. [ 537.796675][T13310] netlink: 'syz.1.2255': attribute type 10 has an invalid length. [ 539.673704][T13341] netlink: 'syz.3.2268': attribute type 29 has an invalid length. [ 541.507388][T13375] validate_nla: 13 callbacks suppressed [ 541.507410][T13375] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 541.822291][T13375] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 541.948869][T13376] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 542.278859][T13377] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 542.321109][T13379] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 542.443420][T13376] netlink: 'syz.3.2280': attribute type 29 has an invalid length. [ 542.788795][T13397] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2287'. [ 542.814137][T13389] netlink: 'syz.0.2276': attribute type 10 has an invalid length. [ 543.566217][T13412] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 543.606920][T13412] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 543.634337][T13415] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 544.744282][T13439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2301'. [ 544.836512][T13439] C: renamed from team_slave_0 [ 544.961070][T13439] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2301'. [ 545.349011][T13452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.359265][T13452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.370203][T13452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.380224][T13452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.389174][T13452] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.396918][T13452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.447740][T13439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2301'. [ 546.447077][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 546.615634][T13477] validate_nla: 12 callbacks suppressed [ 546.615648][T13477] netlink: 'syz.2.2310': attribute type 10 has an invalid length. [ 546.738685][ T5916] .`: (slave netdevsim0): Releasing backup interface [ 546.804568][T13448] chnl_net:caif_netlink_parms(): no params data found [ 546.968920][T13448] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.976417][T13448] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.984399][T13448] bridge_slave_0: entered allmulticast mode [ 546.992087][T13448] bridge_slave_0: entered promiscuous mode [ 547.026384][T13448] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.034139][T13448] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.041544][T13448] bridge_slave_1: entered allmulticast mode [ 547.048675][T13448] bridge_slave_1: entered promiscuous mode [ 547.136589][T13448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.160513][T13448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.309132][T13448] team0: Port device team_slave_0 added [ 547.382373][T13448] team0: Port device team_slave_1 added [ 547.493222][ T5085] Bluetooth: hci4: command tx timeout [ 547.563867][T13448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.586028][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.633060][T13448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.655205][T13448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.672207][T13448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.701477][T13448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.840774][T13448] hsr_slave_0: entered promiscuous mode [ 547.867086][T13448] hsr_slave_1: entered promiscuous mode [ 549.289751][T13448] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 549.316006][T13448] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 549.358839][T13448] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 549.441566][T13448] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 549.578546][ T5085] Bluetooth: hci4: command tx timeout [ 549.678692][ T5916] bridge_slave_1: left allmulticast mode [ 549.685571][ T5916] bridge_slave_1: left promiscuous mode [ 549.693038][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.728237][ T5916] bridge_slave_0: left allmulticast mode [ 549.736103][ T5916] bridge_slave_0: left promiscuous mode [ 549.742950][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.779793][ T5916] veth1_macvtap: left promiscuous mode [ 549.786318][ T5916] veth0_macvtap: left promiscuous mode [ 550.620370][ T5916] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 550.735056][ T5916] .` (unregistering): (slave 4@0Ù): Releasing backup interface [ 550.779994][ T5916] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.038326][ T5916] .` (unregistering): Released all slaves [ 551.151312][T13448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.173956][T13448] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.189251][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.196465][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.221156][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.228438][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.652734][ T5085] Bluetooth: hci4: command tx timeout [ 551.714817][T13448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.807343][T13448] veth0_vlan: entered promiscuous mode [ 551.834720][T13448] veth1_vlan: entered promiscuous mode [ 551.862934][T13448] veth0_macvtap: entered promiscuous mode [ 551.872148][T13448] veth1_macvtap: entered promiscuous mode [ 551.889986][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.901714][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.913355][T13448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.930077][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.940920][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.951496][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.963769][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.974229][T13448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.986631][T13448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.997853][T13448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.010777][T13448] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.020235][T13448] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.028969][T13448] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.037770][T13448] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.106008][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.114231][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.153159][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.161116][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.688027][T13525] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 553.472972][T13545] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 553.480970][T13545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2315'. [ 553.622502][T13537] netlink: 'syz.3.2312': attribute type 10 has an invalid length. [ 553.653947][T13549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.732667][ T5085] Bluetooth: hci4: command tx timeout [ 554.361272][T13557] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2322'. [ 555.529924][T13576] netlink: 