last executing test programs: 4.70414075s ago: executing program 4 (id=4087): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0) 4.532986897s ago: executing program 1 (id=4090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xd, 0x4, &(0x7f0000001080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f00000010c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001100)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0xb5}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r3, 0x18000000000002a0, 0x5b8, 0x0, &(0x7f00000012c0)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001380)={r0, &(0x7f0000001300)="a034461caf82ee1e28", &(0x7f0000001340)=""/17}, 0x20) 4.327619208s ago: executing program 4 (id=4092): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x1800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @alu={0x7, 0x0, 0x9, 0x3, 0x0, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 3.446023476s ago: executing program 1 (id=4097): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000ffffffef0000000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 3.383685722s ago: executing program 4 (id=4098): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0f90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.839566726s ago: executing program 2 (id=4103): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000840)="0011", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000005c0)=[{0x800, 0x4, 0x80000000}, {0xa, 0x1, 0x0, 0xc}], 0x10, 0x40004}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(0x3) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='n', 0x1}], 0x1}, 0x2600c055) recvmsg$unix(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000dc0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000e40)=r6, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r8}, &(0x7f0000000b40)=0x20000, &(0x7f0000000b80)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r8, &(0x7f0000000c00)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x1003, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000800)={r0, &(0x7f0000000840), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500740000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) 2.780961902s ago: executing program 4 (id=4106): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x2, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x1800}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x0, 0x1800}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.323591108s ago: executing program 1 (id=4107): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xa3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.067990283s ago: executing program 4 (id=4109): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x803f00}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}, {0x95, 0x0, 0x0, 0x700}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000001dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0xd, 0x0, 0x0, 0xa, 0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x0, 0x8}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 1.939135666s ago: executing program 0 (id=4110): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r0], &(0x7f0000000540)=""/151, 0x29, 0x97, 0x1}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbd75}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='GPL\x00', 0x9, 0xe0, &(0x7f0000000d80)=""/224, 0x100, 0x45, '\x00', 0x0, 0x38, r1, 0x8, &(0x7f0000000e80)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x10105, r0, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, 0x1], &(0x7f0000000f40)=[{0x101, 0x2, 0x0, 0xc}, {0x0, 0x5, 0x1, 0x3}]}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={0xffffffffffffffff, 0x6db, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1c, 0x1b, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000001040d0000000000020000002a966cdfbcb7c522a168b81d8afba3db13c07264b30fb08266e759604c31f9bc6505d2762b21a0e76d809b7bcf561807378607a41bdf74d8ad8dc62e2c3fbd3c0982840eec2b6829991dfd88a3f3109fa2840756c7fcc724a4423a22b5552e91c083e772397310d85bde097fd451b74bb351616ef32e265b33f59623b20451cd28d713d416916fcb2a34ce40", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r2], &(0x7f0000000a00)='syzkaller\x00', 0x2004, 0xa8, &(0x7f0000000a40)=""/168, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x3, 0xc, 0x90d, 0x2}, 0x10, 0x0, r3, 0x1, &(0x7f0000001080), &(0x7f00000010c0)=[{0x4, 0x1, 0xc}], 0x10, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x5, 0x4, 0xc, 0xc}, 0x50) r6 = socket$kcm(0xa, 0x3, 