last executing test programs: 26.339925867s ago: executing program 3 (id=6384): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x1, 0xffff}}, 0x80, 0x0}, 0x200008d5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x82d7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffcf8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010064) setsockopt$sock_attach_bpf(r5, 0x84, 0x75, &(0x7f0000000000)=r7, 0x8) openat$cgroup_subtree(r7, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xb, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd5", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63f5, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0xfffc, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r9, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0, 0x34, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) 21.928009419s ago: executing program 3 (id=6390): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x9, 0x0, 0x14}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="270502001c3ea71c0600002fb96db4f7babe25000700810012a4d800", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bb", 0x9}, {&(0x7f0000000640)="ce802b5de1f6ef473e55b894327a619596e1507c519a8da237abad2bbc0895ad6e76eb45e0ed24c59711ba0f45d5fa6292b3717d69c96db677284e62c6b3a7750444a9693289119c925a2d533b49a24d8160a8e194e416b65b2ca1277c8526421547c74d2239ff6f5bd73708d3ae452e1fabc36ec904e18096650d6630dee8b995676b6c506cb9bf01595297ace1175b5827493e", 0x94}], 0x3}, 0x30040805) 21.717599472s ago: executing program 3 (id=6395): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000001c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000600), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000001c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='v', 0x48}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x6, 0x17, &(0x7f0000000600), 0x4) (async) 19.457135966s ago: executing program 3 (id=6398): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1, 0x0, 0x80000002009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x15184, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7ffc, 0x0, 0x2, 0x0, 0x80}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001a1300009502000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa313c6b876c1d0000007ea60864160af36507001ac0043f020208000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7113a"], 0xffdd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000dbf791e911d888efc497fe0942a93c6a000000000071ae0a00000000008510000102000000850000000500000095000000000059fe0000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xa9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 15.997001041s ago: executing program 3 (id=6416): socketpair(0x11, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 15.779254174s ago: executing program 3 (id=6418): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x80000, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e", 0x21}], 0x1}, 0x40000) 4.066985979s ago: executing program 1 (id=6470): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x4, [@union={0xa, 0x6, 0x0, 0x5, 0x0, 0x2, [{0x0, 0x1, 0x973}, {0xb, 0x5}, {0x10, 0x2, 0x2}, {0x7, 0x4, 0x9}, {0x0, 0x0, 0x3}, {0x6, 0x1, 0x2}]}, @const={0x6, 0x0, 0x0, 0xa, 0x5}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000040)=""/96, 0x8c, 0x60, 0x1, 0x8}, 0x28) 3.846630072s ago: executing program 1 (id=6472): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0xad, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000b000000072740200f6ffffffdd06300000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x7, 0xa, 0x8001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1802000000000000950000004800000095000000000000000000000000000000802f107c6eefc99cd12c63f1059c0d423a0f9e0003628409c3e383eb6901e7d0cd1d7e429f36576bc8dfd816a157390735c8ff7fffffffffffff157a8220b67b6cc40eb50662a246c5f7ed904653b317bec368fdc8b26b706cb5d8085a791b71a9ac38af41bbd5fa9cebc525ce8c0bc88151e830f3f8b28d2ab50a169f3c44783a"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x34, 0x1, 0x10001, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r9, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000009c0)={0x3, 0x80, 0x0, 0x7, 0xb, 0x2, 0x0, 0x8000, 0x10014, 0xe, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0xffffffff, 0x7}, 0x8000, 0xd79a, 0x5, 0x1, 0x400, 0xd5b, 0x1, 0x0, 0xdb, 0x0, 0x1}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="3700000000000000000000d9", @ANYRES32=r9, @ANYBLOB="9d46e72f209be1c5f9bc375d77c2f3f70d78dcc7b362c1b0b37aa89ba3e2766b861b4237bc171a6a5dd0baefe07af00c", @ANYRES64=r5], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x8, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8020000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x6}, 0x1, 0x0, 0x800001, 0x3, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x3, 0xb4, 0x1, 0x5, 0x0, 0x9, 0x40020, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7a6d, 0x0, @perf_config_ext={0x7, 0xfffffffffffffc62}, 0x8001, 0x8b9, 0x6, 0x9, 0x9, 0x80, 0xd, 0x0, 0x1, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.114067396s ago: executing program 0 (id=6476): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8018, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.70726954s ago: executing program 2 (id=6478): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x58, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x2, &(0x7f00000001c0)=@raw=[@exit, @jmp={0x5, 0x0, 0xc, 0xa, 0x3, 0x10, 0x4}], 0xfffffffffffffffc, 0x5, 0x99, &(0x7f00000004c0)=""/153, 0x41000, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x5, 0x10, 0x4}, {0x0, 0x4, 0x3, 0xb}, {0x9, 0x1, 0xe, 0x2}, {0x3, 0x5, 0x3, 0x6}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x44}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 2.261744946s ago: executing program 2 (id=6479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfc, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x880, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2.19952214s ago: executing program 0 (id=6480): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x16ff98f9) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000008100", 0xe}], 0x1}, 0x4000080) 1.911726117s ago: executing program 1 (id=6481): r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5e", 0x3}], 0x1}, 0x20000001) (async) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="b765775222291fbd18e3b39dc55ddb924464990b4ccc5578ce513b1037d69cc31c839cfe3f827097fa38c5b178bfcdbd725dcb887d68d2a76cd15c9cf3ba47501dc128400dca99ed89c8e5d7939b1163a533b1c65cef10c6d1da281a3ecc0e3248ca33121c9458b13a3b76a5d960970eb90accb60f79e01fa54acc750e2685a4942d29533f229d03c6ea470491b203794dc9f8c32846d251b0ba80f7c4834122dd81ad889d796420fe930d790695a160062c54e87128e19afddf2319799dafe9f9ffe682f7a01e", 0xc7}, {&(0x7f0000000180)="5f96757c252293851ebee4176a1e60790fcdba87e93af230848b661976790042427284aa326fa356491c2be983cbc7005b0321321898105d45cc67304bd2e4acfca27a5c968f0596ff5aa2696b7f69b03938a80571f6e468d3d81c0c34ba66c7a2e95a", 0x63}, {&(0x7f0000000200)="179489e77e105ff5f9b7789b51471b59f12850a17dd9de0c408f34f1da32810c4894ef4a6000407ba4d883cba1aec126e622cde1b86182f664681f244d33427a5262c63cd51873860d5819cceff4b20388a921e3a22becf7646de0a4cda36cddfe06bd3f30ad587b71f7e86341bf00257528523079", 0x75}, {&(0x7f0000000280)="a59426218a38a27a502ca6f6751591bef8799749c0e31f4e267062a90cf9240c8ca8b12a53e0499781d4b9dad2e3913038db42419e088d4f14a8030dfdc3613784207da6ff17ed50958fa1659d27f973030d9218a699aec1223949e14f68905a6482df559b62439e9df70dbc2a94f424136e552dd880cf90320602a195f196eb23f44a797710c746476f34f4903a948a638d73b1de07bc3b31eb0bdc86a7531b751a853e756cc2f494df044df460d1de9e4a3925a9e2fa3872c0e711737fbd585e577548287c41068a7f2d1aad0dda51479f7957fbe9f75ffdef6005bf45b06ebed209918cbdb1246154319e4b74d258c9", 0xf1}, {&(0x7f0000000380)="5e14f38a9f2746ca09c99ae24456ce7cff5322a55826eeaf20896e2acbceae65ed996beb44843ec28bcdc7ccf96e1f70aa57f2d858f2267222ed18ca56581dc051d885ddc5aa27f8fc6fe7581a7fdfd4f4a281da180c6c2b54d01411f1051842294139cbd242183fdf0248f806108699ae47fab4ee7622ba0930038e39879c59f34a4b3d9d837a045d49ffdb877304cba9fda2621550c5e6b90010f66432c10401604aba76cbfa9a0e07b495cca600f75c10775f917a0836c509721a1cd01ea7708d04d352daab6b7d3f33b58a9aecb3813f72", 0xd3}], 0x5}, 0x4) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xe494d48306a48b64}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) (async) close(0xffffffffffffffff) (async) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x12, 0x0, 0x44) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) (async, rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'veth1_to_team\x00', @local}) 1.665345862s ago: executing program 2 (id=6482): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0xf, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.571735907s ago: executing program 0 (id=6483): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) (fail_nth: 1) 1.570731647s ago: executing program 1 (id=6484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r0}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000180)="10014b9882b86a72cc0c3b401c64317069e3b12639fcf7b5c865f44a12829a4f3f9732c3a67a51f999cbb515369e676fdf27d7959357c800ef16429c093bd0be6fadb5e86d354a1f205d5ead93bb193466c1e9b72d12260874702d02e7226cc4952e709c53031c98f12bb84aba21b023b5be141f20260d8d90fe02df9a108a5b059e1f576dbe8d9035a858ff0f06475dd5d23e2ac2d6536a91588d3b088ea0dd44c288ed58c68968e9f9c6b298b64d6b78c3dfad613e1dedbc0d77d589c7411ef4fe6ccf4c72a8bdd1e5c8df063fc92f7180ce93d071da3bc12ddb499be7d0a14f3573f0235eed02bdf57195", &(0x7f0000000280)=""/136}, 0x20) (rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000500)={r4}) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000540)) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xa00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000005c0)={'batadv0\x00', 0x4000}) recvmsg$kcm(r3, &(0x7f00000008c0)={&(0x7f0000000600)=@phonet, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/252, 0xfc}], 0x1, &(0x7f00000007c0)=""/220, 0xdc}, 0x40000020) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='blkio.bfq.sectors\x00', 0x0, 0x0) socketpair(0x2, 0x3, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000980)={r7}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x9, '\x00', 0x0, r6, 0x3, 0x2, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r5, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000d40)=[{}, {}], 0x10, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1c, 0x1b, &(0x7f0000000a40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x7, 0x0, 0xa, 0x8, 0x8}, @ldst={0x0, 0x1, 0x4, 0x7, 0x6, 0x4, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x2, 0x1, 0x8, 0x5, 0x30, 0x4}, @generic={0x2, 0x9, 0xa, 0x3, 0x200000}, @alu={0x7, 0x1, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2}, @func], &(0x7f0000000b40)='syzkaller\x00', 0x7, 0x6a, &(0x7f0000000b80)=""/106, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1b, r6, 0x8, &(0x7f0000000c00)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x3, 0x8001, 0x200}, 0x10, r10, 0xffffffffffffffff, 0x6, &(0x7f0000000f80)=[r6, r2, r6, r2, r0, r3], &(0x7f0000000fc0)=[{0x3, 0x3, 0x2, 0x7}, {0x2, 0x5, 0x2}, {0x2, 0x2, 0x2, 0x3}, {0x3, 0x4, 0x5, 0x7}, {0x2, 0x5, 0x1}, {0x2, 0x1, 0x2, 0x5}], 0x10, 0x10000}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x8, 0xa7, 0x0, 0x8000, 0x1, 0x8, '\x00', r9, r6, 0x1, 0x0, 0x3, 0x4, @value=r6}, 0x50) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x7}}, @typedef={0x10}]}, {0x0, [0x5f, 0x2e, 0x2e, 0x30, 0x61, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000001380)=""/207, 0x52, 0xcf, 0x1, 0xb783, 0x10000, @value=r6}, 0x28) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001500)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x16, '\x00', r9, r6, 0x1, 0x2, 0x3}, 0x50) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x9, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfbea}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @exit]}, &(0x7f0000001200)='GPL\x00', 0x8, 0xb7, &(0x7f0000001240)=""/183, 0x40f00, 0x18, '\x00', r9, 0x0, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000014c0)={0x1, 0xb, 0x1, 0xb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001580)=[r8, r13], 0x0, 0x10, 0xb95}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_lsm={0x1d, 0xe, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69d7, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x85, &(0x7f0000001740)=""/133, 0x40f00, 0x13, '\x00', r9, 0x1b, r6, 0x8, &(0x7f0000001800)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001840)={0x2, 0x2, 0x3, 0x1539}, 0x10, r10, 0x0, 0x9, &(0x7f0000001880)=[r6, r6, r13, 0x1], &(0x7f00000018c0)=[{0x1, 0x3, 0xf, 0x9}, {0x5, 0x2, 0x4, 0x2}, {0x0, 0x2, 0xf, 0x1}, {0x0, 0x1, 0x1, 0x8}, {0x0, 0x1, 0xa, 0x9}, {0x1, 0x3, 0x4, 0x7}, {0x3, 0x5, 0x8, 0x6}, {0x4, 0x1, 0x4, 0x3}, {0x4, 0x5, 0x3, 0x2}], 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r14, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000001c00)=[0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000001c80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x49, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f80)={0x6, 0x13, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@generic={0x10, 0xb, 0x9, 0xb, 0x3}, @generic={0xf, 0x6, 0x9, 0xa0e, 0x87b4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000001b00)='syzkaller\x00', 0x3, 0x80, &(0x7f0000001b40)=""/128, 0x41100, 0x20, '\x00', r15, 0x25, r6, 0x8, &(0x7f0000001ec0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001f00)=[r11, r8, r13, r13, 0x1, r3], &(0x7f0000001f40)=[{0x3, 0x4, 0xe, 0x1}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x4, 0x9, 0x3}], 0x10, 0x4}, 0x94) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r6, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000023c0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000002040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x32cc494b}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000020c0)='syzkaller\x00', 0x4, 0xd9, &(0x7f0000002100)=""/217, 0x41000, 0x1d, '\x00', r15, 0x1b, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002200)={0x0, 0x2, 0x141c800, 0x2}, 0x10, r16, 0x0, 0xa, &(0x7f00000022c0)=[r11, r3, r3, r17], &(0x7f0000002300)=[{0x5, 0x5, 0x9, 0x7}, {0x1, 0x2, 0xb, 0x5}, {0x3, 0x3, 0xd, 0x9}, {0x4, 0x5, 0xb, 0x7}, {0x3, 0x5, 0xd, 0xb}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x1, 0xd, 0x8}, {0x5, 0x1, 0x4, 0x1}, {0x3, 0x5, 0xa, 0x3}, {0x1, 0x5, 0x9, 0x8}], 0x10, 0x3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002500)={r6, 0x58, &(0x7f0000002480)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002540)={r18, 0x80000001, 0x8}, 0xc) 1.550686468s ago: executing program 2 (id=6485): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) 1.256563266s ago: executing program 1 (id=6486): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000340)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe55a1bc0005000000000000000e41b0940900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)}, 0x10000) 683.46911ms ago: executing program 0 (id=6487): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r2, 0x8b1b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x2f, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x10, 0x2, 0x4) r6 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xf04}, 0x0, 0x10000, 0x9e4, 0xa4e9ac515b44bfb5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xa7d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r7, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 682.98756ms ago: executing program 32 (id=6418): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x80000, &(0x7f0000000100)=[{&(0x7f0000000040)="2000000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e", 0x21}], 0x1}, 0x40000) 541.796388ms ago: executing program 0 (id=6489): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2109}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x120) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f00000001c0), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 540.451378ms ago: executing program 2 (id=6490): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000e00)={0x1, 0x0, [0x0]}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x1, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e150007ab"], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f96424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000ec0)=0x9) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="0008cc2312fa0101b2ef0000ff010000e1ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000300"/28], 0x50) socket$kcm(0x10, 0x2, 0x0) 282.739414ms ago: executing program 1 (id=6491): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x16ff98f9) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000008100", 0xe}], 0x1}, 0x4000080) 259.503115ms ago: executing program 0 (id=6492): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) 0s ago: executing program 2 (id=6493): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c12d8f714000000002f1eafbcf706e105000000894f000f1102ee1680ca8286cee844000000000019", 