'syz.0.2327': attribute type 10 has an invalid length. [ 555.836794][T13573] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2326'. [ 556.625715][T13588] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2329'. [ 556.858971][T13592] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 557.567408][T13594] FAULT_INJECTION: forcing a failure. [ 557.567408][T13594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.648290][T13594] CPU: 0 PID: 13594 Comm: syz.1.2334 Not tainted syzkaller #0 [ 557.655840][T13594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 557.665935][T13594] Call Trace: [ 557.669234][T13594] [ 557.672175][T13594] dump_stack_lvl+0x18c/0x250 [ 557.676882][T13594] ? show_regs_print_info+0x20/0x20 [ 557.682155][T13594] ? load_image+0x420/0x420 [ 557.686700][T13594] ? __might_fault+0xaa/0x120 [ 557.691412][T13594] ? __lock_acquire+0x7d40/0x7d40 [ 557.696478][T13594] should_fail_ex+0x39d/0x4d0 [ 557.701186][T13594] _copy_to_user+0x2f/0xa0 [ 557.705620][T13594] bpf_test_finish+0x19f/0x650 [ 557.710410][T13594] ? convert___skb_to_skb+0x590/0x590 [ 557.715889][T13594] ? convert_skb_to___skb+0x420/0x420 [ 557.721284][T13594] ? slab_build_skb+0x25f/0x3f0 [ 557.726151][T13594] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 557.731638][T13594] ? cpu_online+0x60/0x60 [ 557.735985][T13594] bpf_prog_test_run+0x321/0x390 [ 557.740955][T13594] __sys_bpf+0x49d/0x890 [ 557.745303][T13594] ? bpf_link_show_fdinfo+0x390/0x390 [ 557.750731][T13594] ? lock_chain_count+0x20/0x20 [ 557.755656][T13594] __x64_sys_bpf+0x7c/0x90 [ 557.760298][T13594] do_syscall_64+0x55/0xa0 [ 557.764747][T13594] ? clear_bhb_loop+0x40/0x90 [ 557.769462][T13594] ? clear_bhb_loop+0x40/0x90 [ 557.774333][T13594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.780241][T13594] RIP: 0033:0x7fea40d9c819 [ 557.784699][T13594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.804331][T13594] RSP: 002b:00007fea41c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.813069][T13594] RAX: ffffffffffffffda RBX: 00007fea41015fa0 RCX: 00007fea40d9c819 [ 557.821328][T13594] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 557.829313][T13594] RBP: 00007fea41c93090 R08: 0000000000000000 R09: 0000000000000000 [ 557.837300][T13594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.845456][T13594] R13: 00007fea41016038 R14: 00007fea41015fa0 R15: 00007ffd33e5d368 [ 557.853632][T13594] [ 558.087976][T13592] syz.3.2330 (13592) used greatest stack depth: 17960 bytes left [ 561.830819][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2350'. [ 561.891368][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2350'. [ 561.970184][T13649] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2350'. [ 562.870269][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.878825][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.109860][T13666] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 563.633272][T13452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.644467][T13452] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.662865][T13452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.676950][T13452] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.686261][T13452] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.717033][T13452] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 564.652093][T13669] netlink: 'syz.3.2356': attribute type 10 has an invalid length. [ 565.162713][ T5898] bond0: (slave netdevsim0): Releasing backup interface [ 565.812708][ T5085] Bluetooth: hci2: command tx timeout [ 566.031719][T13689] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 567.137713][T13700] netlink: 'syz.3.2363': attribute type 10 has an invalid length. [ 567.413464][T13700] team0: Port device geneve1 added [ 567.541138][T13670] chnl_net:caif_netlink_parms(): no params data found [ 567.894778][ T5085] Bluetooth: hci2: command tx timeout [ 567.923872][T13670] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.931296][T13670] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.938715][T13670] bridge_slave_0: entered allmulticast mode [ 567.950323][T13670] bridge_slave_0: entered promiscuous mode [ 567.959971][T13670] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.967398][T13670] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.976611][T13670] bridge_slave_1: entered allmulticast mode [ 568.023583][T13670] bridge_slave_1: entered promiscuous mode [ 568.804474][T13670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.887202][T13670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.065726][T13731] netlink: 'syz.0.2366': attribute type 10 has an invalid length. [ 569.292188][T13738] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2371'. [ 569.416381][T13670] team0: Port device team_slave_0 added [ 569.614651][T13744] netlink: 'syz.3.2373': attribute type 29 has an invalid length. [ 569.694884][T13670] team0: Port device team_slave_1 added [ 569.717813][T13745] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2373'. [ 569.748467][T13670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.757211][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.874825][T13670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.942983][T13744] netlink: 'syz.3.2373': attribute type 29 has an invalid length. [ 569.972390][ T5085] Bluetooth: hci2: command tx timeout [ 570.211551][T13745] netlink: 'syz.3.2373': attribute type 29 has an invalid length. [ 570.251688][T13670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.292905][T13670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.465835][T13670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.706244][T13747] netlink: 'syz.3.2373': attribute type 29 has an invalid length. [ 571.210557][T13670] hsr_slave_0: entered promiscuous mode [ 571.244947][T13767] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 571.374360][T13670] hsr_slave_1: entered promiscuous mode [ 571.511498][T13670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.552925][T13670] Cannot create hsr debugfs directory [ 571.608783][T13767] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 571.619063][T13770] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 571.670180][T13771] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 571.749755][T13764] netlink: 'syz.1.2378': attribute type 29 has an invalid length. [ 572.053930][ T5085] Bluetooth: hci2: command tx timeout [ 573.891576][ T5898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.929033][ T5898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.951016][ T5898] bridge_slave_1: left allmulticast mode [ 573.972683][ T5898] bridge_slave_1: left promiscuous mode [ 573.978566][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.020212][ T5898] bridge_slave_0: left allmulticast mode [ 574.039927][ T5898] bridge_slave_0: left promiscuous mode [ 574.047094][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.101986][ T5898] veth1_vlan: left allmulticast mode [ 574.107664][ T5898] veth1_vlan: left promiscuous mode [ 574.125758][ T5898] veth0_vlan: left promiscuous mode [ 574.980834][ T5898] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 575.090988][ T5898] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 575.140223][ T5898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.427618][ T5898] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 575.439131][ T5898] bond0 (unregistering): Released all slaves [ 575.634153][T13819] syzkaller0: entered promiscuous mode [ 575.639729][T13819] syzkaller0: entered allmulticast mode [ 575.854881][T13831] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2388'. [ 577.591937][T13840] validate_nla: 3 callbacks suppressed [ 577.591956][T13840] netlink: 'syz.3.2391': attribute type 21 has an invalid length. [ 577.631885][T13840] netlink: 'syz.3.2391': attribute type 20 has an invalid length. [ 577.818374][T13849] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 577.887596][T13849] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 577.968939][T13854] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 578.020829][T13855] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 578.041998][T13845] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 578.167670][T13849] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 578.228846][T13670] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.253860][T13670] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.290675][T13845] netlink: 'syz.1.2393': attribute type 29 has an invalid length. [ 578.316399][T13670] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.364864][T13670] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.809478][T13670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.894657][T13670] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.945637][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.953011][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.051809][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.059069][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.232106][T13670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.382613][T13889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2402'. [ 579.958121][T13907] netlink: 'syz.3.2404': attribute type 29 has an invalid length. [ 581.394861][T13670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.658884][T13670] veth0_vlan: entered promiscuous mode [ 581.707331][T13670] veth1_vlan: entered promiscuous mode [ 581.874498][T13670] veth0_macvtap: entered promiscuous mode [ 581.914820][T13670] veth1_macvtap: entered promiscuous mode [ 582.048275][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.075181][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.105760][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.146491][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.170322][T13670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.217917][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.261870][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.276642][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.292323][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.304966][T13670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.316515][T13670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.329967][T13670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.395195][T13670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.435539][T13670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.456749][T13670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.486333][T13670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.775699][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.811040][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.878479][ T9680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.894770][ T9680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.873491][T13984] validate_nla: 5 callbacks suppressed [ 583.873512][T13984] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 583.928558][T13984] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 583.978159][T13985] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 584.034277][T13984] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 584.074043][T13984] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 584.096940][T13984] netlink: 'syz.3.2413': attribute type 29 has an invalid length. [ 585.765733][T14002] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 585.907827][T14007] netlink: 'syz.3.2418': attribute type 10 has an invalid length. [ 586.478743][T13452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.491476][T13452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.512328][T13452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.531189][T13452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.555204][T13452] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 586.564929][T13452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.745746][ T5891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.770942][T14024] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2423'. [ 586.839398][T14027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.912063][T14026] netlink: 'syz.2.2425': attribute type 4 has an invalid length. [ 586.982779][ T5891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.149521][ T5891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.440465][ T5891] bond0: (slave netdevsim0): Releasing backup interface [ 587.456360][ T5891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.777389][T14019] chnl_net:caif_netlink_parms(): no params data found [ 588.622509][T13452] Bluetooth: hci0: command tx timeout [ 589.028183][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.092016][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.127882][T14019] bridge_slave_0: entered allmulticast mode [ 589.143918][T14019] bridge_slave_0: entered promiscuous mode [ 589.318158][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.352773][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.360098][T14019] bridge_slave_1: entered allmulticast mode [ 589.395228][T14087] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 589.403312][T14019] bridge_slave_1: entered promiscuous mode [ 589.501131][T14087] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 589.603754][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.670065][T14088] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 589.734523][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.799002][T14096] netlink: 'syz.1.2441': attribute type 10 has an invalid length. [ 589.915635][T14091] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 589.946374][T14092] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 590.113174][T14099] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 590.295856][T14019] team0: Port device team_slave_0 added [ 590.330542][T14019] team0: Port device team_slave_1 added [ 590.460396][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.490072][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.553847][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.699434][T13452] Bluetooth: hci0: