last executing test programs: 9.993318694s ago: executing program 2 (id=1253): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160020000340047c0200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x80000, 0xa}, 0x10}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xfffffffc, 0x0, 0x2, 0xb}, {0x10000002, 0x0, 0xffffffff}], 0x10, 0x316bb6af}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002940)={r4, 0x0, 0x1000, 0x30, &(0x7f0000001700)="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", &(0x7f0000002700)=""/48, 0xc, 0x0, 0xfd, 0xe4, &(0x7f0000002740)="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", &(0x7f0000002840)="d0d61d3db757d243371d425ea5d6d571810f22da2437ea31385c3a29160f924ae9510dd731b520f084bfa9cdb3025298eabbd70411f12a5fa36e6633ac0d9248e47ee6809a79fab267349c9f3d8f500cfd89c5baef9c14d3676a16b57702d02e282fc75b30f83b3a85c53adb45365cdb3ef289122e1a98d1fa641383a13e59ec930f59d53557ca9b365ae40be81a5bd93eb2b63d5521691bd665713e258213d3750d568e716ae0d458f353035c66ee1879e2c3f709b518f723aec8ea85bd9f0d4f04c52febb1b240ebf44b664e8ea70940550bbe61ce20e9040a85234c103e07720772e2", 0x0, 0x0, 0x5}, 0x50) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x1ff) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r13, r12}, 0xc) close(r11) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c0b139fe355cd89c9feb410018cc503815ed000000000000000c0000000c0000000200000003"], 0x0, 0x26, 0x0, 0x1, 0xb}, 0x28) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2162) setsockopt$sock_attach_bpf(r9, 0x84, 0xd, &(0x7f0000000000)=r14, 0x8) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_u8={{0x11}}], 0x30}, 0x0) 9.725892601s ago: executing program 2 (id=1255): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x10234, 0xcdd, 0x43a1bd73, 0x0, 0x10000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=""/180, 0x75, 0xb4, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x100, 0x5e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd223600603c60cda, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}, 0x135cc, 0xe90e, 0x3, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xf, 0x17, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000fbffffff0000000002000000186300000d000000000000000002000018000000ff7f000000000000010100008520000005000000b7080000000000007b8af8ff00000000b7080000470700007b8af0ff000092759e7300000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000940)='syzkaller\x00', 0x48e41c87, 0xa, &(0x7f0000000980)=""/10, 0x41100, 0xdd, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff], &(0x7f0000000ac0)=[{0x5, 0x2, 0x0, 0xc}, {0x0, 0x2, 0x3, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff00000000d12101b7d6a1c252822e31b45c000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair(0x1d, 0x5, 0x0, &(0x7f0000000500)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x8c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0xc070, 0x0, 0x0, 0x3, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x19, &(0x7f0000000180), 0x4) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) 9.201956443s ago: executing program 2 (id=1260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x2000}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x6, 0x8, 0x5, 0x40}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x3, 0x4, 0x1, 0xf, 0x0, 0x100, 0x80448, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7}, 0x10, 0xc557, 0x0, 0x3, 0xf, 0xe9a8, 0x0, 0x0, 0x4, 0x0, 0x4}, r3, 0x6, 0xffffffffffffffff, 0xb) 5.957270203s ago: executing program 2 (id=1266): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107983, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb0}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES8=r8], 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 4.651175475s ago: executing program 1 (id=1276): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40040) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891a, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x8804) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r7 = openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000080), 0x9) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 4.443618851s ago: executing program 1 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0xd3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x40010000) write$cgroup_type(r3, &(0x7f0000000100), 0x9) sendmsg$inet(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000103de364e60000000000000000fffffffc0000e1ff0000001d6e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x14, &(0x7f0000000040), 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002b00)=[{&(0x7f00000002c0)="7cb2747e2c", 0x5}], 0x1}, 0x40800) write$cgroup_subtree(r7, 0x0, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="86ffb7b8252c"}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0x0, 0xfd, 0x2, 0x0, 0x3d61c28c, 0x301, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x180000000, 0x7f}, 0x2000, 0x9, 0x5, 0x0, 0x245, 0x303d, 0x750, 0x0, 0x0, 0x0, 0x7}) 4.230511806s ago: executing program 3 (id=1280): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$kcm(0x29, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 3.989887062s ago: executing program 3 (id=1282): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48) 3.906778444s ago: executing program 3 (id=1284): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) 3.863894445s ago: executing program 0 (id=1285): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) 3.808525176s ago: executing program 3 (id=1286): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891a, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x8804) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000080), 0x9) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 3.789053756s ago: executing program 0 (id=1287): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x50) 3.735356438s ago: executing program 3 (id=1288): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x1}, 0x50) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_config_ext, 0x0, 0x4, 0x2, 0x6, 0x9, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x8}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000638477fbac141416e000030a94029f03030180b706000000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 621.203704ms ago: executing program 0 (id=1289): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x8, 0x8, 0x4000, r0, 0x1000, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r1, 0x21}, 0xc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6542affe}, @jmp={0x5, 0x1, 0x2, 0x6, 0xbb1507c485055599, 0x2, 0xffffffffffffffff}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x40, &(0x7f0000000400)=""/64, 0x41100, 0x4, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x6, 0xc8, 0xd926}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r3, r0, r6, r3], &(0x7f0000000580)=[{0x5, 0x2, 0x4, 0x8}, {0x2, 0x2, 0xe, 0xa}], 0x10, 0x2}, 0x94) socketpair(0x2c, 0x1, 0x400, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r8, &(0x7f0000002b80)={&(0x7f00000006c0)=@hci, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000000740)="4bc1a2534818faa186521bef4fa4424467dec0d38f470fe27d431f6d54f34bb9e9e116c7853a788a3e47207ce4875199301ca27ab996bff5866e883bd435d39a70c886d967cc6c95a65a6f277d419535fa8a42ed3218096c57859ad6f2fa8af15afd013e0e85b8ae5c88d301fbb5d21ae496aa9039d02d4bc76cf661fb959b40926b7b15c68e08208f626a9f7b33c7d1a558f82bf34728200e400578110060e202c0ffe1d5fc5e182b538ae64c032f41306fb381c90f7c2ddf4f1f3dfed5ed1286d814b2c06f3ff8c962453e95ced06095ce4655ae3f08187666b5a43f0657bff7d05bcd92ce1e32fb32cd2ff64e93ad5ef9308d652dc5896f7ef8bea11fd8ff7cb36ef1eb329c2756d64353a8409ba15907801e16f80dc15d022c3160ddcb2a46064dfbde665efcabb33f7c8013959c60d62aaa7693f4fc6057156d90fe6f9bd2134fc42f0f335b9ae546c6cb62a50414bc9255744e785fa8cddbc8e62933ba5c94ff06bd02a31aefb573be1ee6a41c4a5aa528e312064d25b74991c46ff113c427be8386186c22332452eaddd3350015d02d38758f1b8c3448346555d68f83f0cb47f861f1481e58c17e5f7f216fb86de38c3e52d284992724ec676b551f65ac3ff616f05e38dd293f111ea1685adf9d44932777300bc842d01ed2fdf6760aa0b3daefc685e7b76e38e6e5d6cc32dc3c6d22b06f3979dbdb32522b65122490143c413a07b26072baf0dab1bfa4bcd30d4bcaa55dae9c7aaa39a9d6c6d1957df9a2e3ce8f339e951abb11ee0329db6c9d017a484ced173b57bfaa64fc2fa5cb969ef26079c816176c432da80d666bad2f8bc30ed247410987ce070319f1adf1c6b70fdb6d6ef0feb1c3bc2b6c286e9b981c688e4ecde4215d0e22c8b269a08dfd61212b625b9c459546332e191509222f66a2771a450ef391bc60271fb06da6c89ba99405e125c2e7a46fb2a6eb0c890e32b97a116b5d9fa4f297715a0913c9b66e219bc30a80e122fb25e81c3e6f04fb56cf2fe71eaa004a20a10cb43ca9ed4b195a5ab680509a2aac709905c5c71c6398dece36eea6f6f873b1f8e636ae349c3c4ef7adcd51a52e65199e2e95535400c7bd0b4984df40c2d92dd986adb643ac22fe8b149ca765dcef783ea597322a4b3ff8910e974c14fccf6050f45ae8d23df8cf0d166a20136d25eea0b390dd03c5c62b588d3e5285956401cfc8e565e8619e7daf406f6e98dfcb21af43b49207f847d526d37b304d01ddf51d093753b5a2e61746f4acca90d59d8ba2db47060063270b97be5658fc9caab3c42d89b1db357f2bd2874ea1a9d9d7822b89c5b582625af11ee37d41cd90c26c56dcdaa5681e0d39767cb4864d5517b0b557fe265e245c9704adca58a6986c8cea580e51332bbada56485341de249c0a7edfea3cbebd7952cfe9d20c85e35f11c66f9448b8e8ab9140c07e0dfeb776d3301955ef1c17287aa0c9316778c91bcd84f34efaff94f6deae698261097fd3f8cf41e18d54883f4a76bb1f65e936fac176351ca2d3de262fbe17f64eba4ce3b5361d2736243f5fa93f468f46fb46bf5054b2d721f23f0700320aeeb10c767015c17385b972332c43da5dddea19d289a2e881d9318ca9db15655a71104a0912ccf846e4a4f0b71d2e63340ce7214f7f0288d280139c9f56888560d46ec440ca52c12a9936e167f88efe19c9582877e0db9b1d37b77c3972355e8dd37cf2914deed97e4b753e84869b874461d6e35c78df631ff78c23bf4687f9604910edeccc9aa5006130819acd31f59b5646d29a84c42a2f4d90045a670e57b10e95f4295212b8b17c1e56eaa125a2ab1d1eb1f14ee72e3a2d1fa68b39c33eab4a138a73ef04e9c26352f6566426c5cc1482ab2921e0ac0bebced96ee29901f60bba8f96a794c73bfd39066cbdf465adbdec462dfddb9b6dcc5bd2608e57560c983475615f5d7fea062c21bafd1249b7ea2e73e6a3499c6f2ac8669531b758770543c6084bc84880b3047dcca16d24fca6860d196a63c1522fb7e2e8862a45ce542055463e20b518af84d963caae16c3b259042842991ba78f819880e4a8ce6e886238f4998f1f50b03eafc30f9908dabd217dd0866af711d10018249ccc90340ef1ab81e71bbbab26f8f04bcbde4550b846ad97a090c82eb23d6500c6a0b9433c001faa1db04defe5d0f35f4c86f1d4f2dc25b695a8ee9257e43c632318a257316b74c8a2033f2d608b4402223e710804f0abf600da5cf713977eb030ba6e190df2a648339fc09648aa8c52c0b283d302909deea86d045c84b521b1fdfdb4e4babca3bd012ef5f15de972fbdb2f21887410fe912ee451cee406c11798ac7ccc19f3ae46de728b7dfc7e50a5dfa77278dcef7ac1cac1fe642287e2a3fb60841a4b60d3f0cfa081e88954f74191c571d5145066149693d28d3aa2c4e064fdb90474bfcf743e030ca06102b4c4c4bf06ac58a135c1978110f8813de88bd974f37aea072b909c7eb1dcb5c1b73553ff019d1c2f412b846fed3cbec39747d3513f1abe7c8677ea62ba616594a45e8fc5ba839c65770085b9cd84a662096594ab13c550e56d72a56e2739089568c2ffab5c032d15c7eca8052337ba844b8b8a1c9ebb19f1dd7790a6dabe2795324ce22655c55fe08d2b0c5dcf0e274d05f36117649269f6baf000601f807adaa0c2d79fa9d2036badf1a42f6922110374acbf19da6b9bfe84ed9518a6b520db5c253e5e78904ec41dcf278b7e764cd5ec333fe09d7d326c85215591fdfc9e29f39f98610d4207928ed0cb6a0e4e435cb48699e7d209098ab1c672167dd9ba5b5cc2f3aeb4a433e7a573beda723668c798e67b1d360bef1faa808adf02c4fcff098af9fe719a00f72195f45ed1e09497aa3e5f98ce55bd71767f4b3a889dc0982661f6e914f274c3a5c810050a4ae3fd1489065d3342e5d459108fa4097dc3562519ff9d85d1e6ceb5f4dd9c7ff93a20ba058f90df6bf5d997af0763b0492faad01769d06d5701c6897e0859d58dfb8d95f9ec9c6992c57f8aaadb5a4db4de1aac517a52eb566e8fad5098eff37764b73ec3db79f7da3e77334ff5e45cc9ae550696ea3022de5b46f485c8f20fba4c9e8b8ddfac778682f40d506fe722c621d828ade6c3b4a00ed05b2d8f59ee81b1c0daf09c4d46c7feaa4f8fffc15c6b37b65790b5ba6f471a081be0aac4e462df7b73f46e6f7acd97e22e84e649586fb5b96d788eed9613fb69e074428844254bdea205ea7e19bcfad3e8f03575465b348bd93b04d06ee3a524860c131ec7c33f85798a5fb0ee89b14437e3cc1da56b4d98c2d9480c0a8ce41a96f091a09c8bbaabe1ff8df3176fd9115f52728e7935baf2550d04902efc9b37041b1ff59f6f0cc7f2a368a8ea2cd4883d73e0c2ba3a21a0eb25bea61f06f73c7f0f64a9def417e78041fc8d173c3cdc0153bfc029fb0ccd793d6f387d24f00563db54191b164ef9e190b389eb3cd038be852ba2b1374f7fea6eb33572d7660f1f1aae3ff5491426cc89c44a551e97c9c05c8eaed9685c5282b28f451f4932ac9bf4bf68e46d6fab6317aa90250a459ef6b1f85179053d3ba0b153e7ffc892b4b2550f65c0a445a2edac582c6bc980808a35064085e24e3e7d3a67f8c0204f89a4b45b44c38ab7e9117223d7da786d57eaf92390f7811e9c476c381354227156b8f5bd3f530e32e57e3df67f18f9ab8f9b20d09465998bc436dbfdff8d1867faa653b1446f0dcd6530b5a6d3e6ec6d11b75056a89360073329e88d7d9b5eef79514e79ea0d9e383629f282f2e905da514c0fb46e26a14a3c017fde815ffe0bf1d0dfef3fb9641bc7d209ce4fa373fe87b46b3e04624bc11e104a6020e0ed0259b6c6de0030acc5e578d70a1dc73856f1bafb74fcf4d363c07746dcb0a1c4ad4519594c81253e1f9a165e2c86205dc166fb91d81b3192c375414d47cc6e80513a24bea4080cc6a4c9c8805eca6d82bca005223d312ce17c6d4fd36f0dcc7a99dbae198ef4c237a2282e1a87aebfbfca9f19a375b7b0fa400f7ac72c921ef480883895bd08f2d6fc9290b6dcb2e1ec04a0da9f3f16af09c79f5e0c2b8d9213638b03dea914b9b1782dca215917bc88ec4febdcc9f7a0a499a6a0358615b68c10f41eca6e1d6bd2e581be88997c064ca3265d1e6b1f555b36fa1071ff8d7ecd207142deb051fae14d2c3c8f72f6f1380f6a44436d6874745671d5d79afc4b3faa03a3d461de746f12b3c279f34a4cb57640cd9789993b514cb00a377d2a23bf75d6001ea453f00bbbe40274d4f3eddda0af98d819757c320c99d78596a9ab1163254250aaf432808ba405f5d733083fb910bf4f60553f5b468f377bb5d0a1d492dcbbb461337b400749f6141ec52b644359383cc8675d1e8925dbbe60a7f7f26b6693d80b592520a6a3272457529d6493763a30e6370d2f129d43e39ddc7b74a1b6f6ea04ffbaf4acb44cb63996561393edc00a1e2ef707eff568311919370b11910347208c81588daa19c30c608d23e4fbed415a659f8a6e2deef79ced9e78a25b1c1b5ebf2d8841b43807f01786295cbc92127216ea85a683073a8e000f5933b6bdf587dd7642d986277caa80e8b9516153f97cf43e7ba33c9c4ff68ea93b2ec88e47829738748876a38d29662ffd11c2e6b58dcbf53b48bc63e0f633f2f8cf718e8817d3d998f9dfa2a6d4391daa99189081550d3ff49e9cef6615b8210b9970d69e5091020541be6642987d09f8c54cd72fb15506df017f90d2c5bf89d9a95cb384bdeda67cb89f8307458105b95967f86cf43debe995e8f16ef1c6d2ef9eb734de39f2fdb1f9db1da2ae0b5e3714a7d9331c30e03761fb88bcc40511efee42074ffee06599301e10f0dfd9d902ab2a3479ffd187c267077246562a540dac1c90aa4a4d3c9c1cffe3caaa7dd9a2187dfa5b310dc8f5289fc16394832ae9b5609a3b272cc762b370a460514a88fba81e9286ed28810fe979bbad91600df8ad6f2cc217e7c723fd61c535cbfcda4d628be6fa66d7f26e6f98e7a21aa734506f53a1970687ac4267844cd6d7e76c016314b4fcf18c472f0aceb63da22079c7ae3cecf25fc97c52a86015e3b0616d984b670860388ce24eb64cf5e36cbc3d7ecfc66b7b83a161c2c303f464c6b29c2a884135ccf93a20b216902519b0f19269de9cb8a26127bd778e9bddc9a2fa058cff5e079533794e44413056d3734fe0f014cf5b3a669771e7805810a681f06a5449277ed0b65cfeefbf0bdd7198d7cc44683f0340d224f12d668f2cc998f38ee783e64c77e2577c4e3a60e381a625f27a590e67fe5aeb0274aa7456fbfaea96bed7756bb86a1e33b7581ba2be7a89569a8dac65b3136f800fba023dc80d1e84f1f49bb18628b7723551eb58612369747da87fa745b994603423a79fd7b9a1d1910c016614adf10d53c66fbedad7e6409fb8210a3cd967ce21b6314a61be8ad9ca29013668e69e45208f44af0b715a9d9c60daae8af770016ac459d91f4a9cba4e41b57bf84678dca97f27e4ea98b8ab6c9b16c94d9fd3d21991b936fa53ce9c2b816f1d0eafa11b5c147e01f282c4059efdd6fc5826357e8f02a773ef517c47a63decff0c906d777367102bd5650bc913b1fcab3cbe5dd8b68e421223f29d9025ac60acf77ebe0e871558fd1d8f6be32d9eb8c48669e009752a5703918c055d06213242832f3a22637032311b000bd98500dfc46a98d0b863d5690b8297548b01c5c22564859b32e8172c4893f2622b300e8446fbd465538f3534b5", 0x1000}, {&(0x7f0000001740)="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", 0xfc}, {&(0x7f0000001840)="8149af165bfb285351b48df019b55c28d177669b62a135c355f734fd2ae0051df1a263fd5d5ea7ac732cacdb66294a997cfa6f9623febb67e46a31bad83aecfa46bd7722ebdcec05c2e3132ddab59ee57dca507fcf8c8ea9c21f0218a284b5969910f92a08f6fb728d4782b3eca6d4a112a4722f8a8cec22a809b90d33aab463f497bf4c9fd647", 0x87}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="6d2147d79317ce71f361f715a2bad0c9124b62492ca8ec77768b5c8bd78865e819d57eac43840bcffc32ab4beb4759378ac3fef358df1184d30ca7d540c9a12fb22b94034472582e2138da19dcf67506d74072a6e41e731e3e3cf5d713160379883ba2404a370b79a218da1823d1d68da1dc9631a3b35954c5a26dbc447457e4bb50395e1ca56e7be532e4f8f9caefc8b1339689e48a86bbc74292c11aec345260e800f8a15cfd040cf4", 0xaa}, {&(0x7f00000029c0)="52ab0503936d5ec1a02eb8d70d918e102a0880c4da5c4418a58f6ab384e8ecb40c3693bfa0b1059d63d70c6d663415dcea01be34929656d8d3271072a167ef4a44735bd975394d7383996b12f00b706e894742dd90a81911bed031004a68d1130cffcdd6053ed29d0614740a5e04889566eea5b6adf8f194c9a5aa419dc83bba8093af1c7eb26fa5556023", 0x8b}, {&(0x7f0000002a80)="f7e2346c08531dfd6b192abee9e4187bb46db922d865", 0x16}], 0x7, &(0x7f0000002b40)}, 0x20000000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002bc0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r5, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002cc0)={r9, 0x58, &(0x7f0000002c40)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002d00)={r3, 0xffffffffffffffff}, 0x4) r11 = perf_event_open$cgroup(&(0x7f0000002d80)={0x3, 0x80, 0x0, 0x2, 0x5, 0x7f, 0x0, 0x6, 0x82000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000002d40), 0xb}, 0x100000, 0x0, 0x6, 0x9, 0x5, 0x4, 0x1322, 0x0, 0x3, 0x0, 0x62a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000002e00)='syzkaller\x00') r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002e40), 0x8) ioctl$TUNSETCARRIER(r12, 0x400454e2, &(0x7f0000002e80)=0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002f00)=@generic={&(0x7f0000002ec0)='./file0\x00', r7}, 0x18) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000030c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000002f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@call={0x85, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002fc0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000003000)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x912e, r12, 0x2, &(0x7f0000003040)=[r6, r9, r9, r6, r9, r4, r10, r9], &(0x7f0000003080)=[{0x5, 0x5, 0x8, 0xb}, {0x3, 0x1, 0x3, 0x5}], 0x10, 0x38}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003280)={@fallback=r3, 0x1e, 0x1, 0x8, &(0x7f0000003180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0, 0x0], &(0x7f0000003240)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000032c0)={@cgroup=r12, r13, 0x2c, 0x1c, 0x0, @void, @value=r12, @void, @void, r15}, 0x20) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000034c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000003300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@generic={0x9, 0x5, 0x8, 0x6, 0x7}]}, &(0x7f0000003340)='GPL\x00', 0xf3, 0x53, &(0x7f0000003380)=""/83, 0x40f00, 0x33, '\x00', 0x0, 0x1a, r5, 0x8, &(0x7f0000003400)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000003440)={0x1, 0x1, 0xb, 0x10000}, 0x10, 0x1da7a, r12, 0x0, &(0x7f0000003480)=[r3]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003800)={r16, 0x0, 0xf9, 0x8d, &(0x7f0000003580)="5347cf7674872693c2fd6cac495d6c9fded943d13745ac932de3c7f9d7c7f8d96deb6985a0eab5208c0810e6ed7c4fb55f7df54727819c765b4545c1f107d469b7acae8db7612c8e21cad3e6fd08085bb11e364cc6e46919eb7aad17a5e3f95584ecc50247a8da1c936c840126914e409ca833544e6a576812ed495c54aec560757857e5c4ca61292f15e541611cbdc0e8530b5d3f8ef28a8bae73f7321038b831a448487af1dc7086d64a7f8113f9de9923b3bf62db914e75c65e5357d65e7f27f226bd94e87c1120db191ae90e32984df905ca6e1eae9649f72507fb7285b4e973db12d48c23abb25df351eb5120193cd5d0505b103a1e32", &(0x7f0000003680)=""/141, 0x6, 0x0, 0x65, 0x1e, &(0x7f0000003740)="c1d9d86d4688c46309c019d60d5b56fa617493181dee6eae338385e954f22d293a6f762b07d7a02e64b57945989b8044388bb741520f01786b9f4af6719ca63e70f9dfadb72f09affe6dd74df90c64af29251eddbc49b371b3b60fb5dac1ac15b92e08f5e0", &(0x7f00000037c0)="8915b7e41e1e6c915be973c222bf024d1667adcf73581e535c01c5c395de"}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003880)={@map=r10, r13, 