0x2b}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x0, 0xdd, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2d, 'cpuset'}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="e03f030033000b35d25a806e8c6f949d819cd900000005000a00cb00053582c164391be6df95592f37153e370c20009ffb30d15be168d9a9d9c705ce33a70c31c6f8f2e7f455e6626278921519d693db5ab3bea4c3a14d8ce649d3ee56f385b01a0820c8644d965134f6b25e2ab7a7d32a0fcb30efc8e937284340af6e8910af0fbbc333b4f4111584d9ff8468d6ff8594305f1633305f07ac6c9692547570c54e9dfbd614215a26d51fc53879de2d3ef67af88d08cb2bf99a709e3fd6", 0xbd}], 0x1}, 0x4000) r6 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0xfb, 0x2, 0x4, 0x8, 0x0, 0x153, 0xa8180, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x100000, 0x5, 0x7, 0x1, 0x8, 0x9, 0x1000, 0x0, 0x5, 0x0, 0x40}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000240)=0x1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = socket$kcm(0x10, 0x4, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xffffffffffffffc2, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e00280010000000028000001266", 0x2e}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa313c6b876c1d0000007ea60864160af36507001ac0043f020208000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), 0x0, 0x0, 0xa9, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$inet(r8, &(0x7f00000009c0)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="d57e29676656fd6eb764e16fba5451c21f2327d91f67616697b369852f4a25d23a8de6c0f07f917a3c55c759558832d77fafee9065cb95cd2ac63f043967997614fbc04230661f5f2e206b97685da6985f95cb244223fd1867ddee61e228f39e8bc440b45225ef5c755f02941526d204b6e74fd004d1014bad88af77ca19d6a59b9efd72ec20152b8a7d66bab5cdffaa7362511ed8d5314d83e86d2d9a11", 0x9e}, {0x0}, {&(0x7f0000000a00)="a93787e16185d1baa77987c88be6538b8f1b6ac7cde884c2dc8b3d17555090edee847c45cbb9beed9317d8775b6ec9c1088d4d23d52bd7e7a4a8c099255934586122c8fff85c79d7840ced49141985291bd9bed07dc5cd9c63a98ac053d62a513e232d24fd99812ae7f2b6fead200cd4edf1cdc9f0e8dee3aa8a3ab217b9442b0fb73d1b4aa8cbb3f4ed5ad673631d9a6c9bc6b230c0dde7f6bbf27f7819b6289767f52172e8907c1cadf38afee3358e7646686adc908c766208b577393ffc290f4e0a5621d4262b84b8a95230", 0xcd}, {&(0x7f00000003c0)="a47b6de15e39c7bc962564c51ed176ca7b9956d6776411cfad90870658b24e119901a7285464273099752b4b85fac08608327feb67bf8900c27decf47353466a645ca00d11abaaa4f4346048b80b77cdc7e4e3c41c551a5c428c79cd7c20e65e17b4c4807e335335028ed71aa8c28e29f029f8e58b32d170473a74e5dc49574cc03e112ae2214f1862484ca29c3908e29e7bdb53e6a398d2534bf95ac524d875ffc6d2a5ee177027c585ef29eace36375f6b57887ebde88857", 0xb9}], 0x4, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x70}, 0x200000b4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x9, 0x0, 0x9, 0x5000, r4, 0x3, '\x00', r9, 0xffffffffffffffff, 0x1, 0x1}, 0x50) kernel console output (not intermixed with test programs): 0/0x330 [ 1749.378156][T24568] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1749.384624][T24568] ? sock_rps_record_flow+0x19/0x3f0 [ 1749.389927][T24568] ? inet_sendmsg+0xe9/0x2f0 [ 1749.394535][T24568] ? inet_send_prepare+0x260/0x260 [ 1749.399676][T24568] ____sys_sendmsg+0x5ba/0x960 [ 1749.404466][T24568] ? __lock_acquire+0x7d40/0x7d40 [ 1749.409519][T24568] ? __asan_memset+0x22/0x40 [ 1749.414152][T24568] ? __sys_sendmsg_sock+0x30/0x30 [ 1749.419195][T24568] ? __import_iovec+0x5f2/0x850 [ 1749.424073][T24568] ? import_iovec+0x73/0xa0 [ 1749.428625][T24568] ___sys_sendmsg+0x2a6/0x360 [ 1749.433318][T24568] ? get_pid_task+0x20/0x1e0 [ 1749.437937][T24568] ? __sys_sendmsg+0x2a0/0x2a0 [ 1749.442732][T24568] ? __lock_acquire+0x7d40/0x7d40 [ 1749.447795][T24568] __se_sys_sendmsg+0x1c2/0x2b0 [ 1749.452663][T24568] ? __x64_sys_sendmsg+0x80/0x80 [ 1749.457628][T24568] ? lockdep_hardirqs_on+0x98/0x150 [ 1749.462851][T24568] do_syscall_64+0x55/0xa0 [ 1749.467286][T24568] ? clear_bhb_loop+0x40/0x90 [ 1749.471986][T24568] ? clear_bhb_loop+0x40/0x90 [ 1749.476682][T24568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1749.482596][T24568] RIP: 0033:0x7fa69979bf79 [ 1749.487035][T24568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1749.506661][T24568] RSP: 002b:00007fa69a6e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1749.515095][T24568] RAX: ffffffffffffffda RBX: 00007fa699a16090 RCX: 00007fa69979bf79 [ 1749.523082][T24568] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1749.531068][T24568] RBP: 00007fa69a6e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1749.539056][T24568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.547043][T24568] R13: 00007fa699a16128 R14: 00007fa699a16090 R15: 00007fffec2ca758 [ 1749.555052][T24568] [ 1749.734710][T24571] netlink: 'syz.0.5761': attribute type 2 has an invalid length. [ 1749.801775][T24571] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5761'. [ 1755.211328][T24567] netlink: 'syz.0.5761': attribute type 21 has an invalid length. [ 1755.240312][T24587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1755.583536][T24597] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5771'. [ 1757.466086][T24624] netlink: 'syz.3.5781': attribute type 25 has an invalid length. [ 1757.523094][T24624] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.5781'. [ 1757.824905][T24633] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1758.250672][T24643] FAULT_INJECTION: forcing a failure. [ 1758.250672][T24643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1758.320517][T24643] CPU: 1 PID: 24643 Comm: syz.0.5788 Not tainted syzkaller #0 [ 1758.328069][T24643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1758.338177][T24643] Call Trace: [ 1758.341499][T24643] [ 1758.344471][T24643] dump_stack_lvl+0x18c/0x250 [ 1758.349224][T24643] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1758.355427][T24643] ? show_regs_print_info+0x20/0x20 [ 1758.360676][T24643] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1758.366882][T24643] ? dump_stack+0x9/0x20 [ 1758.371185][T24643] should_fail_ex+0x39d/0x4d0 [ 1758.375916][T24643] _copy_from_user+0x2f/0xe0 [ 1758.380567][T24643] ___sys_recvmsg+0x176/0x590 [ 1758.385289][T24643] ? __sys_recvmsg+0x2a0/0x2a0 [ 1758.390098][T24643] ? ktime_get+0x7f/0x280 [ 1758.394482][T24643] ? __fget_files+0x43d/0x4b0 [ 1758.399209][T24643] __x64_sys_recvmsg+0x20c/0x2e0 [ 1758.404182][T24643] ? ___sys_recvmsg+0x590/0x590 [ 1758.409094][T24643] ? lockdep_hardirqs_on+0x98/0x150 [ 1758.414345][T24643] do_syscall_64+0x55/0xa0 [ 1758.418815][T24643] ? clear_bhb_loop+0x40/0x90 [ 1758.423524][T24643] ? clear_bhb_loop+0x40/0x90 [ 1758.428237][T24643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.434167][T24643] RIP: 0033:0x7f61c7d9bf79 [ 1758.438649][T24643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.458311][T24643] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1758.466772][T24643] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1758.474833][T24643] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000007 [ 1758.482842][T24643] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.490857][T24643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1758.498870][T24643] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1758.506900][T24643] [ 1758.994640][T24664] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5795'. [ 1759.706272][T24671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5797'. [ 1760.145470][T24685] lo: entered allmulticast mode [ 1760.181292][T24685] lo: entered promiscuous mode [ 1760.197318][T24685] lo: left allmulticast mode [ 1761.049294][T24698] tap0: tun_chr_ioctl cmd 1074025680 [ 1762.195692][T24721] netlink: 'syz.2.5814': attribute type 10 has an invalid length. [ 1762.220479][T24721] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5814'. [ 1762.885469][T24715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5810'. [ 1762.906152][T24726] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5817'. [ 1763.820891][T24733] syzkaller0: entered promiscuous mode [ 1763.831650][T24733] syzkaller0: entered allmulticast mode [ 1768.833794][T24770] mac80211_hwsim hwsim25 .3ãc¤±: renamed from wlan1 [ 1769.137679][T24774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1773.285557][T24874] syzkaller0: entered promiscuous mode [ 1773.300445][T24874] syzkaller0: entered allmulticast mode [ 1773.370847][T24875] netlink: 'syz.2.5865': attribute type 13 has an invalid length. [ 1773.378931][T24875] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1773.512203][T24879] FAULT_INJECTION: forcing a failure. [ 1773.512203][T24879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1773.620519][T24879] CPU: 0 PID: 24879 Comm: syz.0.5866 Not tainted syzkaller #0 [ 1773.628150][T24879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1773.638258][T24879] Call Trace: [ 1773.641582][T24879] [ 1773.644559][T24879] dump_stack_lvl+0x18c/0x250 [ 1773.649289][T24879] ? show_regs_print_info+0x20/0x20 [ 1773.654542][T24879] ? load_image+0x400/0x400 [ 1773.659097][T24879] ? __might_fault+0xaa/0x120 [ 1773.663829][T24879] ? __lock_acquire+0x7d40/0x7d40 [ 1773.668906][T24879] should_fail_ex+0x39d/0x4d0 [ 1773.673631][T24879] _copy_from_user+0x2f/0xe0 [ 1773.678253][T24879] ___sys_sendmsg+0x1c7/0x360 [ 1773.682953][T24879] ? get_pid_task+0x20/0x1e0 [ 1773.687567][T24879] ? __sys_sendmsg+0x2a0/0x2a0 [ 1773.692369][T24879] ? __lock_acquire+0x7d40/0x7d40 [ 1773.697433][T24879] __se_sys_sendmsg+0x1c2/0x2b0 [ 1773.702300][T24879] ? __x64_sys_sendmsg+0x80/0x80 [ 1773.707272][T24879] ? lockdep_hardirqs_on+0x98/0x150 [ 1773.712591][T24879] do_syscall_64+0x55/0xa0 [ 1773.717029][T24879] ? clear_bhb_loop+0x40/0x90 [ 1773.721727][T24879] ? clear_bhb_loop+0x40/0x90 [ 1773.726440][T24879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1773.732356][T24879] RIP: 0033:0x7f61c7d9bf79 [ 1773.736789][T24879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1773.756412][T24879] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1773.764842][T24879] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1773.772832][T24879] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1773.780819][T24879] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.788813][T24879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.796818][T24879] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1773.804833][T24879] [ 1780.582697][T24923] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5880'. [ 1781.497128][T24940] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5887'. [ 1781.805840][T24925] syzkaller0: entered promiscuous mode [ 1781.812941][T24925] syzkaller0: entered allmulticast mode [ 1781.870242][T24944] netlink: 'syz.3.5887': attribute type 10 has an invalid length. [ 1782.020982][T24945] netlink: 'syz.3.5887': attribute type 10 has an invalid length. [ 1785.046855][T24953] syzkaller0: entered promiscuous mode [ 1785.064465][T24953] syzkaller0: entered allmulticast mode [ 1789.982066][T25008] syzkaller0: entered promiscuous mode [ 1789.987887][T25008] syzkaller0: entered allmulticast mode [ 1790.005777][T25021] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5911'. [ 1791.884451][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.898900][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.829665][T25054] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5922'. [ 1794.357303][T25077] syzkaller0: entered promiscuous mode [ 1794.370385][T25077] syzkaller0: entered allmulticast mode [ 1794.391366][T25090] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5932'. [ 1798.074712][T25127] netlink: 'syz.2.5948': attribute type 3 has an invalid length. [ 1798.140549][T25127] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1798.195097][T25129] netlink: 'syz.3.5949': attribute type 3 has an invalid length. [ 1798.221262][T25129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1801.198995][T25180] syzkaller0: entered promiscuous mode [ 1801.236822][T25180] syzkaller0: entered allmulticast mode [ 1806.574517][T25219] netlink: 'syz.1.5981': attribute type 3 has an invalid length. [ 1806.600949][T25219] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1809.857214][T25287] tap0: tun_chr_ioctl cmd 2147767507 [ 1809.863150][T25286] tap0: tun_chr_ioctl cmd 2147767521 [ 1810.642117][T25297] FAULT_INJECTION: forcing a failure. [ 1810.642117][T25297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1810.680829][T25297] CPU: 0 PID: 25297 Comm: syz.1.6005 Not tainted syzkaller #0 [ 1810.688404][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1810.698496][T25297] Call Trace: [ 1810.701820][T25297] [ 1810.704802][T25297] dump_stack_lvl+0x18c/0x250 [ 1810.709528][T25297] ? show_regs_print_info+0x20/0x20 [ 1810.714768][T25297] ? load_image+0x400/0x400 [ 1810.719353][T25297] ? __lock_acquire+0x7d40/0x7d40 [ 1810.724427][T25297] ? snprintf+0xe9/0x140 [ 1810.728734][T25297] should_fail_ex+0x39d/0x4d0 [ 1810.733464][T25297] _copy_to_user+0x2f/0xa0 [ 1810.737936][T25297] simple_read_from_buffer+0xe7/0x150 [ 1810.743392][T25297] proc_fail_nth_read+0x1e8/0x260 [ 1810.748596][T25297] ? proc_fault_inject_write+0x360/0x360 [ 1810.754281][T25297] ? fsnotify_perm+0x271/0x5e0 [ 1810.759085][T25297] ? proc_fault_inject_write+0x360/0x360 [ 1810.764771][T25297] vfs_read+0x28b/0x970 [ 1810.768980][T25297] ? kernel_read+0x1e0/0x1e0 [ 1810.773621][T25297] ? __fget_files+0x28/0x4b0 [ 1810.778262][T25297] ? __fget_files+0x28/0x4b0 [ 1810.782932][T25297] ? __fget_files+0x43d/0x4b0 [ 1810.787672][T25297] ? __fdget_pos+0x2a3/0x330 [ 1810.792311][T25297] ? ksys_read+0x75/0x260 [ 1810.796693][T25297] ksys_read+0x150/0x260 [ 1810.800995][T25297] ? vfs_write+0x990/0x990 [ 1810.805464][T25297] ? lockdep_hardirqs_on+0x98/0x150 [ 1810.810697][T25297] do_syscall_64+0x55/0xa0 [ 1810.815160][T25297] ? clear_bhb_loop+0x40/0x90 [ 1810.819870][T25297] ? clear_bhb_loop+0x40/0x90 [ 1810.824606][T25297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1810.830548][T25297] RIP: 0033:0x7fdf5c75c84e [ 1810.835002][T25297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1810.854647][T25297] RSP: 002b:00007fdf5d5fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1810.863091][T25297] RAX: ffffffffffffffda RBX: 00007fdf5d5fd6c0 RCX: 00007fdf5c75c84e [ 1810.871103][T25297] RDX: 000000000000000f RSI: 00007fdf5d5fd0a0 RDI: 0000000000000005 [ 1810.879119][T25297] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.887139][T25297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1810.895168][T25297] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1810.903220][T25297] [ 1811.253528][T25304] netlink: 'syz.3.6010': attribute type 1 has an invalid length. [ 1811.272284][T25304] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.6010'. [ 1811.505055][ T51] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1811.512640][ T51] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1811.601597][T25310] FAULT_INJECTION: forcing a failure. [ 1811.601597][T25310] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.650506][T25310] CPU: 0 PID: 25310 Comm: syz.1.6019 Not tainted syzkaller #0 [ 1811.658070][T25310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1811.668236][T25310] Call Trace: [ 1811.671541][T25310] [ 1811.674516][T25310] dump_stack_lvl+0x18c/0x250 [ 1811.679230][T25310] ? show_regs_print_info+0x20/0x20 [ 1811.684464][T25310] ? load_image+0x400/0x400 [ 1811.688992][T25310] ? __might_sleep+0xe0/0xe0 [ 1811.693614][T25310] ? __lock_acquire+0x7d40/0x7d40 [ 1811.698666][T25310] should_fail_ex+0x39d/0x4d0 [ 1811.703380][T25310] should_failslab+0x9/0x20 [ 1811.707913][T25310] slab_pre_alloc_hook+0x59/0x310 [ 1811.712977][T25310] ? lock_chain_count+0x20/0x20 [ 1811.717869][T25310] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1811.723279][T25310] __kmem_cache_alloc_node+0x53/0x250 [ 1811.728679][T25310] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1811.734089][T25310] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1811.739487][T25310] kmalloc_trace+0x2a/0xe0 [ 1811.743939][T25310] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1811.749165][T25310] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 1811.754559][T25310] mptcp_sendmsg+0x14b2/0x16d0 [ 1811.759346][T25310] ? __lock_acquire+0x1273/0x7d40 [ 1811.764402][T25310] ? aa_sk_perm+0x83c/0x970 [ 1811.768947][T25310] ? aa_af_perm+0x330/0x330 [ 1811.773483][T25310] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1811.779916][T25310] ? mptcp_shutdown+0x80/0x80 [ 1811.784700][T25310] ? inet6_sendmsg+0x5f/0xd0 [ 1811.789306][T25310] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1811.794522][T25310] ____sys_sendmsg+0x5ba/0x960 [ 1811.799325][T25310] ? __lock_acquire+0x7d40/0x7d40 [ 1811.804381][T25310] ? __asan_memset+0x22/0x40 [ 1811.808988][T25310] ? __sys_sendmsg_sock+0x30/0x30 [ 1811.814021][T25310] ? __import_iovec+0x3fa/0x850 [ 1811.818904][T25310] ? import_iovec+0x73/0xa0 [ 1811.823441][T25310] ___sys_sendmsg+0x2a6/0x360 [ 1811.828143][T25310] ? __sys_sendmsg+0x2a0/0x2a0 [ 1811.832943][T25310] ? __lock_acquire+0x7d40/0x7d40 [ 