command tx timeout [ 591.501021][T14106] netlink: 'syz.3.2444': attribute type 10 has an invalid length. [ 591.534038][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.541055][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.597914][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.988202][T14126] FAULT_INJECTION: forcing a failure. [ 591.988202][T14126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.003798][T14126] CPU: 0 PID: 14126 Comm: syz.3.2448 Not tainted syzkaller #0 [ 592.011320][T14126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 592.021480][T14126] Call Trace: [ 592.024772][T14126] [ 592.027721][T14126] dump_stack_lvl+0x18c/0x250 [ 592.032458][T14126] ? show_regs_print_info+0x20/0x20 [ 592.038112][T14126] ? load_image+0x420/0x420 [ 592.042629][T14126] ? lockdep_hardirqs_on+0x98/0x150 [ 592.047853][T14126] should_fail_ex+0x39d/0x4d0 [ 592.052561][T14126] prepare_alloc_pages+0x1e2/0x5f0 [ 592.057698][T14126] __alloc_pages+0x134/0x460 [ 592.062305][T14126] ? zone_statistics+0x170/0x170 [ 592.067348][T14126] ? alloc_pages+0x4dc/0x740 [ 592.071955][T14126] ? do_raw_spin_unlock+0x121/0x230 [ 592.077345][T14126] __get_free_pages+0xc/0x30 [ 592.082118][T14126] kasan_populate_vmalloc_pte+0x35/0x100 [ 592.087856][T14126] __apply_to_page_range+0x860/0xdd0 [ 592.093377][T14126] ? kasan_populate_vmalloc+0x70/0x70 [ 592.098940][T14126] ? apply_to_page_range+0x50/0x50 [ 592.104332][T14126] ? do_raw_spin_unlock+0x121/0x230 [ 592.109549][T14126] alloc_vmap_area+0x1d0c/0x1e30 [ 592.114521][T14126] ? vm_map_ram+0xcb0/0xcb0 [ 592.119046][T14126] ? rcu_is_watching+0x15/0xb0 [ 592.123963][T14126] __get_vm_area_node+0x162/0x370 [ 592.129135][T14126] __vmalloc_node_range+0x36e/0x1330 [ 592.134734][T14126] ? sock_hash_alloc+0x261/0x4d0 [ 592.139818][T14126] ? free_vm_area+0x50/0x50 [ 592.144343][T14126] ? bpf_map_area_alloc+0x5e/0x110 [ 592.149482][T14126] ? rcu_is_watching+0x15/0xb0 [ 592.154275][T14126] ? bpf_map_area_alloc+0x5e/0x110 [ 592.159420][T14126] bpf_map_area_alloc+0xf1/0x110 [ 592.164389][T14126] ? sock_hash_alloc+0x261/0x4d0 [ 592.169354][T14126] sock_hash_alloc+0x261/0x4d0 [ 592.174147][T14126] map_create+0x877/0x12f0 [ 592.178664][T14126] ? bpf_lsm_bpf+0x9/0x10 [ 592.183015][T14126] __sys_bpf+0x651/0x890 [ 592.187826][T14126] ? bpf_link_show_fdinfo+0x390/0x390 [ 592.193333][T14126] ? lock_chain_count+0x20/0x20 [ 592.198304][T14126] __x64_sys_bpf+0x7c/0x90 [ 592.202745][T14126] do_syscall_64+0x55/0xa0 [ 592.207181][T14126] ? clear_bhb_loop+0x40/0x90 [ 592.211887][T14126] ? clear_bhb_loop+0x40/0x90 [ 592.216601][T14126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.222614][T14126] RIP: 0033:0x7f1ca9d9c819 [ 592.227047][T14126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.246850][T14126] RSP: 002b:00007f1caac37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.255299][T14126] RAX: ffffffffffffffda RBX: 00007f1caa015fa0 RCX: 00007f1ca9d9c819 [ 592.263377][T14126] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 592.271361][T14126] RBP: 00007f1caac37090 R08: 0000000000000000 R09: 0000000000000000 [ 592.279345][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.287428][T14126] R13: 00007f1caa016038 R14: 00007f1caa015fa0 R15: 00007ffdf9d84c58 [ 592.295519][T14126] [ 592.409305][T14019] hsr_slave_0: entered promiscuous mode [ 592.418420][T14019] hsr_slave_1: entered promiscuous mode [ 592.451962][T14019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.473116][T14019] Cannot create hsr debugfs directory [ 592.605538][T14132] netlink: 'syz.3.2449': attribute type 10 has an invalid length. [ 592.772162][T13452] Bluetooth: hci0: command tx timeout [ 593.183927][T14145] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2451'. [ 594.735504][T14161] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 594.755260][T14167] netlink: 'syz.3.2456': attribute type 10 has an invalid length. [ 594.785428][T14167] hsr_slave_0: left promiscuous mode [ 594.802317][T14167] hsr_slave_1: left promiscuous mode [ 594.852916][T13452] Bluetooth: hci0: command tx timeout [ 595.346670][T14184] netlink: 'syz.1.2459': attribute type 10 has an invalid length. [ 595.926605][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.934668][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.949611][ T5891] bridge_slave_1: left allmulticast mode [ 595.988153][ T5891] bridge_slave_1: left promiscuous mode [ 595.996570][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.016130][ T5891] bridge_slave_0: left promiscuous mode [ 596.022708][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.631726][ T5891] veth1_vlan: left promiscuous mode [ 596.640009][ T5891] veth0_vlan: left promiscuous mode [ 597.193227][ T5891] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 598.089669][ T5891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.203678][T14198] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2463'. [ 598.215284][ T5891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.585959][ T5891] bond0 (unregistering): Released all slaves [ 598.670685][T14193] netlink: 'syz.1.2461': attribute type 10 has an invalid length. [ 598.848870][T14019] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 598.933340][T14019] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 598.959481][T14019] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 598.989751][T14216] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2467'. [ 599.050763][T14019] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 599.127663][T14219] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 599.299797][T14219] team0: Port device geneve1 added [ 599.332755][T14220] netlink: 'syz.1.2467': attribute type 10 has an invalid length. [ 599.340832][T14220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2467'. [ 599.350934][T14220] batadv0: entered promiscuous mode [ 599.372282][T14220] batadv0: entered allmulticast mode [ 599.378685][T14220] bridge0: port 3(batadv0) entered blocking state [ 599.405457][T14220] bridge0: port 3(batadv0) entered disabled state [ 599.417770][T14220] bridge0: port 3(batadv0) entered blocking state [ 599.424575][T14220] bridge0: port 3(batadv0) entered forwarding state [ 599.530126][ T5910] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 599.540195][ T5910] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 599.886970][T14019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.916201][T14229] netlink: 'syz.3.2469': attribute type 21 has an invalid length. [ 599.948157][T14229] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2469'. [ 599.993848][T14229] netlink: 'syz.3.2469': attribute type 5 has an invalid length. [ 600.052968][T14229] netlink: 'syz.3.2469': attribute type 6 has an invalid length. [ 600.153160][T14229] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2469'. [ 600.345146][T14019] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.372925][ T5898] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.380155][ T5898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.426471][ T5898] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.433755][ T5898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.946823][T14242] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.2472'. [ 601.130362][T14251] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 601.408445][T14264] netlink: 'syz.3.2477': attribute type 10 has an invalid length. [ 601.813288][T14019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.094299][T14019] veth0_vlan: entered promiscuous mode [ 602.180299][T14019] veth1_vlan: entered promiscuous mode [ 602.440822][T14019] veth0_macvtap: entered promiscuous mode [ 602.485721][T14019] veth1_macvtap: entered promiscuous mode [ 602.581889][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 602.804522][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.876465][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 602.919708][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 602.954986][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.006253][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.046364][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.097222][T14019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.140995][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.164512][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.186102][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.201692][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.221567][T14019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.248524][T14019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.291692][T14019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.332828][T14019] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.361835][T14019] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.385544][T14019] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.407753][T14019] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.757291][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.809619][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.926221][T14296] netlink: 'syz.2.2482': attribute type 21 has an invalid length. [ 603.961880][T14296] netlink: 'syz.2.2482': attribute type 1 has an invalid length. [ 603.969700][T14296] netlink: 16050 bytes leftover after parsing attributes in process `syz.2.2482'. [ 604.107731][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.171973][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.479444][T14308] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2485'. [ 605.576702][T14308] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 606.065009][ T5085] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 606.075973][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 606.084126][ T5085] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 606.101347][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 606.112885][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 606.159242][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 606.355656][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 606.979050][T14344] chnl_net:caif_netlink_parms(): no params data found [ 607.340729][ T5916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.410699][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.448455][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.471613][T14344] bridge_slave_0: entered allmulticast mode [ 607.490773][T14344] bridge_slave_0: entered promiscuous mode [ 607.536847][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.565810][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.703826][T14344] bridge_slave_1: entered allmulticast mode [ 607.736850][T14344] bridge_slave_1: entered promiscuous mode [ 608.009324][ T5916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.223036][ T5085] Bluetooth: hci1: command tx timeout [ 608.463947][ T5916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.579141][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.594241][T14393] netlink: 'syz.3.2500': attribute type 10 has an invalid length. [ 608.625453][T14393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2500'. [ 608.635369][T14398] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2500'. [ 608.665478][ T5916] batman_adv: batadv0: Removing interface: netdevsim0 [ 608.693851][ T5916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.791364][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.825225][T14403] netlink: 'syz.2.2499': attribute type 10 has an invalid length. [ 609.135019][T14409] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.136271][T14411] netlink: 'syz.3.2502': attribute type 10 has an invalid length. [ 609.160932][T14411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2502'. [ 609.172523][T14411] batadv0: entered promiscuous mode [ 609.177997][T14411] batadv0: entered allmulticast mode [ 609.193233][T14411] bridge0: port 3(batadv0) entered blocking state [ 609.200036][T14411] bridge0: port 3(batadv0) entered disabled state [ 609.215937][T14411] bridge0: port 3(batadv0) entered blocking state [ 609.222646][T14411] bridge0: port 3(batadv0) entered forwarding state [ 609.234057][T14409] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.256934][T14415] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.293294][T14417] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.317914][T14409] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.387326][T14344] team0: Port device team_slave_0 added [ 609.409266][T14344] team0: Port device team_slave_1 added [ 609.536193][T14415] netlink: 'syz.0.2501': attribute type 29 has an invalid length. [ 609.639626][ T5891] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 609.649271][ T5891] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 609.668090][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.677167][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.709941][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.794628][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.847799][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.926765][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.945767][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2503'. [ 610.305356][ T5085] Bluetooth: hci1: command tx timeout [ 610.378149][T14344] hsr_slave_0: entered promiscuous mode [ 610.387579][T14344] hsr_slave_1: entered promiscuous mode [ 611.935720][T14469] netlink: 'syz.2.2513': attribute type 29 has an invalid length. [ 612.371850][ T5085] Bluetooth: hci1: command tx timeout [ 613.452078][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 614.462636][ T5085] Bluetooth: hci1: command tx timeout [ 614.926408][T14497] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 615.060012][T14344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.133578][T14344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.148170][T14344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.213436][T14344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.985939][T14525] validate_nla: 3 callbacks suppressed [ 615.985959][T14525] netlink: 'syz.2.2525': attribute type 3 has an invalid