0xc, 0x8, 0x0, @void, @value=r13, @void, @void, r15}, 0x20) ioctl$PERF_EVENT_IOC_ID(r11, 0x80082407, &(0x7f00000038c0)) sendmsg$kcm(r14, &(0x7f0000003d00)={&(0x7f0000003900)=@phonet={0x23, 0x0, 0xa0, 0x3}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003980)="e178c924710f2e31000912a72055696a2026f5c4de34a1b96e84296b86fb7fe96c88c35230fc24c59acc53835c253954bd415efb2c53beea3495fc9904d69c65d1a141dcdb24b14cb1a0b9b55fbb1023af93b3047d4cffdb9b22c31c1ef6510d90520a88f132469e934e2ad0e93b93b6632ef14e667bdd9e", 0x78}, {&(0x7f0000003a00)="2430f02a3effb139a382ac53ad79d552410fb66ff9034b1964eb2c06c97ed3d4644ff922a1c7195ccd8b3e50c279827cf9005eea1cb1b22f71c615a0a23730660cdbe43c94ae06cbe789e395c4e6c6da49e35c1a2c5552f11e2b6acab2bee5a5fb9e31778ec114662d46e851915c0c2da0eeb655cd929108f95473649766b2c185fdd94c0f74d5a80088368a8acab3f16dacf4bcd5102f71cfefe02dddc84a0138af1bc8ef1f0999d1d7b2c0c56420e11dbd714da002a85d93a28b0c5fe3ccc59210d87b12186394c3bd062b2b30bd5a60a2c4f072722df73b3e", 0xda}, {&(0x7f0000003b00)="6aa00e67e9e241fa77a1c1dd3eecc32ae272c3f181d36f97a62cd24fc17de987f0a34fa33b88858928ffd530be5f5a8b556b2989229dc877370c16e9cda8ca3069c388c3f5c5c624d3c4f82f1e1a34fba9d3f8f2ee64b107c0e686ee2874b112e53985ca10670cb9900ad183cec8da6437159f652f447a3622a3fbc0d80bcf494c54ef93afd403b42783f057408bcfb10b761cfa3a46a30cfec99d5dd62f4540a2d10b65f9bc286b54d104cf2f9f42831029315113cb28de62047ac7cbebf322502e55ec6b1b88257323", 0xca}], 0x3, &(0x7f0000003c40)=[{0x38, 0x10e, 0x2, "acb1050707318c9f461cba90175f91254684483e6f1ca9a349590a764709c2cd29c8f22d36"}, {0x58, 0x3a, 0x2, "3dd2ea3c51694b6d81b8d47c482fbd534d61206d669f11e0a631af0bde49ed00bcdb1f697e034be54383544326acc875dc42cb87fb02837d498f2152042e60be03991878e8"}], 0x90}, 0x4080) ioctl$TUNGETIFF(r12, 0x800454d2, &(0x7f0000003d40)={'ip6gre0\x00'}) r17 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003dc0)='./cgroup/syz0\x00', 0x200002, 0x0) r18 = openat$cgroup_ro(r12, &(0x7f0000003e00)='blkio.bfq.time\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003d80)={@cgroup=r17, r16, 0x29, 0x1, r14, @void, @value=r18, @void, @void, r15}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000003e40), 0x4101, 0x0) 597.580125ms ago: executing program 1 (id=1290): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x8, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x100000010, 0x1d66ef49}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x12}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x84, 0x8}], 0x10}, 0x880) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0xffffffffffffffff) r4 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x3, 0x0, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000100)=r5, 0x120) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000020028000001294", 0x2e}], 0x1}, 0x0) 394.6064ms ago: executing program 0 (id=1291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x300, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 207.003224ms ago: executing program 2 (id=1292): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000104000000991805166700a6ba63ffd4c20f7e6e2041913031ebf6b28c5f907d22d1fb966970660b0057c8bd1b30272c88e7e401020ece230d9c0f069e672bfd032df7b396d1ec89849ff2f90444d217"], 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x7, 0x8, 0x3, 0x6, 0xf608}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x0, 0xc0, &(0x7f0000000180)=""/192, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x7, 0xb, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x5, 0x3, 0xf, 0x7}, {0x2, 0x2, 0x7, 0x3}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0xf, 0x1, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex=r4, r2, 0x27, 0x2034, 0x0, @void, @void, @value=r5, @void, r3}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 206.521704ms ago: executing program 0 (id=1293): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}], 0x1}, 0xe803000000000000) 205.746164ms ago: executing program 3 (id=1294): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003bbfd3e0ab59619bf82c877300000000000000000001000000000000000000000000a8b4b0f21feee3155e128e88edf961838d22f272608feaa7d0e81c2f7cfb2c79288f340ce7972f87ba95020902000000c13fb5015d917a1866e0606e8f609bfaffb2671388831b"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x2}, 0x8}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="0737de9c2a", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socket$kcm(0x10, 0x2, 0x4) r7 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6c039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x32, 0x43a1bd79, 0x7, 0x9, 0xdc, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x8000, 0xffffffffffffffff, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0x1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000006000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r5, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', 0x0, r5, 0x2, 0x4, 0x5}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x1f, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffcc9b}, {}, {}, [@map_fd={0x18, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x1, 0x0, 0x5, 0xa, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x2, 0x3, 0x1, 0xa, 0x4, 0x39345425a8aa77bb, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='syzkaller\x00', 0x1e70, 0x0, 0x0, 0x41000, 0xa, '\x00', r9, 0x1b, r5, 0x8, &(0x7f0000000980)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x2, 0x1, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80), &(0x7f0000000c80)=[{0x5, 0x1, 0x0, 0x3}], 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2180, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x892, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x100000000) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cb", 0x8c}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badfa122797d62c09ada748195f31cd5e6fc4b2a327cd453bfacfae9fd63e0c7e07aa29db43fcbec44f24e506fa0c9cc7cefa0570eddd9fb6af7e4ccd0529396472e7dae6d691aad7a376f1db24a164209a8", 0x93}], 0x2}, 0x20000050) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) 190.710075ms ago: executing program 1 (id=1295): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xffdd) 90.021467ms ago: executing program 1 (id=1296): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891a, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x8804) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7f}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x80000001, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r8 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000080), 0x9) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 0s ago: executing program 0 (id=1297): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc2, 0xc2, 0x4, [@datasec={0x6, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x7321544a, 0x9}, {0x4, 0x1, 0xc}, {0x4, 0x8}, {0x2, 0x1, 0x9}, {0x4, 0xb8c6, 0x5}], '^q'}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x40}}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x0, 0x55, 0x4}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xa}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0xa}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x6}}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000740)=""/4, 0xe0, 0x4, 0x0, 0x7}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x82101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x9, 0x0, 0x0, 0x8000000, 0x1, 0x0, 0x0, 0xf63, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x340440c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x2, 0x81, 0x3, 0x0, 0x10000, 0x2322, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0x80000, 0x1, 0x2000000c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, r6, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000ffffff"], 0x50) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000001000000650500000400000042000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000024b9", @ANYRES32], 0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r13, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): p_bind_addr_copy+0xb3/0x3c0 [ 142.035847][ T6965] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 142.042181][ T6965] sctp_connect_new_asoc+0x2f9/0x6a0 [ 142.047468][ T6965] ? __sctp_connect+0xd80/0xd80 [ 142.052323][ T6965] ? __local_bh_enable_ip+0x13a/0x1c0 [ 142.057706][ T6965] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 142.063249][ T6965] ? security_sctp_bind_connect+0x89/0xb0 [ 142.068970][ T6965] sctp_sendmsg+0x1519/0x27b0 [ 142.073657][ T6965] ? sctp_getsockopt+0xb60/0xb60 [ 142.078596][ T6965] ? aa_af_perm+0x330/0x330 [ 142.083111][ T6965] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 142.089550][ T6965] ? sock_rps_record_flow+0x19/0x3f0 [ 142.094839][ T6965] ? inet_sendmsg+0xce/0x2a0 [ 142.099427][ T6965] ? inet_send_prepare+0x250/0x250 [ 142.104563][ T6965] ____sys_sendmsg+0x61b/0x980 [ 142.109329][ T6965] ? __asan_memset+0x22/0x40 [ 142.113919][ T6965] ? __sys_sendmsg_sock+0x30/0x30 [ 142.118936][ T6965] ? __import_iovec+0x5f2/0x850 [ 142.123825][ T6965] ? import_iovec+0x73/0xa0 [ 142.128329][ T6965] ___sys_sendmsg+0x2a6/0x360 [ 142.133003][ T6965] ? get_pid_task+0x20/0x1e0 [ 142.137596][ T6965] ? __sys_sendmsg+0x2b0/0x2b0 [ 142.142374][ T6965] ? __lock_acquire+0x7d80/0x7d80 [ 142.147413][ T6965] __se_sys_sendmsg+0x1d0/0x2c0 [ 142.152271][ T6965] ? __x64_sys_sendmsg+0x80/0x80 [ 142.157224][ T6965] ? lockdep_hardirqs_on+0x98/0x150 [ 142.162424][ T6965] do_syscall_64+0x55/0xb0 [ 142.166838][ T6965] ? clear_bhb_loop+0x40/0x90 [ 142.171516][ T6965] ? clear_bhb_loop+0x40/0x90 [ 142.176208][ T6965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.182121][ T6965] RIP: 0033:0x7f5f8039e0d9 [ 142.186531][ T6965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.206137][ T6965] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.214553][ T6965] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 142.222519][ T6965] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 142.230489][ T6965] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 142.238458][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.246430][ T6965] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 142.254414][ T6965] [ 142.366807][ T6971] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 142.383580][ T6971] netlink: 'syz.2.392': attribute type 2 has an invalid length. [ 142.822861][ T6979] netlink: 'syz.0.394': attribute type 6 has an invalid length. [ 142.848488][ T6982] FAULT_INJECTION: forcing a failure. [ 142.848488][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 142.881733][ T6982] CPU: 1 PID: 6982 Comm: syz.1.402 Not tainted syzkaller #0 [ 142.889082][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.899166][ T6982] Call Trace: [ 142.902471][ T6982] [ 142.905424][ T6982] dump_stack_lvl+0x18c/0x250 [ 142.910139][ T6982] ? show_regs_print_info+0x20/0x20 [ 142.915366][ T6982] ? load_image+0x420/0x420 [ 142.919910][ T6982] ? __lock_acquire+0x7d80/0x7d80 [ 142.924982][ T6982] should_fail_ex+0x394/0x4c0 [ 142.929691][ T6982] should_failslab+0x9/0x20 [ 142.934227][ T6982] slab_pre_alloc_hook+0x59/0x300 [ 142.939276][ T6982] ? bpf_test_init+0x9f/0x140 [ 142.943984][ T6982] ? bpf_test_init+0x9f/0x140 [ 142.948700][ T6982] __kmem_cache_alloc_node+0x53/0x250 [ 142.954111][ T6982] ? bpf_test_init+0x9f/0x140 [ 142.958817][ T6982] __kmalloc+0xa7/0x240 [ 142.963004][ T6982] bpf_test_init+0x9f/0x140 [ 142.967536][ T6982] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 142.972942][ T6982] ? __lock_acquire+0x7d80/0x7d80 [ 142.978006][ T6982] ? dev_put+0x80/0x80 [ 142.982122][ T6982] ? dev_put+0x80/0x80 [ 142.986218][ T6982] bpf_prog_test_run+0x31f/0x390 [ 142.991184][ T6982] __sys_bpf+0x49d/0x890 [ 142.995452][ T6982] ? read_tsc+0x9/0x20 [ 142.999546][ T6982] ? bpf_link_show_fdinfo+0x390/0x390 [ 143.004965][ T6982] ? lock_chain_count+0x20/0x20 [ 143.009843][ T6982] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.015862][ T6982] __x64_sys_bpf+0x7c/0x90 [ 143.020315][ T6982] do_syscall_64+0x55/0xb0 [ 143.024774][ T6982] ? clear_bhb_loop+0x40/0x90 [ 143.029486][ T6982] ? clear_bhb_loop+0x40/0x90 [ 143.034214][ T6982] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.040193][ T6982] RIP: 0033:0x7fd71219e0d9 [ 143.044687][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.064326][ T6982] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.072747][ T6982] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 143.080845][ T6982] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 143.088816][ T6982] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 143.096829][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.104810][ T6982] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 143.112797][ T6982] [ 143.236753][ T6982] __nla_validate_parse: 2 callbacks suppressed [ 143.236807][ T6982] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.402'. [ 143.894278][ T6998] netlink: 140 bytes leftover after parsing attributes in process `syz.2.399'. [ 145.011091][ T7012] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.403'. [ 145.118157][ T7016] netlink: 196 bytes leftover after parsing attributes in process `syz.3.404'. [ 145.508034][ T7028] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 145.521987][ T7028] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.416'. [ 146.091250][ T7046] netlink: 140 bytes leftover after parsing attributes in process `syz.0.411'. [ 146.520536][ T7052] netlink: 140 bytes leftover after parsing attributes in process `syz.1.412'. [ 147.775043][ T7071] FAULT_INJECTION: forcing a failure. [ 147.775043][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 147.884421][ T7071] CPU: 1 PID: 7071 Comm: syz.2.421 Not tainted syzkaller #0 [ 147.891783][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.901874][ T7071] Call Trace: [ 147.905187][ T7071] [ 147.908172][ T7071] dump_stack_lvl+0x18c/0x250 [ 147.912898][ T7071] ? show_regs_print_info+0x20/0x20 [ 147.918127][ T7071] ? load_image+0x420/0x420 [ 147.922660][ T7071] ? __might_sleep+0xe0/0xe0 [ 147.927302][ T7071] ? __lock_acquire+0x7d80/0x7d80 [ 147.932362][ T7071] should_fail_ex+0x394/0x4c0 [ 147.937081][ T7071] should_failslab+0x9/0x20 [ 147.941608][ T7071] slab_pre_alloc_hook+0x59/0x300 [ 147.946657][ T7071] ? __lock_acquire+0x7d80/0x7d80 [ 147.951710][ T7071] kmem_cache_alloc_node+0x5e/0x310 [ 147.956936][ T7071] ? __alloc_skb+0x103/0x2c0 [ 147.961552][ T7071] __alloc_skb+0x103/0x2c0 [ 147.965995][ T7071] netlink_sendmsg+0x66a/0xbf0 [ 147.970796][ T7071] ? netlink_getsockopt+0x590/0x590 [ 147.976013][ T7071] ? apparmor_socket_sendmsg+0x8e/0x330 [ 147.981582][ T7071] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.986883][ T7071] ? security_socket_sendmsg+0x80/0xa0 [ 147.992357][ T7071] ? netlink_getsockopt+0x590/0x590 [ 147.997580][ T7071] ____sys_sendmsg+0x61b/0x980 [ 148.002395][ T7071] ? __asan_memset+0x22/0x40 [ 148.007014][ T7071] ? __sys_sendmsg_sock+0x30/0x30 [ 148.012054][ T7071] ? __import_iovec+0x5f2/0x850 [ 148.016948][ T7071] ? import_iovec+0x73/0xa0 [ 148.021479][ T7071] ___sys_sendmsg+0x2a6/0x360 [ 148.026187][ T7071] ? __sys_sendmsg+0x2b0/0x2b0 [ 148.031004][ T7071] ? __lock_acquire+0x7d80/0x7d80 [ 148.036092][ T7071] __se_sys_sendmsg+0x1d0/0x2c0 [ 148.040971][ T7071] ? __x64_sys_sendmsg+0x80/0x80 [ 148.045959][ T7071] ? lockdep_hardirqs_on+0x98/0x150 [ 148.051191][ T7071] do_syscall_64+0x55/0xb0 [ 148.055627][ T7071] ? clear_bhb_loop+0x40/0x90 [ 148.060318][ T7071] ? clear_bhb_loop+0x40/0x90 [ 148.065018][ T7071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.070929][ T7071] RIP: 0033:0x7f5f8039e0d9 [ 148.075356][ T7071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.094979][ T7071] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.103419][ T7071] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 148.111407][ T7071] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 148.119389][ T7071] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 148.127373][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.135361][ T7071] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 148.143392][ T7071] [ 148.258551][ T7076] netlink: 140 bytes leftover after parsing attributes in process `syz.3.424'. [ 148.670482][ T7086] netlink: 140 bytes leftover after parsing attributes in process `syz.2.433'. [ 148.960667][ T7100] FAULT_INJECTION: forcing a failure. [ 148.960667][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 149.001129][ T7100] CPU: 0 PID: 7100 Comm: syz.0.428 Not tainted syzkaller #0 [ 149.008481][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 149.018562][ T7100] Call Trace: [ 149.021854][ T7100] [ 149.024798][ T7100] dump_stack_lvl+0x18c/0x250 [ 149.029500][ T7100] ? show_regs_print_info+0x20/0x20 [ 149.034734][ T7100] ? load_image+0x420/0x420 [ 149.039270][ T7100] ? __might_sleep+0xe0/0xe0 [ 149.043892][ T7100] ? __lock_acquire+0x7d80/0x7d80 [ 149.048956][ T7100] should_fail_ex+0x394/0x4c0 [ 149.053673][ T7100] should_failslab+0x9/0x20 [ 149.058205][ T7100] slab_pre_alloc_hook+0x59/0x300 [ 149.063273][ T7100] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 149.068941][ T7100] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 149.074603][ T7100] __kmem_cache_alloc_node+0x53/0x250 [ 149.080020][ T7100] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 149.085696][ T7100] __kmalloc_node+0xa6/0x240 [ 149.090322][ T7100] memcg_alloc_slab_cgroups+0x85/0x120 [ 149.095809][ T7100] slab_post_alloc_hook+0xec/0x4d0 [ 149.100960][ T7100] kmem_cache_alloc_node+0x1af/0x310 [ 149.106269][ T7100] ? __alloc_skb+0x103/0x2c0 [ 149.110885][ T7100] __alloc_skb+0x103/0x2c0 [ 149.115328][ T7100] alloc_skb_with_frags+0xcd/0x7a0 [ 149.120466][ T7100] ? perf_trace_lock+0xfc/0x3b0 [ 149.125347][ T7100] sock_alloc_send_pskb+0x883/0x9a0 [ 149.130594][ T7100] ? sock_kzfree_s+0x50/0x50 [ 149.135218][ T7100] ? __lock_acquire+0x7d80/0x7d80 [ 149.140274][ T7100] ? sock_def_readable+0xad/0x420 [ 149.145321][ T7100] ? sock_def_readable+0xad/0x420 [ 149.150369][ T7100] ? sock_def_readable+0x2ac/0x420 [ 149.155507][ T7100] unix_stream_sendmsg+0x48b/0xbf0 [ 149.160660][ T7100] ? unix_show_fdinfo+0x280/0x280 [ 149.165710][ T7100] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 149.172162][ T7100] ? apparmor_socket_sendmsg+0x8e/0x330 [ 149.177737][ T7100] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 149.183048][ T7100] ? security_socket_sendmsg+0x80/0xa0 [ 149.188535][ T7100] ? unix_show_fdinfo+0x280/0x280 [ 149.193587][ T7100] ____sys_sendmsg+0x61b/0x980 [ 149.198378][ T7100] ? __asan_memset+0x22/0x40 [ 149.202998][ T7100] ? __sys_sendmsg_sock+0x30/0x30 [ 149.208041][ T7100] ? __import_iovec+0x5f2/0x850 [ 149.212925][ T7100] ? import_iovec+0x73/0xa0 [ 149.217459][ T7100] ___sys_sendmsg+0x2a6/0x360 [ 149.222165][ T7100] ? __sys_sendmsg+0x2b0/0x2b0 [ 149.226975][ T7100] ? __lock_acquire+0x7d80/0x7d80 [ 149.232042][ T7100] __se_sys_sendmsg+0x1d0/0x2c0 [ 149.236921][ T7100] ? __x64_sys_sendmsg+0x80/0x80 [ 149.241902][ T7100] ? lockdep_hardirqs_on+0x98/0x150 [ 149.247130][ T7100] do_syscall_64+0x55/0xb0 [ 149.251572][ T7100] ? clear_bhb_loop+0x40/0x90 [ 149.256268][ T7100] ? clear_bhb_loop+0x40/0x90 [ 149.261066][ T7100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.266981][ T7100] RIP: 0033:0x7f3e4fb9e0d9 [ 149.271418][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.291045][ T7100] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.299491][ T7100] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 149.307492][ T7100] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 149.315490][ T7100] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 149.323487][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.331481][ T7100] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 149.339498][ T7100] [ 149.777459][ T7110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.430'. [ 149.800406][ T7113] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 149.831907][ T7113] netlink: 156 bytes leftover after parsing attributes in process `syz.3.431'. [ 150.338102][ T7124] netlink: 140 bytes leftover after parsing attributes in process `syz.1.437'. [ 150.424658][ T7129] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.438'. [ 150.503319][ T7135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.441'. [ 152.200685][ T7167] netlink: 'syz.0.452': attribute type 21 has an invalid length. [ 152.209207][ T7167] netlink: 156 bytes leftover after parsing attributes in process `syz.0.452'. [ 152.256003][ T7166] netlink: 140 bytes leftover after parsing attributes in process `syz.3.451'. [ 152.436879][ T7168] sit0: left promiscuous mode [ 152.539460][ T7170] netlink: 'syz.2.453': attribute type 39 has an invalid length. [ 152.747038][ T7174] sit0: entered promiscuous mode [ 154.115294][ T7198] FAULT_INJECTION: forcing a failure. [ 154.115294][ T7198] name failslab, interval 1, probability 0, space 0, times 0 [ 154.145560][ T7198] CPU: 1 PID: 7198 Comm: syz.1.459 Not tainted syzkaller #0 [ 154.152907][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.162992][ T7198] Call Trace: [ 154.166275][ T7198] [ 154.169202][ T7198] dump_stack_lvl+0x18c/0x250 [ 154.173887][ T7198] ? show_regs_print_info+0x20/0x20 [ 154.179082][ T7198] ? load_image+0x420/0x420 [ 154.183583][ T7198] ? __might_sleep+0xe0/0xe0 [ 154.188179][ T7198] ? __lock_acquire+0x7d80/0x7d80 [ 154.193208][ T7198] should_fail_ex+0x394/0x4c0 [ 154.197888][ T7198] should_failslab+0x9/0x20 [ 154.202391][ T7198] slab_pre_alloc_hook+0x59/0x300 [ 154.207419][ T7198] kmem_cache_alloc_node+0x5e/0x310 [ 154.212617][ T7198] ? __alloc_skb+0x103/0x2c0 [ 154.217292][ T7198] __alloc_skb+0x103/0x2c0 [ 154.221708][ T7198] tipc_buf_acquire+0x2b/0xe0 [ 154.226386][ T7198] tipc_msg_build+0x8d4/0xe60 [ 154.231074][ T7198] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 154.237147][ T7198] ? tipc_group_bc_cong+0x15c/0x210 [ 154.242351][ T7198] tipc_send_group_bcast+0x7d8/0xad0 [ 154.247654][ T7198] ? tipc_wait_for_connect+0x650/0x650 [ 154.253124][ T7198] ? wait_woken+0x180/0x180 [ 154.257637][ T7198] __tipc_sendmsg+0x314/0x2b20 [ 154.262491][ T7198] ? __lock_acquire+0x1336/0x7d80 [ 154.267518][ T7198] ? rht_unlock+0x1d0/0x1d0 [ 154.272032][ T7198] ? verify_lock_unused+0x140/0x140 [ 154.277228][ T7198] ? verify_lock_unused+0x140/0x140 [ 154.282432][ T7198] ? perf_trace_lock+0xfc/0x3b0 [ 154.287283][ T7198] ? trace_event_raw_event_lock+0x240/0x240 [ 154.293182][ T7198] ? mark_lock+0x94/0x320 [ 154.297509][ T7198] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 154.303495][ T7198] ? __local_bh_enable_ip+0x13a/0x1c0 [ 154.308862][ T7198] ? lockdep_hardirqs_on+0x98/0x150 [ 154.314063][ T7198] ? __local_bh_enable_ip+0x13a/0x1c0 [ 154.319427][ T7198] ? _local_bh_enable+0xa0/0xa0 [ 154.324278][ T7198] tipc_sendmsg+0x55/0x70 [ 154.328608][ T7198] sock_write_iter+0x2dc/0x420 [ 154.333373][ T7198] ? sock_read_iter+0x3f0/0x3f0 [ 154.338235][ T7198] ? common_file_perm+0x198/0x1f0 [ 154.343267][ T7198] vfs_write+0x474/0x9a0 [ 154.347544][ T7198] ? file_end_write+0x250/0x250 [ 154.352425][ T7198] ? __fget_files+0x3fc/0x460 [ 154.357122][ T7198] ? __fdget_pos+0x1d8/0x330 [ 154.361729][ T7198] ? ksys_write+0x74/0x260 [ 154.366145][ T7198] ksys_write+0x151/0x260 [ 154.370477][ T7198] ? __ia32_sys_read+0x90/0x90 [ 154.375244][ T7198] ? lockdep_hardirqs_on+0x98/0x150 [ 154.380452][ T7198] do_syscall_64+0x55/0xb0 [ 154.384871][ T7198] ? clear_bhb_loop+0x40/0x90 [ 154.389556][ T7198] ? clear_bhb_loop+0x40/0x90 [ 154.394237][ T7198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.400127][ T7198] RIP: 0033:0x7fd71219e0d9 [ 154.404544][ T7198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.424153][ T7198] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.432570][ T7198] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 154.440536][ T7198] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 154.448510][ T7198] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 154.456482][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 154.464449][ T7198] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 154.472437][ T7198] [ 154.623869][ T7202] netlink: 140 bytes leftover after parsing attributes in process `syz.0.463'. [ 154.826750][ T7208] sock: sock_set_timeout: `syz.0.465' (pid 7208) tries to set negative timeout [ 155.176009][ T7214] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.213863][ T7218] netlink: 'syz.3.470': attribute type 21 has an invalid length. [ 155.240801][ T7218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.470'. [ 155.426861][ T7218] sit0: entered allmulticast mode [ 155.520148][ T7219] sit0: entered promiscuous mode [ 155.691321][ T7225] netlink: 140 bytes leftover after parsing attributes in process `syz.2.473'. [ 155.776878][ T7227] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.474'. [ 155.812272][ T7227] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.474'. [ 156.208010][ T7238] netlink: 'syz.2.477': attribute type 21 has an invalid length. [ 156.253327][ T7238] netlink: 156 bytes leftover after parsing attributes in process `syz.2.477'. [ 156.461668][ T7248] FAULT_INJECTION: forcing a failure. [ 156.461668][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.500324][ T7248] CPU: 1 PID: 7248 Comm: syz.2.481 Not tainted syzkaller #0 [ 156.507691][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 156.517773][ T7248] Call Trace: [ 156.521081][ T7248] [ 156.524023][ T7248] dump_stack_lvl+0x18c/0x250 [ 156.528736][ T7248] ? show_regs_print_info+0x20/0x20 [ 156.533962][ T7248] ? load_image+0x420/0x420 [ 156.538486][ T7248] ? __might_fault+0xaa/0x120 [ 156.543177][ T7248] ? __lock_acquire+0x7d80/0x7d80 [ 156.548220][ T7248] ? __virt_addr_valid+0x10c/0x380 [ 156.553351][ T7248] should_fail_ex+0x394/0x4c0 [ 156.558074][ T7248] _copy_to_user+0x2f/0xa0 [ 156.562494][ T7248] bpf_verifier_vlog+0x4e6/0x840 [ 156.567443][ T7248] __btf_verifier_log+0xe3/0x140 [ 156.572389][ T7248] ? btf_check_sec_info+0x350/0x350 [ 156.577595][ T7248] ? __lock_acquire+0x7d80/0x7d80 [ 156.582619][ T7248] ? __virt_addr_valid+0x10c/0x380 [ 156.587755][ T7248] ? btf_parse_hdr+0x1f0/0x700 [ 156.592543][ T7248] btf_parse_hdr+0x3ee/0x700 [ 156.597149][ T7248] btf_new_fd+0x397/0x9e0 [ 156.601492][ T7248] ? bpf_btf_show_fdinfo+0x80/0x80 [ 156.606614][ T7248] ? capable+0x88/0xe0 [ 156.610689][ T7248] __sys_bpf+0x670/0x890 [ 156.614933][ T7248] ? bpf_link_show_fdinfo+0x390/0x390 [ 156.620313][ T7248] ? lock_chain_count+0x20/0x20 [ 156.625170][ T7248] __x64_sys_bpf+0x7c/0x90 [ 156.629588][ T7248] do_syscall_64+0x55/0xb0 [ 156.634003][ T7248] ? clear_bhb_loop+0x40/0x90 [ 156.638687][ T7248] ? clear_bhb_loop+0x40/0x90 [ 156.643369][ T7248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.649264][ T7248] RIP: 0033:0x7f5f8039e0d9 [ 156.653684][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.673296][ T7248] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.681713][ T7248] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 156.689697][ T7248] RDX: 0000000000000028 RSI: 0000200000000c80 RDI: 0000000000000012 [ 156.697669][ T7248] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 156.705641][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.713611][ T7248] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 156.721595][ T7248] [ 156.830570][ T7251] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.480'. [ 156.972304][ T7254] netlink: 140 bytes leftover after parsing attributes in process `syz.3.483'. [ 157.422633][ T7262] netlink: 'syz.2.485': attribute type 21 has an invalid length. [ 157.452822][ T7262] netlink: 156 bytes leftover after parsing attributes in process `syz.2.485'. [ 158.359121][ T7267] sit0: entered allmulticast mode [ 158.374425][ T7271] sit0: entered promiscuous mode [ 158.423799][ T7274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.488'. [ 158.464628][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.606663][ T7280] netlink: 'syz.0.491': attribute type 10 has an invalid length. [ 158.618718][ T7280] team0: Device wg1 is up. Set it down before adding it as a team port [ 159.221736][ T7286] syzkaller0: entered promiscuous mode [ 159.227272][ T7286] syzkaller0: entered allmulticast mode [ 159.507006][ T7304] netlink: 'syz.0.500': attribute type 39 has an invalid length. [ 159.693110][ T7311] netlink: 'syz.2.502': attribute type 1 has an invalid length. [ 159.745087][ T7311] netlink: 'syz.2.502': attribute type 3 has an invalid length. [ 159.778183][ T7311] __nla_validate_parse: 2 callbacks suppressed [ 159.778200][ T7311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.502'. [ 162.215942][ T5084] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 162.217388][ T5084] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 164.250624][ T5084] Bluetooth: hci3: command tx timeout [ 166.333172][ T5084] Bluetooth: hci3: command tx timeout [ 166.784987][ T7326] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 166.795921][ T7326] batman_adv: batadv0: Adding interface: netdevsim0 [ 166.802616][ T7326] batman_adv: batadv0: Interface activated: netdevsim0 [ 166.810082][ T7330] netlink: 140 bytes leftover after parsing attributes in process `syz.0.507'. [ 166.840606][ T7333] netlink: 140 bytes leftover after parsing attributes in process `syz.2.508'. [ 167.164009][ T7344] netlink: 'syz.3.512': attribute type 39 has an invalid length. [ 167.360099][ T7346] netlink: 140 bytes leftover after parsing attributes in process `syz.0.520'. [ 167.858688][ T7355] Dead loop on virtual device ip6_vti0, fix it urgently! [ 167.916949][ T7353] netlink: 'syz.0.514': attribute type 21 has an invalid length. [ 168.301986][ T7366] netlink: 830 bytes leftover after parsing attributes in process `syz.1.509'. [ 168.440647][ T7369] syzkaller0: entered promiscuous mode [ 168.446264][ T7369] syzkaller0: entered allmulticast mode [ 168.516033][ T7372] netlink: 140 bytes leftover after parsing attributes in process `syz.1.521'. [ 170.519565][ T7380] netlink: 140 bytes leftover after parsing attributes in process `syz.3.523'. [ 170.735490][ T7407] Dead loop on virtual device ip6_vti0, fix it urgently! [ 170.811233][ T7413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.536'. [ 170.916597][ T7415] FAULT_INJECTION: forcing a failure. [ 170.916597][ T7415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.979545][ T7415] CPU: 0 PID: 7415 Comm: syz.2.537 Not tainted syzkaller #0 [ 170.986890][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.996968][ T7415] Call Trace: [ 171.000262][ T7415] [ 171.003206][ T7415] dump_stack_lvl+0x18c/0x250 [ 171.007917][ T7415] ? show_regs_print_info+0x20/0x20 [ 171.013148][ T7415] ? load_image+0x420/0x420 [ 171.017681][ T7415] ? __might_fault+0xaa/0x120 [ 171.022386][ T7415] ? __lock_acquire+0x7d80/0x7d80 [ 171.027433][ T7415] ? __virt_addr_valid+0x10c/0x380 [ 171.032575][ T7415] should_fail_ex+0x394/0x4c0 [ 171.037272][ T7415] _copy_from_user+0x2f/0xe0 [ 171.041899][ T7415] generic_map_update_batch+0x53e/0x800 [ 171.047480][ T7415] ? rcu_read_unlock+0xa0/0xa0 [ 171.052445][ T7415] ? __fdget+0x180/0x210 [ 171.056800][ T7415] ? rcu_read_unlock+0xa0/0xa0 [ 171.061574][ T7415] bpf_map_do_batch+0x3f2/0x600 [ 171.066433][ T7415] ? bpf_lsm_audit_rule_match+0x10/0x10 [ 171.071985][ T7415] __sys_bpf+0x381/0x890 [ 171.076235][ T7415] ? bpf_link_show_fdinfo+0x390/0x390 [ 171.081716][ T7415] ? lock_chain_count+0x20/0x20 [ 171.086586][ T7415] __x64_sys_bpf+0x7c/0x90 [ 171.091089][ T7415] do_syscall_64+0x55/0xb0 [ 171.095517][ T7415] ? clear_bhb_loop+0x40/0x90 [ 171.100194][ T7415] ? clear_bhb_loop+0x40/0x90 [ 171.104959][ T7415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.110850][ T7415] RIP: 0033:0x7f5f8039e0d9 [ 171.115309][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.134920][ T7415] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.143363][ T7415] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 171.151337][ T7415] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 171.159309][ T7415] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 171.167278][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.175247][ T7415] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 171.183230][ T7415] [ 171.347464][ T7425] netlink: 'syz.3.540': attribute type 10 has an invalid length. [ 171.380915][ T7425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.540'. [ 171.611744][ T7436] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.544'. [ 171.801804][ T7447] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.548'. [ 171.808617][ T7444] Dead loop on virtual device ip6_vti0, fix it urgently! [ 171.817357][ T7447] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.407873][ T7472] FAULT_INJECTION: forcing a failure. [ 172.407873][ T7472] name failslab, interval 1, probability 0, space 0, times 0 [ 172.431654][ T7472] CPU: 1 PID: 7472 Comm: syz.0.556 Not tainted syzkaller #0 [ 172.439016][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.449166][ T7472] Call Trace: [ 172.452444][ T7472] [ 172.455379][ T7472] dump_stack_lvl+0x18c/0x250 [ 172.460069][ T7472] ? show_regs_print_info+0x20/0x20 [ 172.465270][ T7472] ? load_image+0x420/0x420 [ 172.469780][ T7472] ? __lock_acquire+0x7d80/0x7d80 [ 172.474807][ T7472] ? mark_lock+0x94/0x320 [ 172.479144][ T7472] should_fail_ex+0x394/0x4c0 [ 172.483829][ T7472] should_failslab+0x9/0x20 [ 172.488337][ T7472] slab_pre_alloc_hook+0x59/0x300 [ 172.493375][ T7472] ? trace_event_raw_event_lock+0x240/0x240 [ 172.499274][ T7472] ? iovec_from_user+0x87/0x240 [ 172.504148][ T7472] ? iovec_from_user+0x87/0x240 [ 172.509007][ T7472] __kmem_cache_alloc_node+0x53/0x250 [ 172.514392][ T7472] ? iovec_from_user+0x87/0x240 [ 172.519258][ T7472] __kmalloc+0xa7/0x240 [ 172.523441][ T7472] iovec_from_user+0x87/0x240 [ 172.528132][ T7472] __import_iovec+0x13d/0x850 [ 172.532833][ T7472] ? __might_fault+0xaa/0x120 [ 172.537513][ T7472] import_iovec+0x73/0xa0 [ 172.541854][ T7472] ___sys_recvmsg+0x4b6/0x590 [ 172.546541][ T7472] ? __sys_recvmsg+0x2a0/0x2a0 [ 172.551314][ T7472] ? ksys_write+0x1d2/0x260 [ 172.555835][ T7472] ? __fget_files+0x3fc/0x460 [ 172.560529][ T7472] __x64_sys_recvmsg+0x21e/0x2f0 [ 172.565468][ T7472] ? perf_trace_preemptirq_template+0x269/0x330 [ 172.571718][ T7472] ? ___sys_recvmsg+0x590/0x590 [ 172.576591][ T7472] ? lockdep_hardirqs_on+0x98/0x150 [ 172.581820][ T7472] do_syscall_64+0x55/0xb0 [ 172.586268][ T7472] ? clear_bhb_loop+0x40/0x90 [ 172.590955][ T7472] ? clear_bhb_loop+0x40/0x90 [ 172.595639][ T7472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.601534][ T7472] RIP: 0033:0x7f3e4fb9e0d9 [ 172.605951][ T7472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.625561][ T7472] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 172.633985][ T7472] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 172.641962][ T7472] RDX: 0000000040020000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 172.649930][ T7472] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 172.657900][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.665870][ T7472] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 172.673887][ T7472] [ 172.855659][ T7483] netlink: 14 bytes leftover after parsing attributes in process `syz.1.560'. [ 172.930648][ T7487] FAULT_INJECTION: forcing a failure. [ 172.930648][ T7487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.966135][ T7487] CPU: 0 PID: 7487 Comm: syz.2.562 Not tainted syzkaller #0 [ 172.973482][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.983560][ T7487] Call Trace: [ 172.986863][ T7487] [ 172.989813][ T7487] dump_stack_lvl+0x18c/0x250 [ 172.994529][ T7487] ? show_regs_print_info+0x20/0x20 [ 172.999760][ T7487] ? load_image+0x420/0x420 [ 173.004296][ T7487] ? __lock_acquire+0x7d80/0x7d80 [ 173.009345][ T7487] should_fail_ex+0x394/0x4c0 [ 173.014143][ T7487] _copy_from_user+0x2f/0xe0 [ 173.018750][ T7487] __copy_msghdr+0x388/0x560 [ 173.023365][ T7487] ___sys_sendmsg+0x214/0x360 [ 173.028057][ T7487] ? get_pid_task+0x20/0x1e0 [ 173.032664][ T7487] ? __sys_sendmsg+0x2b0/0x2b0 [ 173.037455][ T7487] ? __lock_acquire+0x7d80/0x7d80 [ 173.042509][ T7487] __se_sys_sendmsg+0x1d0/0x2c0 [ 173.047378][ T7487] ? __x64_sys_sendmsg+0x80/0x80 [ 173.052337][ T7487] ? lockdep_hardirqs_on+0x98/0x150 [ 173.057554][ T7487] do_syscall_64+0x55/0xb0 [ 173.061978][ T7487] ? clear_bhb_loop+0x40/0x90 [ 173.066662][ T7487] ? clear_bhb_loop+0x40/0x90 [ 173.071352][ T7487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.077276][ T7487] RIP: 0033:0x7f5f8039e0d9 [ 173.081722][ T7487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.101357][ T7487] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.109806][ T7487] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 173.117794][ T7487] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 173.125795][ T7487] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 173.133788][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.141773][ T7487] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 173.149774][ T7487] [ 176.558599][ T7507] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.573'. [ 177.700894][ T7533] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 177.708790][ T7533] netlink: 152 bytes leftover after parsing attributes in process `syz.2.579'. [ 178.096355][ T7547] FAULT_INJECTION: forcing a failure. [ 178.096355][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.110788][ T7547] CPU: 1 PID: 7547 Comm: syz.2.584 Not tainted syzkaller #0 [ 178.118112][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.128182][ T7547] Call Trace: [ 178.131460][ T7547] [ 178.134391][ T7547] dump_stack_lvl+0x18c/0x250 [ 178.139074][ T7547] ? show_regs_print_info+0x20/0x20 [ 178.144268][ T7547] ? load_image+0x420/0x420 [ 178.148768][ T7547] ? __might_fault+0xaa/0x120 [ 178.153445][ T7547] ? __lock_acquire+0x7d80/0x7d80 [ 178.158467][ T7547] should_fail_ex+0x394/0x4c0 [ 178.163145][ T7547] _copy_from_iter+0x1cd/0x1290 [ 178.167993][ T7547] ? __might_fault+0xaa/0x120 [ 178.172669][ T7547] ? copyout_mc+0x70/0x70 [ 178.176997][ T7547] ? copyout_mc+0x70/0x70 [ 178.181325][ T7547] ? __virt_addr_valid+0x10c/0x380 [ 178.186440][ T7547] ? page_copy_sane+0x16a/0x270 [ 178.191291][ T7547] copy_page_from_iter+0x7b/0x100 [ 178.196313][ T7547] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 178.202131][ T7547] tun_get_user+0xc84/0x3d70 [ 178.206726][ T7547] ? aa_file_perm+0x3e3/0xee0 [ 178.211405][ T7547] ? rcu_read_unlock+0xa0/0xa0 [ 178.216170][ T7547] ? tun_get+0x1c/0x2e0 [ 178.220326][ T7547] ? __lock_acquire+0x7d80/0x7d80 [ 178.225352][ T7547] ? tun_get+0x1c/0x2e0 [ 178.229506][ T7547] tun_chr_write_iter+0x119/0x200 [ 178.234532][ T7547] vfs_write+0x474/0x9a0 [ 178.238781][ T7547] ? file_end_write+0x250/0x250 [ 178.243631][ T7547] ? __fget_files+0x3fc/0x460 [ 178.248315][ T7547] ? __fdget_pos+0x1d8/0x330 [ 178.252904][ T7547] ? ksys_write+0x74/0x260 [ 178.257323][ T7547] ksys_write+0x151/0x260 [ 178.261656][ T7547] ? __ia32_sys_read+0x90/0x90 [ 178.266426][ T7547] ? lockdep_hardirqs_on+0x98/0x150 [ 178.271624][ T7547] do_syscall_64+0x55/0xb0 [ 178.276055][ T7547] ? clear_bhb_loop+0x40/0x90 [ 178.280735][ T7547] ? clear_bhb_loop+0x40/0x90 [ 178.285426][ T7547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.291314][ T7547] RIP: 0033:0x7f5f8039e0d9 [ 178.295726][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.315335][ T7547] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 178.323748][ T7547] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 178.331719][ T7547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 178.339865][ T7547] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 178.347854][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.355921][ T7547] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 178.363906][ T7547] [ 178.522241][ T7550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.039903][ T7555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.588'. [ 179.748734][ T7566] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.592'. [ 180.500970][ T7586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.600'. [ 180.509993][ T7586] FAULT_INJECTION: forcing a failure. [ 180.509993][ T7586] name failslab, interval 1, probability 0, space 0, times 0 [ 180.530359][ T7586] CPU: 1 PID: 7586 Comm: syz.0.600 Not tainted syzkaller #0 [ 180.537722][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.547806][ T7586] Call Trace: [ 180.551106][ T7586] [ 180.554054][ T7586] dump_stack_lvl+0x18c/0x250 [ 180.558760][ T7586] ? show_regs_print_info+0x20/0x20 [ 180.563983][ T7586] ? load_image+0x420/0x420 [ 180.568505][ T7586] ? __might_sleep+0xe0/0xe0 [ 180.573125][ T7586] ? __lock_acquire+0x7d80/0x7d80 [ 180.578181][ T7586] should_fail_ex+0x394/0x4c0 [ 180.582897][ T7586] should_failslab+0x9/0x20 [ 180.587438][ T7586] slab_pre_alloc_hook+0x59/0x300 [ 180.592498][ T7586] ? lockdep_hardirqs_on+0x98/0x150 [ 180.597735][ T7586] kmem_cache_alloc_node+0x5e/0x310 [ 180.602968][ T7586] ? __alloc_skb+0x103/0x2c0 [ 180.607592][ T7586] __alloc_skb+0x103/0x2c0 [ 180.612035][ T7586] netlink_ack+0x377/0x1160 [ 180.616575][ T7586] ? netlink_dump+0xec0/0xec0 [ 180.621271][ T7586] ? ref_tracker_free+0x686/0x830 [ 180.626323][ T7586] netlink_rcv_skb+0x2b3/0x4c0 [ 180.631110][ T7586] ? rtnetlink_bind+0x80/0x80 [ 180.635805][ T7586] ? netlink_ack+0x1160/0x1160 [ 180.640596][ T7586] ? __lock_acquire+0x7d80/0x7d80 [ 180.645649][ T7586] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.650870][ T7586] netlink_unicast+0x7b1/0x930 [ 180.655661][ T7586] netlink_sendmsg+0x8d0/0xbf0 [ 180.660453][ T7586] ? netlink_getsockopt+0x590/0x590 [ 180.665676][ T7586] ? apparmor_socket_sendmsg+0x8e/0x330 [ 180.671245][ T7586] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 180.676583][ T7586] ? security_socket_sendmsg+0x80/0xa0 [ 180.682066][ T7586] ? netlink_getsockopt+0x590/0x590 [ 180.687290][ T7586] ____sys_sendmsg+0x61b/0x980 [ 180.692081][ T7586] ? __asan_memset+0x22/0x40 [ 180.696695][ T7586] ? __sys_sendmsg_sock+0x30/0x30 [ 180.701736][ T7586] ? __import_iovec+0x5f2/0x850 [ 180.706615][ T7586] ? import_iovec+0x73/0xa0 [ 180.711196][ T7586] ___sys_sendmsg+0x2a6/0x360 [ 180.715902][ T7586] ? get_pid_task+0x20/0x1e0 [ 180.720523][ T7586] ? __sys_sendmsg+0x2b0/0x2b0 [ 180.725328][ T7586] ? __lock_acquire+0x7d80/0x7d80 [ 180.730395][ T7586] __se_sys_sendmsg+0x1d0/0x2c0 [ 180.735279][ T7586] ? __x64_sys_sendmsg+0x80/0x80 [ 180.740287][ T7586] ? lockdep_hardirqs_on+0x98/0x150 [ 180.745548][ T7586] do_syscall_64+0x55/0xb0 [ 180.750016][ T7586] ? clear_bhb_loop+0x40/0x90 [ 180.754711][ T7586] ? clear_bhb_loop+0x40/0x90 [ 180.759423][ T7586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.765349][ T7586] RIP: 0033:0x7f3e4fb9e0d9 [ 180.769784][ T7586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.789422][ T7586] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.798127][ T7586] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 180.806123][ T7586] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 180.814114][ T7586] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 180.822119][ T7586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.830112][ T7586] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 180.838121][ T7586] [ 181.437579][ T7604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.606'. [ 181.779864][ T7616] FAULT_INJECTION: forcing a failure. [ 181.779864][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 181.837880][ T7616] CPU: 0 PID: 7616 Comm: syz.1.610 Not tainted syzkaller #0 [ 181.845238][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.855320][ T7616] Call Trace: [ 181.858615][ T7616] [ 181.861556][ T7616] dump_stack_lvl+0x18c/0x250 [ 181.866258][ T7616] ? show_regs_print_info+0x20/0x20 [ 181.871468][ T7616] ? load_image+0x420/0x420 [ 181.875975][ T7616] ? perf_trace_lock_acquire+0x105/0x400 [ 181.881612][ T7616] should_fail_ex+0x394/0x4c0 [ 181.886297][ T7616] should_failslab+0x9/0x20 [ 181.890806][ T7616] slab_pre_alloc_hook+0x59/0x300 [ 181.895855][ T7616] kmem_cache_alloc+0x5a/0x2c0 [ 181.900638][ T7616] ? skb_clone+0x1eb/0x370 [ 181.905071][ T7616] skb_clone+0x1eb/0x370 [ 181.909322][ T7616] __netlink_deliver_tap+0x411/0x7f0 [ 181.914623][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.919823][ T7616] netlink_deliver_tap+0x19c/0x1b0 [ 181.924938][ T7616] netlink_dump+0x95b/0xec0 [ 181.929455][ T7616] ? netlink_lookup+0x200/0x200 [ 181.934318][ T7616] ? __kasan_kmalloc+0x8f/0xa0 [ 181.939090][ T7616] ? __inet_diag_dump_start+0x886/0x9f0 [ 181.944650][ T7616] ? netlink_lookup+0x30/0x200 [ 181.949686][ T7616] __netlink_dump_start+0x57c/0x7a0 [ 181.954893][ T7616] inet_diag_rcv_msg_compat+0x215/0x440 [ 181.960444][ T7616] ? __inet_diag_dump+0x380/0x380 [ 181.965476][ T7616] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 181.970531][ T7616] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 181.976252][ T7616] ? inet_diag_dump_start_compat+0x20/0x20 [ 181.982140][ T7616] ? inet_diag_dump+0x50/0x50 [ 181.986852][ T7616] ? __inet_diag_dump+0x380/0x380 [ 181.991904][ T7616] sock_diag_rcv_msg+0x3d3/0x5f0 [ 181.996853][ T7616] netlink_rcv_skb+0x235/0x4c0 [ 182.001620][ T7616] ? sock_diag_bind+0xb0/0xb0 [ 182.006512][ T7616] ? netlink_ack+0x1160/0x1160 [ 182.011288][ T7616] ? __lock_acquire+0x7d80/0x7d80 [ 182.016493][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.021691][ T7616] sock_diag_rcv+0x2a/0x40 [ 182.026140][ T7616] netlink_unicast+0x7b1/0x930 [ 182.030922][ T7616] netlink_sendmsg+0x8d0/0xbf0 [ 182.035813][ T7616] ? netlink_getsockopt+0x590/0x590 [ 182.041022][ T7616] ? apparmor_socket_sendmsg+0x8e/0x330 [ 182.046691][ T7616] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 182.052279][ T7616] ? security_socket_sendmsg+0x80/0xa0 [ 182.057745][ T7616] ? netlink_getsockopt+0x590/0x590 [ 182.063063][ T7616] ____sys_sendmsg+0x61b/0x980 [ 182.067852][ T7616] ? __asan_memset+0x22/0x40 [ 182.072477][ T7616] ? __sys_sendmsg_sock+0x30/0x30 [ 182.077593][ T7616] ? __import_iovec+0x5f2/0x850 [ 182.082744][ T7616] ? import_iovec+0x73/0xa0 [ 182.087292][ T7616] ___sys_sendmsg+0x2a6/0x360 [ 182.091975][ T7616] ? get_pid_task+0x20/0x1e0 [ 182.096572][ T7616] ? __sys_sendmsg+0x2b0/0x2b0 [ 182.101352][ T7616] ? __lock_acquire+0x7d80/0x7d80 [ 182.106924][ T7616] __se_sys_sendmsg+0x1d0/0x2c0 [ 182.111784][ T7616] ? __x64_sys_sendmsg+0x80/0x80 [ 182.116824][ T7616] ? lockdep_hardirqs_on+0x98/0x150 [ 182.122029][ T7616] do_syscall_64+0x55/0xb0 [ 182.126447][ T7616] ? clear_bhb_loop+0x40/0x90 [ 182.131126][ T7616] ? clear_bhb_loop+0x40/0x90 [ 182.135809][ T7616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.141702][ T7616] RIP: 0033:0x7fd71219e0d9 [ 182.146120][ T7616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.165726][ T7616] RSP: 002b:00007fd713006028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.174143][ T7616] RAX: ffffffffffffffda RBX: 00007fd712426090 RCX: 00007fd71219e0d9 [ 182.182118][ T7616] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 182.190091][ T7616] RBP: 00007fd713006090 R08: 0000000000000000 R09: 0000000000000000 [ 182.198063][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.206560][ T7616] R13: 00007fd712426128 R14: 00007fd712426090 R15: 00007ffc7c7818d8 [ 182.214635][ T7616] [ 182.342482][ T7622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.630077][ T7632] netlink: 'syz.3.617': attribute type 3 has an invalid length. [ 182.646120][ T7632] netlink: 'syz.3.617': attribute type 16 has an invalid length. [ 182.665752][ T7632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 182.999688][ T7645] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.621'. [ 183.028565][ T7645] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.621'. [ 184.521092][ T7649] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.623'. [ 184.657641][ T7649] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 185.003105][ T7662] netlink: 'syz.1.628': attribute type 28 has an invalid length. [ 185.122984][ T7668] netlink: 'syz.3.631': attribute type 39 has an invalid length. [ 185.346299][ T7670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 185.408687][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'. [ 185.431282][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.571109][ T7670] bridge_slave_0 (unregistering): left allmulticast mode [ 185.578371][ T7670] bridge_slave_0 (unregistering): left promiscuous mode [ 185.587045][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.729628][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.634'. [ 185.751654][ T7685] netlink: 'syz.2.634': attribute type 25 has an invalid length. [ 185.760031][ T7685] netlink: 'syz.2.634': attribute type 9 has an invalid length. [ 185.768167][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.2.634'. [ 186.220009][ T7690] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.636'. [ 186.809307][ T7690] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 187.159466][ T7718] FAULT_INJECTION: forcing a failure. [ 187.159466][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.176193][ T7718] CPU: 0 PID: 7718 Comm: syz.0.646 Not tainted syzkaller #0 [ 187.183531][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 187.193609][ T7718] Call Trace: [ 187.196909][ T7718] [ 187.199852][ T7718] dump_stack_lvl+0x18c/0x250 [ 187.204560][ T7718] ? show_regs_print_info+0x20/0x20 [ 187.209782][ T7718] ? load_image+0x420/0x420 [ 187.214310][ T7718] ? __might_fault+0xaa/0x120 [ 187.219009][ T7718] ? __lock_acquire+0x7d80/0x7d80 [ 187.224061][ T7718] should_fail_ex+0x394/0x4c0 [ 187.228768][ T7718] _copy_from_user+0x2f/0xe0 [ 187.233386][ T7718] __sys_bpf+0x23e/0x890 [ 187.237649][ T7718] ? bpf_link_show_fdinfo+0x390/0x390 [ 187.243055][ T7718] ? lock_chain_count+0x20/0x20 [ 187.247934][ T7718] __x64_sys_bpf+0x7c/0x90 [ 187.252382][ T7718] do_syscall_64+0x55/0xb0 [ 187.256821][ T7718] ? clear_bhb_loop+0x40/0x90 [ 187.261524][ T7718] ? clear_bhb_loop+0x40/0x90 [ 187.266226][ T7718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.272137][ T7718] RIP: 0033:0x7f3e4fb9e0d9 [ 187.276569][ T7718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.296198][ T7718] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.304642][ T7718] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 187.312635][ T7718] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 187.320625][ T7718] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 187.328620][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.336609][ T7718] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 187.344628][ T7718] [ 187.832861][ T7723] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.648'. [ 187.963481][ T7728] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.649'. [ 188.050467][ T7728] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.649'. [ 188.087172][ T7728] tipc: Started in network mode [ 188.092952][ T7728] tipc: Node identity b, cluster identity 57 [ 188.106795][ T7728] tipc: Node number set to 11 [ 188.583373][ T7747] FAULT_INJECTION: forcing a failure. [ 188.583373][ T7747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.643135][ T7747] CPU: 1 PID: 7747 Comm: syz.1.657 Not tainted syzkaller #0 [ 188.650512][ T7747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.660617][ T7747] Call Trace: [ 188.663941][ T7747] [ 188.665065][ T7746] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.657'. [ 188.666883][ T7747] dump_stack_lvl+0x18c/0x250 [ 188.666953][ T7747] ? show_regs_print_info+0x20/0x20 [ 188.666985][ T7747] ? load_image+0x420/0x420 [ 188.667020][ T7747] ? __might_fault+0xaa/0x120 [ 188.667053][ T7747] ? __lock_acquire+0x7d80/0x7d80 [ 188.667099][ T7747] should_fail_ex+0x394/0x4c0 [ 188.667148][ T7747] _copy_from_user+0x2f/0xe0 [ 188.667178][ T7747] kstrtouint_from_user+0xde/0x170 [ 188.714871][ T7747] ? kstrtol_from_user+0x190/0x190 [ 188.720091][ T7747] proc_fail_nth_write+0x8f/0x250 [ 188.725179][ T7747] ? proc_fail_nth_read+0x260/0x260 [ 188.730458][ T7747] ? proc_fail_nth_read+0x260/0x260 [ 188.735716][ T7747] vfs_write+0x299/0x9a0 [ 188.740035][ T7747] ? file_end_write+0x250/0x250 [ 188.744954][ T7747] ? __fget_files+0x28/0x460 [ 188.749587][ T7747] ? __fget_files+0x3fc/0x460 [ 188.754354][ T7747] ? __fdget_pos+0x2a3/0x330 [ 188.758986][ T7747] ? ksys_write+0x74/0x260 [ 188.763472][ T7747] ksys_write+0x151/0x260 [ 188.767864][ T7747] ? __ia32_sys_read+0x90/0x90 [ 188.772710][ T7747] ? lockdep_hardirqs_on+0x98/0x150 [ 188.777975][ T7747] do_syscall_64+0x55/0xb0 [ 188.782436][ T7747] ? clear_bhb_loop+0x40/0x90 [ 188.787160][ T7747] ? clear_bhb_loop+0x40/0x90 [ 188.791902][ T7747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.797842][ T7747] RIP: 0033:0x7fd71215e90e [ 188.802301][ T7747] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.821967][ T7747] RSP: 002b:00007fd713005fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 188.830437][ T7747] RAX: ffffffffffffffda RBX: 00007fd7130066c0 RCX: 00007fd71215e90e [ 188.838459][ T7747] RDX: 0000000000000001 RSI: 00007fd7130060a0 RDI: 0000000000000005 [ 188.846483][ T7747] RBP: 00007fd713006090 R08: 0000000000000000 R09: 0000000000000000 [ 188.854502][ T7747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.862558][ T7747] R13: 00007fd712426128 R14: 00007fd712426090 R15: 00007ffc7c7818d8 [ 188.870640][ T7747] [ 189.190488][ T7752] delete_channel: no stack [ 190.031888][ T7773] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.664'. [ 190.302675][ T7772] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.662'. [ 191.453221][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 191.461141][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 191.461657][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 191.467167][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 191.581531][ T7806] netlink: 'syz.2.676': attribute type 29 has an invalid length. [ 191.727166][ T7806] netlink: 'syz.2.676': attribute type 29 has an invalid length. [ 193.922622][ T7877] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 193.946357][ T7877] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.698'. [ 194.043509][ T7874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.694'. [ 194.497027][ T7904] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.701'. [ 194.516501][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.516612][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.580570][ T7906] netlink: 132 bytes leftover after parsing attributes in process `syz.1.702'. [ 194.601169][ T7904] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.701'. [ 194.661906][ T7904] tipc: Started in network mode [ 194.666858][ T7904] tipc: Node identity b, cluster identity 57 [ 194.730878][ T7904] tipc: Node number set to 11 [ 196.144197][ T7915] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 196.163634][ T7915] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 196.265497][ T7932] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.711'. [ 196.367675][ T7935] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 196.400386][ T7935] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.711'. [ 196.577389][ T7945] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.714'. [ 196.898095][ T7951] netlink: 'syz.1.717': attribute type 10 has an invalid length. [ 197.096779][ T7954] FAULT_INJECTION: forcing a failure. [ 197.096779][ T7954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.130525][ T7954] CPU: 1 PID: 7954 Comm: syz.0.718 Not tainted syzkaller #0 [ 197.137870][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.147949][ T7954] Call Trace: [ 197.151246][ T7954] [ 197.154189][ T7954] dump_stack_lvl+0x18c/0x250 [ 197.158893][ T7954] ? show_regs_print_info+0x20/0x20 [ 197.164119][ T7954] ? load_image+0x420/0x420 [ 197.168641][ T7954] ? __might_fault+0xaa/0x120 [ 197.173347][ T7954] ? __lock_acquire+0x7d80/0x7d80 [ 197.178399][ T7954] should_fail_ex+0x394/0x4c0 [ 197.183110][ T7954] _copy_from_iter+0x1cd/0x1290 [ 197.187984][ T7954] ? rep_movs_alternative+0x4a/0x90 [ 197.193211][ T7954] ? copyout_mc+0x70/0x70 [ 197.197568][ T7954] ? copyout_mc+0x70/0x70 [ 197.201918][ T7954] ? __virt_addr_valid+0x10c/0x380 [ 197.207316][ T7954] ? page_copy_sane+0x16a/0x270 [ 197.212203][ T7954] copy_page_from_iter+0x7b/0x100 [ 197.217257][ T7954] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 197.223115][ T7954] unix_stream_sendmsg+0x562/0xbf0 [ 197.228266][ T7954] ? unix_show_fdinfo+0x280/0x280 [ 197.233316][ T7954] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 197.239774][ T7954] ? apparmor_socket_sendmsg+0x8e/0x330 [ 197.245354][ T7954] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 197.250664][ T7954] ? security_socket_sendmsg+0x80/0xa0 [ 197.256152][ T7954] ? unix_show_fdinfo+0x280/0x280 [ 197.261231][ T7954] ____sys_sendmsg+0x61b/0x980 [ 197.266028][ T7954] ? __asan_memset+0x22/0x40 [ 197.270651][ T7954] ? __sys_sendmsg_sock+0x30/0x30 [ 197.275695][ T7954] ? __import_iovec+0x5f2/0x850 [ 197.280583][ T7954] ? import_iovec+0x73/0xa0 [ 197.285118][ T7954] ___sys_sendmsg+0x2a6/0x360 [ 197.289824][ T7954] ? get_pid_task+0x20/0x1e0 [ 197.294447][ T7954] ? __sys_sendmsg+0x2b0/0x2b0 [ 197.299254][ T7954] ? __lock_acquire+0x7d80/0x7d80 [ 197.304335][ T7954] __se_sys_sendmsg+0x1d0/0x2c0 [ 197.309217][ T7954] ? __x64_sys_sendmsg+0x80/0x80 [ 197.314195][ T7954] ? lockdep_hardirqs_on+0x98/0x150 [ 197.319423][ T7954] do_syscall_64+0x55/0xb0 [ 197.323860][ T7954] ? clear_bhb_loop+0x40/0x90 [ 197.328567][ T7954] ? clear_bhb_loop+0x40/0x90 [ 197.333273][ T7954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.339194][ T7954] RIP: 0033:0x7f3e4fb9e0d9 [ 197.343634][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.363264][ T7954] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.371711][ T7954] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 197.379708][ T7954] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 197.387707][ T7954] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 197.395704][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 197.403702][ T7954] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 197.411716][ T7954] [ 197.748918][ T7951] team0: Port device geneve1 removed [ 197.897987][ T7959] netlink: 'syz.3.719': attribute type 21 has an invalid length. [ 197.970489][ T7959] netlink: 156 bytes leftover after