1811.838045][T25310] __se_sys_sendmsg+0x1c2/0x2b0 [ 1811.842922][T25310] ? __x64_sys_sendmsg+0x80/0x80 [ 1811.847898][T25310] ? lockdep_hardirqs_on+0x98/0x150 [ 1811.853116][T25310] do_syscall_64+0x55/0xa0 [ 1811.857558][T25310] ? clear_bhb_loop+0x40/0x90 [ 1811.862252][T25310] ? clear_bhb_loop+0x40/0x90 [ 1811.866948][T25310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1811.872863][T25310] RIP: 0033:0x7fdf5c79bf79 [ 1811.877303][T25310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1811.896939][T25310] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.905380][T25310] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1811.913378][T25310] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 1811.921455][T25310] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.929446][T25310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.937437][T25310] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1811.945437][T25310] [ 1813.492686][T25344] sctp: [Deprecated]: syz.2.6023 (pid 25344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1813.492686][T25344] Use struct sctp_sack_info instead [ 1813.663266][T25351] netlink: 'syz.0.6024': attribute type 12 has an invalid length. [ 1813.675563][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1813.684939][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1813.693835][T25351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6024'. [ 1814.468746][T25368] netlink: 'syz.2.6033': attribute type 20 has an invalid length. [ 1814.686307][T25372] FAULT_INJECTION: forcing a failure. [ 1814.686307][T25372] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.770527][T25372] CPU: 0 PID: 25372 Comm: syz.2.6035 Not tainted syzkaller #0 [ 1814.778091][T25372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1814.788166][T25372] Call Trace: [ 1814.791500][T25372] [ 1814.794443][T25372] dump_stack_lvl+0x18c/0x250 [ 1814.799150][T25372] ? show_regs_print_info+0x20/0x20 [ 1814.804368][T25372] ? load_image+0x400/0x400 [ 1814.808883][T25372] ? __might_sleep+0xe0/0xe0 [ 1814.813493][T25372] ? __lock_acquire+0x7d40/0x7d40 [ 1814.818558][T25372] should_fail_ex+0x39d/0x4d0 [ 1814.823270][T25372] should_failslab+0x9/0x20 [ 1814.827797][T25372] slab_pre_alloc_hook+0x59/0x310 [ 1814.832845][T25372] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1814.838414][T25372] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1814.843972][T25372] __kmem_cache_alloc_node+0x53/0x250 [ 1814.849364][T25372] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1814.854916][T25372] __kmalloc+0xa4/0x230 [ 1814.859086][T25372] bpf_prog_test_run_skb+0x238/0x12b0 [ 1814.864466][T25372] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1814.870680][T25372] ? bpf_prog_test_run+0x256/0x390 [ 1814.875816][T25372] ? cpu_online+0x60/0x60 [ 1814.880165][T25372] bpf_prog_test_run+0x321/0x390 [ 1814.885121][T25372] __sys_bpf+0x49d/0x890 [ 1814.889468][T25372] ? bpf_link_show_fdinfo+0x390/0x390 [ 1814.894865][T25372] ? lock_chain_count+0x20/0x20 [ 1814.899733][T25372] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1814.905729][T25372] __x64_sys_bpf+0x7c/0x90 [ 1814.910185][T25372] do_syscall_64+0x55/0xa0 [ 1814.914733][T25372] ? clear_bhb_loop+0x40/0x90 [ 1814.919436][T25372] ? clear_bhb_loop+0x40/0x90 [ 1814.924136][T25372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1814.930051][T25372] RIP: 0033:0x7f875799bf79 [ 1814.934497][T25372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.954128][T25372] RSP: 002b:00007f8755bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1814.962620][T25372] RAX: ffffffffffffffda RBX: 00007f8757c15fa0 RCX: 00007f875799bf79 [ 1814.970602][T25372] RDX: 0000000000000050 RSI: 0000200000000880 RDI: 000000000000000a [ 1814.978591][T25372] RBP: 00007f8755bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.986574][T25372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1814.994581][T25372] R13: 00007f8757c16038 R14: 00007f8757c15fa0 R15: 00007ffccc58d228 [ 1815.002589][T25372] [ 1815.570521][ T51] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1815.578492][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1816.638064][T25405] FAULT_INJECTION: forcing a failure. [ 1816.638064][T25405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1816.652244][T25405] CPU: 1 PID: 25405 Comm: syz.0.6045 Not tainted syzkaller #0 [ 1816.659763][T25405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1816.669865][T25405] Call Trace: [ 1816.673181][T25405] [ 1816.676141][T25405] dump_stack_lvl+0x18c/0x250 [ 1816.680854][T25405] ? show_regs_print_info+0x20/0x20 [ 1816.686082][T25405] ? load_image+0x400/0x400 [ 1816.690718][T25405] ? kasan_check_range+0x6a/0x290 [ 1816.695773][T25405] should_fail_ex+0x39d/0x4d0 [ 1816.700493][T25405] _copy_from_user+0x2f/0xe0 [ 1816.705136][T25405] ___sys_sendmsg+0x1c7/0x360 [ 1816.709859][T25405] ? __sys_sendmsg+0x2a0/0x2a0 [ 1816.714639][T25405] ? perf_trace_preemptirq_template+0x269/0x330 [ 1816.720930][T25405] __se_sys_sendmsg+0x1c2/0x2b0 [ 1816.725796][T25405] ? __x64_sys_sendmsg+0x80/0x80 [ 1816.730765][T25405] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1816.736713][T25405] do_syscall_64+0x55/0xa0 [ 1816.741157][T25405] ? clear_bhb_loop+0x40/0x90 [ 1816.745857][T25405] ? clear_bhb_loop+0x40/0x90 [ 1816.750566][T25405] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1816.756474][T25405] RIP: 0033:0x7f61c7d9bf79 [ 1816.760933][T25405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1816.780570][T25405] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1816.789021][T25405] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1816.797022][T25405] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1816.805020][T25405] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1816.813012][T25405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1816.820997][T25405] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1816.829012][T25405] [ 1818.261876][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1818.270558][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1819.219632][T25434] FAULT_INJECTION: forcing a failure. [ 1819.219632][T25434] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.290515][T25434] CPU: 0 PID: 25434 Comm: syz.1.6059 Not tainted syzkaller #0 [ 1819.298049][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1819.308143][T25434] Call Trace: [ 1819.311499][T25434] [ 1819.314468][T25434] dump_stack_lvl+0x18c/0x250 [ 1819.319229][T25434] ? show_regs_print_info+0x20/0x20 [ 1819.324466][T25434] ? lockdep_hardirqs_on+0x98/0x150 [ 1819.329703][T25434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.335909][T25434] should_fail_ex+0x39d/0x4d0 [ 1819.340635][T25434] should_failslab+0x9/0x20 [ 1819.345172][T25434] slab_pre_alloc_hook+0x59/0x310 [ 1819.350353][T25434] ? lockdep_hardirqs_on+0x98/0x150 [ 1819.355573][T25434] ? __get_vm_area_node+0x125/0x370 [ 1819.360884][T25434] __kmem_cache_alloc_node+0x53/0x250 [ 1819.366271][T25434] ? __get_vm_area_node+0x125/0x370 [ 1819.371492][T25434] kmalloc_node_trace+0x26/0xe0 [ 1819.376378][T25434] __get_vm_area_node+0x125/0x370 [ 1819.381454][T25434] __vmalloc_node_range+0x36e/0x1330 [ 1819.386766][T25434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.392333][T25434] ? irqentry_enter+0x37/0x50 [ 1819.397032][T25434] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1819.403032][T25434] ? lock_chain_count+0x20/0x20 [ 1819.407912][T25434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.414081][T25434] ? free_vm_area+0x50/0x50 [ 1819.418602][T25434] ? end_current_label_crit_section+0x170/0x170 [ 1819.424859][T25434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.430413][T25434] __vmalloc+0x7a/0x90 [ 1819.434504][T25434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.440056][T25434] bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.445447][T25434] ? bpf_prog_alloc+0x2b/0x1a0 [ 1819.450229][T25434] bpf_prog_alloc+0x3d/0x1a0 [ 1819.454834][T25434] bpf_prog_load+0x6eb/0x1670 [ 1819.459540][T25434] ? map_freeze+0x420/0x420 [ 1819.464075][T25434] ? __might_fault+0xaa/0x120 [ 1819.468763][T25434] ? __lock_acquire+0x7d40/0x7d40 [ 1819.473794][T25434] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1819.479524][T25434] ? __might_fault+0xaa/0x120 [ 1819.484214][T25434] ? __might_fault+0xc6/0x120 [ 1819.488902][T25434] ? __might_fault+0xaa/0x120 [ 1819.493586][T25434] ? bpf_lsm_bpf+0x9/0x10 [ 1819.497927][T25434] ? security_bpf+0x7e/0xa0 [ 1819.502453][T25434] __sys_bpf+0x5ba/0x890 [ 1819.506724][T25434] ? bpf_link_show_fdinfo+0x390/0x390 [ 1819.512132][T25434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.518315][T25434] __x64_sys_bpf+0x7c/0x90 [ 1819.522748][T25434] do_syscall_64+0x55/0xa0 [ 1819.527182][T25434] ? clear_bhb_loop+0x40/0x90 [ 1819.531887][T25434] ? clear_bhb_loop+0x40/0x90 [ 1819.536582][T25434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1819.542495][T25434] RIP: 0033:0x7fdf5c79bf79 [ 1819.546944][T25434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.566563][T25434] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1819.574995][T25434] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1819.582973][T25434] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1819.590954][T25434] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.598970][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.606949][T25434] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1819.614958][T25434] [ 1819.724021][T25434] syz.1.6059: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1819.820534][T25434] CPU: 0 PID: 25434 Comm: syz.1.6059 Not tainted syzkaller #0 [ 1819.828084][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1819.838180][T25434] Call Trace: [ 1819.841496][T25434] [ 1819.844457][T25434] dump_stack_lvl+0x18c/0x250 [ 1819.849189][T25434] ? show_regs_print_info+0x20/0x20 [ 1819.854427][T25434] ? load_image+0x400/0x400 [ 1819.858993][T25434] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1819.865445][T25434] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1819.871992][T25434] warn_alloc+0x246/0x340 [ 1819.876382][T25434] ? __get_vm_area_node+0x125/0x370 [ 1819.881638][T25434] ? zone_watermark_ok_safe+0x230/0x230 [ 1819.887229][T25434] ? rcu_is_watching+0x15/0xb0 [ 1819.892056][T25434] ? __get_vm_area_node+0x356/0x370 [ 1819.897333][T25434] __vmalloc_node_range+0x393/0x1330 [ 1819.902665][T25434] ? irqentry_enter+0x37/0x50 [ 1819.907373][T25434] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1819.913388][T25434] ? lock_chain_count+0x20/0x20 [ 1819.918269][T25434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1819.924467][T25434] ? free_vm_area+0x50/0x50 [ 1819.928999][T25434] ? end_current_label_crit_section+0x170/0x170 [ 1819.935271][T25434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.940834][T25434] __vmalloc+0x7a/0x90 [ 1819.944932][T25434] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.950497][T25434] bpf_prog_alloc_no_stats+0x47/0x440 [ 1819.955880][T25434] ? bpf_prog_alloc+0x2b/0x1a0 [ 1819.960750][T25434] bpf_prog_alloc+0x3d/0x1a0 [ 1819.965354][T25434] bpf_prog_load+0x6eb/0x1670 [ 1819.970062][T25434] ? map_freeze+0x420/0x420 [ 1819.974579][T25434] ? __might_fault+0xaa/0x120 [ 1819.979294][T25434] ? __lock_acquire+0x7d40/0x7d40 [ 1819.984340][T25434] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1819.990072][T25434] ? __might_fault+0xaa/0x120 [ 1819.994779][T25434] ? __might_fault+0xc6/0x120 [ 1819.999471][T25434] ? __might_fault+0xaa/0x120 [ 1820.004169][T25434] ? bpf_lsm_bpf+0x9/0x10 [ 1820.008520][T25434] ? security_bpf+0x7e/0xa0 [ 1820.013042][T25434] __sys_bpf+0x5ba/0x890 [ 1820.017329][T25434] ? bpf_link_show_fdinfo+0x390/0x390 [ 1820.022735][T25434] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1820.028930][T25434] __x64_sys_bpf+0x7c/0x90 [ 1820.033357][T25434] do_syscall_64+0x55/0xa0 [ 1820.037785][T25434] ? clear_bhb_loop+0x40/0x90 [ 1820.042477][T25434] ? clear_bhb_loop+0x40/0x90 [ 1820.047205][T25434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.053115][T25434] RIP: 0033:0x7fdf5c79bf79 [ 1820.057548][T25434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.077168][T25434] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1820.085602][T25434] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1820.093581][T25434] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1820.101564][T25434] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.109578][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.117558][T25434] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1820.125546][T25434] [ 1820.198470][T25434] Mem-Info: [ 1820.207729][T25434] active_anon:53721 inactive_anon:0 isolated_anon:0 [ 1820.207729][T25434] active_file:19509 inactive_file:40577 isolated_file:0 [ 1820.207729][T25434] unevictable:768 dirty:204 writeback:0 [ 1820.207729][T25434] slab_reclaimable:11785 slab_unreclaimable:95239 [ 1820.207729][T25434] mapped:36037 shmem:47930 pagetables:684 [ 1820.207729][T25434] sec_pagetables:0 bounce:0 [ 1820.207729][T25434] kernel_misc_reclaimable:0 [ 1820.207729][T25434] free:1289060 free_pcp:8932 free_cma:0 [ 1820.400425][T25434] Node 0 active_anon:221884kB inactive_anon:0kB active_file:78036kB inactive_file:162104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144848kB dirty:816kB writeback:0kB shmem:197284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10816kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no [ 1820.510614][T25434] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1820.590608][T25434] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1820.644755][ T51] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1820.655961][ T51] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1820.664059][T25434] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1820.669985][T25434] Node 0 DMA32 free:1235108kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:226648kB inactive_anon:0kB active_file:78036kB inactive_file:161268kB unevictable:1536kB writepending:816kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:11924kB local_pcp:4232kB free_cma:0kB [ 1820.738154][T25434] lowmem_reserve[]: 0 0 0 0 0 [ 1820.743064][T25434] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1820.770173][T25434] lowmem_reserve[]: 0 0 0 0 0 [ 1820.775007][T25434] Node 1 Normal free:3901236kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16356kB local_pcp:9220kB free_cma:0kB [ 1820.804984][T25434] lowmem_reserve[]: 0 0 0 0 0 [ 1820.809756][T25434] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1820.830534][T25434] Node 0 DMA32: 951*4kB (U) 901*8kB (UE) 554*16kB (UME) 522*32kB (UM) 291*64kB (UME) 712*128kB (UME) 311*256kB (UM) 141*512kB (UM) 73*1024kB (UME) 33*2048kB (UM) 194*4096kB (UM) = 1235108kB [ 1820.871259][T25434] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1820.893923][T25434] Node 1 Normal: 177*4kB (UME) 68*8kB (UME) 39*16kB (UME) 67*32kB (UME) 20*64kB (UME) 5*128kB (UM) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 950*4096kB (M) = 3901236kB [ 1820.925277][T25434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.945355][T25434] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1820.980485][T25434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1820.990280][T25434] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1821.014415][T25434] 112130 total pagecache pages [ 1821.019328][T25434] 0 pages in swap cache [ 1821.033941][T25434] Free swap = 124996kB [ 1821.038176][T25434] Total swap = 124996kB [ 1821.078184][T25434] 2097051 pages RAM [ 1821.083226][T25434] 0 pages HighMem/MovableOnly [ 1821.088959][T25434] 416922 pages reserved [ 1821.093639][T25434] 0 pages cma reserved [ 1821.232587][T25452] syzkaller0: entered promiscuous mode [ 1821.238174][T25452] syzkaller0: entered allmulticast mode [ 1822.051897][T25457] netlink: 'syz.3.6065': attribute type 10 has an invalid length. [ 1825.116429][T25457] geneve0: entered promiscuous mode [ 1825.166200][T25457] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1825.365212][ T51] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1825.375611][ T51] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1827.153718][T25500] netlink: 'syz.3.6080': attribute type 9 has an invalid length. [ 1827.173092][T25500] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.6080'. [ 1827.774700][T25519] netlink: 'syz.0.6084': attribute type 9 has an invalid length. [ 1827.790415][T25519] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1828.008325][T25519] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1830.790033][T25528] FAULT_INJECTION: forcing a failure. [ 1830.790033][T25528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1830.840625][T25528] CPU: 0 PID: 25528 Comm: syz.1.6086 Not tainted syzkaller #0 [ 1830.848171][T25528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1830.858358][T25528] Call Trace: [ 1830.861681][T25528] [ 1830.864651][T25528] dump_stack_lvl+0x18c/0x250 [ 1830.869379][T25528] ? show_regs_print_info+0x20/0x20 [ 1830.874625][T25528] ? load_image+0x400/0x400 [ 