length. [ 616.062007][T14525] netlink: 'syz.2.2525': attribute type 1 has an invalid length. [ 616.070219][T14525] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2525'. [ 616.085554][T14521] netlink: 'syz.3.2524': attribute type 29 has an invalid length. [ 616.142683][T14521] netlink: 'syz.3.2524': attribute type 29 has an invalid length. [ 616.178460][T14526] netlink: 'syz.3.2524': attribute type 29 has an invalid length. [ 616.371978][T14529] netlink: 'syz.3.2524': attribute type 29 has an invalid length. [ 617.508217][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2526'. [ 617.655537][ T5916] veth0_to_team: left allmulticast mode [ 617.661202][ T5916] veth0_to_team: left promiscuous mode [ 617.706871][ T5916] Ÿë: port 1(veth0_to_team) entered disabled state [ 617.804752][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.814214][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.826076][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.837656][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.856309][ T5916] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 617.868567][ T5916] batman_adv: batadv0: Removing interface: veth0_vlan [ 617.882887][ T5916] bridge0: port 3(batadv0) entered disabled state [ 617.894305][ T5916] bridge_slave_1: left allmulticast mode [ 617.900296][ T5916] bridge_slave_1: left promiscuous mode [ 617.907602][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.942925][ T5916] bridge_slave_0: left allmulticast mode [ 617.964924][ T5916] bridge_slave_0: left promiscuous mode [ 617.987260][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.096595][ T5916] veth1_vlan: left promiscuous mode [ 618.111152][ T5916] veth0_vlan: left promiscuous mode [ 619.161402][ T5916] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 619.212959][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.526073][ T5916] bond0 (unregistering): Released all slaves [ 619.618398][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.627518][T14548] !‹¸²„: renamed from veth0_vlan (while UP) [ 619.687486][T14556] delete_channel: no stack [ 619.747266][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.788640][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.796120][ T9680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.847421][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.854820][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.554276][T14578] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 620.573509][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.622586][T14578] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 620.759031][T14576] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 620.864612][T14582] netlink: 'syz.0.2537': attribute type 29 has an invalid length. [ 620.987403][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2538'. [ 621.325110][T14344] veth0_vlan: entered promiscuous mode [ 621.608365][T14344] veth1_vlan: entered promiscuous mode [ 621.794890][T14344] veth0_macvtap: entered promiscuous mode [ 621.832972][T14344] veth1_macvtap: entered promiscuous mode [ 621.905005][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.935397][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.970631][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.988101][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.015012][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.041855][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.068550][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.098337][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.115085][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.127143][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.151063][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.188751][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.206883][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.230996][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.317742][T14344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.337629][T14344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.359497][T14344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.375657][T14344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.688299][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.721932][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.812699][ T5924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.820691][ T5924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.876524][T14611] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2547'. [ 623.138819][ T9680] tipc: Subscription rejected, illegal request [ 623.256285][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2546'. [ 623.981312][T14628] netlink: 'syz.1.2487': attribute type 10 has an invalid length. [ 624.279382][T14628] team0: Port device geneve1 added [ 624.307864][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321970][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.350051][T14631] netlink: 'syz.3.2551': attribute type 10 has an invalid length. [ 624.403795][T14631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2551'. [ 624.466748][T14631] team0: entered promiscuous mode [ 624.491996][T14631] team_slave_0: entered promiscuous mode [ 624.523685][T14631] team_slave_1: entered promiscuous mode [ 624.552320][T14631] geneve1: entered promiscuous mode [ 624.593959][T14631] team0: entered allmulticast mode [ 624.622154][T14631] team_slave_0: entered allmulticast mode [ 624.628012][T14631] team_slave_1: entered allmulticast mode [ 624.712156][T14631] geneve1: entered allmulticast mode [ 624.744457][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.768798][T14631] bridge0: port 4(team0) entered blocking state [ 624.796147][T14631] bridge0: port 4(team0) entered disabled state [ 624.811255][T14631] bridge0: port 4(team0) entered blocking state [ 624.817774][T14631] bridge0: port 4(team0) entered forwarding state [ 625.166707][T14640] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 625.178582][T14644] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.327359][T14644] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.355614][T14649] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.369291][T14651] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.378765][T14644] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.435998][T14644] netlink: 'syz.3.2555': attribute type 29 has an invalid length. [ 625.561329][T14648] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 625.713266][T14662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.184960][T14665] netlink: 'syz.0.2562': attribute type 10 has an invalid length. [ 626.563956][T14665] team0: Port device geneve1 added [ 626.814835][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.196614][T14684] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2567'. [ 628.874558][T14697] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2569'. [ 628.904884][T14700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2572'. [ 629.197931][T14700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2572'. [ 