0x87) recvmsg$kcm(r6, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0xc2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r7, r5}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0xffffff2d, &(0x7f00000017c0)=[{&(0x7f0000001800)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0x4d44c, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x74, 0x0, @perf_bp={0x0, 0x5}, 0x10810, 0x8, 0x400, 0x9, 0xc, 0x9, 0x4, 0x0, 0x3, 0x0, 0x7f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.938737016s ago: executing program 2 (id=4111): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000380)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x18, &(0x7f0000000580)=[{&(0x7f00000005c0)="a0005bf8", 0x4}, {&(0x7f0000000680)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000f00)={&(0x7f00000006c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x1, 0xf9, "a12ce5f17dfe3efbf7e69bd8be8f8087ca7949d297e4178becae78d7a03d45889184bcfa8e1bbca42abb90191e1a42b7bd6e8959f4df3d47fa80d7bd672339", 0x23}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000740)}, {&(0x7f0000000880)="606a9b8aecd6ceb379006b18b43287852a208d4a8862349ce87bae2b084ab0155d1346131741a5b3393f7ef52261c7803c91f88411b080d2f17c8d0d220b1b2d5da16ff3b9167e182641e9942bdd5945b5daf46880b9f6c618ed23febdebf13cc9ef39d89ad7beb7ab4bc2eafe22d74cefff64e6cbc31ffd88cfd1683b2a203425c355c0d42c352d9bd08efdc1bc71d13af1d0e46a8b79b9ec0688fad56794e1f613f1913152fba4e9cb01b20d456197ab747f05f1", 0xb5}, {&(0x7f0000000940)="e7037b374e4a1f7b3144de10e3dbf27dd328a4ac77311b6b76cb5dfee9f4663310811f597dc0a806de175c2caf8b371ed7225a010b3c829755ca9588c2855e93d08d72ab469c719d562c306e7035467a70022a493eb6a5d459f3e279329b1917493db93d96d6a4383cdd547a9f46206ca479aef3916bb277609b87c3d8ec089d11b2e2b6ff129e9114d6b009eca75df0af7d5bc3667f386e2df2128b5d4f30c6d137a3710e4e29c8565cb686c1ff80944dafae2f8b5326488eb5e2cb322e5a99aedeef92fc21b934782c0972d894e58ccdfc9f5b916e47c1b8ba83740b677cd5498af4f4fc48bd4c024a96e7e8fc45cf9a8a5d", 0xf3}, {&(0x7f0000000a80)="e53b0e680903325127c1d7e084d9dd552f1f055ba3981d4235b947bde0b0de3536c80017883f940c3b07165648ff8c5069a6a604443cdc97789248b203423972061310e5a59c99d744e7941e55435617de40cd060cbed1", 0x57}, {&(0x7f0000000b00)="e9a2e1ebfef461a93e821221ec6e734271579e0208ce372c9fd33cb41017b2", 0x1f}, {&(0x7f0000000c40)="b591ddd31c2dcac0994f08bb02c5975f0ac812abae6a34ce24e0b8b82a5097918aa01d224c410aeaa8ab34bf2cad49ce695020513499d9c97dff622c02aac63c5058a496d454e8e3a73fe8f69b690ffcdbb7793c68835cd5c9fa0dd8e193d92cd311f3c4a1f6c670b11b235967d7085a0ac167ad9ba46227ae3d8b8a7fa216321e1fd1558d7227f6b216a0dfc25ebcbe891b801d93af2b4741a3daf009d20c9aca82fcb4a21e1e6a426e5c3c40be8919261cdbfe6a5b8b56d75d6bc939d6d7a45309bcfe21a49777e9afc756506499d0acd8aacd53fc270276d6ee957b2eb296d16288b8af8ab44d0bfee57f77bd2264da2f361e7093ed1d", 0xf8}, {&(0x7f0000000d40)="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", 0xfc}, {&(0x7f0000000e40)="411b39be7b0315b8656ce771aa765c270238e6029db31590669ecae0b23c39aebd220993752a668aa5", 0x29}], 0x8}, 0x844) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, 0x0, &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0xfffffffc, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="8000be6db02f1818", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.919206138s ago: executing program 3 (id=4112): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, 0x0, &(0x7f0000000600)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x4, 0xd, &(0x7f0000002a80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32], &(0x7f0000002800)='GPL\x00', 0x5, 0xc3, &(0x7f0000002840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000002940), 0x8, 0x10, &(0x7f0000002980), 0x10}, 0x94) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0)=0x2000000, &(0x7f0000000000)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r1, &(0x7f0000000c80)='\x00', 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000008c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000002100)='GPL\x00', 0x4, 0xfd90, &(0x7f0000002140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002240), 0x366, 0x10, &(0x7f0000002280), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{r6}, &(0x7f0000002440), &(0x7f0000002480)=r2}, 0x20) sendmsg$inet(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002540)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000002580)={0x0, 0x1400, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/229, 0xec1}], 0x1}, 0xc10e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000dc0)={&(0x7f0000000e00)=""/86, 