1830.879161][T25528] ? __might_fault+0xaa/0x120 [ 1830.883867][T25528] ? __lock_acquire+0x7d40/0x7d40 [ 1830.888948][T25528] should_fail_ex+0x39d/0x4d0 [ 1830.893690][T25528] _copy_from_user+0x2f/0xe0 [ 1830.898327][T25528] smc_setsockopt+0x3d3/0xac0 [ 1830.903059][T25528] ? smc_shutdown+0x9b0/0x9b0 [ 1830.907782][T25528] ? __fget_files+0x28/0x4b0 [ 1830.912432][T25528] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1830.918036][T25528] ? security_socket_setsockopt+0x7e/0xa0 [ 1830.923796][T25528] ? smc_shutdown+0x9b0/0x9b0 [ 1830.928524][T25528] do_sock_setsockopt+0x175/0x1a0 [ 1830.933596][T25528] ? __fdget+0x180/0x210 [ 1830.937881][T25528] __x64_sys_setsockopt+0x182/0x200 [ 1830.943127][T25528] do_syscall_64+0x55/0xa0 [ 1830.947591][T25528] ? clear_bhb_loop+0x40/0x90 [ 1830.952309][T25528] ? clear_bhb_loop+0x40/0x90 [ 1830.957048][T25528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.962976][T25528] RIP: 0033:0x7fdf5c79bf79 [ 1830.967443][T25528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.987087][T25528] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1830.995548][T25528] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1831.003551][T25528] RDX: 000000000000000c RSI: 0000000000000006 RDI: 0000000000000003 [ 1831.011562][T25528] RBP: 00007fdf5d5fd090 R08: 0000000000000004 R09: 0000000000000000 [ 1831.019570][T25528] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 1831.027569][T25528] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1831.035597][T25528] [ 1831.783994][T25520] delete_channel: no stack [ 1833.889019][T25538] syzkaller0: entered promiscuous mode [ 1833.911089][T25538] syzkaller0: entered allmulticast mode [ 1837.009026][T25573] FAULT_INJECTION: forcing a failure. [ 1837.009026][T25573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.026911][T25573] CPU: 1 PID: 25573 Comm: syz.0.6100 Not tainted syzkaller #0 [ 1837.034483][T25573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1837.044572][T25573] Call Trace: [ 1837.047888][T25573] [ 1837.050854][T25573] dump_stack_lvl+0x18c/0x250 [ 1837.055694][T25573] ? show_regs_print_info+0x20/0x20 [ 1837.060951][T25573] ? load_image+0x400/0x400 [ 1837.065496][T25573] ? __might_fault+0xaa/0x120 [ 1837.070225][T25573] ? __lock_acquire+0x7d40/0x7d40 [ 1837.075282][T25573] should_fail_ex+0x39d/0x4d0 [ 1837.079993][T25573] _copy_from_user+0x2f/0xe0 [ 1837.084614][T25573] ___sys_sendmsg+0x1c7/0x360 [ 1837.089319][T25573] ? __sys_sendmsg+0x2a0/0x2a0 [ 1837.094111][T25573] ? __lock_acquire+0x7d40/0x7d40 [ 1837.099162][T25573] __se_sys_sendmsg+0x1c2/0x2b0 [ 1837.104032][T25573] ? __x64_sys_sendmsg+0x80/0x80 [ 1837.108997][T25573] ? lockdep_hardirqs_on+0x98/0x150 [ 1837.114231][T25573] do_syscall_64+0x55/0xa0 [ 1837.118667][T25573] ? clear_bhb_loop+0x40/0x90 [ 1837.123363][T25573] ? clear_bhb_loop+0x40/0x90 [ 1837.128055][T25573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.133973][T25573] RIP: 0033:0x7f61c7d9bf79 [ 1837.138405][T25573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.158028][T25573] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.166462][T25573] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1837.174449][T25573] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000008 [ 1837.182437][T25573] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.190441][T25573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.198459][T25573] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1837.206554][T25573] [ 1837.266930][T25573] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6100'. [ 1838.521102][T25601] netlink: 'syz.0.6108': attribute type 33 has an invalid length. [ 1838.546497][T25601] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6108'. [ 1838.571802][T25601] `: renamed from team0 (while UP) [ 1840.300236][T25611] syzkaller0: entered promiscuous mode [ 1840.306390][T25611] syzkaller0: entered allmulticast mode [ 1840.365813][T25626] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1840.418980][T25626] netlink: 'syz.3.6113': attribute type 1 has an invalid length. [ 1840.437099][T25626] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.6113'. [ 1845.950268][ T51] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1845.958205][ T51] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1846.555744][T25657] netlink: 'syz.2.6120': attribute type 33 has an invalid length. [ 1846.604127][ T51] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 1846.605596][T25657] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6120'. [ 1846.611666][ T51] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1846.692759][T25657] `: renamed from team0 (while UP) [ 1847.053289][T25669] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.6123'. [ 1847.747432][T25680] netlink: 'syz.2.6125': attribute type 21 has an invalid length. [ 1847.787226][T25680] netlink: 'syz.2.6125': attribute type 6 has an invalid length. [ 1847.795596][T25680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6125'. [ 1849.116851][T25684] syzkaller0: entered promiscuous mode [ 1849.124611][T25684] syzkaller0: entered allmulticast mode [ 1849.200405][T25690] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.6127'. [ 1849.209836][T25690] netlink: 'syz.3.6127': attribute type 2 has an invalid length. [ 1851.301152][T25705] FAULT_INJECTION: forcing a failure. [ 1851.301152][T25705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1851.412976][T25705] CPU: 0 PID: 25705 Comm: syz.0.6133 Not tainted syzkaller #0 [ 1851.420518][T25705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1851.430702][T25705] Call Trace: [ 1851.434029][T25705] [ 1851.437000][T25705] dump_stack_lvl+0x18c/0x250 [ 1851.441746][T25705] ? show_regs_print_info+0x20/0x20 [ 1851.447015][T25705] ? load_image+0x400/0x400 [ 1851.451591][T25705] ? __lock_acquire+0x7d40/0x7d40 [ 1851.456683][T25705] should_fail_ex+0x39d/0x4d0 [ 1851.461466][T25705] _copy_from_user+0x2f/0xe0 [ 1851.466112][T25705] __copy_msghdr+0x3bb/0x580 [ 1851.470766][T25705] ___sys_sendmsg+0x214/0x360 [ 1851.475491][T25705] ? get_pid_task+0x20/0x1e0 [ 1851.480142][T25705] ? __sys_sendmsg+0x2a0/0x2a0 [ 1851.484995][T25705] ? __lock_acquire+0x7d40/0x7d40 [ 1851.490100][T25705] __se_sys_sendmsg+0x1c2/0x2b0 [ 1851.495098][T25705] ? __x64_sys_sendmsg+0x80/0x80 [ 1851.500110][T25705] ? lockdep_hardirqs_on+0x98/0x150 [ 1851.505350][T25705] do_syscall_64+0x55/0xa0 [ 1851.509805][T25705] ? clear_bhb_loop+0x40/0x90 [ 1851.514506][T25705] ? clear_bhb_loop+0x40/0x90 [ 1851.519214][T25705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.525131][T25705] RIP: 0033:0x7f61c7d9bf79 [ 1851.529569][T25705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.549195][T25705] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1851.557638][T25705] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1851.565635][T25705] RDX: 0000000020040080 RSI: 0000200000000a00 RDI: 0000000000000003 [ 1851.573631][T25705] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.581633][T25705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.589641][T25705] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1851.597641][T25705] [ 1851.603154][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1851.610709][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1853.255565][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.263054][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.958634][T25700] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1855.984476][T25712] netlink: 'syz.1.6135': attribute type 33 has an invalid length. [ 1855.992596][T25712] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6135'. [ 1856.001789][T25712] `: renamed from team0 (while UP) [ 1857.186197][T25749] FAULT_INJECTION: forcing a failure. [ 1857.186197][T25749] name failslab, interval 1, probability 0, space 0, times 0 [ 1857.209530][T25749] CPU: 0 PID: 25749 Comm: syz.2.6146 Not tainted syzkaller #0 [ 1857.217082][T25749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1857.227198][T25749] Call Trace: [ 1857.230522][T25749] [ 1857.233491][T25749] dump_stack_lvl+0x18c/0x250 [ 1857.238241][T25749] ? show_regs_print_info+0x20/0x20 [ 1857.243500][T25749] ? load_image+0x400/0x400 [ 1857.248050][T25749] ? __might_sleep+0xe0/0xe0 [ 1857.252690][T25749] ? __lock_acquire+0x7d40/0x7d40 [ 1857.257774][T25749] should_fail_ex+0x39d/0x4d0 [ 1857.262518][T25749] should_failslab+0x9/0x20 [ 1857.267064][T25749] slab_pre_alloc_hook+0x59/0x310 [ 1857.272122][T25749] ? __lock_acquire+0x7d40/0x7d40 [ 1857.277174][T25749] ? kvmalloc_node+0x70/0x180 [ 1857.281882][T25749] ? kvmalloc_node+0x70/0x180 [ 1857.286587][T25749] __kmem_cache_alloc_node+0x53/0x250 [ 1857.291989][T25749] ? __schedule_delayed_monitor_work+0x200/0x200 [ 1857.298440][T25749] ? kvmalloc_node+0x70/0x180 [ 1857.303149][T25749] __kmalloc_node+0xa4/0x230 [ 1857.307780][T25749] kvmalloc_node+0x70/0x180 [ 1857.312318][T25749] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 1857.317718][T25749] ? 0xffffffffa00044c0 [ 1857.321891][T25749] ? 0xffffffffa00044c0 [ 1857.326068][T25749] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1857.331982][T25749] ? 0xffffffffa00044c0 [ 1857.336160][T25749] ? xdp_convert_md_to_buff+0x330/0x330 [ 1857.341757][T25749] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1857.348040][T25749] ? _copy_from_user+0xa5/0xe0 [ 1857.352843][T25749] ? bpf_test_init+0x119/0x140 [ 1857.357625][T25749] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1857.363131][T25749] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1857.368572][T25749] ? dev_put+0x80/0x80 [ 1857.372687][T25749] ? dev_put+0x80/0x80 [ 1857.376787][T25749] bpf_prog_test_run+0x321/0x390 [ 1857.381756][T25749] __sys_bpf+0x49d/0x890 [ 1857.386031][T25749] ? bpf_link_show_fdinfo+0x390/0x390 [ 1857.391444][T25749] ? lock_chain_count+0x20/0x20 [ 1857.396322][T25749] __x64_sys_bpf+0x7c/0x90 [ 1857.400763][T25749] do_syscall_64+0x55/0xa0 [ 1857.405206][T25749] ? clear_bhb_loop+0x40/0x90 [ 1857.409908][T25749] ? clear_bhb_loop+0x40/0x90 [ 1857.414608][T25749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1857.420519][T25749] RIP: 0033:0x7f875799bf79 [ 1857.424956][T25749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1857.444580][T25749] RSP: 002b:00007f8755bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1857.453021][T25749] RAX: ffffffffffffffda RBX: 00007f8757c15fa0 RCX: 00007f875799bf79 [ 1857.461016][T25749] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1857.469029][T25749] RBP: 00007f8755bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1857.477020][T25749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1857.485005][T25749] R13: 00007f8757c16038 R14: 00007f8757c15fa0 R15: 00007ffccc58d228 [ 1857.493019][T25749] [ 1857.721423][T25758] delete_channel: no stack [ 1857.790698][T25758] delete_channel: no stack [ 1858.105353][T25766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6153'. [ 1861.954307][T25792] netlink: 'syz.3.6161': attribute type 1 has an invalid length. [ 1862.046393][T25792] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1863.090055][T25821] netlink: 'syz.0.6170': attribute type 33 has an invalid length. [ 1863.169875][T25821] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1864.681006][T25844] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1864.711189][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.727508][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.777603][T25848] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1864.858521][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1864.910659][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1864.964113][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.012442][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.060819][T25844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1865.089658][T25844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1865.112541][T25844] batadv_slave_1: entered promiscuous mode [ 1865.587605][T25853] netlink: 'syz.2.6181': attribute type 39 has an invalid length. [ 1866.152339][T25864] netlink: 'syz.1.6185': attribute type 17 has an invalid length. [ 1866.195942][T25864] netlink: 'syz.1.6185': attribute type 16 has an invalid length. [ 1866.233037][T25864] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1867.362325][T25877] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6188'. [ 1867.518038][T25877] netlink: del zone limit has 8 unknown bytes [ 1867.834461][T25888] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1867.951547][T25888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1867.989273][T25893] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6191'. [ 1868.020432][T25888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.089768][T25888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.216692][T25888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.277972][T25888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.327333][T25888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.370854][T25888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1868.418759][T25888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.478615][T25888] batadv_slave_1: entered promiscuous mode [ 1868.734686][T25906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1868.742320][T25906] IPv6: NLM_F_CREATE should be set when creating new route [ 1868.749862][T25906] IPv6: NLM_F_CREATE should be set when creating new route [ 1868.757480][T25906] IPv6: NLM_F_CREATE should be set when creating new route [ 1869.059257][T25912] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6201'. [ 1869.314651][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1870.082846][T25927] FAULT_INJECTION: forcing a failure. [ 1870.082846][T25927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.127889][T25926] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1870.190193][T25927] CPU: 0 PID: 25927 Comm: syz.0.6205 Not tainted syzkaller #0 [ 1870.197768][T25927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1870.207891][T25927] Call Trace: [ 1870.211249][T25927] [ 1870.214248][T25927] dump_stack_lvl+0x18c/0x250 [ 1870.219015][T25927] ? show_regs_print_info+0x20/0x20 [ 1870.224306][T25927] ? load_image+0x400/0x400 [ 1870.228899][T25927] ? __might_fault+0xaa/0x120 [ 1870.233667][T25927] ? __lock_acquire+0x7d40/0x7d40 [ 1870.238794][T25927] should_fail_ex+0x39d/0x4d0 [ 1870.243566][T25927] _copy_from_user+0x2f/0xe0 [ 1870.248241][T25927] get_user_ifreq+0x6b/0x180 [ 1870.252935][T25927] sock_ioctl+0x6f1/0x7e0 [ 1870.257347][T25927] ? sock_poll+0x3e0/0x3e0 [ 1870.261874][T25927] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1870.266888][T25927] ? security_file_ioctl+0x80/0xa0 [ 1870.272088][T25927] ? sock_poll+0x3e0/0x3e0 [ 1870.276571][T25927] __se_sys_ioctl+0xfd/0x170 [ 1870.281241][T25927] do_syscall_64+0x55/0xa0 [ 1870.281519][T25926] netlink: del zone limit has 8 unknown bytes [ 1870.285702][T25927] ? clear_bhb_loop+0x40/0x90 [ 1870.285733][T25927] ? clear_bhb_loop+0x40/0x90 [ 1870.285773][T25927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.285800][T25927] RIP: 0033:0x7f61c7d9bf79 [ 1870.285830][T25927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.285853][T25927] RSP: 002b:00007f61c8cf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1870.285885][T25927] RAX: ffffffffffffffda RBX: 00007f61c8016090 RCX: 00007f61c7d9bf79 [ 1870.285906][T25927] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 000000000000000f [ 1870.285932][T25927] RBP: 00007f61c8cf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.285950][T25927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.285969][T25927] R13: 00007f61c8016128 R14: 00007f61c8016090 R15: 00007fff84004aa8 [ 1870.286047][T25927] [ 1870.507330][T25932] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6208'. [ 1870.524204][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.539046][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.549963][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.590473][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.620521][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.637640][T25933] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6208'. [ 1870.680705][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.704715][T25932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.726404][T25932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.791804][T25932] batadv_slave_1: entered promiscuous mode [ 1871.078515][T25938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1871.086010][T25938] IPv6: NLM_F_CREATE should be set when creating new route [ 1871.093826][T25938] IPv6: NLM_F_CREATE should be set when creating new route [ 1871.101313][T25938] IPv6: NLM_F_CREATE should be set when creating new route [ 1871.264757][T25941] FAULT_INJECTION: forcing a failure. [ 1871.264757][T25941] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.296701][T25941] CPU: 1 PID: 25941 Comm: syz.1.6211 Not tainted syzkaller #0 [ 