parsing attributes in process `syz.3.719'. [ 198.182682][ T7955] delete_channel: no stack [ 198.675809][ T7977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.725'. [ 198.733622][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.041783][ T7977] bridge_slave_0 (unregistering): left allmulticast mode [ 199.061059][ T7977] bridge_slave_0 (unregistering): left promiscuous mode [ 199.086269][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.231457][ T7979] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 199.239409][ T7979] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 199.262536][ T7979] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 199.281055][ T7979] batman_adv: batadv0: Removing interface: netdevsim0 [ 199.312646][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 199.482521][ T7990] netlink: 'syz.1.731': attribute type 1 has an invalid length. [ 199.573378][ T7990] netlink: 830 bytes leftover after parsing attributes in process `syz.1.731'. [ 200.164510][ T8015] netlink: 10 bytes leftover after parsing attributes in process `syz.1.741'. [ 200.458430][ T8025] netlink: 'syz.3.745': attribute type 21 has an invalid length. [ 200.689906][ T8037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.697468][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 200.705010][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 200.712450][ T8037] IPv6: NLM_F_CREATE should be set when creating new route [ 200.752377][ T8039] sctp: [Deprecated]: syz.1.747 (pid 8039) Use of int in maxseg socket option. [ 200.752377][ T8039] Use struct sctp_assoc_value instead [ 200.774319][ T8044] netlink: 'syz.3.750': attribute type 9 has an invalid length. [ 200.880450][ T8044] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.750'. [ 201.538924][ T8050] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.760'. [ 201.626115][ T8050] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 201.640500][ T8050] CPU: 1 PID: 8050 Comm: syz.1.760 Not tainted syzkaller #0 [ 201.647852][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.657938][ T8050] Call Trace: [ 201.661246][ T8050] [ 201.664196][ T8050] dump_stack_lvl+0x18c/0x250 [ 201.668920][ T8050] ? show_regs_print_info+0x20/0x20 [ 201.674163][ T8050] ? load_image+0x420/0x420 [ 201.678715][ T8050] sysfs_warn_dup+0x8e/0xa0 [ 201.683256][ T8050] sysfs_do_create_link_sd+0xc0/0x110 [ 201.688664][ T8050] device_add_class_symlinks+0x1cf/0x240 [ 201.694341][ T8050] device_add+0x4f9/0xc40 [ 201.698728][ T8050] wiphy_register+0x1d99/0x2ac0 [ 201.703630][ T8050] ? cfg80211_event_work+0x40/0x40 [ 201.708765][ T8050] ? minstrel_ht_alloc+0x88a/0x990 [ 201.713906][ T8050] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 201.720016][ T8050] ieee80211_register_hw+0x2dd8/0x3b30 [ 201.725522][ T8050] ? ieee80211_register_hw+0xf01/0x3b30 [ 201.731103][ T8050] ? ieee80211_tasklet_handler+0x20/0x20 [ 201.736759][ T8050] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 201.742679][ T8050] ? __debug_object_init+0xec/0x450 [ 201.747900][ T8050] ? __asan_memset+0x22/0x40 [ 201.752604][ T8050] ? __hrtimer_init+0x189/0x270 [ 201.757473][ T8050] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 201.763238][ T8050] ? mac80211_hwsim_free+0x220/0x220 [ 201.768539][ T8050] ? rcu_is_watching+0x15/0xb0 [ 201.773320][ T8050] ? kstrndup+0xbd/0x140 [ 201.777597][ T8050] hwsim_new_radio_nl+0xdad/0x1a70 [ 201.782733][ T8050] ? __nla_validate+0x50/0x50 [ 201.787444][ T8050] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 201.793802][ T8050] ? __nla_parse+0x40/0x50 [ 201.798246][ T8050] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 201.804599][ T8050] genl_family_rcv_msg_doit+0x21a/0x310 [ 201.810171][ T8050] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 201.816090][ T8050] ? bpf_lsm_capable+0x9/0x10 [ 201.820788][ T8050] ? security_capable+0x89/0xb0 [ 201.825662][ T8050] genl_rcv_msg+0x611/0x7a0 [ 201.830188][ T8050] ? genl_bind+0x360/0x360 [ 201.834616][ T8050] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 201.840971][ T8050] netlink_rcv_skb+0x235/0x4c0 [ 201.845748][ T8050] ? genl_bind+0x360/0x360 [ 201.850193][ T8050] ? netlink_ack+0x1160/0x1160 [ 201.854981][ T8050] ? __lock_acquire+0x7d80/0x7d80 [ 201.860029][ T8050] ? down_read+0x1ac/0x2e0 [ 201.864465][ T8050] genl_rcv+0x28/0x40 [ 201.868461][ T8050] netlink_unicast+0x7b1/0x930 [ 201.873246][ T8050] netlink_sendmsg+0x8d0/0xbf0 [ 201.878027][ T8050] ? netlink_getsockopt+0x590/0x590 [ 201.883260][ T8050] ? apparmor_socket_sendmsg+0x8e/0x330 [ 201.888823][ T8050] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.894131][ T8050] ? security_socket_sendmsg+0x80/0xa0 [ 201.899605][ T8050] ? netlink_getsockopt+0x590/0x590 [ 201.904819][ T8050] ____sys_sendmsg+0x61b/0x980 [ 201.909611][ T8050] ? __asan_memset+0x22/0x40 [ 201.914219][ T8050] ? __sys_sendmsg_sock+0x30/0x30 [ 201.919255][ T8050] ? __import_iovec+0x5f2/0x850 [ 201.924132][ T8050] ? import_iovec+0x73/0xa0 [ 201.928659][ T8050] ___sys_sendmsg+0x2a6/0x360 [ 201.933360][ T8050] ? __sys_sendmsg+0x2b0/0x2b0 [ 201.938189][ T8050] __se_sys_sendmsg+0x1d0/0x2c0 [ 201.943063][ T8050] ? __x64_sys_sendmsg+0x80/0x80 [ 201.948039][ T8050] ? lockdep_hardirqs_on+0x98/0x150 [ 201.953262][ T8050] do_syscall_64+0x55/0xb0 [ 201.957694][ T8050] ? clear_bhb_loop+0x40/0x90 [ 201.962382][ T8050] ? clear_bhb_loop+0x40/0x90 [ 201.967076][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.972979][ T8050] RIP: 0033:0x7fd71219e0d9 [ 201.977407][ T8050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.997028][ T8050] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.005458][ T8050] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 202.013444][ T8050] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 202.021427][ T8050] RBP: 00007fd712235024 R08: 0000000000000000 R09: 0000000000000000 [ 202.029406][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.037385][ T8050] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 202.045392][ T8050] [ 204.219487][ T8076] netlink: 'syz.1.762': attribute type 39 has an invalid length. [ 204.489854][ T8080] netlink: 10 bytes leftover after parsing attributes in process `syz.1.762'. [ 204.528648][ T8089] netlink: 'syz.3.766': attribute type 10 has an invalid length. [ 205.304257][ T8089] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 206.180550][ T8120] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 206.208942][ T8122] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 206.262611][ T8122] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.064406][ T8154] netlink: 'syz.1.790': attribute type 10 has an invalid length. [ 207.136286][ T8154] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 207.421267][ T8164] netlink: 'syz.1.794': attribute type 10 has an invalid length. [ 207.439054][ T8164] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.477682][ T8164] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.484847][ T8164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.503820][ T8164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 207.681553][ T8170] netlink: 'syz.1.796': attribute type 16 has an invalid length. [ 207.695543][ T8170] netlink: 152 bytes leftover after parsing attributes in process `syz.1.796'. [ 207.763164][ T8174] FAULT_INJECTION: forcing a failure. [ 207.763164][ T8174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.790458][ T8174] CPU: 0 PID: 8174 Comm: syz.2.800 Not tainted syzkaller #0 [ 207.797819][ T8174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.807898][ T8174] Call Trace: [ 207.811180][ T8174] [ 207.814113][ T8174] dump_stack_lvl+0x18c/0x250 [ 207.818799][ T8174] ? show_regs_print_info+0x20/0x20 [ 207.824016][ T8174] ? load_image+0x420/0x420 [ 207.828521][ T8174] ? __lock_acquire+0x7d80/0x7d80 [ 207.833567][ T8174] should_fail_ex+0x394/0x4c0 [ 207.838259][ T8174] prepare_alloc_pages+0x1e1/0x5b0 [ 207.843401][ T8174] __alloc_pages+0x134/0x460 [ 207.847995][ T8174] ? zone_statistics+0x170/0x170 [ 207.852954][ T8174] __folio_alloc+0x10/0x20 [ 207.857390][ T8174] vma_alloc_folio+0x474/0x8f0 [ 207.862164][ T8174] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 207.867971][ T8174] shmem_alloc_folio+0x1a9/0x2a0 [ 207.872939][ T8174] ? folio_put+0xd0/0xd0 [ 207.877204][ T8174] ? __vm_enough_memory+0x11a/0x370 [ 207.882417][ T8174] ? shmem_inode_acct_block+0x35e/0x460 [ 207.887965][ T8174] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 207.893690][ T8174] ? put_swap_device+0x230/0x230 [ 207.898631][ T8174] ? xas_load+0x12b/0x140 [ 207.902959][ T8174] ? filemap_get_entry+0xce/0x3f0 [ 207.907983][ T8174] ? filemap_get_entry+0xce/0x3f0 [ 207.913011][ T8174] ? filemap_get_entry+0x375/0x3f0 [ 207.918127][ T8174] ? page_cache_prev_miss+0x390/0x390 [ 207.923496][ T8174] ? mark_lock+0x94/0x320 [ 207.927830][ T8174] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 207.933809][ T8174] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 207.941012][ T8174] ? lock_chain_count+0x20/0x20 [ 207.945873][ T8174] shmem_get_folio_gfp+0xe1d/0x2b40 [ 207.951105][ T8174] shmem_write_begin+0xf2/0x430 [ 207.955989][ T8174] generic_perform_write+0x2fe/0x5c0 [ 207.961299][ T8174] ? generic_file_direct_write+0x3e0/0x3e0 [ 207.967118][ T8174] ? file_update_time+0x192/0x1a0 [ 207.972146][ T8174] shmem_file_write_iter+0xfb/0x120 [ 207.977349][ T8174] vfs_write+0x474/0x9a0 [ 207.981602][ T8174] ? file_end_write+0x250/0x250 [ 207.986460][ T8174] ? __fget_files+0x3fc/0x460 [ 207.991149][ T8174] ? __fdget_pos+0x2a3/0x330 [ 207.995742][ T8174] ? ksys_write+0x74/0x260 [ 208.000166][ T8174] ksys_write+0x151/0x260 [ 208.004506][ T8174] ? __ia32_sys_read+0x90/0x90 [ 208.009277][ T8174] ? lockdep_hardirqs_on+0x98/0x150 [ 208.014505][ T8174] do_syscall_64+0x55/0xb0 [ 208.018920][ T8174] ? clear_bhb_loop+0x40/0x90 [ 208.023596][ T8174] ? clear_bhb_loop+0x40/0x90 [ 208.028278][ T8174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.034172][ T8174] RIP: 0033:0x7f5f8039e0d9 [ 208.038674][ T8174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.058300][ T8174] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.066721][ T8174] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 208.074690][ T8174] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 208.082660][ T8174] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 208.090630][ T8174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 208.098600][ T8174] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 208.106592][ T8174] [ 208.702300][ T8188] veth1_to_bond: entered allmulticast mode [ 208.768388][ T8198] netlink: 48 bytes leftover after parsing attributes in process `syz.1.809'. [ 208.959481][ T8203] netlink: 'syz.2.811': attribute type 16 has an invalid length. [ 208.969308][ T8203] netlink: 164 bytes leftover after parsing attributes in process `syz.2.811'. [ 208.989440][ T8205] FAULT_INJECTION: forcing a failure. [ 208.989440][ T8205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.009312][ T8205] CPU: 0 PID: 8205 Comm: syz.0.812 Not tainted syzkaller #0 [ 209.016681][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.026786][ T8205] Call Trace: [ 209.030083][ T8205] [ 209.033032][ T8205] dump_stack_lvl+0x18c/0x250 [ 209.037738][ T8205] ? show_regs_print_info+0x20/0x20 [ 209.042975][ T8205] ? load_image+0x420/0x420 [ 209.047512][ T8205] ? __might_fault+0xaa/0x120 [ 209.052222][ T8205] ? __lock_acquire+0x7d80/0x7d80 [ 209.057279][ T8205] ? __virt_addr_valid+0x10c/0x380 [ 209.062427][ T8205] should_fail_ex+0x394/0x4c0 [ 209.067147][ T8205] _copy_from_user+0x2f/0xe0 [ 209.071772][ T8205] generic_map_update_batch+0x58c/0x800 [ 209.077353][ T8205] ? rcu_read_unlock+0xa0/0xa0 [ 209.082146][ T8205] ? __fdget+0x180/0x210 [ 209.086426][ T8205] ? rcu_read_unlock+0xa0/0xa0 [ 209.091218][ T8205] bpf_map_do_batch+0x3f2/0x600 [ 209.096087][ T8205] ? bpf_lsm_audit_rule_match+0x10/0x10 [ 209.101630][ T8205] __sys_bpf+0x381/0x890 [ 209.105877][ T8205] ? bpf_link_show_fdinfo+0x390/0x390 [ 209.111282][ T8205] ? lock_chain_count+0x20/0x20 [ 209.116172][ T8205] __x64_sys_bpf+0x7c/0x90 [ 209.120608][ T8205] do_syscall_64+0x55/0xb0 [ 209.125015][ T8205] ? clear_bhb_loop+0x40/0x90 [ 209.129683][ T8205] ? clear_bhb_loop+0x40/0x90 [ 209.134354][ T8205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.140245][ T8205] RIP: 0033:0x7f3e4fb9e0d9 [ 209.144667][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.164302][ T8205] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 209.172738][ T8205] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 209.180714][ T8205] RDX: 0000000000000038 RSI: 0000200000001a80 RDI: 000000000000001a [ 209.188684][ T8205] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 209.196650][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.204634][ T8205] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 209.212632][ T8205] [ 209.515611][ T8223] netlink: 'syz.0.819': attribute type 10 has an invalid length. [ 209.541265][ T8223] netlink: 55 bytes leftover after parsing attributes in process `syz.0.819'. [ 209.577166][ T8223] veth0_vlan: left promiscuous mode [ 209.688710][ T8224] netlink: 'syz.3.820': attribute type 39 has an invalid length. [ 209.780533][ T8224] hsr_slave_1 (unregistering): left promiscuous mode [ 209.849201][ T8234] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 209.954048][ T8234] team0: Device hsr_slave_0 failed to register rx_handler [ 210.221240][ T8234] syz.1.823 (8234) used greatest stack depth: 19176 bytes left [ 210.381643][ T8248] FAULT_INJECTION: forcing a failure. [ 210.381643][ T8248] name failslab, interval 1, probability 0, space 0, times 0 [ 210.410869][ T8248] CPU: 0 PID: 8248 Comm: syz.1.827 Not tainted syzkaller #0 [ 210.418230][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.428313][ T8248] Call Trace: [ 210.431615][ T8248] [ 210.434570][ T8248] dump_stack_lvl+0x18c/0x250 [ 210.439282][ T8248] ? show_regs_print_info+0x20/0x20 [ 210.444514][ T8248] ? load_image+0x420/0x420 [ 210.449045][ T8248] ? rt6_remove_exception+0x270/0x270 [ 210.454454][ T8248] should_fail_ex+0x394/0x4c0 [ 210.459159][ T8248] should_failslab+0x9/0x20 [ 210.463685][ T8248] slab_pre_alloc_hook+0x59/0x300 [ 210.468721][ T8248] kmem_cache_alloc+0x5a/0x2c0 [ 210.473486][ T8248] ? dst_alloc+0x105/0x170 [ 210.477920][ T8248] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 210.483566][ T8248] dst_alloc+0x105/0x170 [ 210.487825][ T8248] ip6_rt_cache_alloc+0x3b0/0xa20 [ 210.492861][ T8248] ? rt6_find_cached_rt+0x270/0x270 [ 210.498064][ T8248] ? ip6_pol_route+0x171/0x1230 [ 210.502934][ T8248] ip6_pol_route+0xffa/0x1230 [ 210.507630][ T8248] ? ip6_pol_route+0x171/0x1230 [ 210.512504][ T8248] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 210.518158][ T8248] fib6_rule_lookup+0x35d/0x580 [ 210.523039][ T8248] ? skb_header_pointer+0x120/0x120 [ 210.528257][ T8248] ? fib6_lookup+0x2d0/0x2d0 [ 210.532869][ T8248] ? tomoyo_profile+0x11/0x50 [ 210.537576][ T8248] ? tomoyo_write_log2+0x24f/0x910 [ 210.542708][ T8248] ? read_lock_is_recursive+0x20/0x20 [ 210.548113][ T8248] ? dev_get_by_index_rcu+0xee/0x110 [ 210.553407][ T8248] ip6_route_output_flags+0x364/0x5d0 [ 210.558782][ T8248] ? ip6_route_output_flags+0x2e/0x5d0 [ 210.564245][ T8248] ip6_dst_lookup_tail+0x1a5/0x1660 [ 210.569455][ T8248] ? ip6_dst_lookup+0x60/0x60 [ 210.574136][ T8248] ? txopt_get+0x7a/0x3f0 [ 210.578482][ T8248] ? txopt_get+0x7a/0x3f0 [ 210.582813][ T8248] ? txopt_get+0x344/0x3f0 [ 210.587230][ T8248] ? fl6_sock_lookup+0xc0/0xc0 [ 210.592012][ T8248] ip6_dst_lookup_flow+0x48/0xe0 [ 210.596964][ T8248] rawv6_sendmsg+0xd53/0x1740 [ 210.601656][ T8248] ? compat_rawv6_ioctl+0x70/0x70 [ 210.606704][ T8248] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 210.613125][ T8248] ? aa_sock_msg_perm+0x94/0x150 [ 210.618064][ T8248] ? inet_sendmsg+0x7e/0x2a0 [ 210.622650][ T8248] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.627935][ T8248] ? inet_send_prepare+0x250/0x250 [ 210.633053][ T8248] ____sys_sendmsg+0x61b/0x980 [ 210.637820][ T8248] ? __asan_memset+0x22/0x40 [ 210.642411][ T8248] ? __sys_sendmsg_sock+0x30/0x30 [ 210.647429][ T8248] ? __import_iovec+0x5f2/0x850 [ 210.652284][ T8248] ? import_iovec+0x73/0xa0 [ 210.656789][ T8248] ___sys_sendmsg+0x2a6/0x360 [ 210.661461][ T8248] ? get_pid_task+0x20/0x1e0 [ 210.666052][ T8248] ? __sys_sendmsg+0x2b0/0x2b0 [ 210.670829][ T8248] ? __lock_acquire+0x7d80/0x7d80 [ 210.675867][ T8248] __se_sys_sendmsg+0x1d0/0x2c0 [ 210.680718][ T8248] ? __x64_sys_sendmsg+0x80/0x80 [ 210.685662][ T8248] ? lockdep_hardirqs_on+0x98/0x150 [ 210.690860][ T8248] do_syscall_64+0x55/0xb0 [ 210.695270][ T8248] ? clear_bhb_loop+0x40/0x90 [ 210.699954][ T8248] ? clear_bhb_loop+0x40/0x90 [ 210.704629][ T8248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.710518][ T8248] RIP: 0033:0x7fd71219e0d9 [ 210.714930][ T8248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.734535][ T8248] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.742948][ T8248] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 210.750916][ T8248] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 210.758883][ T8248] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 210.766851][ T8248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.774815][ T8248] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 210.782796][ T8248] [ 211.064467][ T8253] netlink: 'syz.3.830': attribute type 2 has an invalid length. [ 211.090348][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.3.830'. [ 211.160650][ T8261] netlink: 132 bytes leftover after parsing attributes in process `syz.2.832'. [ 211.324024][ T8267] FAULT_INJECTION: forcing a failure. [ 211.324024][ T8267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 211.364611][ T8270] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 211.380697][ T8267] CPU: 0 PID: 8267 Comm: syz.1.835 Not tainted syzkaller #0 [ 211.388057][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.398132][ T8267] Call Trace: [ 211.401428][ T8267] [ 211.404370][ T8267] dump_stack_lvl+0x18c/0x250 [ 211.409075][ T8267] ? show_regs_print_info+0x20/0x20 [ 211.414288][ T8267] ? load_image+0x420/0x420 [ 211.418811][ T8267] ? __lock_acquire+0x7d80/0x7d80 [ 211.423864][ T8267] should_fail_ex+0x394/0x4c0 [ 211.428576][ T8267] prepare_alloc_pages+0x1e1/0x5b0 [ 211.433719][ T8267] __alloc_pages+0x134/0x460 [ 211.438331][ T8267] ? zone_statistics+0x170/0x170 [ 211.443305][ T8267] __folio_alloc+0x10/0x20 [ 211.447734][ T8267] vma_alloc_folio+0x474/0x8f0 [ 211.452514][ T8267] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 211.458340][ T8267] shmem_alloc_folio+0x1a9/0x2a0 [ 211.463299][ T8267] ? folio_put+0xd0/0xd0 [ 211.467584][ T8267] ? __vm_enough_memory+0x11a/0x370 [ 211.472815][ T8267] ? shmem_inode_acct_block+0x35e/0x460 [ 211.478378][ T8267] shmem_alloc_and_acct_folio+0x1cb/0x6c0 [ 211.484123][ T8267] ? put_swap_device+0x230/0x230 [ 211.489081][ T8267] ? xas_load+0x12b/0x140 [ 211.493425][ T8267] ? filemap_get_entry+0xce/0x3f0 [ 211.498464][ T8267] ? filemap_get_entry+0xce/0x3f0 [ 211.503526][ T8267] ? filemap_get_entry+0x375/0x3f0 [ 211.508659][ T8267] ? page_cache_prev_miss+0x390/0x390 [ 211.514129][ T8267] ? mark_lock+0x94/0x320 [ 211.518481][ T8267] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 211.524476][ T8267] ? do_user_addr_fault+0xb43/0x12d0 [ 211.529780][ T8267] ? lock_chain_count+0x20/0x20 [ 211.534669][ T8267] shmem_get_folio_gfp+0xe1d/0x2b40 [ 211.539935][ T8267] shmem_write_begin+0xf2/0x430 [ 211.544823][ T8267] generic_perform_write+0x2fe/0x5c0 [ 211.550149][ T8267] ? generic_file_direct_write+0x3e0/0x3e0 [ 211.555997][ T8267] ? file_update_time+0x192/0x1a0 [ 211.561064][ T8267] shmem_file_write_iter+0xfb/0x120 [ 211.566297][ T8267] vfs_write+0x474/0x9a0 [ 211.570575][ T8267] ? file_end_write+0x250/0x250 [ 211.575457][ T8267] ? __fget_files+0x3fc/0x460 [ 211.580158][ T8267] ? __fdget_pos+0x2a3/0x330 [ 211.584764][ T8267] ? ksys_write+0x74/0x260 [ 211.589210][ T8267] ksys_write+0x151/0x260 [ 211.593562][ T8267] ? __ia32_sys_read+0x90/0x90 [ 211.598350][ T8267] ? lockdep_hardirqs_on+0x98/0x150 [ 211.603572][ T8267] do_syscall_64+0x55/0xb0 [ 211.608004][ T8267] ? clear_bhb_loop+0x40/0x90 [ 211.612701][ T8267] ? clear_bhb_loop+0x40/0x90 [ 211.617401][ T8267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 211.623308][ T8267] RIP: 0033:0x7fd71219e0d9 [ 211.627741][ T8267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.647374][ T8267] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 211.655804][ T8267] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 211.663794][ T8267] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 211.671786][ T8267] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 211.679776][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.687768][ T8267] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 211.695781][ T8267] [ 211.710553][ T8270] netlink: 'syz.2.836': attribute type 8 has an invalid length. [ 211.720868][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 211.733047][ T8269] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 211.761165][ T8269] netlink: 'syz.2.836': attribute type 8 has an invalid length. [ 211.768863][ T8269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 212.046579][ T8265] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.834'. [ 212.137698][ T8276] netlink: 140 bytes leftover after parsing attributes in process `syz.1.837'. [ 212.689874][ T8296] netlink: 'syz.0.843': attribute type 10 has an invalid length. [ 212.772293][ T8296] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 212.918232][ T8296] bridge0: port 1(netdevsim0) entered blocking state [ 212.963331][ T8296] bridge0: port 1(netdevsim0) entered disabled state [ 213.068970][ T8296] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 213.171531][ T8303] netlink: 'syz.2.847': attribute type 4 has an invalid length. [ 213.179738][ T8303] __nla_validate_parse: 1 callbacks suppressed [ 213.179752][ T8303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.847'. [ 213.891729][ T8316] netlink: 140 bytes leftover after parsing attributes in process `syz.0.850'. [ 214.014852][ T8324] FAULT_INJECTION: forcing a failure. [ 214.014852][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.050443][ T8324] CPU: 1 PID: 8324 Comm: syz.2.853 Not tainted syzkaller #0 [ 214.057798][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.067877][ T8324] Call Trace: [ 214.071178][ T8324] [ 214.074123][ T8324] dump_stack_lvl+0x18c/0x250 [ 214.078835][ T8324] ? show_regs_print_info+0x20/0x20 [ 214.084069][ T8324] ? load_image+0x420/0x420 [ 214.088605][ T8324] ? __might_fault+0xaa/0x120 [ 214.093319][ T8324] ? __lock_acquire+0x7d80/0x7d80 [ 214.098379][ T8324] should_fail_ex+0x394/0x4c0 [ 214.103090][ T8324] _copy_from_iter+0x1cd/0x1290 [ 214.107976][ T8324] ? __might_fault+0xaa/0x120 [ 214.112688][ T8324] ? copyout_mc+0x70/0x70 [ 214.117046][ T8324] ? copyout_mc+0x70/0x70 [ 214.121405][ T8324] ? __virt_addr_valid+0x10c/0x380 [ 214.126547][ T8324] ? page_copy_sane+0x4e/0x270 [ 214.131326][ T8324] copy_page_from_iter+0x7b/0x100 [ 214.136356][ T8324] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 214.142174][ T8324] tun_get_user+0xc84/0x3d70 [ 214.146773][ T8324] ? aa_file_perm+0x3e3/0xee0 [ 214.151466][ T8324] ? rcu_read_unlock+0xa0/0xa0 [ 214.156237][ T8324] ? tun_get+0x1c/0x2e0 [ 214.160407][ T8324] ? __lock_acquire+0x7d80/0x7d80 [ 214.165447][ T8324] ? tun_get+0x1c/0x2e0 [ 214.169603][ T8324] tun_chr_write_iter+0x119/0x200 [ 214.174634][ T8324] vfs_write+0x474/0x9a0 [ 214.178998][ T8324] ? file_end_write+0x250/0x250 [ 214.183881][ T8324] ? __fget_files+0x3fc/0x460 [ 214.188580][ T8324] ? __fdget_pos+0x1d8/0x330 [ 214.193173][ T8324] ? ksys_write+0x74/0x260 [ 214.197593][ T8324] ksys_write+0x151/0x260 [ 214.201924][ T8324] ? __ia32_sys_read+0x90/0x90 [ 214.206689][ T8324] ? lockdep_hardirqs_on+0x98/0x150 [ 214.211891][ T8324] do_syscall_64+0x55/0xb0 [ 214.216303][ T8324] ? clear_bhb_loop+0x40/0x90 [ 214.220977][ T8324] ? clear_bhb_loop+0x40/0x90 [ 214.225651][ T8324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.231543][ T8324] RIP: 0033:0x7f5f8039e0d9 [ 214.235959][ T8324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.255564][ T8324] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 214.263976][ T8324] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 214.271945][ T8324] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 214.279911][ T8324] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 214.287879][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.295846][ T8324] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 214.303830][ T8324] [ 214.450503][ T8328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.854527][ T8336] netlink: 'syz.1.862': attribute type 11 has an invalid length. [ 214.880831][ T8336] netlink: 140 bytes leftover after parsing attributes in process `syz.1.862'. [ 214.890064][ T8342] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.863'. [ 215.033113][ T8342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.863'. [ 215.101105][ T8338] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.861'. [ 215.348452][ T8353] netlink: 144 bytes leftover after parsing attributes in process `syz.1.864'. [ 215.510435][ T8357] netlink: 'syz.2.867': attribute type 10 has an invalid length. [ 215.809256][ T8362] syzkaller0: entered promiscuous mode [ 215.825205][ T8362] syzkaller0: entered allmulticast mode [ 215.995527][ T8364] netlink: 140 bytes leftover after parsing attributes in process `syz.3.868'. [ 217.124416][ T8381] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 217.233381][ T8381] team0: Device hsr_slave_0 failed to register rx_handler [ 217.750802][ T8381] syz.2.876 (8381) used greatest stack depth: 18536 bytes left [ 218.434105][ T8397] netlink: 140 bytes leftover after parsing attributes in process `syz.0.881'. [ 218.620806][ T8405] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 218.649880][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.713491][ T8405] bridge_slave_1: left allmulticast mode [ 218.719485][ T8405] bridge_slave_1: left promiscuous mode [ 218.727165][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.780594][ T8405] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 218.799013][ T8408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.885'. [ 219.018424][ T8417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.889'. [ 220.235346][ T8445] netlink: 'syz.3.898': attribute type 7 has an invalid length. [ 220.261632][ T8445] sctp: [Deprecated]: syz.3.898 (pid 8445) Use of int in maxseg socket option. [ 220.261632][ T8445] Use struct sctp_assoc_value instead [ 221.177949][ T8459] netlink: 'syz.0.903': attribute type 10 has an invalid length. [ 221.226986][ T8459] netlink: 'syz.0.903': attribute type 12 has an invalid length. [ 221.247363][ T8459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.903'. [ 221.685510][ T8480] syzkaller0: entered promiscuous mode [ 221.692619][ T8480] syzkaller0: entered allmulticast mode [ 222.163705][ T8460] delete_channel: no stack [ 222.562216][ T8501] netlink: 140 bytes leftover after parsing attributes in process `syz.2.918'. [ 223.810065][ T8529] FAULT_INJECTION: forcing a failure. [ 223.810065][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 223.855420][ T8529] CPU: 1 PID: 8529 Comm: syz.2.930 Not tainted syzkaller #0 [ 223.862775][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.872850][ T8529] Call Trace: [ 223.876152][ T8529] [ 223.879101][ T8529] dump_stack_lvl+0x18c/0x250 [ 223.883811][ T8529] ? show_regs_print_info+0x20/0x20 [ 223.889037][ T8529] ? load_image+0x420/0x420 [ 223.893569][ T8529] ? __lock_acquire+0x7d80/0x7d80 [ 223.898627][ T8529] should_fail_ex+0x394/0x4c0 [ 223.903330][ T8529] should_failslab+0x9/0x20 [ 223.907871][ T8529] slab_pre_alloc_hook+0x59/0x300 [ 223.912932][ T8529] ? bpf_test_init+0x9f/0x140 [ 223.917634][ T8529] ? bpf_test_init+0x9f/0x140 [ 223.922356][ T8529] __kmem_cache_alloc_node+0x53/0x250 [ 223.927758][ T8529] ? bpf_test_init+0x9f/0x140 [ 223.932454][ T8529] __kmalloc+0xa7/0x240 [ 223.936635][ T8529] bpf_test_init+0x9f/0x140 [ 223.941189][ T8529] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 223.946577][ T8529] ? __lock_acquire+0x7d80/0x7d80 [ 223.951622][ T8529] ? dev_put+0x80/0x80 [ 223.955715][ T8529] ? dev_put+0x80/0x80 [ 223.959818][ T8529] bpf_prog_test_run+0x31f/0x390 [ 223.964770][ T8529] __sys_bpf+0x49d/0x890 [ 223.969023][ T8529] ? bpf_link_show_fdinfo+0x390/0x390 [ 223.974421][ T8529] ? lock_chain_count+0x20/0x20 [ 223.979289][ T8529] __x64_sys_bpf+0x7c/0x90 [ 223.983720][ T8529] do_syscall_64+0x55/0xb0 [ 223.988149][ T8529] ? clear_bhb_loop+0x40/0x90 [ 223.992833][ T8529] ? clear_bhb_loop+0x40/0x90 [ 223.997521][ T8529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.003426][ T8529] RIP: 0033:0x7f5f8039e0d9 [ 224.007849][ T8529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.027468][ T8529] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.035895][ T8529] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 224.043894][ T8529] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 224.051880][ T8529] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 224.059869][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.067854][ T8529] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 224.075854][ T8529] [ 224.152382][ T8537] netlink: 'syz.1.933': attribute type 10 has an invalid length. [ 224.160275][ T8537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.933'. [ 224.169210][ T8537] team0: entered promiscuous mode [ 224.176563][ T8537] team_slave_1: entered promiscuous mode [ 224.182493][ T8537] team0: entered allmulticast mode [ 224.191446][ T8537] team_slave_1: entered allmulticast mode [ 224.197942][ T8537] bridge0: port 1(team0) entered blocking state [ 224.209389][ T8537] bridge0: port 1(team0) entered disabled state [ 224.219062][ T8537] bridge0: port 1(team0) entered blocking state [ 224.225528][ T8537] bridge0: port 1(team0) entered forwarding state [ 224.238348][ T8538] netlink: 140 bytes leftover after parsing attributes in process `syz.3.932'. [ 224.618465][ T8555] FAULT_INJECTION: forcing a failure. [ 224.618465][ T8555] name failslab, interval 1, probability 0, space 0, times 0 [ 224.642701][ T8555] CPU: 1 PID: 8555 Comm: syz.1.939 Not tainted syzkaller #0 [ 224.650091][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.660177][ T8555] Call Trace: [ 224.663486][ T8555] [ 224.666440][ T8555] dump_stack_lvl+0x18c/0x250 [ 224.671155][ T8555] ? sctp_sendmsg+0x1519/0x27b0 [ 224.676038][ T8555] ? ___sys_sendmsg+0x2a6/0x360 [ 224.680919][ T8555] ? show_regs_print_info+0x20/0x20 [ 224.686153][ T8555] ? load_image+0x420/0x420 [ 224.690704][ T8555] should_fail_ex+0x394/0x4c0 [ 224.695420][ T8555] should_failslab+0x9/0x20 [ 224.699961][ T8555] slab_pre_alloc_hook+0x59/0x300 [ 224.705020][ T8555] ? sctp_add_bind_addr+0x8c/0x360 [ 224.710171][ T8555] __kmem_cache_alloc_node+0x53/0x250 [ 224.715578][ T8555] ? sctp_add_bind_addr+0x8c/0x360 [ 224.720697][ T8555] kmalloc_trace+0x2a/0xe0 [ 224.725125][ T8555] sctp_add_bind_addr+0x8c/0x360 [ 224.730064][ T8555] sctp_copy_local_addr_list+0x31b/0x4e0 [ 224.735720][ T8555] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 224.741443][ T8555] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 224.747510][ T8555] ? sctp_v6_is_any+0x64/0x70 [ 224.752185][ T8555] ? sctp_copy_one_addr+0x8c/0x350 [ 224.757301][ T8555] sctp_bind_addr_copy+0xb3/0x3c0 [ 224.762327][ T8555] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 224.768657][ T8555] sctp_connect_new_asoc+0x2f9/0x6a0 [ 224.773947][ T8555] ? __sctp_connect+0xd80/0xd80 [ 224.778792][ T8555] ? __local_bh_enable_ip+0x13a/0x1c0 [ 224.784167][ T8555] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 224.789713][ T8555] ? security_sctp_bind_connect+0x89/0xb0 [ 224.795432][ T8555] sctp_sendmsg+0x1519/0x27b0 [ 224.800129][ T8555] ? sctp_getsockopt+0xb60/0xb60 [ 224.805076][ T8555] ? aa_af_perm+0x330/0x330 [ 224.809616][ T8555] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 224.816037][ T8555] ? sock_rps_record_flow+0x19/0x3f0 [ 224.821331][ T8555] ? inet_sendmsg+0xce/0x2a0 [ 224.825924][ T8555] ? inet_send_prepare+0x250/0x250 [ 224.831037][ T8555] ____sys_sendmsg+0x61b/0x980 [ 224.835809][ T8555] ? __asan_memset+0x22/0x40 [ 224.840401][ T8555] ? __sys_sendmsg_sock+0x30/0x30 [ 224.845425][ T8555] ? __import_iovec+0x5f2/0x850 [ 224.850281][ T8555] ? import_iovec+0x73/0xa0 [ 224.854790][ T8555] ___sys_sendmsg+0x2a6/0x360 [ 224.859465][ T8555] ? get_pid_task+0x20/0x1e0 [ 224.864075][ T8555] ? __sys_sendmsg+0x2b0/0x2b0 [ 224.868857][ T8555] ? __lock_acquire+0x7d80/0x7d80 [ 224.873899][ T8555] __se_sys_sendmsg+0x1d0/0x2c0 [ 224.878751][ T8555] ? __x64_sys_sendmsg+0x80/0x80 [ 224.883700][ T8555] ? lockdep_hardirqs_on+0x98/0x150 [ 224.888906][ T8555] do_syscall_64+0x55/0xb0 [ 224.893321][ T8555] ? clear_bhb_loop+0x40/0x90 [ 224.897998][ T8555] ? clear_bhb_loop+0x40/0x90 [ 224.902675][ T8555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.908565][ T8555] RIP: 0033:0x7fd71219e0d9 [ 224.912979][ T8555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.932842][ T8555] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.941256][ T8555] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 224.949225][ T8555] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 224.957193][ T8555] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 224.965163][ T8555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.973134][ T8555] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 224.981120][ T8555] [ 224.994453][ T8553] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.937'. [ 225.022348][ T8553] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.937'. [ 225.034294][ T8553] tipc: Started in network mode [ 225.039973][ T8553] tipc: Node identity b, cluster identity 57 [ 225.048727][ T8553] tipc: Node number set to 11 [ 225.077195][ T8559] netlink: 207684 bytes leftover after parsing attributes in process `syz.1.939'. [ 225.125750][ T8559] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 225.147657][ T8559] netlink: 'syz.1.939': attribute type 2 has an invalid length. [ 225.594355][ T8574] netlink: 140 bytes leftover after parsing attributes in process `syz.2.946'. [ 225.644030][ T8565] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 225.874343][ T8565] team0: Port device wlan1 added [ 226.507508][ T8586] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.951'. [ 226.647500][ T8588] netlink: 'syz.2.952': attribute type 29 has an invalid length. [ 226.662197][ T8588] netlink: 'syz.2.952': attribute type 29 has an invalid length. [ 226.675415][ T8588] netlink: 'syz.2.952': attribute type 29 has an invalid length. [ 226.755810][ T8592] syzkaller0: entered promiscuous mode [ 226.808529][ T8592] syzkaller0: entered allmulticast mode [ 227.508125][ T8609] netlink: 140 bytes leftover after parsing attributes in process `syz.3.958'. [ 228.409352][ T8626] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.962'. [ 231.627972][ T8682] netlink: 'syz.1.974': attribute type 2 has an invalid length. [ 231.650513][ T8682] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.974'. [ 232.118709][ T8705] FAULT_INJECTION: forcing a failure. [ 232.118709][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.150866][ T8705] CPU: 0 PID: 8705 Comm: syz.1.982 Not tainted syzkaller #0 [ 232.158221][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.168312][ T8705] Call Trace: [ 232.171614][ T8705] [ 232.174557][ T8705] dump_stack_lvl+0x18c/0x250 [ 232.179263][ T8705] ? show_regs_print_info+0x20/0x20 [ 232.184503][ T8705] ? load_image+0x420/0x420 [ 232.189034][ T8705] ? __might_fault+0xaa/0x120 [ 232.193737][ T8705] ? __lock_acquire+0x7d80/0x7d80 [ 232.198801][ T8705] should_fail_ex+0x394/0x4c0 [ 232.203514][ T8705] _copy_from_iter+0x1cd/0x1290 [ 232.208392][ T8705] ? rcu_is_watching+0x15/0xb0 [ 232.213186][ T8705] ? copyout_mc+0x70/0x70 [ 232.217568][ T8705] ? __virt_addr_valid+0x10c/0x380 [ 232.222699][ T8705] ? __virt_addr_valid+0x10c/0x380 [ 232.227833][ T8705] ? __virt_addr_valid+0x10c/0x380 [ 232.232973][ T8705] ? __check_object_size+0x4fc/0xa40 [ 232.238281][ T8705] netlink_sendmsg+0x76b/0xbf0 [ 232.243083][ T8705] ? netlink_getsockopt+0x590/0x590 [ 232.248319][ T8705] ? apparmor_socket_sendmsg+0x8e/0x330 [ 232.253892][ T8705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.259207][ T8705] ? security_socket_sendmsg+0x80/0xa0 [ 232.264694][ T8705] ? netlink_getsockopt+0x590/0x590 [ 232.269961][ T8705] ____sys_sendmsg+0x61b/0x980 [ 232.274764][ T8705] ? __asan_memset+0x22/0x40 [ 232.279393][ T8705] ? __sys_sendmsg_sock+0x30/0x30 [ 232.284448][ T8705] ? __import_iovec+0x5f2/0x850 [ 232.289346][ T8705] ? import_iovec+0x73/0xa0 [ 232.293888][ T8705] ___sys_sendmsg+0x2a6/0x360 [ 232.298601][ T8705] ? __sys_sendmsg+0x2b0/0x2b0 [ 232.303422][ T8705] ? __lock_acquire+0x7d80/0x7d80 [ 232.308504][ T8705] __se_sys_sendmsg+0x1d0/0x2c0 [ 232.313379][ T8705] ? __x64_sys_sendmsg+0x80/0x80 [ 232.318332][ T8705] ? lockdep_hardirqs_on+0x98/0x150 [ 232.323535][ T8705] do_syscall_64+0x55/0xb0 [ 232.327949][ T8705] ? clear_bhb_loop+0x40/0x90 [ 232.332640][ T8705] ? clear_bhb_loop+0x40/0x90 [ 232.337316][ T8705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 232.343204][ T8705] RIP: 0033:0x7fd71219e0d9 [ 232.347616][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.367222][ T8705] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.375633][ T8705] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 232.383600][ T8705] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 232.391566][ T8705] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 232.399534][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.407520][ T8705] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 232.415507][ T8705] [ 237.762858][ T8725] netlink: 'syz.3.988': attribute type 21 has an invalid length. [ 237.810424][ T8725] netlink: 'syz.3.988': attribute type 15 has an invalid length. [ 237.912295][ T8728] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.990'. [ 237.994735][ T8728] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.990'. [ 238.249758][ T8736] FAULT_INJECTION: forcing a failure. [ 238.249758][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.276456][ T8736] CPU: 0 PID: 8736 Comm: syz.0.993 Not tainted syzkaller #0 [ 238.283806][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.293884][ T8736] Call Trace: [ 238.297199][ T8736] [ 238.300147][ T8736] dump_stack_lvl+0x18c/0x250 [ 238.304869][ T8736] ? show_regs_print_info+0x20/0x20 [ 238.310083][ T8736] ? load_image+0x420/0x420 [ 238.314602][ T8736] ? __might_fault+0xaa/0x120 [ 238.319295][ T8736] ? __lock_acquire+0x7d80/0x7d80 [ 238.324339][ T8736] should_fail_ex+0x394/0x4c0 [ 238.329042][ T8736] _copy_from_user+0x2f/0xe0 [ 238.333657][ T8736] __sys_bpf+0x23e/0x890 [ 238.337922][ T8736] ? bpf_link_show_fdinfo+0x390/0x390 [ 238.343311][ T8736] ? lock_chain_count+0x20/0x20 [ 238.348165][ T8736] __x64_sys_bpf+0x7c/0x90 [ 238.352579][ T8736] do_syscall_64+0x55/0xb0 [ 238.356995][ T8736] ? clear_bhb_loop+0x40/0x90 [ 238.361669][ T8736] ? clear_bhb_loop+0x40/0x90 [ 238.366344][ T8736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.372231][ T8736] RIP: 0033:0x7f3e4fb9e0d9 [ 238.376647][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.396252][ T8736] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 238.404662][ T8736] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 238.412631][ T8736] RDX: 0000000000000022 RSI: 0000200000001bc0 RDI: 000000000000000a [ 238.420599][ T8736] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 238.428563][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.436651][ T8736] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 238.444634][ T8736] [ 238.677642][ T8744] FAULT_INJECTION: forcing a failure. [ 238.677642][ T8744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.701507][ T8742] netlink: 140 bytes leftover after parsing attributes in process `syz.3.996'. [ 238.721809][ T8744] CPU: 1 PID: 8744 Comm: syz.0.997 Not tainted syzkaller #0 [ 238.729145][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.739199][ T8744] Call Trace: [ 238.742479][ T8744] [ 238.745405][ T8744] dump_stack_lvl+0x18c/0x250 [ 238.750115][ T8744] ? show_regs_print_info+0x20/0x20 [ 238.755309][ T8744] ? load_image+0x420/0x420 [ 238.759807][ T8744] ? __might_fault+0xaa/0x120 [ 238.764479][ T8744] ? __lock_acquire+0x7d80/0x7d80 [ 238.769534][ T8744] should_fail_ex+0x394/0x4c0 [ 238.774221][ T8744] _copy_from_iter+0x1cd/0x1290 [ 238.779081][ T8744] ? copyout_mc+0x70/0x70 [ 238.783428][ T8744] ? __virt_addr_valid+0x10c/0x380 [ 238.788545][ T8744] ? __virt_addr_valid+0x10c/0x380 [ 238.793655][ T8744] ? __virt_addr_valid+0x10c/0x380 [ 238.798772][ T8744] ? __check_object_size+0x4fc/0xa40 [ 238.804055][ T8744] tipc_msg_build+0x87a/0xe60 [ 238.808742][ T8744] ? skb_copy_to_linear_data_offset+0x60/0x60 [ 238.814814][ T8744] ? net_generic+0x1e/0x240 [ 238.819334][ T8744] ? tipc_group_bc_cong+0x15c/0x210 [ 238.824540][ T8744] tipc_send_group_bcast+0x7d8/0xad0 [ 238.829837][ T8744] ? tipc_wait_for_connect+0x650/0x650 [ 238.835304][ T8744] ? wait_woken+0x180/0x180 [ 238.839806][ T8744] ? tomoyo_check_open_permission+0x1cf/0x460 [ 238.845877][ T8744] __tipc_sendmsg+0x314/0x2b20 [ 238.850643][ T8744] ? __lock_acquire+0x1336/0x7d80 [ 238.855677][ T8744] ? rht_unlock+0x1d0/0x1d0 [ 238.860187][ T8744] ? verify_lock_unused+0x140/0x140 [ 238.865407][ T8744] ? verify_lock_unused+0x140/0x140 [ 238.870606][ T8744] ? kernel_text_address+0xa0/0xd0 [ 238.875721][ T8744] ? __might_sleep+0xe0/0xe0 [ 238.880341][ T8744] ? mark_lock+0x94/0x320 [ 238.884668][ T8744] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 238.890649][ T8744] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.896017][ T8744] ? lockdep_hardirqs_on+0x98/0x150 [ 238.901219][ T8744] ? __local_bh_enable_ip+0x13a/0x1c0 [ 238.906682][ T8744] ? _local_bh_enable+0xa0/0xa0 [ 238.911533][ T8744] tipc_sendmsg+0x55/0x70 [ 238.915867][ T8744] sock_write_iter+0x2dc/0x420 [ 238.920634][ T8744] ? sock_read_iter+0x3f0/0x3f0 [ 238.925494][ T8744] ? common_file_perm+0x198/0x1f0 [ 238.930521][ T8744] vfs_write+0x474/0x9a0 [ 238.934768][ T8744] ? file_end_write+0x250/0x250 [ 238.939620][ T8744] ? __fget_files+0x3fc/0x460 [ 238.944302][ T8744] ? __fdget_pos+0x1d8/0x330 [ 238.948886][ T8744] ? ksys_write+0x74/0x260 [ 238.953303][ T8744] ksys_write+0x151/0x260 [ 238.957637][ T8744] ? __ia32_sys_read+0x90/0x90 [ 238.962403][ T8744] ? lockdep_hardirqs_on+0x98/0x150 [ 238.967606][ T8744] do_syscall_64+0x55/0xb0 [ 238.972022][ T8744] ? clear_bhb_loop+0x40/0x90 [ 238.976702][ T8744] ? clear_bhb_loop+0x40/0x90 [ 238.981378][ T8744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.987267][ T8744] RIP: 0033:0x7f3e4fb9e0d9 [ 238.991680][ T8744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.011285][ T8744] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.019701][ T8744] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 239.027670][ T8744] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000007 [ 239.035639][ T8744] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 239.043604][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.051660][ T8744] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 239.059637][ T8744] [ 239.401913][ T8753] FAULT_INJECTION: forcing a failure. [ 239.401913][ T8753] name failslab, interval 1, probability 0, space 0, times 0 [ 239.420657][ T8753] CPU: 1 PID: 8753 Comm: syz.0.1000 Not tainted syzkaller #0 [ 239.428184][ T8753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.438270][ T8753] Call Trace: [ 239.441569][ T8753] [ 239.444513][ T8753] dump_stack_lvl+0x18c/0x250 [ 239.449221][ T8753] ? show_regs_print_info+0x20/0x20 [ 239.454433][ T8753] ? load_image+0x420/0x420 [ 239.458939][ T8753] ? __might_sleep+0xe0/0xe0 [ 239.463526][ T8753] ? __lock_acquire+0x7d80/0x7d80 [ 239.468549][ T8753] should_fail_ex+0x394/0x4c0 [ 239.473230][ T8753] should_failslab+0x9/0x20 [ 239.477732][ T8753] slab_pre_alloc_hook+0x59/0x300 [ 239.482769][ T8753] kmem_cache_alloc_node+0x5e/0x310 [ 239.487967][ T8753] ? verify_lock_unused+0x140/0x140 [ 239.493163][ T8753] ? __alloc_skb+0x103/0x2c0 [ 239.497761][ T8753] __alloc_skb+0x103/0x2c0 [ 239.502179][ T8753] alloc_skb_with_frags+0xcd/0x7a0 [ 239.507319][ T8753] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 239.513909][ T8753] ? perf_trace_preemptirq_template+0xac/0x330 [ 239.520110][ T8753] sock_alloc_send_pskb+0x883/0x9a0 [ 239.525355][ T8753] ? sock_kzfree_s+0x50/0x50 [ 239.529952][ T8753] ? __lock_acquire+0x7d80/0x7d80 [ 239.534980][ T8753] ? __receive_sock+0x90/0x90 [ 239.539652][ T8753] ? sk_psock_verdict_data_ready+0x7aa/0x930 [ 239.545630][ T8753] ? sk_psock_verdict_data_ready+0xae/0x930 [ 239.551528][ T8753] unix_stream_sendmsg+0x48b/0xbf0 [ 239.556656][ T8753] ? unix_show_fdinfo+0x280/0x280 [ 239.561675][ T8753] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 239.568096][ T8753] ? apparmor_socket_sendmsg+0x8e/0x330 [ 239.573643][ T8753] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.578924][ T8753] ? security_socket_sendmsg+0x80/0xa0 [ 239.584378][ T8753] ? unix_show_fdinfo+0x280/0x280 [ 239.589403][ T8753] ____sys_sendmsg+0x61b/0x980 [ 239.594197][ T8753] ? __asan_memset+0x22/0x40 [ 239.598793][ T8753] ? __sys_sendmsg_sock+0x30/0x30 [ 239.603812][ T8753] ? __import_iovec+0x5f2/0x850 [ 239.608668][ T8753] ? import_iovec+0x73/0xa0 [ 239.613172][ T8753] ___sys_sendmsg+0x2a6/0x360 [ 239.617845][ T8753] ? get_pid_task+0x20/0x1e0 [ 239.622441][ T8753] ? __sys_sendmsg+0x2b0/0x2b0 [ 239.627215][ T8753] ? __lock_acquire+0x7d80/0x7d80 [ 239.632259][ T8753] __se_sys_sendmsg+0x1d0/0x2c0 [ 239.637108][ T8753] ? __x64_sys_sendmsg+0x80/0x80 [ 239.642054][ T8753] ? lockdep_hardirqs_on+0x98/0x150 [ 239.647260][ T8753] do_syscall_64+0x55/0xb0 [ 239.651675][ T8753] ? clear_bhb_loop+0x40/0x90 [ 239.656348][ T8753] ? clear_bhb_loop+0x40/0x90 [ 239.661021][ T8753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 239.666911][ T8753] RIP: 0033:0x7f3e4fb9e0d9 [ 239.671321][ T8753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.690940][ T8753] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.699352][ T8753] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 239.707320][ T8753] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 239.715289][ T8753] RBP: 00007f3e50b18090 R08: 0000000000000000 R09: 0000000000000000 [ 239.723256][ T8753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.731224][ T8753] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 239.739208][ T8753] [ 240.722227][ T8774] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 241.278361][ T8777] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1007'. [ 242.370949][ T8805] syzkaller0: entered promiscuous mode [ 242.376471][ T8805] syzkaller0: entered allmulticast mode [ 242.508183][ T8811] netlink: 'syz.1.1020': attribute type 9 has an invalid length. [ 242.518382][ T8811] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1020'. [ 242.528704][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 242.563506][ T8811] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'. [ 242.784527][ T8818] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1023'. [ 243.099169][ T8833] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1029'. [ 243.108838][ T8833] openvswitch: netlink: Flow key attr not present in new flow. [ 243.346981][ T8842] netlink: 'syz.2.1032': attribute type 9 has an invalid length. [ 243.358675][ T8842] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1032'. [ 243.428173][ T8842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1032'. [ 243.640308][ T8853] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1037'. [ 243.768648][ T8857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.776261][ T8857] IPv6: NLM_F_CREATE should be set when creating new route [ 243.783990][ T8857] IPv6: NLM_F_CREATE should be set when creating new route [ 243.791527][ T8857] IPv6: NLM_F_CREATE should be set when creating new route [ 243.872045][ T8857] netlink: 'syz.0.1039': attribute type 9 has an invalid length. [ 243.888195][ T8857] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1039'. [ 244.164658][ T8868] netlink: 'syz.0.1044': attribute type 9 has an invalid length. [ 244.172680][ T8868] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1044'. [ 244.202343][ T8868] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1044'. [ 245.088610][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1051'. [ 245.910962][ T8904] tap0: tun_chr_ioctl cmd 2147767507 [ 245.930907][ T8905] tap0: tun_chr_ioctl cmd 2147767507 [ 245.994019][ T8897] netlink: 'syz.0.1054': attribute type 2 has an invalid length. [ 246.020578][ T8897] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1054'. [ 248.186513][ T8911] netlink: 'syz.2.1057': attribute type 11 has an invalid length. [ 248.203714][ T8911] netlink: 126292 bytes leftover after parsing attributes in process `syz.2.1057'. [ 249.377412][ T8951] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1073'. [ 249.517214][ T8957] netlink: 'syz.1.1077': attribute type 21 has an invalid length. [ 249.821386][ T8965] macsec0: entered promiscuous mode [ 249.832733][ T8965] macsec0: entered allmulticast mode [ 249.838389][ T8965] veth1_macvtap: entered allmulticast mode [ 250.574741][ T8980] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1087'. [ 251.176261][ T9003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1095'. [ 251.851910][ T9025] netlink: 'syz.2.1104': attribute type 16 has an invalid length. [ 251.874085][ T9025] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1104'. [ 251.874850][ T9027] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.890526][ T9027] IPv6: NLM_F_CREATE should be set when creating new route [ 251.897807][ T9027] IPv6: NLM_F_CREATE should be set when creating new route [ 251.905116][ T9027] IPv6: NLM_F_CREATE should be set when creating new route [ 251.945072][ T9027] netlink: 'syz.1.1103': attribute type 9 has an invalid length. [ 251.960351][ T9027] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1103'. [ 252.001246][ T9029] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 252.025086][ T9029] team0: Device hsr_slave_0 failed to register rx_handler [ 252.344382][ T9044] netlink: 'syz.1.1111': attribute type 21 has an invalid length. [ 252.358260][ T9044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1111'. [ 252.384691][ T9046] netlink: 822 bytes leftover after parsing attributes in process `syz.3.1112'. [ 252.394263][ T9046] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge0 [ 252.898091][ T9054] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 252.909139][ T9054] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1115'. [ 252.918800][ T9054] hsr0: entered promiscuous mode [ 252.924405][ T9054] bridge0: port 4(hsr0) entered blocking state [ 252.950273][ T9054] bridge0: port 4(hsr0) entered disabled state [ 252.966984][ T9054] hsr0: entered allmulticast mode [ 252.988062][ T9054] hsr_slave_0: entered allmulticast mode [ 252.995709][ T9054] hsr_slave_1: entered allmulticast mode [ 253.006418][ T9066] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 253.009349][ T9054] bridge0: port 4(hsr0) entered blocking state [ 253.021103][ T9054] bridge0: port 4(hsr0) entered forwarding state [ 253.295978][ T9076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1122'. [ 253.388055][ T9083] FAULT_INJECTION: forcing a failure. [ 253.388055][ T9083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.401322][ T9083] CPU: 1 PID: 9083 Comm: syz.1.1124 Not tainted syzkaller #0 [ 253.408721][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.418798][ T9083] Call Trace: [ 253.422092][ T9083] [ 253.425038][ T9083] dump_stack_lvl+0x18c/0x250 [ 253.429734][ T9083] ? show_regs_print_info+0x20/0x20 [ 253.434933][ T9083] ? load_image+0x420/0x420 [ 253.439432][ T9083] ? shmem_get_folio_gfp+0x14ae/0x2b40 [ 253.444890][ T9083] ? __lock_acquire+0x7d80/0x7d80 [ 253.449910][ T9083] ? __rwlock_init+0x150/0x150 [ 253.454680][ T9083] should_fail_ex+0x394/0x4c0 [ 253.459360][ T9083] copy_page_from_iter_atomic+0x29e/0x13d0 [ 253.465166][ T9083] ? shmem_get_folio_gfp+0x2780/0x2b40 [ 253.470641][ T9083] ? iov_iter_zero+0x1160/0x1160 [ 253.475609][ T9083] ? shmem_write_begin+0x1cf/0x430 [ 253.480729][ T9083] generic_perform_write+0x353/0x5c0 [ 253.486021][ T9083] ? generic_file_direct_write+0x3e0/0x3e0 [ 253.491828][ T9083] ? file_update_time+0x192/0x1a0 [ 253.496850][ T9083] shmem_file_write_iter+0xfb/0x120 [ 253.502047][ T9083] vfs_write+0x474/0x9a0 [ 253.506289][ T9083] ? file_end_write+0x250/0x250 [ 253.511143][ T9083] ? __fget_files+0x3fc/0x460 [ 253.515826][ T9083] ? __fdget_pos+0x2a3/0x330 [ 253.520412][ T9083] ? ksys_write+0x74/0x260 [ 253.524829][ T9083] ksys_write+0x151/0x260 [ 253.529155][ T9083] ? __ia32_sys_read+0x90/0x90 [ 253.533921][ T9083] ? lockdep_hardirqs_on+0x98/0x150 [ 253.539143][ T9083] do_syscall_64+0x55/0xb0 [ 253.543574][ T9083] ? clear_bhb_loop+0x40/0x90 [ 253.548258][ T9083] ? clear_bhb_loop+0x40/0x90 [ 253.552940][ T9083] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 253.558838][ T9083] RIP: 0033:0x7fd71219e0d9 [ 253.563248][ T9083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.582854][ T9083] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.591273][ T9083] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 253.599270][ T9083] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000004 [ 253.607256][ T9083] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 253.615258][ T9083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.623234][ T9083] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 253.631220][ T9083] [ 253.906009][ T9093] netlink: 'syz.1.1127': attribute type 39 has an invalid length. [ 254.496379][ T9093] hsr_slave_1 (unregistering): left promiscuous mode [ 254.697550][ T9098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1127'. [ 254.714223][ T9107] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 254.723577][ T9107] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 254.745934][ T9106] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 254.770674][ T9106] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 255.093635][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.369974][ T9130] netlink: 'syz.2.1140': attribute type 10 has an invalid length. [ 255.747623][ T41] tipc: Subscription rejected, illegal request [ 255.946534][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.953127][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.544283][ T9164] FAULT_INJECTION: forcing a failure. [ 256.544283][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 256.571559][ T9164] CPU: 1 PID: 9164 Comm: syz.1.1154 Not tainted syzkaller #0 [ 256.579009][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.589114][ T9164] Call Trace: [ 256.592433][ T9164] [ 256.595410][ T9164] dump_stack_lvl+0x18c/0x250 [ 256.600134][ T9164] ? sctp_sendmsg+0x1519/0x27b0 [ 256.605031][ T9164] ? ___sys_sendmsg+0x2a6/0x360 [ 256.609903][ T9164] ? show_regs_print_info+0x20/0x20 [ 256.615124][ T9164] ? load_image+0x420/0x420 [ 256.619684][ T9164] should_fail_ex+0x394/0x4c0 [ 256.624393][ T9164] should_failslab+0x9/0x20 [ 256.628914][ T9164] slab_pre_alloc_hook+0x59/0x300 [ 256.633964][ T9164] ? sctp_add_bind_addr+0x8c/0x360 [ 256.639101][ T9164] __kmem_cache_alloc_node+0x53/0x250 [ 256.644502][ T9164] ? sctp_add_bind_addr+0x8c/0x360 [ 256.649632][ T9164] kmalloc_trace+0x2a/0xe0 [ 256.654073][ T9164] sctp_add_bind_addr+0x8c/0x360 [ 256.659035][ T9164] sctp_copy_local_addr_list+0x31b/0x4e0 [ 256.664689][ T9164] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 256.670428][ T9164] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 256.676519][ T9164] ? sctp_v6_is_any+0x64/0x70 [ 256.681214][ T9164] ? sctp_copy_one_addr+0x8c/0x350 [ 256.686366][ T9164] sctp_bind_addr_copy+0xb3/0x3c0 [ 256.691413][ T9164] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 256.697767][ T9164] sctp_connect_new_asoc+0x2f9/0x6a0 [ 256.703082][ T9164] ? __sctp_connect+0xd80/0xd80 [ 256.707952][ T9164] ? __local_bh_enable_ip+0x13a/0x1c0 [ 256.713357][ T9164] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 256.718926][ T9164] ? security_sctp_bind_connect+0x89/0xb0 [ 256.724672][ T9164] sctp_sendmsg+0x1519/0x27b0 [ 256.729420][ T9164] ? sctp_getsockopt+0xb60/0xb60 [ 256.734391][ T9164] ? aa_af_perm+0x330/0x330 [ 256.738924][ T9164] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 256.745364][ T9164] ? sock_rps_record_flow+0x19/0x3f0 [ 256.750677][ T9164] ? inet_sendmsg+0xce/0x2a0 [ 256.755306][ T9164] ? inet_send_prepare+0x250/0x250 [ 256.760443][ T9164] ____sys_sendmsg+0x61b/0x980 [ 256.765235][ T9164] ? __asan_memset+0x22/0x40 [ 256.769840][ T9164] ? __sys_sendmsg_sock+0x30/0x30 [ 256.774898][ T9164] ? __import_iovec+0x5f2/0x850 [ 256.779789][ T9164] ? import_iovec+0x73/0xa0 [ 256.784325][ T9164] ___sys_sendmsg+0x2a6/0x360 [ 256.789030][ T9164] ? __sys_sendmsg+0x2b0/0x2b0 [ 256.793858][ T9164] ? __lock_acquire+0x7d80/0x7d80 [ 256.798957][ T9164] __se_sys_sendmsg+0x1d0/0x2c0 [ 256.803832][ T9164] ? __x64_sys_sendmsg+0x80/0x80 [ 256.808822][ T9164] ? lockdep_hardirqs_on+0x98/0x150 [ 256.814047][ T9164] do_syscall_64+0x55/0xb0 [ 256.818477][ T9164] ? clear_bhb_loop+0x40/0x90 [ 256.823166][ T9164] ? clear_bhb_loop+0x40/0x90 [ 256.827865][ T9164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 256.833773][ T9164] RIP: 0033:0x7fd71219e0d9 [ 256.838204][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.857824][ T9164] RSP: 002b:00007fd713027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.866256][ T9164] RAX: ffffffffffffffda RBX: 00007fd712425fa0 RCX: 00007fd71219e0d9 [ 256.874268][ T9164] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 256.882256][ T9164] RBP: 00007fd713027090 R08: 0000000000000000 R09: 0000000000000000 [ 256.890247][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.898242][ T9164] R13: 00007fd712426038 R14: 00007fd712425fa0 R15: 00007ffc7c7818d8 [ 256.906263][ T9164] [ 257.320558][ T9168] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1156'. [ 257.355689][ T9168] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1156'. [ 257.946823][ T9189] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 