629.210330][T14703] validate_nla: 2 callbacks suppressed [ 629.210350][T14703] netlink: 'syz.1.2574': attribute type 10 has an invalid length. [ 629.383621][T14704] netlink: 'syz.0.2573': attribute type 10 has an invalid length. [ 629.478708][T14705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2572'. [ 629.570384][T14707] netlink: 'syz.2.2569': attribute type 9 has an invalid length. [ 629.612596][T14707] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2569'. [ 629.657776][T14704] syz.0.2573 (14704) used greatest stack depth: 17832 bytes left [ 630.185855][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2576'. [ 630.380535][T14715] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 630.835893][T14715] syzkaller0: entered promiscuous mode [ 630.862014][T14715] syzkaller0: entered allmulticast mode [ 631.459765][T14740] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 631.549243][T14742] netlink: 'syz.1.2583': attribute type 29 has an invalid length. [ 633.250525][T14740] netlink: 'syz.2.2582': attribute type 29 has an invalid length. [ 633.262861][T14742] netlink: 'syz.1.2583': attribute type 29 has an invalid length. [ 633.457746][T14756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.010714][T14771] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.234573][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 635.057294][T14783] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.098039][T14783] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.169978][T14786] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.200872][T14783] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.253187][T14783] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.292758][T14783] netlink: 'syz.3.2592': attribute type 29 has an invalid length. [ 635.439251][T14789] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2593'. [ 635.481909][T14790] netlink: 'syz.0.2594': attribute type 29 has an invalid length. [ 635.496931][T14790] netlink: 'syz.0.2594': attribute type 29 has an invalid length. [ 635.541361][T14790] netlink: 'syz.0.2594': attribute type 29 has an invalid length. [ 635.563716][T14790] netlink: 'syz.0.2594': attribute type 29 has an invalid length. [ 635.590710][T14793] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2595'. [ 636.135662][T14800] bridge0: port 4(team0) entered disabled state [ 636.377357][T14800] bridge0: port 4(team0) entered disabled state [ 636.404289][T14800] team_slave_0: left promiscuous mode [ 636.437377][T14800] team_slave_0: left allmulticast mode [ 636.567320][T14800] team0 (unregistering): Port device team_slave_0 removed [ 636.622174][T14800] team_slave_1: left promiscuous mode [ 636.627904][T14800] team_slave_1: left allmulticast mode [ 636.686832][T14800] team0 (unregistering): Port device team_slave_1 removed [ 636.702545][T14800] geneve1: left promiscuous mode [ 636.707814][T14800] geneve1: left allmulticast mode [ 636.733483][T14800] team0 (unregistering): Port device geneve1 removed [ 636.813422][T14812] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2600'. [ 636.840769][T14812] team0: entered promiscuous mode [ 636.848020][T14812] team_slave_0: entered promiscuous mode [ 636.875630][T14812] team_slave_1: entered promiscuous mode [ 636.897138][T14812] geneve1: entered promiscuous mode [ 636.931525][T14812] bridge0: port 3(team0) entered blocking state [ 636.969629][T14812] bridge0: port 3(team0) entered disabled state [ 636.998749][T14812] team0: entered allmulticast mode [ 637.006449][T14812] team_slave_0: entered allmulticast mode [ 637.023162][T14812] team_slave_1: entered allmulticast mode [ 637.039818][T14812] geneve1: entered allmulticast mode [ 637.379070][T14812] bridge0: port 3(team0) entered blocking state [ 637.387417][T14812] bridge0: port 3(team0) entered forwarding state [ 639.761993][T14848] tap0: tun_chr_ioctl cmd 1074025677 [ 639.767617][T14848] tap0: linktype set to 0 [ 639.964221][T14852] syzkaller0: entered promiscuous mode [ 639.980129][T14852] syzkaller0: entered allmulticast mode [ 640.495079][T14869] validate_nla: 24 callbacks suppressed [ 640.495116][T14869] netlink: 'syz.0.2621': attribute type 29 has an invalid length. [ 640.536902][T14869] netlink: 'syz.0.2621': attribute type 29 has an invalid length. [ 640.561056][T14870] netlink: 'syz.0.2621': attribute type 29 has an invalid length. [ 640.607055][T14869] netlink: 'syz.0.2621': attribute type 29 has an invalid length. [ 640.703962][T14869] netlink: 'syz.0.2621': attribute type 29 has an invalid length. [ 641.098395][T14879] netlink: 'syz.2.2625': attribute type 10 has an invalid length. [ 641.114831][T14878] netlink: 'syz.3.2624': attribute type 10 has an invalid length. [ 641.732015][T14897] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 641.779899][T14897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2626'. [ 641.789137][T14897] team0: entered promiscuous mode [ 641.799619][T14897] team_slave_0: entered promiscuous mode [ 641.806945][T14897] team_slave_1: entered promiscuous mode [ 641.821980][T14897] geneve1: entered promiscuous mode [ 641.842033][T14897] bridge0: port 3(team0) entered blocking state [ 641.848361][T14897] bridge0: port 3(team0) entered disabled state [ 641.882077][T14897] team0: entered allmulticast mode [ 641.887284][T14897] team_slave_0: entered allmulticast mode [ 641.931825][T14897] team_slave_1: entered allmulticast mode [ 641.941845][T14897] geneve1: entered allmulticast mode [ 641.974732][T14897] bridge0: port 3(team0) entered blocking state [ 641.981201][T14897] bridge0: port 3(team0) entered forwarding state [ 642.816815][T14913] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2635'. [ 643.462382][T14923] netlink: 'syz.2.2637': attribute type 29 has an invalid length. [ 643.464442][T14907] delete_channel: no stack [ 643.488580][T14923] netlink: 'syz.2.2637': attribute type 29 has an invalid length. [ 644.977879][T14950] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2644'. [ 645.241696][T14955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2646'. [ 645.315763][T14955] .