1871.304284][T25941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1871.314415][T25941] Call Trace: [ 1871.317784][T25941] [ 1871.320792][T25941] dump_stack_lvl+0x18c/0x250 [ 1871.325573][T25941] ? show_regs_print_info+0x20/0x20 [ 1871.330875][T25941] ? load_image+0x400/0x400 [ 1871.335475][T25941] ? __might_sleep+0xe0/0xe0 [ 1871.340157][T25941] ? __lock_acquire+0x7d40/0x7d40 [ 1871.345373][T25941] should_fail_ex+0x39d/0x4d0 [ 1871.350247][T25941] should_failslab+0x9/0x20 [ 1871.354827][T25941] slab_pre_alloc_hook+0x59/0x310 [ 1871.359933][T25941] ? trace_call_bpf+0x5e9/0x6c0 [ 1871.364876][T25941] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1871.370674][T25941] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1871.376473][T25941] __kmem_cache_alloc_node+0x53/0x250 [ 1871.381973][T25941] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1871.387777][T25941] __kmalloc+0xa4/0x230 [ 1871.392039][T25941] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1871.397729][T25941] tomoyo_path_number_perm+0x248/0x620 [ 1871.403291][T25941] ? tomoyo_path_number_perm+0x217/0x620 [ 1871.409031][T25941] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1871.414595][T25941] ? ksys_write+0x1c4/0x260 [ 1871.419290][T25941] ? __fget_files+0x28/0x4b0 [ 1871.423980][T25941] ? __fget_files+0x28/0x4b0 [ 1871.428721][T25941] security_file_ioctl+0x70/0xa0 [ 1871.433756][T25941] __se_sys_ioctl+0x48/0x170 [ 1871.438448][T25941] do_syscall_64+0x55/0xa0 [ 1871.442962][T25941] ? clear_bhb_loop+0x40/0x90 [ 1871.447726][T25941] ? clear_bhb_loop+0x40/0x90 [ 1871.452508][T25941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.458526][T25941] RIP: 0033:0x7fdf5c79bf79 [ 1871.463025][T25941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.482713][T25941] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.491220][T25941] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1871.499271][T25941] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000009 [ 1871.507422][T25941] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.515473][T25941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.523526][T25941] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1871.531647][T25941] [ 1871.556869][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1871.583815][T25941] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1871.802993][ T51] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 1872.854754][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1872.869864][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1873.048606][T25968] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1873.067333][T25968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.100469][T25968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.128731][T25967] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1873.130888][T25968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.171016][T25968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.190101][T25968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.212590][T25968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.239635][ T51] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 1873.254797][T25968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.312595][T25968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.356086][T25968] batadv_slave_1: entered promiscuous mode [ 1873.424399][T25976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1873.431983][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 1873.439604][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 1873.447127][T25976] IPv6: NLM_F_CREATE should be set when creating new route [ 1873.774980][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1873.890505][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1874.039414][ T51] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1874.048061][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1874.165550][ T51] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 1874.320006][T26011] netlink: 'syz.2.6240': attribute type 33 has an invalid length. [ 1874.335571][T26011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1874.599543][T26020] netlink: 'syz.1.6238': attribute type 10 has an invalid length. [ 1874.636888][T26020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1874.702921][T26020] bridge0: port 4(ipvlan1) entered blocking state [ 1874.720589][T26020] bridge0: port 4(ipvlan1) entered disabled state [ 1874.729901][T26020] ipvlan1: entered allmulticast mode [ 1874.739825][T26020] veth0_vlan: entered allmulticast mode [ 1874.754148][T26020] ipvlan1: left allmulticast mode [ 1874.761470][T26020] veth0_vlan: left allmulticast mode [ 1874.772045][T26020] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1874.911541][ T51] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 1874.919172][ T51] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1875.235718][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1875.243298][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1875.283654][ T51] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1875.322254][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1875.462334][T26048] netlink: 'syz.1.6250': attribute type 33 has an invalid length. [ 1875.471129][T26048] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6250'. [ 1875.800447][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1876.476259][T26080] FAULT_INJECTION: forcing a failure. [ 1876.476259][T26080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1876.489750][T26080] CPU: 1 PID: 26080 Comm: syz.2.6265 Not tainted syzkaller #0 [ 1876.497263][T26080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1876.507384][T26080] Call Trace: [ 1876.510701][T26080] [ 1876.513676][T26080] dump_stack_lvl+0x18c/0x250 [ 1876.518413][T26080] ? show_regs_print_info+0x20/0x20 [ 1876.523674][T26080] ? load_image+0x400/0x400 [ 1876.528211][T26080] ? __lock_acquire+0x7d40/0x7d40 [ 1876.533289][T26080] ? __virt_addr_valid+0x18c/0x540 [ 1876.538459][T26080] should_fail_ex+0x39d/0x4d0 [ 1876.543168][T26080] _copy_from_user+0x2f/0xe0 [ 1876.547796][T26080] bpf_test_init+0xde/0x140 [ 1876.552338][T26080] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 1876.557784][T26080] ? dev_put+0x80/0x80 [ 1876.561907][T26080] ? dev_put+0x80/0x80 [ 1876.566022][T26080] bpf_prog_test_run+0x321/0x390 [ 1876.571002][T26080] __sys_bpf+0x49d/0x890 [ 1876.575277][T26080] ? bpf_link_show_fdinfo+0x390/0x390 [ 1876.580712][T26080] ? lock_chain_count+0x20/0x20 [ 1876.585606][T26080] __x64_sys_bpf+0x7c/0x90 [ 1876.590076][T26080] do_syscall_64+0x55/0xa0 [ 1876.594541][T26080] ? clear_bhb_loop+0x40/0x90 [ 1876.599255][T26080] ? clear_bhb_loop+0x40/0x90 [ 1876.603971][T26080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1876.609900][T26080] RIP: 0033:0x7f875799bf79 [ 1876.614343][T26080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.634058][T26080] RSP: 002b:00007f8755bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1876.642497][T26080] RAX: ffffffffffffffda RBX: 00007f8757c15fa0 RCX: 00007f875799bf79 [ 1876.650495][T26080] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1876.658484][T26080] RBP: 00007f8755bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1876.666566][T26080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1876.674557][T26080] R13: 00007f8757c16038 R14: 00007f8757c15fa0 R15: 00007ffccc58d228 [ 1876.682568][T26080] [ 1877.013218][T26094] FAULT_INJECTION: forcing a failure. [ 1877.013218][T26094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.036352][T26094] CPU: 1 PID: 26094 Comm: syz.3.6270 Not tainted syzkaller #0 [ 1877.043887][T26094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1877.053985][T26094] Call Trace: [ 1877.057312][T26094] [ 1877.060276][T26094] dump_stack_lvl+0x18c/0x250 [ 1877.065011][T26094] ? show_regs_print_info+0x20/0x20 [ 1877.070277][T26094] ? load_image+0x400/0x400 [ 1877.074882][T26094] ? __might_fault+0xaa/0x120 [ 1877.079614][T26094] ? __lock_acquire+0x7d40/0x7d40 [ 1877.084722][T26094] should_fail_ex+0x39d/0x4d0 [ 1877.089488][T26094] _copy_from_user+0x2f/0xe0 [ 1877.094141][T26094] ___sys_sendmsg+0x1c7/0x360 [ 1877.098880][T26094] ? __sys_sendmsg+0x2a0/0x2a0 [ 1877.103716][T26094] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1877.110038][T26094] __se_sys_sendmsg+0x1c2/0x2b0 [ 1877.114941][T26094] ? __x64_sys_sendmsg+0x80/0x80 [ 1877.119957][T26094] ? lockdep_hardirqs_on+0x98/0x150 [ 1877.125214][T26094] do_syscall_64+0x55/0xa0 [ 1877.129688][T26094] ? clear_bhb_loop+0x40/0x90 [ 1877.134418][T26094] ? clear_bhb_loop+0x40/0x90 [ 1877.139145][T26094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1877.145074][T26094] RIP: 0033:0x7fa69979bf79 [ 1877.149572][T26094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.169228][T26094] RSP: 002b:00007fa69a6e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1877.177701][T26094] RAX: ffffffffffffffda RBX: 00007fa699a16090 RCX: 00007fa69979bf79 [ 1877.185746][T26094] RDX: 00000000000400c0 RSI: 0000200000000580 RDI: 0000000000000003 [ 1877.193776][T26094] RBP: 00007fa69a6e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.201808][T26094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.209832][T26094] R13: 00007fa699a16128 R14: 00007fa699a16090 R15: 00007fffec2ca758 [ 1877.217879][T26094] [ 1877.323078][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1877.671594][T26111] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6276'. [ 1877.880506][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1877.933607][T26115] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6278'. [ 1879.185319][T26130] netlink: 'syz.0.6282': attribute type 33 has an invalid length. [ 1879.223665][T26130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6282'. [ 1879.646499][T26147] FAULT_INJECTION: forcing a failure. [ 1879.646499][T26147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1879.680607][T26147] CPU: 0 PID: 26147 Comm: syz.3.6289 Not tainted syzkaller #0 [ 1879.688166][T26147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1879.698275][T26147] Call Trace: [ 1879.701595][T26147] [ 1879.704562][T26147] dump_stack_lvl+0x18c/0x250 [ 1879.709293][T26147] ? show_regs_print_info+0x20/0x20 [ 1879.714545][T26147] ? load_image+0x400/0x400 [ 1879.719094][T26147] ? __might_fault+0xaa/0x120 [ 1879.723818][T26147] ? __lock_acquire+0x7d40/0x7d40 [ 1879.728906][T26147] should_fail_ex+0x39d/0x4d0 [ 1879.733652][T26147] _copy_from_user+0x2f/0xe0 [ 1879.738306][T26147] ___sys_sendmsg+0x1c7/0x360 [ 1879.743040][T26147] ? get_pid_task+0x20/0x1e0 [ 1879.747689][T26147] ? __sys_sendmsg+0x2a0/0x2a0 [ 1879.752520][T26147] ? __lock_acquire+0x7d40/0x7d40 [ 1879.757618][T26147] __se_sys_sendmsg+0x1c2/0x2b0 [ 1879.762513][T26147] ? __x64_sys_sendmsg+0x80/0x80 [ 1879.767516][T26147] ? lockdep_hardirqs_on+0x98/0x150 [ 1879.772765][T26147] do_syscall_64+0x55/0xa0 [ 1879.777234][T26147] ? clear_bhb_loop+0x40/0x90 [ 1879.781958][T26147] ? clear_bhb_loop+0x40/0x90 [ 1879.786682][T26147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1879.792630][T26147] RIP: 0033:0x7fa69979bf79 [ 1879.797108][T26147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1879.816760][T26147] RSP: 002b:00007fa69a705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1879.825230][T26147] RAX: ffffffffffffffda RBX: 00007fa699a15fa0 RCX: 00007fa69979bf79 [ 1879.833259][T26147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1879.841289][T26147] RBP: 00007fa69a705090 R08: 0000000000000000 R09: 0000000000000000 [ 1879.849309][T26147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1879.857327][T26147] R13: 00007fa699a16038 R14: 00007fa699a15fa0 R15: 00007fffec2ca758 [ 1879.865362][T26147] [ 1880.161644][T26151] netlink: 'syz.0.6290': attribute type 10 has an invalid length. [ 1881.648913][T26182] netlink: 3787 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1881.963374][T26189] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6304'. [ 1882.033948][T26192] netlink: 'syz.1.6304': attribute type 29 has an invalid length. [ 1882.278835][T26189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1882.327469][T26189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1882.392767][T26189] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1882.427484][T26189] bond0 (unregistering): Released all slaves [ 1882.504460][T26192] netlink: 'syz.1.6304': attribute type 29 has an invalid length. [ 1882.554724][T26199] netlink: 'syz.3.6306': attribute type 2 has an invalid length. [ 1882.590692][T26199] netlink: 'syz.3.6306': attribute type 8 has an invalid length. [ 1882.650156][T26199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6306'. [ 1882.766432][T26193] netlink: 'syz.1.6304': attribute type 29 has an invalid length. [ 1882.810675][T26197] netlink: 'syz.1.6304': attribute type 29 has an invalid length. [ 1882.850422][T26207] netlink: 'syz.0.6307': attribute type 39 has an invalid length. [ 1885.088884][T26238] FAULT_INJECTION: forcing a failure. [ 1885.088884][T26238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.102438][T26238] CPU: 0 PID: 26238 Comm: syz.3.6317 Not tainted syzkaller #0 [ 1885.109953][T26238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1885.120047][T26238] Call Trace: [ 1885.123362][T26238] [ 1885.126327][T26238] dump_stack_lvl+0x18c/0x250 [ 1885.131070][T26238] ? show_regs_print_info+0x20/0x20 [ 1885.136315][T26238] ? load_image+0x400/0x400 [ 1885.140861][T26238] ? __lock_acquire+0x7d40/0x7d40 [ 1885.145939][T26238] ? snprintf+0xe9/0x140 [ 1885.150231][T26238] should_fail_ex+0x39d/0x4d0 [ 1885.154959][T26238] _copy_to_user+0x2f/0xa0 [ 1885.159427][T26238] simple_read_from_buffer+0xe7/0x150 [ 1885.164868][T26238] proc_fail_nth_read+0x1e8/0x260 [ 1885.169953][T26238] ? proc_fault_inject_write+0x360/0x360 [ 1885.175656][T26238] ? fsnotify_perm+0x271/0x5e0 [ 1885.180482][T26238] ? proc_fault_inject_write+0x360/0x360 [ 1885.186167][T26238] vfs_read+0x28b/0x970 [ 1885.190382][T26238] ? kernel_read+0x1e0/0x1e0 [ 1885.195020][T26238] ? __fget_files+0x28/0x4b0 [ 1885.199645][T26238] ? __fget_files+0x28/0x4b0 [ 1885.204294][T26238] ? __fget_files+0x43d/0x4b0 [ 1885.209028][T26238] ? __fdget_pos+0x2a3/0x330 [ 1885.213668][T26238] ? ksys_read+0x75/0x260 [ 1885.218042][T26238] ksys_read+0x150/0x260 [ 1885.222322][T26238] ? vfs_write+0x990/0x990 [ 1885.226805][T26238] ? lockdep_hardirqs_on+0x98/0x150 [ 1885.232031][T26238] do_syscall_64+0x55/0xa0 [ 1885.236495][T26238] ? clear_bhb_loop+0x40/0x90 [ 1885.241215][T26238] ? clear_bhb_loop+0x40/0x90 [ 1885.245920][T26238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.251852][T26238] RIP: 0033:0x7fa69975c84e [ 1885.256315][T26238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1885.275946][T26238] RSP: 002b:00007fa69a704fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1885.284388][T26238] RAX: ffffffffffffffda RBX: 00007fa69a7056c0 RCX: 00007fa69975c84e [ 1885.292387][T26238] RDX: 000000000000000f RSI: 00007fa69a7050a0 RDI: 0000000000000004 [ 1885.300384][T26238] RBP: 00007fa69a705090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.308380][T26238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1885.316461][T26238] R13: 00007fa699a16038 R14: 00007fa699a15fa0 R15: 00007fffec2ca758 [ 1885.324556][T26238] [ 1885.364588][T26217] syzkaller0: entered promiscuous mode [ 1885.370962][T26217] syzkaller0: entered allmulticast mode [ 1887.817683][T26246] netlink: 'syz.3.6320': attribute type 10 has an invalid length. [ 1887.826708][T26246] FAULT_INJECTION: forcing a failure. [ 1887.826708][T26246] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.839559][T26246] CPU: 0 PID: 26246 Comm: syz.3.6320 Not tainted syzkaller #0 [ 1887.847068][T26246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1887.857150][T26246] Call Trace: [ 1887.860455][T26246] [ 1887.863447][T26246] dump_stack_lvl+0x18c/0x250 [ 1887.868217][T26246] ? show_regs_print_info+0x20/0x20 [ 1887.873478][T26246] ? load_image+0x400/0x400 [ 1887.878029][T26246] ? verify_lock_unused+0x140/0x140 [ 1887.883269][T26246] should_fail_ex+0x39d/0x4d0 [ 1887.888038][T26246] should_failslab+0x9/0x20 [ 1887.892589][T26246] slab_pre_alloc_hook+0x59/0x310 [ 1887.897662][T26246] ? nsim_fib_event_nb+0x187/0x1080 [ 1887.902887][T26246] __kmem_cache_alloc_node+0x53/0x250 [ 1887.908292][T26246] ? nsim_fib_event_nb+0x187/0x1080 [ 1887.913513][T26246] kmalloc_trace+0x2a/0xe0 [ 1887.917968][T26246] nsim_fib_event_nb+0x187/0x1080 [ 1887.923045][T26246] ? read_lock_is_recursive+0x20/0x20 [ 1887.928445][T26246] notifier_call_chain+0x197/0x380 [ 1887.933580][T26246] ? atomic_notifier_call_chain+0x26/0x180 [ 1887.939519][T26246] atomic_notifier_call_chain+0xda/0x180 [ 1887.945237][T26246] call_fib_notifiers+0x31/0x60 [ 1887.950123][T26246] fib_table_flush+0xad9/0x12d0 [ 1887.955029][T26246] ? __node_free_rcu+0x80/0x80 [ 1887.959838][T26246] fib_disable_ip+0xfd/0x170 [ 1887.964474][T26246] fib_netdev_event+0x31f/0x490 [ 1887.969363][T26246] notifier_call_chain+0x197/0x380 [ 1887.974510][T26246] __dev_notify_flags+0x16e/0x310 [ 1887.979568][T26246] ? __dev_change_flags+0x6a0/0x6a0 [ 1887.984791][T26246] ? __dev_change_flags+0x4d4/0x6a0 [ 1887.990022][T26246] ? vprintk_emit+0x53d/0x610 [ 1887.994726][T26246] ? dev_get_flags+0x1c0/0x1c0 [ 1887.999522][T26246] ? printk_sprint+0x460/0x460 [ 1888.004315][T26246] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1888.010250][T26246] ? _raw_spin_unlock+0x40/0x40 [ 1888.015128][T26246] dev_change_flags+0xe8/0x1a0 [ 1888.019929][T26246] do_setlink+0xc58/0x4130 [ 1888.024372][T26246] ? arch_stack_walk+0x160/0x190 [ 1888.029343][T26246] ? load_image+0x400/0x400 [ 1888.033881][T26246] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1888.040061][T26246] ? stack_trace_save+0xaa/0x100 [ 1888.045031][T26246] ? __nla_validate_parse+0x2522/0x2ea0 [ 1888.050626][T26246] ? __nla_validate+0x50/0x50 [ 1888.055378][T26246] ? validate_linkmsg+0x719/0x910 [ 1888.060466][T26246] rtnl_newlink+0x17da/0x20a0 [ 1888.065235][T26246] ? rtnl_newlink+0x501/0x20a0 [ 1888.070050][T26246] ? rtnl_setlink+0x4e0/0x4e0 [ 1888.074760][T26246] ? __rwlock_init+0x150/0x150 [ 1888.079551][T26246] ? do_raw_spin_unlock+0x121/0x230 [ 1888.084781][T26246] ? __mutex_lock+0x956/0xcc0 [ 1888.089486][T26246] ? __mutex_lock+0x4f9/0xcc0 [ 1888.094211][T26246] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1888.099348][T26246] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1888.104482][T26246] ? rtnl_setlink+0x4e0/0x4e0 [ 1888.109191][T26246] rtnetlink_rcv_msg+0x869/0xfa0 [ 1888.114156][T26246] ? lockdep_hardirqs_on+0x98/0x150 [ 1888.119378][T26246] ? rtnetlink_bind+0x80/0x80 [ 1888.124098][T26246] ? perf_trace_preemptirq_template+0xac/0x330 [ 1888.130294][T26246] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1888.136324][T26246] ? lock_chain_count+0x20/0x20 [ 1888.141209][T26246] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1888.146604][T26246] ? lockdep_hardirqs_on+0x98/0x150 [ 1888.151824][T26246] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1888.157217][T26246] ? _local_bh_enable+0xa0/0xa0 [ 1888.162090][T26246] ? __dev_queue_xmit+0x26b/0x36b0 [ 1888.167242][T26246] ? __dev_queue_xmit+0x26b/0x36b0 [ 1888.172372][T26246] ? __dev_queue_xmit+0x124f/0x36b0 [ 1888.177596][T26246] ? __dev_queue_xmit+0x26b/0x36b0 [ 1888.182750][T26246] ? ref_tracker_free+0x690/0x840 [ 1888.187807][T26246] netlink_rcv_skb+0x241/0x4d0 [ 1888.192601][T26246] ? rtnetlink_bind+0x80/0x80 [ 1888.197302][T26246] ? netlink_ack+0x1180/0x1180 [ 1888.202103][T26246] ? __lock_acquire+0x7d40/0x7d40 [ 1888.207162][T26246] ? netlink_deliver_tap+0x2e/0x1b0 [ 1888.212431][T26246] netlink_unicast+0x751/0x8d0 [ 1888.217260][T26246] netlink_sendmsg+0x8d0/0xbf0 [ 1888.222061][T26246] ? netlink_getsockopt+0x590/0x590 [ 1888.227291][T26246] ? aa_sock_msg_perm+0x94/0x150 [ 1888.232260][T26246] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1888.237582][T26246] ? security_socket_sendmsg+0x80/0xa0 [ 1888.243053][T26246] ? netlink_getsockopt+0x590/0x590 [ 1888.248280][T26246] ____sys_sendmsg+0x5ba/0x960 [ 1888.253074][T26246] ? __asan_memset+0x22/0x40 [ 1888.257692][T26246] ? __sys_sendmsg_sock+0x30/0x30 [ 1888.262757][T26246] ? __import_iovec+0x5f2/0x850 [ 1888.267649][T26246] ? import_iovec+0x73/0xa0 [ 1888.272191][T26246] ___sys_sendmsg+0x2a6/0x360 [ 1888.276888][T26246] ? get_pid_task+0x20/0x1e0 [ 1888.281683][T26246] ? __sys_sendmsg+0x2a0/0x2a0 [ 1888.286482][T26246] ? __lock_acquire+0x7d40/0x7d40 [ 1888.291555][T26246] __se_sys_sendmsg+0x1c2/0x2b0 [ 1888.296426][T26246] ? __x64_sys_sendmsg+0x80/0x80 [ 1888.301422][T26246] ? lockdep_hardirqs_on+0x98/0x150 [ 1888.306688][T26246] do_syscall_64+0x55/0xa0 [ 1888.311139][T26246] ? clear_bhb_loop+0x40/0x90 [ 1888.315842][T26246] ? clear_bhb_loop+0x40/0x90 [ 1888.320567][T26246] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.326481][T26246] RIP: 0033:0x7fa69979bf79 [ 1888.330925][T26246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.350555][T26246] RSP: 002b:00007fa69a705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1888.358994][T26246] RAX: ffffffffffffffda RBX: 00007fa699a15fa0 RCX: 00007fa69979bf79 [ 1888.366994][T26246] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1888.374996][T26246] RBP: 00007fa69a705090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.382986][T26246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1888.390969][T26246] R13: 00007fa699a16038 R14: 00007fa699a15fa0 R15: 00007fffec2ca758 [ 1888.398975][T26246] [ 1888.439899][T26246] `: Port device syz_tun added [ 1889.456254][T26262] netlink: 'syz.3.6326': attribute type 17 has an invalid length. [ 1889.472089][T26262] netlink: 'syz.3.6326': attribute type 16 has an invalid length. [ 1889.482235][T26262] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6326'. [ 1889.573647][T26266] netlink: 'syz.2.6328': attribute type 10 has an invalid length. [ 1889.613847][T26266] `: Port device syz_tun added [ 1890.074794][T26281] FAULT_INJECTION: forcing a failure. [ 1890.074794][T26281] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.131622][T26281] CPU: 0 PID: 26281 Comm: syz.1.6333 Not tainted syzkaller #0 [ 1890.139207][T26281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1890.149300][T26281] Call Trace: [ 1890.152650][T26281] [ 1890.155613][T26281] dump_stack_lvl+0x18c/0x250 [ 1890.160336][T26281] ? show_regs_print_info+0x20/0x20 [ 1890.165576][T26281] ? load_image+0x400/0x400 [ 1890.170104][T26281] ? __might_sleep+0xe0/0xe0 [ 1890.174721][T26281] ? __lock_acquire+0x7d40/0x7d40 [ 1890.179785][T26281] should_fail_ex+0x39d/0x4d0 [ 1890.184497][T26281] should_failslab+0x9/0x20 [ 1890.189028][T26281] slab_pre_alloc_hook+0x59/0x310 [ 1890.194083][T26281] ? sk_prot_alloc+0xe7/0x210 [ 1890.198799][T26281] ? sk_prot_alloc+0xe7/0x210 [ 1890.203502][T26281] __kmem_cache_alloc_node+0x53/0x250 [ 1890.208914][T26281] ? sk_prot_alloc+0xe7/0x210 [ 1890.213615][T26281] __kmalloc+0xa4/0x230 [ 1890.217805][T26281] sk_prot_alloc+0xe7/0x210 [ 1890.222341][T26281] ? sk_alloc+0x24/0x360 [ 1890.226621][T26281] sk_alloc+0x3a/0x360 [ 1890.230716][T26281] ? bpf_ctx_init+0x163/0x1a0 [ 1890.235416][T26281] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 1890.240985][T26281] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 1890.246375][T26281] ? __fget_files+0x28/0x4b0 [ 1890.250988][T26281] ? __fget_files+0x28/0x4b0 [ 1890.255604][T26281] ? __fget_files+0x43d/0x4b0 [ 1890.260344][T26281] ? cpu_online+0x60/0x60 [ 1890.264694][T26281] bpf_prog_test_run+0x321/0x390 [ 1890.269652][T26281] __sys_bpf+0x49d/0x890 [ 1890.273912][T26281] ? bpf_link_show_fdinfo+0x390/0x390 [ 1890.279316][T26281] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1890.285506][T26281] __x64_sys_bpf+0x7c/0x90 [ 1890.289950][T26281] do_syscall_64+0x55/0xa0 [ 1890.294402][T26281] ? clear_bhb_loop+0x40/0x90 [ 1890.299100][T26281] ? clear_bhb_loop+0x40/0x90 [ 1890.303806][T26281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1890.309718][T26281] RIP: 0033:0x7fdf5c79bf79 [ 1890.314160][T26281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1890.333787][T26281] RSP: 002b:00007fdf5d5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1890.342233][T26281] RAX: ffffffffffffffda RBX: 00007fdf5ca15fa0 RCX: 00007fdf5c79bf79 [ 1890.350228][T26281] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 1890.358228][T26281] RBP: 00007fdf5d5fd090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.366223][T26281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1890.374231][T26281] R13: 00007fdf5ca16038 R14: 00007fdf5ca15fa0 R15: 00007ffcb5ede0a8 [ 1890.382243][T26281] [ 1890.768709][T26288] FAULT_INJECTION: forcing a failure. [ 1890.768709][T26288] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.815158][T26288] CPU: 0 PID: 26288 Comm: syz.3.6336 Not tainted syzkaller #0 [ 1890.822731][T26288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1890.832822][T26288] Call Trace: [ 1890.836136][T26288] [ 1890.839140][T26288] dump_stack_lvl+0x18c/0x250 [ 1890.843871][T26288] ? show_regs_print_info+0x20/0x20 [ 1890.849118][T26288] ? load_image+0x400/0x400 [ 1890.853664][T26288] ? verify_lock_unused+0x140/0x140 [ 1890.858935][T26288] should_fail_ex+0x39d/0x4d0 [ 1890.863757][T26288] should_failslab+0x9/0x20 [ 1890.868308][T26288] slab_pre_alloc_hook+0x59/0x310 [ 1890.873389][T26288] kmem_cache_alloc+0x5a/0x2d0 [ 1890.878198][T26288] ? skb_clone+0x1eb/0x370 [ 1890.882671][T26288] skb_clone+0x1eb/0x370 [ 1890.886965][T26288] __netlink_deliver_tap+0x41c/0x830 [ 1890.892324][T26288] ? netlink_deliver_tap+0x2e/0x1b0 [ 1890.897567][T26288] netlink_deliver_tap+0x19c/0x1b0 [ 1890.902739][T26288] netlink_unicast+0x72c/0x8d0 [ 1890.907555][T26288] netlink_sendmsg+0x8d0/0xbf0 [ 1890.912377][T26288] ? netlink_getsockopt+0x590/0x590 [ 1890.917630][T26288] ? aa_sock_msg_perm+0x94/0x150 [ 1890.922629][T26288] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1890.927989][T26288] ? security_socket_sendmsg+0x80/0xa0 [ 1890.933483][T26288] ? netlink_getsockopt+0x590/0x590 [ 1890.938723][T26288] ____sys_sendmsg+0x5ba/0x960 [ 1890.943534][T26288] ? __asan_memset+0x22/0x40 [ 1890.948174][T26288] ? __sys_sendmsg_sock+0x30/0x30 [ 1890.953243][T26288] ? __import_iovec+0x5f2/0x850 [ 1890.958180][T26288] ? import_iovec+0x73/0xa0 [ 1890.962746][T26288] ___sys_sendmsg+0x2a6/0x360 [ 1890.967460][T26288] ? get_pid_task+0x20/0x1e0 [ 1890.972111][T26288] ? __sys_sendmsg+0x2a0/0x2a0 [ 1890.976936][T26288] ? __lock_acquire+0x7d40/0x7d40 [ 1890.982023][T26288] __se_sys_sendmsg+0x1c2/0x2b0 [ 1890.986930][T26288] ? __x64_sys_sendmsg+0x80/0x80 [ 1890.991951][T26288] ? lockdep_hardirqs_on+0x98/0x150 [ 1890.997196][T26288] do_syscall_64+0x55/0xa0 [ 1891.001665][T26288] ? clear_bhb_loop+0x40/0x90 [ 1891.006402][T26288] ? clear_bhb_loop+0x40/0x90 [ 1891.011134][T26288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.017060][T26288] RIP: 0033:0x7fa69979bf79 [ 1891.021538][T26288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1891.041200][T26288] RSP: 002b:00007fa69a705028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.049643][T26288] RAX: ffffffffffffffda RBX: 00007fa699a15fa0 RCX: 00007fa69979bf79 [ 1891.057654][T26288] RDX: 0000000000040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 1891.065673][T26288] RBP: 00007fa69a705090 R08: 0000000000000000 R09: 0000000000000000 [ 1891.073680][T26288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1891.081687][T26288] R13: 00007fa699a16038 R14: 00007fa699a15fa0 R15: 00007fffec2ca758 [ 1891.089732][T26288] [ 1892.663552][T26322] FAULT_INJECTION: forcing a failure. [ 1892.663552][T26322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1892.694659][T26322] CPU: 1 PID: 26322 Comm: syz.0.6347 Not tainted syzkaller #0 [ 1892.702213][T26322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1892.712325][T26322] Call Trace: [ 1892.715645][T26322] [ 1892.718613][T26322] dump_stack_lvl+0x18c/0x250 [ 1892.723373][T26322] ? show_regs_print_info+0x20/0x20 [ 1892.728639][T26322] ? load_image+0x400/0x400 [ 1892.733200][T26322] ? __might_fault+0xaa/0x120 [ 1892.737927][T26322] ? __lock_acquire+0x7d40/0x7d40 [ 1892.743003][T26322] ? __mutex_trylock_common+0x159/0x260 [ 1892.748600][T26322] should_fail_ex+0x39d/0x4d0 [ 1892.753360][T26322] _copy_from_user+0x2f/0xe0 [ 1892.757995][T26322] do_tcp_setsockopt+0x395/0x1e10 [ 1892.763065][T26322] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 1892.768474][T26322] ? mutex_lock_nested+0x20/0x20 [ 1892.773448][T26322] ? aa_sk_perm+0x83c/0x970 [ 1892.778023][T26322] ? __fget_files+0x28/0x4b0 [ 1892.782653][T26322] ? sock_common_setsockopt+0x36/0xc0 [ 1892.788060][T26322] ? tcp_setsockopt+0x3d/0xe0 [ 1892.792775][T26322] ? tcp_enable_tx_delay+0x70/0x70 [ 1892.797916][T26322] ? sock_common_recvmsg+0x190/0x190 [ 1892.803232][T26322] smc_setsockopt+0x243/0xac0 [ 1892.807943][T26322] ? smc_shutdown+0x9b0/0x9b0 [ 1892.812644][T26322] ? __fget_files+0x28/0x4b0 [ 1892.817294][T26322] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1892.822875][T26322] ? security_socket_setsockopt+0x7e/0xa0 [ 1892.828620][T26322] ? smc_shutdown+0x9b0/0x9b0 [ 1892.833333][T26322] do_sock_setsockopt+0x175/0x1a0 [ 1892.838389][T26322] ? __fdget+0x180/0x210 [ 1892.842689][T26322] __x64_sys_setsockopt+0x182/0x200 [ 1892.847923][T26322] do_syscall_64+0x55/0xa0 [ 1892.852377][T26322] ? clear_bhb_loop+0x40/0x90 [ 1892.857101][T26322] ? clear_bhb_loop+0x40/0x90 [ 1892.861839][T26322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1892.867767][T26322] RIP: 0033:0x7f61c7d9bf79 [ 1892.872212][T26322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1892.891853][T26322] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1892.900289][T26322] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1892.908307][T26322] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000008 [ 1892.916313][T26322] RBP: 00007f61c8d15090 R08: 0000000000000010 R09: 0000000000000000 [ 1892.924340][T26322] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1892.932335][T26322] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1892.940345][T26322] [ 1893.379202][T26334] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6351'. [ 1893.764850][T26345] netlink: 'syz.1.6352': attribute type 4 has an invalid length. [ 1893.785713][T26345] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1894.255695][T26354] netlink: 'syz.2.6360': attribute type 4 has an invalid length. [ 1894.276326][T26354] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6360'. [ 1894.331880][T26354] .`: renamed from bond0 (while UP) [ 1894.850920][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1894.882120][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1894.924355][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1894.953242][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1894.992773][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.019670][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.040241][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.070543][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.115965][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.144894][T26364] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1895.954626][T26373] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 1895.989326][T26373] pim6reg0: ignored: set checksum disabled [ 1898.446066][T26406] FAULT_INJECTION: forcing a failure. [ 1898.446066][T26406] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.491924][T26406] CPU: 1 PID: 26406 Comm: syz.0.6374 Not tainted syzkaller #0 [ 1898.499481][T26406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1898.509595][T26406] Call Trace: [ 1898.512924][T26406] [ 1898.515899][T26406] dump_stack_lvl+0x18c/0x250 [ 1898.520642][T26406] ? show_regs_print_info+0x20/0x20 [ 1898.525908][T26406] ? load_image+0x400/0x400 [ 1898.530476][T26406] ? __might_sleep+0xe0/0xe0 [ 1898.535143][T26406] ? __lock_acquire+0x7d40/0x7d40 [ 1898.540227][T26406] should_fail_ex+0x39d/0x4d0 [ 1898.544980][T26406] should_failslab+0x9/0x20 [ 1898.549544][T26406] slab_pre_alloc_hook+0x59/0x310 [ 1898.554644][T26406] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 1898.561110][T26406] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 1898.567582][T26406] __kmem_cache_alloc_node+0x53/0x250 [ 1898.573026][T26406] ? bpf_prog_test_run_flow_dissector+0x259/0x640 [ 1898.579481][T26406] __kmalloc+0xa4/0x230 [ 1898.583719][T26406] bpf_prog_test_run_flow_dissector+0x259/0x640 [ 1898.590011][T26406] ? lock_chain_count+0x20/0x20 [ 1898.594911][T26406] ? xdp_convert_buff_to_md+0x200/0x200 [ 1898.600514][T26406] ? __fget_files+0x28/0x4b0 [ 1898.605152][T26406] ? __fget_files+0x28/0x4b0 [ 1898.609786][T26406] ? __fget_files+0x43d/0x4b0 [ 1898.614534][T26406] ? xdp_convert_buff_to_md+0x200/0x200 [ 1898.620132][T26406] bpf_prog_test_run+0x321/0x390 [ 1898.625119][T26406] __sys_bpf+0x49d/0x890 [ 1898.629409][T26406] ? bpf_link_show_fdinfo+0x390/0x390 [ 1898.634844][T26406] ? lock_chain_count+0x20/0x20 [ 1898.639728][T26406] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1898.645776][T26406] __x64_sys_bpf+0x7c/0x90 [ 1898.650241][T26406] do_syscall_64+0x55/0xa0 [ 1898.654797][T26406] ? clear_bhb_loop+0x40/0x90 [ 1898.659514][T26406] ? clear_bhb_loop+0x40/0x90 [ 1898.664287][T26406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1898.670240][T26406] RIP: 0033:0x7f61c7d9bf79 [ 1898.674696][T26406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.694355][T26406] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1898.702828][T26406] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1898.710861][T26406] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1898.718928][T26406] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1898.726956][T26406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1898.734974][T26406] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1898.743013][T26406] [ 1901.312795][T26427] syzkaller0: entered allmulticast mode [ 1901.740844][T26427] syzkaller0: entered promiscuous mode [ 1901.746438][T26427] syzkaller0: left allmulticast mode [ 