258.335817][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.354159][ T9189] bridge_slave_1: left allmulticast mode [ 258.367843][ T9189] bridge_slave_1: left promiscuous mode [ 258.401429][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.477741][ T9189] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 258.851476][ T9214] bridge_slave_0: left promiscuous mode [ 258.885914][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.254621][ T9213] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1171'. [ 259.337334][ T9225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.525238][ T9229] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1176'. [ 259.558362][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1176'. [ 260.473988][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 260.617950][ T9261] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1188'. [ 260.906503][ T9270] netlink: 'syz.3.1190': attribute type 10 has an invalid length. [ 260.956759][ T9270] netlink: 'syz.3.1190': attribute type 12 has an invalid length. [ 261.006476][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1190'. [ 262.000046][ T9298] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 262.091824][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.116706][ T9298] bridge_slave_1: left allmulticast mode [ 262.137228][ T9298] bridge_slave_1: left promiscuous mode [ 262.167299][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.220708][ T9301] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1201'. [ 262.802013][ T9313] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1205'. [ 263.290106][ T9335] FAULT_INJECTION: forcing a failure. [ 263.290106][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.321042][ T9335] CPU: 0 PID: 9335 Comm: syz.2.1216 Not tainted syzkaller #0 [ 263.328476][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.338557][ T9335] Call Trace: [ 263.341865][ T9335] [ 263.344813][ T9335] dump_stack_lvl+0x18c/0x250 [ 263.349511][ T9335] ? show_regs_print_info+0x20/0x20 [ 263.354719][ T9335] ? load_image+0x420/0x420 [ 263.359244][ T9335] ? __lock_acquire+0x7d80/0x7d80 [ 263.364301][ T9335] should_fail_ex+0x394/0x4c0 [ 263.369004][ T9335] _copy_from_user+0x2f/0xe0 [ 263.373616][ T9335] bpf_test_init+0xde/0x140 [ 263.378148][ T9335] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 263.383544][ T9335] ? __lock_acquire+0x7d80/0x7d80 [ 263.388583][ T9335] ? dev_put+0x80/0x80 [ 263.392684][ T9335] ? dev_put+0x80/0x80 [ 263.396776][ T9335] bpf_prog_test_run+0x31f/0x390 [ 263.401746][ T9335] __sys_bpf+0x49d/0x890 [ 263.405998][ T9335] ? bpf_link_show_fdinfo+0x390/0x390 [ 263.411381][ T9335] ? lock_chain_count+0x20/0x20 [ 263.416232][ T9335] __x64_sys_bpf+0x7c/0x90 [ 263.420645][ T9335] do_syscall_64+0x55/0xb0 [ 263.425064][ T9335] ? clear_bhb_loop+0x40/0x90 [ 263.429735][ T9335] ? clear_bhb_loop+0x40/0x90 [ 263.434411][ T9335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.440301][ T9335] RIP: 0033:0x7f5f8039e0d9 [ 263.444710][ T9335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.464318][ T9335] RSP: 002b:00007f5f812f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 263.472726][ T9335] RAX: ffffffffffffffda RBX: 00007f5f80625fa0 RCX: 00007f5f8039e0d9 [ 263.480722][ T9335] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 000000000000000a [ 263.488705][ T9335] RBP: 00007f5f812f1090 R08: 0000000000000000 R09: 0000000000000000 [ 263.496672][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.504662][ T9335] R13: 00007f5f80626038 R14: 00007f5f80625fa0 R15: 00007fff8ac03068 [ 263.512660][ T9335] [ 263.907659][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.950558][ T9353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.001394][ T9353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.057409][ T9353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.101269][ T9353] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 264.108820][ T9353] batman_adv: batadv0: Removing interface: netdevsim0 [ 264.148306][ T9351] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1220'. [ 264.275882][ T9351] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1220'. [ 264.412242][ T9345] delete_channel: no stack [ 264.462735][ T9365] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 264.554403][ T9365] team0: Port device wlan1 added [ 265.236656][ T9388] netlink: 'syz.2.1230': attribute type 2 has an invalid length. [ 265.250723][ T9388] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 265.261486][ T9388] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1230'. [ 265.465091][ T9390] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1233'. [ 267.691224][ T9437] netlink: 'syz.2.1253': attribute type 21 has an invalid length. [ 267.730434][ T9437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1253'. [ 267.739553][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'. [ 268.129984][ T9450] can: request_module (can-proto-0) failed. [ 268.590001][ T9463] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1258'. [ 271.934800][ T9482] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1265'. [ 272.535602][ T9498] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1273'. [ 272.572532][ T9502] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1272'. [ 273.201587][ T9515] netlink: 'syz.1.1278': attribute type 9 has an invalid length. [ 273.209484][ T9515] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1278'. [ 273.260825][ T9515] sock: sock_set_timeout: `syz.1.1278' (pid 9515) tries to set negative timeout [ 273.672052][ T9531] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1283'. [ 277.247210][ T9549] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 277.489420][ T9557] netlink: 'syz.2.1292': attribute type 9 has an invalid length. [ 277.518837][ T9557] netlink: 'syz.2.1292': attribute type 23 has an invalid length. [ 277.550453][ T9557] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.1292'. [ 277.613733][ T9559] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1294'. [ 277.645751][ T9564] ================================================================== [ 277.653863][ T9564] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 277.661692][ T9564] Write of size 72 at addr ffff888026e72610 by task syz.0.1297/9564 [ 277.669674][ T9564] [ 277.672011][ T9564] CPU: 0 PID: 9564 Comm: syz.0.1297 Not tainted syzkaller #0 [ 277.679402][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.689504][ T9564] Call Trace: [ 277.692803][ T9564] [ 277.695750][ T9564] dump_stack_lvl+0x18c/0x250 [ 277.700453][ T9564] ? read_lock_is_recursive+0x20/0x20 [ 277.705850][ T9564] ? show_regs_print_info+0x20/0x20 [ 277.711073][ T9564] ? load_image+0x420/0x420 [ 277.715593][ T9564] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 277.721050][ T9564] ? __virt_addr_valid+0x10c/0x380 [ 277.726158][ T9564] ? __virt_addr_valid+0x10c/0x380 [ 277.731269][ T9564] ? __virt_addr_valid+0x10c/0x380 [ 277.736381][ T9564] print_report+0xa8/0x210 [ 277.740792][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 277.745904][ T9564] kasan_report+0x117/0x150 [ 277.750408][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 277.755527][ T9564] kasan_check_range+0x241/0x290 [ 277.760463][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 277.765571][ T9564] __asan_memcpy+0x40/0x70 [ 277.769987][ T9564] __bpf_get_stackid+0x6c7/0x900 [ 277.774929][ T9564] bpf_get_stackid_pe+0x343/0x410 [ 277.779955][ T9564] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 277.785411][ T9564] bpf_overflow_handler+0x1fc/0x510 [ 277.790608][ T9564] ? perf_prepare_header+0x1e0/0x1e0 [ 277.795884][ T9564] ? bpf_overflow_handler+0xde/0x510 [ 277.801166][ T9564] ? tp_perf_event_destroy+0x20/0x20 [ 277.806448][ T9564] ? perf_trace_preemptirq_template+0xac/0x330 [ 277.812635][ T9564] ? __perf_event_account_interrupt+0x187/0x280 [ 277.818874][ T9564] __perf_event_overflow+0x461/0x660 [ 277.824157][ T9564] perf_swevent_event+0x319/0x570 [ 277.829175][ T9564] ? perf_tp_event+0x1550/0x1550 [ 277.834110][ T9564] ___perf_sw_event+0x4ab/0x730 [ 277.838957][ T9564] ? ___perf_sw_event+0x19e/0x730 [ 277.843976][ T9564] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 277.850390][ T9564] ? __lock_acquire+0x1336/0x7d80 [ 277.855415][ T9564] ? rep_movs_alternative+0x4a/0x90 [ 277.860617][ T9564] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 277.866592][ T9564] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 277.873788][ T9564] ? lock_chain_count+0x20/0x20 [ 277.878637][ T9564] __perf_sw_event+0x139/0x270 [ 277.883399][ T9564] do_user_addr_fault+0x1242/0x12d0 [ 277.888598][ T9564] ? rcu_is_watching+0x15/0xb0 [ 277.893359][ T9564] exc_page_fault+0x64/0x100 [ 277.897949][ T9564] asm_exc_page_fault+0x26/0x30 [ 277.902830][ T9564] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 277.908640][ T9564] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 277.928248][ T9564] RSP: 0018:ffffc900032efbd0 EFLAGS: 00050202 [ 277.934336][ T9564] RAX: ffffffff8433b501 RBX: 0000000000000565 RCX: 00000000000004e5 [ 277.942317][ T9564] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807630c080 [ 277.950294][ T9564] RBP: ffffc900032efd20 R08: 0000000000000004 R09: 0000000000000005 [ 277.958264][ T9564] R10: dffffc0000000000 R11: ffffed100ec618ac R12: 00002000000024e5 [ 277.966236][ T9564] R13: 1ffff9200065dfbd R14: ffff88807630c000 R15: 0000200000001f80 [ 277.974210][ T9564] ? rcuref_put_slowpath+0x111/0x150 [ 277.979518][ T9564] _copy_from_user+0x8b/0xe0 [ 277.984105][ T9564] generic_map_update_batch+0x58c/0x800 [ 277.989651][ T9564] ? rcu_read_unlock+0xa0/0xa0 [ 277.994425][ T9564] ? __fdget+0x180/0x210 [ 277.998670][ T9564] ? rcu_read_unlock+0xa0/0xa0 [ 278.003427][ T9564] bpf_map_do_batch+0x3f2/0x600 [ 278.008275][ T9564] ? bpf_lsm_audit_rule_match+0x10/0x10 [ 278.013823][ T9564] __sys_bpf+0x381/0x890 [ 278.018061][ T9564] ? bpf_link_show_fdinfo+0x390/0x390 [ 278.023434][ T9564] ? lock_chain_count+0x20/0x20 [ 278.028288][ T9564] __x64_sys_bpf+0x7c/0x90 [ 278.032699][ T9564] do_syscall_64+0x55/0xb0 [ 278.037111][ T9564] ? clear_bhb_loop+0x40/0x90 [ 278.041787][ T9564] ? clear_bhb_loop+0x40/0x90 [ 278.046459][ T9564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.052352][ T9564] RIP: 0033:0x7f3e4fb9e0d9 [ 278.056782][ T9564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.076385][ T9564] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.084795][ T9564] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 278.092761][ T9564] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 278.100728][ T9564] RBP: 00007f3e4fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 278.108690][ T9564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.116651][ T9564] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 278.124627][ T9564] [ 278.127640][ T9564] [ 278.129950][ T9564] Allocated by task 9564: [ 278.134262][ T9564] kasan_set_track+0x4e/0x70 [ 278.138852][ T9564] __kasan_kmalloc+0x8f/0xa0 [ 278.143433][ T9564] __kmalloc_node+0xb6/0x240 [ 278.148016][ T9564] bpf_map_area_alloc+0x5e/0x110 [ 278.152957][ T9564] prealloc_elems_and_freelist+0x86/0x1c0 [ 278.158676][ T9564] stack_map_alloc+0x32b/0x4b0 [ 278.163432][ T9564] map_create+0x877/0x12f0 [ 278.167840][ T9564] __sys_bpf+0x651/0x890 [ 278.172073][ T9564] __x64_sys_bpf+0x7c/0x90 [ 278.176478][ T9564] do_syscall_64+0x55/0xb0 [ 278.180887][ T9564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.186789][ T9564] [ 278.189116][ T9564] The buggy address belongs to the object at ffff888026e72600 [ 278.189116][ T9564] which belongs to the cache kmalloc-cg-64 of size 64 [ 278.203259][ T9564] The buggy address is located 16 bytes inside of [ 278.203259][ T9564] allocated 40-byte region [ffff888026e72600, ffff888026e72628) [ 278.217226][ T9564] [ 278.219540][ T9564] The buggy address belongs to the physical page: [ 278.225954][ T9564] page:ffffea00009b9c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26e72 [ 278.236115][ T9564] memcg:ffff888023d7ec01 [ 278.240345][ T9564] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 278.248332][ T9564] page_type: 0xffffffff() [ 278.252664][ T9564] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 dead000000000001 [ 278.261246][ T9564] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888023d7ec01 [ 278.269815][ T9564] page dumped because: kasan: bad access detected [ 278.276230][ T9564] page_owner tracks the page as allocated [ 278.281942][ T9564] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5771, tgid 5771 (syz-executor), ts 211880770879, free_ts 211848176135 [ 278.300346][ T9564] post_alloc_hook+0x1c1/0x200 [ 278.305113][ T9564] get_page_from_freelist+0x2181/0x22a0 [ 278.310649][ T9564] __alloc_pages+0x1f0/0x460 [ 278.315227][ T9564] alloc_slab_page+0x5d/0x180 [ 278.319893][ T9564] new_slab+0x87/0x2d0 [ 278.323969][ T9564] ___slab_alloc+0xc5c/0x12f0 [ 278.328633][ T9564] __kmem_cache_alloc_node+0x11f/0x250 [ 278.334090][ T9564] kmalloc_trace+0x2a/0xe0 [ 278.338600][ T9564] alloc_fdtable+0xca/0x2c0 [ 278.343095][ T9564] dup_fd+0x747/0xa20 [ 278.347072][ T9564] copy_files+0xaf/0x110 [ 278.351307][ T9564] copy_process+0x157d/0x3da0 [ 278.355976][ T9564] kernel_clone+0x24b/0x8a0 [ 278.360472][ T9564] __x64_sys_clone+0x1b7/0x230 [ 278.365400][ T9564] do_syscall_64+0x55/0xb0 [ 278.369809][ T9564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.375699][ T9564] page last free stack trace: [ 278.380357][ T9564] free_unref_page_prepare+0x7d7/0x8f0 [ 278.385810][ T9564] free_unref_page_list+0xbe/0x860 [ 278.390911][ T9564] release_pages+0x208a/0x2300 [ 278.395666][ T9564] tlb_flush_mmu+0x379/0x510 [ 278.400275][ T9564] tlb_finish_mmu+0xf4/0x220 [ 278.404863][ T9564] exit_mmap+0x428/0xb90 [ 278.409100][ T9564] __mmput+0x118/0x3a0 [ 278.413162][ T9564] exit_mm+0x23f/0x340 [ 278.417228][ T9564] do_exit+0x909/0x2530 [ 278.421398][ T9564] do_group_exit+0x22d/0x2f0 [ 278.425983][ T9564] __x64_sys_exit_group+0x3f/0x40 [ 278.431003][ T9564] do_syscall_64+0x55/0xb0 [ 278.435411][ T9564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.441297][ T9564] [ 278.443609][ T9564] Memory state around the buggy address: [ 278.449227][ T9564] ffff888026e72500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 278.457281][ T9564] ffff888026e72580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 278.465333][ T9564] >ffff888026e72600: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 278.473379][ T9564] ^ [ 278.478734][ T9564] ffff888026e72680: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 278.486784][ T9564] ffff888026e72700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 278.494833][ T9564] ================================================================== [ 278.502897][ T9564] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 278.510081][ T9564] CPU: 0 PID: 9564 Comm: syz.0.1297 Not tainted syzkaller #0 [ 278.517448][ T9564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.527494][ T9564] Call Trace: [ 278.530783][ T9564] [ 278.533710][ T9564] dump_stack_lvl+0x18c/0x250 [ 278.538389][ T9564] ? show_regs_print_info+0x20/0x20 [ 278.543594][ T9564] ? load_image+0x420/0x420 [ 278.548091][ T9564] panic+0x2ca/0x720 [ 278.552003][ T9564] ? __lock_acquire+0x7d80/0x7d80 [ 278.557042][ T9564] ? bpf_jit_dump+0xd0/0xd0 [ 278.561559][ T9564] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 278.567460][ T9564] ? _raw_spin_unlock+0x40/0x40 [ 278.572309][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 278.577443][ T9564] check_panic_on_warn+0x84/0xa0 [ 278.582379][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 278.587485][ T9564] end_report+0x6f/0x130 [ 278.591723][ T9564] kasan_report+0x128/0x150 [ 278.596227][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 278.601350][ T9564] kasan_check_range+0x241/0x290 [ 278.606285][ T9564] ? __bpf_get_stackid+0x6c7/0x900 [ 278.611396][ T9564] __asan_memcpy+0x40/0x70 [ 278.615808][ T9564] __bpf_get_stackid+0x6c7/0x900 [ 278.620749][ T9564] bpf_get_stackid_pe+0x343/0x410 [ 278.625771][ T9564] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 278.631220][ T9564] bpf_overflow_handler+0x1fc/0x510 [ 278.636439][ T9564] ? perf_prepare_header+0x1e0/0x1e0 [ 278.641718][ T9564] ? bpf_overflow_handler+0xde/0x510 [ 278.647006][ T9564] ? tp_perf_event_destroy+0x20/0x20 [ 278.652289][ T9564] ? perf_trace_preemptirq_template+0xac/0x330 [ 278.658443][ T9564] ? __perf_event_account_interrupt+0x187/0x280 [ 278.664679][ T9564] __perf_event_overflow+0x461/0x660 [ 278.669964][ T9564] perf_swevent_event+0x319/0x570 [ 278.674985][ T9564] ? perf_tp_event+0x1550/0x1550 [ 278.679922][ T9564] ___perf_sw_event+0x4ab/0x730 [ 278.684789][ T9564] ? ___perf_sw_event+0x19e/0x730 [ 278.689835][ T9564] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 278.696258][ T9564] ? __lock_acquire+0x1336/0x7d80 [ 278.701286][ T9564] ? rep_movs_alternative+0x4a/0x90 [ 278.706490][ T9564] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 278.712470][ T9564] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 278.719665][ T9564] ? lock_chain_count+0x20/0x20 [ 278.724512][ T9564] __perf_sw_event+0x139/0x270 [ 278.729273][ T9564] do_user_addr_fault+0x1242/0x12d0 [ 278.734468][ T9564] ? rcu_is_watching+0x15/0xb0 [ 278.739231][ T9564] exc_page_fault+0x64/0x100 [ 278.743818][ T9564] asm_exc_page_fault+0x26/0x30 [ 278.748667][ T9564] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 278.754475][ T9564] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 278.774091][ T9564] RSP: 0018:ffffc900032efbd0 EFLAGS: 00050202 [ 278.780154][ T9564] RAX: ffffffff8433b501 RBX: 0000000000000565 RCX: 00000000000004e5 [ 278.788119][ T9564] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88807630c080 [ 278.796084][ T9564] RBP: ffffc900032efd20 R08: 0000000000000004 R09: 0000000000000005 [ 278.804047][ T9564] R10: dffffc0000000000 R11: ffffed100ec618ac R12: 00002000000024e5 [ 278.812011][ T9564] R13: 1ffff9200065dfbd R14: ffff88807630c000 R15: 0000200000001f80 [ 278.819979][ T9564] ? rcuref_put_slowpath+0x111/0x150 [ 278.825264][ T9564] _copy_from_user+0x8b/0xe0 [ 278.829847][ T9564] generic_map_update_batch+0x58c/0x800 [ 278.835390][ T9564] ? rcu_read_unlock+0xa0/0xa0 [ 278.840148][ T9564] ? __fdget+0x180/0x210 [ 278.844385][ T9564] ? rcu_read_unlock+0xa0/0xa0 [ 278.849139][ T9564] bpf_map_do_batch+0x3f2/0x600 [ 278.853990][ T9564] ? bpf_lsm_audit_rule_match+0x10/0x10 [ 278.859537][ T9564] __sys_bpf+0x381/0x890 [ 278.863777][ T9564] ? bpf_link_show_fdinfo+0x390/0x390 [ 278.869149][ T9564] ? lock_chain_count+0x20/0x20 [ 278.874007][ T9564] __x64_sys_bpf+0x7c/0x90 [ 278.878418][ T9564] do_syscall_64+0x55/0xb0 [ 278.882835][ T9564] ? clear_bhb_loop+0x40/0x90 [ 278.887507][ T9564] ? clear_bhb_loop+0x40/0x90 [ 278.892202][ T9564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.898091][ T9564] RIP: 0033:0x7f3e4fb9e0d9 [ 278.902497][ T9564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.922095][ T9564] RSP: 002b:00007f3e50b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.930501][ T9564] RAX: ffffffffffffffda RBX: 00007f3e4fe25fa0 RCX: 00007f3e4fb9e0d9 [ 278.938486][ T9564] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 278.946450][ T9564] RBP: 00007f3e4fc35024 R08: 0000000000000000 R09: 0000000000000000 [ 278.954411][ T9564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.962375][ T9564] R13: 00007f3e4fe26038 R14: 00007f3e4fe25fa0 R15: 00007fff401b32d8 [ 278.970346][ T9564] [ 278.973608][ T9564] Kernel Offset: disabled [ 278.977919][ T9564] Rebooting in 86400 seconds..