`: renamed from bond0 (while UP) [ 645.761512][ C0] [ 645.761521][ C0] ================================ [ 645.761526][ C0] WARNING: inconsistent lock state [ 645.761531][ C0] syzkaller #0 Not tainted [ 645.761539][ C0] -------------------------------- [ 645.761543][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 645.761549][ C0] syz.1.2648/14962 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 645.761566][ C0] ffff88802fe030f8 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 645.761617][ C0] {INITIAL USE} state was registered at: [ 645.761622][ C0] lock_acquire+0x19e/0x420 [ 645.761641][ C0] _raw_spin_lock+0x2e/0x40 [ 645.761658][ C0] htab_lock_bucket+0x17d/0x300 [ 645.761673][ C0] htab_map_update_elem+0x229/0x1040 [ 645.761691][ C0] bpf_map_update_value+0x660/0x720 [ 645.761704][ C0] map_update_elem+0x57b/0x700 [ 645.761720][ C0] __sys_bpf+0x6b5/0x890 [ 645.761732][ C0] __x64_sys_bpf+0x7c/0x90 [ 645.761744][ C0] do_syscall_64+0x55/0xa0 [ 645.761758][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.761776][ C0] irq event stamp: 1404 [ 645.761782][ C0] hardirqs last enabled at (1403): [] seqcount_lockdep_reader_access+0x12b/0x1d0 [ 645.761815][ C0] hardirqs last disabled at (1404): [] exc_debug+0x73/0x140 [ 645.761832][ C0] softirqs last enabled at (1266): [] l2tp_ip6_open+0x140/0x190 [ 645.761857][ C0] softirqs last disabled at (1264): [] l2tp_ip6_open+0x75/0x190 [ 645.761881][ C0] [ 645.761881][ C0] other info that might help us debug this: [ 645.761886][ C0] Possible unsafe locking scenario: [ 645.761886][ C0] [ 645.761890][ C0] CPU0 [ 645.761893][ C0] ---- [ 645.761896][ C0] lock(&htab->lockdep_key#2); [ 645.761911][ C0] [ 645.761914][ C0] lock(&htab->lockdep_key#2); [ 645.761927][ C0] [ 645.761927][ C0] *** DEADLOCK *** [ 645.761927][ C0] [ 645.761930][ C0] no locks held by syz.1.2648/14962. [ 645.761937][ C0] [ 645.761937][ C0] stack backtrace: [ 645.761942][ C0] CPU: 0 PID: 14962 Comm: syz.1.2648 Not tainted syzkaller #0 [ 645.761957][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.761966][ C0] Call Trace: [ 645.761974][ C0] <#DB> [ 645.761980][ C0] dump_stack_lvl+0x18c/0x250 [ 645.762004][ C0] ? show_regs_print_info+0x20/0x20 [ 645.762031][ C0] ? print_usage_bug+0x475/0x690 [ 645.762048][ C0] ? verify_lock_unused+0x18/0x140 [ 645.762068][ C0] lock_acquire+0x2c2/0x420 [ 645.762086][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 645.762104][ C0] ? htab_lock_bucket+0x17d/0x300 [ 645.762122][ C0] ? read_lock_is_recursive+0x20/0x20 [ 645.762140][ C0] ? internal_get_user_pages_fast+0xaa8/0x2760 [ 645.762164][ C0] ? rcu_is_watching+0x15/0xb0 [ 645.762185][ C0] ? lock_release+0xb5/0x8c0 [ 645.762205][ C0] _raw_spin_lock+0x2e/0x40 [ 645.762222][ C0] ? htab_lock_bucket+0x17d/0x300 [ 645.762239][ C0] htab_lock_bucket+0x17d/0x300 [ 645.762258][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 645.762275][ C0] ? look_up_lock_class+0x75/0x140 [ 645.762295][ C0] ? verify_lock_unused+0x18/0x140 [ 645.762313][ C0] ? jhash+0x2e8/0x740 [ 645.762331][ C0] htab_map_delete_elem+0x1a4/0x650 [ 645.762352][ C0] ? htab_map_update_elem+0x1040/0x1040 [ 645.762369][ C0] ? perf_callchain+0x220/0x220 [ 645.762384][ C0] ? rcu_is_watching+0x15/0xb0 [ 645.762404][ C0] ? lock_release+0xb5/0x8c0 [ 645.762423][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 645.762443][ C0] bpf_overflow_handler+0x1fc/0x510 [ 645.762465][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 645.762482][ C0] ? perf_callchain+0x220/0x220 [ 645.762497][ C0] ? bpf_overflow_handler+0xde/0x510 [ 645.762515][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 645.762562][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 645.762580][ C0] __perf_event_overflow+0x447/0x630 [ 645.762597][ C0] ? bpf_overflow_handler+0xde/0x510 [ 645.762627][ C0] perf_swevent_overflow+0x268/0x340 [ 645.762649][ C0] ? perf_event_switch_output+0x790/0x790 [ 645.762670][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 645.762692][ C0] perf_swevent_event+0x45c/0x570 [ 645.762711][ C0] ? perf_tp_event+0x1520/0x1520 [ 645.762727][ C0] ? perf_trace_lock_acquire+0x104/0x410 [ 645.762757][ C0] perf_bp_event+0x319/0x430 [ 645.762772][ C0] ? look_up_lock_class+0x75/0x140 [ 645.762801][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 645.762818][ C0] ? rcu_is_watching+0x15/0xb0 [ 645.762855][ C0] ? lock_acquire+0x2c2/0x420 [ 645.762878][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 645.762901][ C0] notifier_call_chain+0x197/0x380 [ 645.762923][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 645.762943][ C0] atomic_notifier_call_chain+0xda/0x180 [ 645.762964][ C0] notify_die+0x145/0x1a0 [ 645.762985][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 645.763009][ C0] ? rcu_is_watching+0x15/0xb0 [ 645.763030][ C0] notify_debug+0x2e/0x50 [ 645.763045][ C0] exc_debug+0xde/0x140 [ 645.763063][ C0] asm_exc_debug+0x1e/0x40 [ 645.763080][ C0] RIP: 0010:rep_movs_alternative+0x36/0x90 [ 645.763099][ C0] Code: 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 <48> 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 f3 a4 [ 645.763113][ C0] RSP: 0018:ffffc9000e5bf310 EFLAGS: 00040206 [ 645.763127][ C0] RAX: 6163696669726576 RBX: 000000000000001c RCX: 000000000000001c [ 645.763138][ C0] RDX: 0000000000000000 RSI: ffff88807acc068c RDI: 0000200000000300 [ 645.763149][ C0] RBP: 000000000000001c R08: ffff88807acc06a7 R09: 1ffff1100f5980d4 [ 645.763159][ C0] R10: dffffc0000000000 R11: ffffed100f5980d5 R12: 000020000000031c [ 645.763170][ C0] R13: 0000000000000000 R14: 0000200000000300 R15: ffff88807acc068c [ 645.763192][ C0] [ 645.763198][ C0] [ 645.763202][ C0] _copy_to_user+0x85/0xa0 [ 645.763223][ C0] bpf_verifier_vlog+0x2fa/0x870 [ 645.763252][ C0] verbose+0x11e/0x1a0 [ 645.763272][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 645.763292][ C0] ? check_func_arg_reg_off+0x2f0/0x2f0 [ 645.763310][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 645.763331][ C0] ? read_tsc+0x9/0x20 [ 645.763346][ C0] ? ktime_get+0x24b/0x280 [ 645.763366][ C0] bpf_check+0x5708/0xeba0 [ 645.763402][ C0] ? __lock_acquire+0x1273/0x7d40 [ 645.763419][ C0] ? bpf_get_btf_vmlinux+0x20/0x20 [ 645.763444][ C0] ? mark_lock+0x94/0x320 [ 645.763480][ C0] ? verify_lock_unused+0x140/0x140 [ 645.763515][ C0] ? perf_trace_preemptirq_template+0xac/0x330 [ 645.763540][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 645.763560][ C0] ? lock_chain_count+0x20/0x20 [ 645.763579][ C0] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 645.763598][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 645.763618][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 645.763645][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 645.763670][ C0] bpf_prog_load+0x1163/0x1670 [ 645.763694][ C0] ? map_freeze+0x420/0x420 [ 645.763719][ C0] ? __might_fault+0xaa/0x120 [ 645.763734][ C0] ? __might_fault+0xc6/0x120 [ 645.763748][ C0] ? __might_fault+0xaa/0x120 [ 645.763763][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 645.763781][ C0] ? security_bpf+0x7e/0xa0 [ 645.763810][ C0] __sys_bpf+0x5ba/0x890 [ 645.763828][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 645.763854][ C0] ? lock_chain_count+0x20/0x20 [ 645.763876][ C0] __x64_sys_bpf+0x7c/0x90 [ 645.763892][ C0] do_syscall_64+0x55/0xa0 [ 645.763906][ C0] ? clear_bhb_loop+0x40/0x90 [ 645.763924][ C0] ? clear_bhb_loop+0x40/0x90 [ 645.763943][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.763961][ C0] RIP: 0033:0x7f820619c819 [ 645.763975][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.763987][ C0] RSP: 002b:00007f820703f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 645.764003][ C0] RAX: ffffffffffffffda RBX: 00007f8206415fa0 RCX: 00007f820619c819 [ 645.764014][ C0] RDX: 0000000000000070 RSI: 0000200000000280 RDI: 0000000000000005 [ 645.764024][ C0] RBP: 00007f8206232c91 R08: 0000000000000000 R09: 0000000000000000 [ 645.764034][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.764044][ C0] R13: 00007f8206416038 R14: 00007f8206415fa0 R15: 00007fff9bd877c8 [ 645.764064][ C0]