1902.264267][T26441] netlink: 'syz.2.6385': attribute type 2 has an invalid length. [ 1902.284962][T26441] netlink: 'syz.2.6385': attribute type 8 has an invalid length. [ 1902.304417][T26441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6385'. [ 1902.398685][T26440] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6384'. [ 1902.433405][T26440] net_ratelimit: 1995 callbacks suppressed [ 1902.433490][T26440] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1902.878361][T26431] syzkaller0: entered promiscuous mode [ 1902.891036][T26431] syzkaller0: entered allmulticast mode [ 1902.913009][T26446] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6386'. [ 1905.889701][T26451] netlink: 'syz.1.6387': attribute type 25 has an invalid length. [ 1905.898006][T26451] FAULT_INJECTION: forcing a failure. [ 1905.898006][T26451] name failslab, interval 1, probability 0, space 0, times 0 [ 1905.911133][T26451] CPU: 0 PID: 26451 Comm: syz.1.6387 Not tainted syzkaller #0 [ 1905.918656][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1905.928734][T26451] Call Trace: [ 1905.932039][T26451] [ 1905.935010][T26451] dump_stack_lvl+0x18c/0x250 [ 1905.939811][T26451] ? show_regs_print_info+0x20/0x20 [ 1905.945035][T26451] ? load_image+0x400/0x400 [ 1905.949558][T26451] ? br_get_link_af_size_filtered+0x92/0xc30 [ 1905.955575][T26451] ? __lock_acquire+0x7d40/0x7d40 [ 1905.960639][T26451] should_fail_ex+0x39d/0x4d0 [ 1905.965365][T26451] should_failslab+0x9/0x20 [ 1905.969883][T26451] slab_pre_alloc_hook+0x59/0x310 [ 1905.974929][T26451] ? lock_chain_count+0x20/0x20 [ 1905.979795][T26451] kmem_cache_alloc_node+0x60/0x320 [ 1905.985008][T26451] ? __alloc_skb+0x103/0x2c0 [ 1905.989614][T26451] __alloc_skb+0x103/0x2c0 [ 1905.994049][T26451] br_info_notify+0x105/0x240 [ 1905.998746][T26451] br_setlink+0x398/0x8b0 [ 1906.003098][T26451] ? br_vlan_info+0x460/0x460 [ 1906.007818][T26451] ? __mutex_lock+0x956/0xcc0 [ 1906.012513][T26451] ? mutex_is_locked+0x12/0x40 [ 1906.017288][T26451] rtnl_bridge_setlink+0x5b7/0x7d0 [ 1906.022412][T26451] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1906.027712][T26451] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1906.032833][T26451] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1906.037950][T26451] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 1906.043254][T26451] rtnetlink_rcv_msg+0x869/0xfa0 [ 1906.048229][T26451] ? lockdep_hardirqs_on+0x98/0x150 [ 1906.053441][T26451] ? rtnetlink_bind+0x80/0x80 [ 1906.058126][T26451] ? perf_trace_preemptirq_template+0xac/0x330 [ 1906.064299][T26451] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1906.070324][T26451] ? lock_chain_count+0x20/0x20 [ 1906.075233][T26451] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1906.080617][T26451] ? lockdep_hardirqs_on+0x98/0x150 [ 1906.085843][T26451] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1906.091225][T26451] ? _local_bh_enable+0xa0/0xa0 [ 1906.096091][T26451] ? __dev_queue_xmit+0x26b/0x36b0 [ 1906.101218][T26451] ? __dev_queue_xmit+0x26b/0x36b0 [ 1906.106344][T26451] ? __dev_queue_xmit+0x124f/0x36b0 [ 1906.111558][T26451] ? __dev_queue_xmit+0x26b/0x36b0 [ 1906.116732][T26451] ? ref_tracker_free+0x690/0x840 [ 1906.121783][T26451] netlink_rcv_skb+0x241/0x4d0 [ 1906.126564][T26451] ? rtnetlink_bind+0x80/0x80 [ 1906.131250][T26451] ? netlink_ack+0x1180/0x1180 [ 1906.136039][T26451] ? __lock_acquire+0x7d40/0x7d40 [ 1906.141107][T26451] ? netlink_deliver_tap+0x2e/0x1b0 [ 1906.146330][T26451] netlink_unicast+0x751/0x8d0 [ 1906.151135][T26451] netlink_sendmsg+0x8d0/0xbf0 [ 1906.155963][T26451] ? netlink_getsockopt+0x590/0x590 [ 1906.161220][T26451] ? aa_sock_msg_perm+0x94/0x150 [ 1906.166178][T26451] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1906.171481][T26451] ? security_socket_sendmsg+0x80/0xa0 [ 1906.176962][T26451] ? netlink_getsockopt+0x590/0x590 [ 1906.182208][T26451] ____sys_sendmsg+0x5ba/0x960 [ 1906.187008][T26451] ? __asan_memset+0x22/0x40 [ 1906.191616][T26451] ? __sys_sendmsg_sock+0x30/0x30 [ 1906.196648][T26451] ? __import_iovec+0x5f2/0x850 [ 1906.201523][T26451] ? import_iovec+0x73/0xa0 [ 1906.206056][T26451] ___sys_sendmsg+0x2a6/0x360 [ 1906.210774][T26451] ? get_pid_task+0x20/0x1e0 [ 1906.215382][T26451] ? __sys_sendmsg+0x2a0/0x2a0 [ 1906.220181][T26451] ? __lock_acquire+0x7d40/0x7d40 [ 1906.225237][T26451] __se_sys_sendmsg+0x1c2/0x2b0 [ 1906.230100][T26451] ? __x64_sys_sendmsg+0x80/0x80 [ 1906.235084][T26451] ? lockdep_hardirqs_on+0x98/0x150 [ 1906.240343][T26451] do_syscall_64+0x55/0xa0 [ 1906.244790][T26451] ? clear_bhb_loop+0x40/0x90 [ 1906.249485][T26451] ? clear_bhb_loop+0x40/0x90 [ 1906.254185][T26451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1906.260082][T26451] RIP: 0033:0x7fdf5c79bf79 [ 1906.264513][T26451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1906.284155][T26451] RSP: 002b:00007fdf5d5dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1906.292594][T26451] RAX: ffffffffffffffda RBX: 00007fdf5ca16090 RCX: 00007fdf5c79bf79 [ 1906.300586][T26451] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 1906.308564][T26451] RBP: 00007fdf5d5dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1906.316540][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1906.324515][T26451] R13: 00007fdf5ca16128 R14: 00007fdf5ca16090 R15: 00007ffcb5ede0a8 [ 1906.332506][T26451] [ 1906.541287][T26455] netlink: 'syz.2.6391': attribute type 25 has an invalid length. [ 1909.366571][T26491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1909.395281][T26491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1909.426540][T26491] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1910.169324][T26483] syzkaller0: entered promiscuous mode [ 1910.189256][T26483] syzkaller0: entered allmulticast mode [ 1910.406311][T26515] delete_channel: no stack [ 1912.238701][T26523] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1912.254164][T26527] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6412'. [ 1912.329867][T26531] delete_channel: no stack [ 1912.740503][T26546] `: Port device syz_tun removed [ 1912.865859][T26551] netlink: 'syz.2.6419': attribute type 10 has an invalid length. [ 1913.127020][T26554] netlink: 'syz.2.6419': attribute type 9 has an invalid length. [ 1913.138581][T26554] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1913.235589][T26551] netlink: 'syz.2.6419': attribute type 9 has an invalid length. [ 1913.279573][T26551] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1914.687552][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.695707][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.747484][T26578] syzkaller0: entered promiscuous mode [ 1914.771336][T26578] syzkaller0: entered allmulticast mode [ 1915.783497][T26596] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6433'. [ 1917.410421][T26598] netlink: 'syz.1.6434': attribute type 10 has an invalid length. [ 1917.418330][T26598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1917.545471][T26603] netlink: 'syz.0.6435': attribute type 10 has an invalid length. [ 1917.553676][T26603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6435'. [ 1917.568926][T26603] `: entered promiscuous mode [ 1917.574465][T26603] team_slave_0: entered promiscuous mode [ 1917.586454][T26603] team_slave_1: entered promiscuous mode [ 1917.592834][T26603] geneve1: entered promiscuous mode [ 1917.598354][T26603] `: entered allmulticast mode [ 1917.615069][T26603] team_slave_0: entered allmulticast mode [ 1917.626185][T26603] team_slave_1: entered allmulticast mode [ 1917.632441][T26603] geneve1: entered allmulticast mode [ 1917.651227][T26603] bridge0: port 3(`) entered blocking state [ 1917.657741][T26603] bridge0: port 3(`) entered disabled state [ 1917.675042][T26603] bridge0: port 3(`) entered blocking state [ 1917.681240][T26603] bridge0: port 3(`) entered forwarding state [ 1917.753614][T26607] netlink: 'syz.2.6437': attribute type 10 has an invalid length. [ 1917.770269][T26607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6437'. [ 1917.781279][T26607] `: entered promiscuous mode [ 1917.786432][T26607] team_slave_0: entered promiscuous mode [ 1917.801634][T26607] team_slave_1: entered promiscuous mode [ 1917.809264][T26607] geneve1: entered promiscuous mode [ 1917.825128][T26607] syz_tun: entered promiscuous mode [ 1917.833119][T26607] `: entered allmulticast mode [ 1917.850820][T26607] team_slave_0: entered allmulticast mode [ 1917.858671][T26607] team_slave_1: entered allmulticast mode [ 1917.869591][T26607] geneve1: entered allmulticast mode [ 1917.883104][T26607] syz_tun: entered allmulticast mode [ 1917.896772][T26607] bridge0: port 3(`) entered blocking state [ 1917.916612][T26607] bridge0: port 3(`) entered disabled state [ 1917.988750][T26607] bridge0: port 3(`) entered blocking state [ 1917.995734][T26607] bridge0: port 3(`) entered forwarding state [ 1918.524153][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1918.532271][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1918.664764][T26623] netlink: 'syz.0.6444': attribute type 10 has an invalid length. [ 1918.693559][T26623] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6444'. [ 1918.725364][T26623] FAULT_INJECTION: forcing a failure. [ 1918.725364][T26623] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.776018][T26623] CPU: 0 PID: 26623 Comm: syz.0.6444 Not tainted syzkaller #0 [ 1918.783589][T26623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1918.793712][T26623] Call Trace: [ 1918.797079][T26623] [ 1918.800066][T26623] dump_stack_lvl+0x18c/0x250 [ 1918.804826][T26623] ? show_regs_print_info+0x20/0x20 [ 1918.810098][T26623] ? load_image+0x400/0x400 [ 1918.814693][T26623] ? __might_sleep+0xe0/0xe0 [ 1918.819354][T26623] ? __lock_acquire+0x7d40/0x7d40 [ 1918.824453][T26623] should_fail_ex+0x39d/0x4d0 [ 1918.829224][T26623] should_failslab+0x9/0x20 [ 1918.833794][T26623] slab_pre_alloc_hook+0x59/0x310 [ 1918.838915][T26623] kmem_cache_alloc_node+0x60/0x320 [ 1918.844199][T26623] ? __alloc_skb+0x103/0x2c0 [ 1918.848879][T26623] __alloc_skb+0x103/0x2c0 [ 1918.853389][T26623] rtmsg_ifinfo_build_skb+0x8c/0x260 [ 1918.858776][T26623] rtmsg_ifinfo+0x8c/0x1a0 [ 1918.863286][T26623] netdev_state_change+0xfe/0x170 [ 1918.868375][T26623] ? netdev_features_change+0xd0/0xd0 [ 1918.873803][T26623] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1918.879762][T26623] ? mutex_is_locked+0x12/0x40 [ 1918.884584][T26623] ? rtnl_is_locked+0x15/0x20 [ 1918.889338][T26623] do_setlink+0x84a/0x4130 [ 1918.893833][T26623] ? load_image+0x400/0x400 [ 1918.898404][T26623] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 1918.904706][T26623] ? rcu_is_watching+0x15/0xb0 [ 1918.909522][T26623] ? do_trace_netlink_extack+0x7e/0x1a0 [ 1918.915128][T26623] ? __nla_validate_parse+0x262c/0x2ea0 [ 1918.920878][T26623] ? __nla_validate+0x50/0x50 [ 1918.925654][T26623] ? mark_lock+0x94/0x320 [ 1918.930082][T26623] ? __lock_acquire+0x1347/0x7d40 [ 1918.935208][T26623] ? validate_linkmsg+0x719/0x910 [ 1918.940326][T26623] rtnl_setlink+0x3d9/0x4e0 [ 1918.944927][T26623] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 1918.950202][T26623] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1918.956994][T26623] ? mutex_lock_nested+0x20/0x20 [ 1918.962038][T26623] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1918.967221][T26623] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1918.972391][T26623] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 1918.977660][T26623] rtnetlink_rcv_msg+0x869/0xfa0 [ 1918.982682][T26623] ? rtnetlink_bind+0x80/0x80 [ 1918.987420][T26623] ? perf_trace_preemptirq_template+0x269/0x330 [ 1918.993741][T26623] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1918.999831][T26623] ? lock_chain_count+0x20/0x20 [ 1919.004751][T26623] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1919.010187][T26623] ? lockdep_hardirqs_on+0x98/0x150 [ 1919.015460][T26623] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1919.020915][T26623] ? _local_bh_enable+0xa0/0xa0 [ 1919.025845][T26623] ? __dev_queue_xmit+0x26b/0x36b0 [ 1919.031036][T26623] ? __dev_queue_xmit+0x26b/0x36b0 [ 1919.036212][T26623] ? __dev_queue_xmit+0x124f/0x36b0 [ 1919.041487][T26623] ? __dev_queue_xmit+0x26b/0x36b0 [ 1919.046718][T26623] ? ref_tracker_free+0x690/0x840 [ 1919.051833][T26623] netlink_rcv_skb+0x241/0x4d0 [ 1919.056682][T26623] ? rtnetlink_bind+0x80/0x80 [ 1919.061449][T26623] ? netlink_ack+0x1180/0x1180 [ 1919.066302][T26623] ? __lock_acquire+0x7d40/0x7d40 [ 1919.071449][T26623] ? netlink_deliver_tap+0x2e/0x1b0 [ 1919.076727][T26623] netlink_unicast+0x751/0x8d0 [ 1919.081590][T26623] netlink_sendmsg+0x8d0/0xbf0 [ 1919.086455][T26623] ? netlink_getsockopt+0x590/0x590 [ 1919.091744][T26623] ? aa_sock_msg_perm+0x94/0x150 [ 1919.096758][T26623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1919.102111][T26623] ? security_socket_sendmsg+0x80/0xa0 [ 1919.107623][T26623] ? netlink_getsockopt+0x590/0x590 [ 1919.112893][T26623] ____sys_sendmsg+0x5ba/0x960 [ 1919.117740][T26623] ? __asan_memset+0x22/0x40 [ 1919.122405][T26623] ? __sys_sendmsg_sock+0x30/0x30 [ 1919.127486][T26623] ? __import_iovec+0x5f2/0x850 [ 1919.132431][T26623] ? import_iovec+0x73/0xa0 [ 1919.137018][T26623] ___sys_sendmsg+0x2a6/0x360 [ 1919.141757][T26623] ? __sys_sendmsg+0x2a0/0x2a0 [ 1919.146622][T26623] ? trace_call_bpf+0xc3/0x6c0 [ 1919.151532][T26623] __se_sys_sendmsg+0x1c2/0x2b0 [ 1919.156448][T26623] ? __x64_sys_sendmsg+0x80/0x80 [ 1919.161488][T26623] ? lockdep_hardirqs_on+0x98/0x150 [ 1919.166775][T26623] do_syscall_64+0x55/0xa0 [ 1919.171262][T26623] ? clear_bhb_loop+0x40/0x90 [ 1919.176093][T26623] ? clear_bhb_loop+0x40/0x90 [ 1919.180834][T26623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1919.186836][T26623] RIP: 0033:0x7f61c7d9bf79 [ 1919.191316][T26623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.210986][T26623] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1919.219461][T26623] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1919.227499][T26623] RDX: 0000000000004014 RSI: 00002000000000c0 RDI: 000000000000000b [ 1919.235627][T26623] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.243663][T26623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.251695][T26623] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1919.259758][T26623] [ 1919.558363][T26647] FAULT_INJECTION: forcing a failure. [ 1919.558363][T26647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1919.584989][T26647] CPU: 0 PID: 26647 Comm: syz.2.6452 Not tainted syzkaller #0 [ 1919.592540][T26647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1919.602644][T26647] Call Trace: [ 1919.605970][T26647] [ 1919.608948][T26647] dump_stack_lvl+0x18c/0x250 [ 1919.613687][T26647] ? show_regs_print_info+0x20/0x20 [ 1919.618946][T26647] ? load_image+0x400/0x400 [ 1919.623509][T26647] ? __lock_acquire+0x7d40/0x7d40 [ 1919.628596][T26647] should_fail_ex+0x39d/0x4d0 [ 1919.633337][T26647] _copy_from_user+0x2f/0xe0 [ 1919.637987][T26647] __copy_msghdr+0x3bb/0x580 [ 1919.642652][T26647] ___sys_sendmsg+0x214/0x360 [ 1919.647383][T26647] ? get_pid_task+0x20/0x1e0 [ 1919.652037][T26647] ? __sys_sendmsg+0x2a0/0x2a0 [ 1919.656946][T26647] ? __lock_acquire+0x7d40/0x7d40 [ 1919.662019][T26647] __se_sys_sendmsg+0x1c2/0x2b0 [ 1919.666899][T26647] ? __x64_sys_sendmsg+0x80/0x80 [ 1919.671877][T26647] ? lockdep_hardirqs_on+0x98/0x150 [ 1919.677105][T26647] do_syscall_64+0x55/0xa0 [ 1919.681567][T26647] ? clear_bhb_loop+0x40/0x90 [ 1919.686289][T26647] ? clear_bhb_loop+0x40/0x90 [ 1919.690998][T26647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1919.696943][T26647] RIP: 0033:0x7f875799bf79 [ 1919.701402][T26647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.721041][T26647] RSP: 002b:00007f8755bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1919.729481][T26647] RAX: ffffffffffffffda RBX: 00007f8757c15fa0 RCX: 00007f875799bf79 [ 1919.737482][T26647] RDX: 000000000000f7e5 RSI: 0000200000000080 RDI: 0000000000000003 [ 1919.745487][T26647] RBP: 00007f8755bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.753482][T26647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.761481][T26647] R13: 00007f8757c16038 R14: 00007f8757c15fa0 R15: 00007ffccc58d228 [ 1919.769489][T26647] [ 1919.851595][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1919.859142][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1920.113931][T26658] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6457'. [ 1920.572245][T26676] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6462'. [ 1920.588610][T26676] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1920.597155][T26676] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1923.617932][T26684] FAULT_INJECTION: forcing a failure. [ 1923.617932][T26684] name failslab, interval 1, probability 0, space 0, times 0 [ 1923.630975][T26684] CPU: 0 PID: 26684 Comm: syz.0.6467 Not tainted syzkaller #0 [ 1923.638490][T26684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1923.648582][T26684] Call Trace: [ 1923.651905][T26684] [ 