0x56, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000040000000800000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d00000006000000040000000900000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f1fffffffaffffff0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000bfa20000000000ffff85000000010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.623396578s ago: executing program 0 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0500000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000412022206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000070000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.608018549s ago: executing program 3 (id=4114): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x1d4}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000001780)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 2) 1.158242474s ago: executing program 0 (id=4115): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1b, 0x1b, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x7, 0xc445}], "a7ac93"}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000340)=""/4, 0x39, 0x4, 0x1, 0x2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xbf9e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@arena={0x21, 0x0, 0x0, 0x35, 0x20400, 0xffffffffffffffff, 0x77a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@arena={0x21, 0x0, 0x0, 0x35, 0x20400, 0xffffffffffffffff, 0x77a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7fffffff, 0x8}, 0xc) (async) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x7fffffff, 0x8}, 0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x1d, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6800}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4d8}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x5, 0x4, 0x1}, @ldst={0x3, 0x3, 0x6, 0x0, 0x8, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x5bc7, 0x6a, &(0x7f00000001c0)=""/106, 0x41000, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0x8, 0xcbfb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r3, r4, 0x1, 0xffffffffffffffff, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0x327c}, 0x94) r10 = perf_event_open(&(0x7f0000000800)={0x6, 0x80, 0x9, 0x1, 0x2, 0xd, 0x0, 0x6, 0x8da6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f00000007c0), 0x1}, 0x2, 0x6, 0x9, 0x0, 0xc79, 0x80, 0x8000, 0x0, 0x6, 0x0, 0x7fff}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000880)) (async) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000880)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0xfffffffa, 0x0}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xe, &(0x7f00000008c0)=@raw=[@jmp={0x5, 0x0, 0x9, 0xa, 0x3, 0xfffffffffffffff8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x0, 0x5, 0x0, 0x6, 0x8}, @jmp={0x5, 0x1, 0x5, 0x0, 0x5, 0x2, 0x8}], &(0x7f0000000940)='GPL\x00', 0x7, 0x49, &(0x7f0000000980)=""/73, 0x41000, 0x35, '\x00', r1, @fallback=0x26, r2, 0x8, &(0x7f0000000a00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0xf, 0x10, 0x3}, 0x10, r11, r9, 0x2, 0x0, &(0x7f0000000ac0)=[{0x3, 0x1, 0xc, 0x6}, {0x0, 0x3}], 0x10, 0x81}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000bc0)='\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000bc0)='\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r8, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r9}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0xff, '\x00', r1, r9, 0x1, 0x3, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xe, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xb8a}, [@exit, @map_fd={0x18, 0x4, 0x1, 0x0, r13}, @ldst={0x0, 0x1, 0x0, 0x3, 0x4, 0x30, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r8}, @ldst={0x1, 0x0, 0x1, 0x3, 0x6, 0x6, 0x8}]}, &(0x7f0000000d40)='syzkaller\x00', 0x1, 0xa1, &(0x7f0000000d80)=""/161, 0x40f00, 0x10, '\x00', r1, @fallback=0x10, r4, 0x8, &(0x7f0000000e40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0x0, 0xff, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000f80)=[r14, r8, r0, r3, 0xffffffffffffffff, r3, r15, r0, r4], 0x0, 0x10, 0xc68}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@int={0x1, 0x0, 0x0, 0x1, 0x4, 0x1b, 0x0, 0x3, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x3f, 0x0, 0xca20b8a5fad85840, 0x5f, 0x2e, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000001300)=""/228, 0x3f, 0xe4, 0x1, 0x100, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x1f, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb3}, [@jmp={0x5, 0x1, 0xc, 0x8, 0x4, 0xc, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_val={0x18, 0x1, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xcf}, @generic={0x9, 0xd, 0xf, 0x8001, 0x8}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst={0x3, 