1923.654873][T26684] dump_stack_lvl+0x18c/0x250 [ 1923.659604][T26684] ? show_regs_print_info+0x20/0x20 [ 1923.664841][T26684] ? load_image+0x400/0x400 [ 1923.669385][T26684] ? __might_sleep+0xe0/0xe0 [ 1923.674019][T26684] ? __lock_acquire+0x7d40/0x7d40 [ 1923.679085][T26684] should_fail_ex+0x39d/0x4d0 [ 1923.683814][T26684] should_failslab+0x9/0x20 [ 1923.688354][T26684] slab_pre_alloc_hook+0x59/0x310 [ 1923.693480][T26684] ? __lock_acquire+0x7d40/0x7d40 [ 1923.698541][T26684] kmem_cache_alloc_node+0x60/0x320 [ 1923.703805][T26684] ? __alloc_skb+0x103/0x2c0 [ 1923.708462][T26684] __alloc_skb+0x103/0x2c0 [ 1923.712961][T26684] netlink_sendmsg+0x66a/0xbf0 [ 1923.717867][T26684] ? netlink_getsockopt+0x590/0x590 [ 1923.723153][T26684] ? aa_sock_msg_perm+0x94/0x150 [ 1923.728142][T26684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1923.733478][T26684] ? security_socket_sendmsg+0x80/0xa0 [ 1923.738961][T26684] ? netlink_getsockopt+0x590/0x590 [ 1923.744196][T26684] ____sys_sendmsg+0x5ba/0x960 [ 1923.749012][T26684] ? __asan_memset+0x22/0x40 [ 1923.753639][T26684] ? __sys_sendmsg_sock+0x30/0x30 [ 1923.758696][T26684] ? __import_iovec+0x5f2/0x850 [ 1923.763594][T26684] ? import_iovec+0x73/0xa0 [ 1923.768141][T26684] ___sys_sendmsg+0x2a6/0x360 [ 1923.772873][T26684] ? get_pid_task+0x20/0x1e0 [ 1923.777536][T26684] ? __sys_sendmsg+0x2a0/0x2a0 [ 1923.782357][T26684] ? __lock_acquire+0x7d40/0x7d40 [ 1923.787441][T26684] __se_sys_sendmsg+0x1c2/0x2b0 [ 1923.792578][T26684] ? __x64_sys_sendmsg+0x80/0x80 [ 1923.797630][T26684] ? lockdep_hardirqs_on+0x98/0x150 [ 1923.802873][T26684] do_syscall_64+0x55/0xa0 [ 1923.807362][T26684] ? clear_bhb_loop+0x40/0x90 [ 1923.812079][T26684] ? clear_bhb_loop+0x40/0x90 [ 1923.816831][T26684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1923.822762][T26684] RIP: 0033:0x7f61c7d9bf79 [ 1923.827208][T26684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.846872][T26684] RSP: 002b:00007f61c8d15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1923.855354][T26684] RAX: ffffffffffffffda RBX: 00007f61c8015fa0 RCX: 00007f61c7d9bf79 [ 1923.863353][T26684] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1923.871355][T26684] RBP: 00007f61c8d15090 R08: 0000000000000000 R09: 0000000000000000 [ 1923.879358][T26684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1923.887361][T26684] R13: 00007f61c8016038 R14: 00007f61c8015fa0 R15: 00007fff84004aa8 [ 1923.895394][T26684] [ 1924.027264][ T51] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1924.034859][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1924.434380][T26697] FAULT_INJECTION: forcing a failure. [ 1924.434380][T26697] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.447553][T26697] CPU: 1 PID: 26697 Comm: syz.2.6471 Not tainted syzkaller #0 [ 1924.455085][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1924.465228][T26697] Call Trace: [ 1924.468562][T26697] [ 1924.471549][T26697] dump_stack_lvl+0x18c/0x250 [ 1924.476282][T26697] ? show_regs_print_info+0x20/0x20 [ 1924.481562][T26697] ? load_image+0x400/0x400 [ 1924.486121][T26697] ? __might_sleep+0xe0/0xe0 [ 1924.490765][T26697] ? __lock_acquire+0x7d40/0x7d40 [ 1924.495849][T26697] should_fail_ex+0x39d/0x4d0 [ 1924.500612][T26697] should_failslab+0x9/0x20 [ 1924.505174][T26697] slab_pre_alloc_hook+0x59/0x310 [ 1924.510282][T26697] ? lock_chain_count+0x20/0x20 [ 1924.515184][T26697] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1924.520618][T26697] __kmem_cache_alloc_node+0x53/0x250 [ 1924.526047][T26697] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1924.531490][T26697] ? tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1924.536922][T26697] kmalloc_trace+0x2a/0xe0 [ 1924.541402][T26697] tcp_sendmsg_fastopen+0x1de/0x5d0 [ 1924.546688][T26697] mptcp_sendmsg_fastopen+0x138/0x4d0 [ 1924.552119][T26697] mptcp_sendmsg+0x14b2/0x16d0 [ 1924.556938][T26697] ? __lock_acquire+0x1273/0x7d40 [ 1924.562013][T26697] ? verify_lock_unused+0x140/0x140 [ 1924.567281][T26697] ? aa_sk_perm+0x83c/0x970 [ 1924.571832][T26697] ? aa_af_perm+0x330/0x330 [ 1924.576363][T26697] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1924.582798][T26697] ? mptcp_shutdown+0x80/0x80 [ 1924.587512][T26697] ? sock_rps_record_flow+0x19/0x3f0 [ 1924.592821][T26697] ? inet_sendmsg+0xe9/0x2f0 [ 1924.597428][T26697] ? inet_send_prepare+0x260/0x260 [ 1924.602571][T26697] ____sys_sendmsg+0x5ba/0x960 [ 1924.607360][T26697] ? __lock_acquire+0x7d40/0x7d40 [ 1924.612418][T26697] ? __asan_memset+0x22/0x40 [ 1924.617031][T26697] ? __sys_sendmsg_sock+0x30/0x30 [ 1924.622084][T26697] ? __import_iovec+0x3fa/0x850 [ 1924.626977][T26697] ? import_iovec+0x73/0xa0 [ 1924.631519][T26697] ___sys_sendmsg+0x2a6/0x360 [ 1924.636227][T26697] ? get_pid_task+0x20/0x1e0 [ 1924.640854][T26697] ? __sys_sendmsg+0x2a0/0x2a0 [ 1924.645658][T26697] ? __lock_acquire+0x7d40/0x7d40 [ 1924.650745][T26697] __se_sys_sendmsg+0x1c2/0x2b0 [ 1924.655790][T26697] ? __x64_sys_sendmsg+0x80/0x80 [ 1924.660773][T26697] ? lockdep_hardirqs_on+0x98/0x150 [ 1924.666005][T26697] do_syscall_64+0x55/0xa0 [ 1924.670449][T26697] ? clear_bhb_loop+0x40/0x90 [ 1924.675144][T26697] ? clear_bhb_loop+0x40/0x90 [ 1924.679840][T26697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1924.685753][T26697] RIP: 0033:0x7f875799bf79 [ 1924.690186][T26697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.709899][T26697] RSP: 002b:00007f8755bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1924.718334][T26697] RAX: ffffffffffffffda RBX: 00007f8757c15fa0 RCX: 00007f875799bf79 [ 1924.726334][T26697] RDX: 0000000034004000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1924.734357][T26697] RBP: 00007f8755bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.742346][T26697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.750344][T26697] R13: 00007f8757c16038 R14: 00007f8757c15fa0 R15: 00007ffccc58d228 [ 1924.758364][T26697] [ 1924.851733][T26699] netlink: 'syz.1.6472': attribute type 10 has an invalid length. [ 1925.184259][T26701] netlink: 'syz.2.6473': attribute type 21 has an invalid length. [ 1925.196091][T26716] netlink: 'syz.1.6472': attribute type 9 has an invalid length. [ 1925.204441][T26701] IPv6: NLM_F_CREATE should be specified when creating new route [ 1925.212447][T26716] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6472'. [ 1925.519469][T26699] netlink: 'syz.1.6472': attribute type 9 has an invalid length. [ 1925.574458][T26699] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6472'. [ 1926.327036][ T51] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 1926.334576][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1926.919636][T26752] FAULT_INJECTION: forcing a failure. [ 1926.919636][T26752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.934440][T26752] CPU: 1 PID: 26752 Comm: syz.0.6483 Not tainted syzkaller #0 [ 1926.941964][T26752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1926.952061][T26752] Call Trace: [ 1926.955379][T26752] [ 1926.958344][T26752] dump_stack_lvl+0x18c/0x250 [ 1926.963092][T26752] ? show_regs_print_info+0x20/0x20 [ 1926.968329][T26752] ? load_image+0x400/0x400 [ 1926.972870][T26752] ? __might_fault+0xaa/0x120 [ 1926.977584][T26752] ? __lock_acquire+0x7d40/0x7d40 [ 1926.982670][T26752] should_fail_ex+0x39d/0x4d0 [ 1926.987419][T26752] _copy_from_user+0x2f/0xe0 [ 1926.992054][T26752] ___sys_recvmsg+0x176/0x590 [ 1926.996782][T26752] ? __sys_recvmsg+0x2a0/0x2a0 [ 1927.001606][T26752] ? ksys_write+0x1c4/0x260 [ 1927.006172][T26752] ? __fget_files+0x43d/0x4b0 [ 1927.010903][T26752] __x64_sys_recvmsg+0x20c/0x2e0 [ 1927.015877][T26752] ? ___sys_recvmsg+0x590/0x590 [ 1927.020803][T26752] ? lockdep_hardirqs_on+0x98/0x150 [ 1927.026048][T26752] do_syscall_64+0x55/0xa0 [ 1927.030514][T26752] ? clear_bhb_loop+0x40/0x90 [ 1927.035220][T26752] ? clear_bhb_loop+0x40/0x90 [ 1927.039906][T26752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1927.045820][T26752] RIP: 0033:0x7f61c7d9bf79 [ 1927.050265][T26752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1927.069918][T26752] RSP: 002b:00007f61c8cd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1927.078335][T26752] RAX: ffffffffffffffda RBX: 00007f61c8016180 RCX: 00007f61c7d9bf79 [ 1927.086344][T26752] RDX: 0000000000010000 RSI: 0000200000002f80 RDI: 0000000000000005 [ 1927.094354][T26752] RBP: 00007f61c8cd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1927.102379][T26752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1927.110395][T26752] R13: 00007f61c8016218 R14: 00007f61c8016180 R15: 00007fff84004aa8 [ 1927.118439][T26752] [ 1927.263971][T26758] netlink: 'syz.1.6486': attribute type 5 has an invalid length. [ 1927.968721][T26764] netlink: 'syz.0.6489': attribute type 10 has an invalid length. [ 1927.985046][T26764] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6489'. [ 1928.065940][T26765] netlink: 'syz.2.6490': attribute type 3 has an invalid length. [ 1928.085019][T26765] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6490'. [ 1928.199606][T26765] netlink: 'syz.2.6490': attribute type 7 has an invalid length. [ 1928.445502][T26774] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6493'. [ 1928.472904][T22941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1928.489382][T22941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1928.497862][T22941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1928.509946][T22941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1928.518804][T22941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1928.534496][T22941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1928.705220][T26779] netlink: 'syz.2.6494': attribute type 21 has an invalid length. [ 1929.068511][T26792] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6498'. [ 1929.094020][T26789] pim6reg1: entered promiscuous mode [ 1929.099455][T26789] pim6reg1: entered allmulticast mode [ 1929.145829][T26775] chnl_net:caif_netlink_parms(): no params data found [ 1929.340675][T26775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.348197][T26775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.368569][T26775] bridge_slave_0: entered allmulticast mode [ 1929.376514][T26775] bridge_slave_0: entered promiscuous mode [ 1929.386119][T26775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.395661][T26775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.403414][T26775] bridge_slave_1: entered allmulticast mode [ 1929.418729][T26775] bridge_slave_1: entered promiscuous mode [ 1929.463146][T26775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1929.476187][T26775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1929.523561][T26804] netlink: 'syz.1.6500': attribute type 10 has an invalid length. [ 1929.532458][T26804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6500'. [ 1929.558383][T26775] team0: Port device team_slave_0 added [ 1929.572749][T26775] team0: Port device team_slave_1 added [ 1929.607852][T26775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1929.615040][T26775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1929.641222][T26775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1929.654125][T26775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1929.661499][T26775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1929.687537][T26775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1929.751912][T26775] hsr_slave_0: entered promiscuous mode [ 1929.758672][T26775] hsr_slave_1: entered promiscuous mode [ 1929.770432][T26775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1929.778071][T26775] Cannot create hsr debugfs directory [ 1929.929990][T26775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1929.941111][T26775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1929.955912][T26775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1929.976347][T26775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1930.062674][T26775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1930.085307][T26775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1930.100138][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1930.107327][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1930.125082][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1930.132369][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1930.347307][T26775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.593154][T26775] veth0_vlan: entered promiscuous mode [ 1930.605143][T22941] Bluetooth: hci0: command tx timeout [ 1930.616888][T26775] veth1_vlan: entered promiscuous mode [ 1930.651517][T26775] veth0_macvtap: entered promiscuous mode [ 1930.662797][T26775] veth1_macvtap: entered promiscuous mode [ 1930.681810][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.692803][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.702729][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.713460][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.724334][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.735503][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.745956][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.756881][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.767145][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1930.777941][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.789973][T26775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1930.806890][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.817709][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.829856][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.844487][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.854402][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.865070][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.875100][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.885621][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.896008][T26775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1930.906653][T26775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1930.918199][T26775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1930.930917][T26775] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.939677][T26775] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.948458][T26775] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.958072][T26775] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.038752][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.056128][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.098055][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.106455][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.681041][T22941] Bluetooth: hci0: command tx timeout [ 1934.761058][T22941] Bluetooth: hci0: command tx timeout [ 1936.840644][T22941] Bluetooth: hci0: command tx timeout [ 1976.125382][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.132176][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.563953][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.576783][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2052.990508][T26546] unregister_netdevice: waiting for syz_tun to become free. Usage count = 3 [ 2052.999568][T26546] ref_tracker: syz_tun@ffff88807a1b45b8 has 1/2 users at [ 2052.999568][T26546] dst_init+0xd9/0x460 [ 2052.999568][T26546] dst_alloc+0x12e/0x170 [ 2052.999568][T26546] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 2052.999568][T26546] ip_route_output_key_hash+0x1f3/0x330 [ 2052.999568][T26546] ip_route_output_flow+0x2a/0x150 [ 2052.999568][T26546] geneve_link_config+0x1a6/0x670 [ 2052.999568][T26546] geneve_newlink+0x151/0x1c0 [ 2052.999568][T26546] rtnl_newlink+0x1542/0x20a0 [ 2052.999568][T26546] rtnetlink_rcv_msg+0x869/0xfa0 [ 2052.999568][T26546] netlink_rcv_skb+0x241/0x4d0 [ 2052.999568][T26546] netlink_unicast+0x751/0x8d0 [ 2052.999568][T26546] netlink_sendmsg+0x8d0/0xbf0 [ 2052.999568][T26546] __sys_sendto+0x4a9/0x6b0 [ 2052.999568][T26546] __x64_sys_sendto+0xde/0xf0 [ 2052.999568][T26546] do_syscall_64+0x55/0xa0 [ 2052.999568][T26546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2052.999568][T26546] [ 2053.090761][T26546] ref_tracker: syz_tun@ffff88807a1b45b8 has 1/2 users at [ 2053.090761][T26546] fib_check_nh+0xd23/0x1a70 [ 2053.090761][T26546] fib_create_info+0x142c/0x2460 [ 2053.090761][T26546] fib_table_insert+0xc6/0x1b20 [ 2053.090761][T26546] fib_magic+0x2e5/0x3c0 [ 2053.090761][T26546] fib_add_ifaddr+0x38d/0x5e0 [ 2053.090761][T26546] fib_netdev_event+0x389/0x490 [ 2053.090761][T26546] notifier_call_chain+0x197/0x380 [ 2053.090761][T26546] __dev_notify_flags+0x1aa/0x310 [ 2053.090761][T26546] dev_change_flags+0xe8/0x1a0 [ 2053.090761][T26546] do_setlink+0xc58/0x4130 [ 2053.090761][T26546] rtnl_newlink+0x17da/0x20a0 [ 2053.090761][T26546] rtnetlink_rcv_msg+0x869/0xfa0 [ 2053.090761][T26546] netlink_rcv_skb+0x241/0x4d0 [ 2053.090761][T26546] netlink_unicast+0x751/0x8d0 [ 2053.090761][T26546] netlink_sendmsg+0x8d0/0xbf0 [ 2053.090761][T26546] __sys_sendto+0x4a9/0x6b0 [ 2053.090761][T26546] [ 2055.003853][T26837] Bluetooth: hci0: command 0x0406 tx timeout