0x0, 0x2, 0x2, 0x2, 0x30, 0xc}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f0000001180)='syzkaller\x00', 0x2, 0xf3, &(0x7f00000011c0)=""/243, 0x41100, 0x0, '\x00', 0x0, 0x25, r16, 0x8, &(0x7f0000001440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0x6, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[r6, r5], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1}}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000001600)=""/94, 0x3f, 0x5e, 0x0, 0x2}, 0x28) (async) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x1}}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x61]}}, &(0x7f0000001600)=""/94, 0x3f, 0x5e, 0x0, 0x2}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x3, '\x00', 0x0, r17, 0x2, 0x0, 0x2}, 0x50) (async) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r4, 0x3, '\x00', 0x0, r17, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, r18, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000017c0)={0xf}, 0x8) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000017c0)={0xf}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x7fffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001800)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r14, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x1b, &(0x7f0000001840)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0x9, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @ldst={0x1, 0x3, 0x4, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000001940)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, r17, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000019c0)=[r20, r3, r13], &(0x7f0000001a00)=[{0x4, 0x1, 0x1}, {0x1, 0x2, 0x9, 0x6}], 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x1b, &(0x7f0000001840)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r18}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0x9, 0xa, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @ldst={0x1, 0x3, 0x4, 0x0, 0x8, 0x50, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}], &(0x7f0000001940)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x0, r17, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000019c0)=[r20, r3, r13], &(0x7f0000001a00)=[{0x4, 0x1, 0x1}, {0x1, 0x2, 0x9, 0x6}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0x7, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x69b}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000001b40)='syzkaller\x00', 0x5, 0x46, &(0x7f0000001b80)=""/70, 0x41100, 0x0, '\x00', r1, 0x0, r17, 0x8, &(0x7f0000001c00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0x10, 0x24, 0x8}, 0x10, 0x30bd4, r12, 0x8, 0x0, &(0x7f0000001c80)=[{0x2, 0x3, 0x1, 0x5}, {0x3, 0x3, 0x7, 0xb}, {0x4, 0x4, 0x2}, {0x4, 0x1, 0xe, 0x3}, {0x5, 0x5, 0x6, 0x6}, {0x4, 0x3, 0x9, 0xc}, {0x5, 0x4, 0x3, 0x9}, {0x0, 0x1, 0xa, 0xb}], 0x10, 0x73d3c6bc}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_ext={0x1c, 0x7, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x69b}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000001b40)='syzkaller\x00', 0x5, 0x46, &(0x7f0000001b80)=""/70, 0x41100, 0x0, '\x00', r1, 0x0, r17, 0x8, &(0x7f0000001c00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001c40)={0x3, 0x10, 0x24, 0x8}, 0x10, 0x30bd4, r12, 0x8, 0x0, &(0x7f0000001c80)=[{0x2, 0x3, 0x1, 0x5}, {0x3, 0x3, 0x7, 0xb}, {0x4, 0x4, 0x2}, {0x4, 0x1, 0xe, 0x3}, {0x5, 0x5, 0x6, 0x6}, {0x4, 0x3, 0x9, 0xc}, {0x5, 0x4, 0x3, 0x9}, {0x0, 0x1, 0xa, 0xb}], 0x10, 0x73d3c6bc}, 0x94) 1.155790674s ago: executing program 2 (id=4116): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000001a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001a80), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001b00), 0x4) sendmsg$kcm(r3, &(0x7f0000001c40)={&(0x7f0000001c80)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001d40)="62042720920100000001bf2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000001e40)="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", 0x114}, {&(0x7f0000001f80)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000002040)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1.071017953s ago: executing program 1 (id=4117): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d800000029008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a800120016000540060005000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a97a959b640cce85107000014bbba2379bdbb26887321ace48051f259b23c28b7be000000ea000000d8941adbd6cadef0d9de0904d6ae4f06f80183b856d75cd1fbaf91aff9d30d676262cbbefd418d8dca59525a51562b3ddc504951b6bbd3f7e38ae8716d220e43d51a21", 0xd8}], 0x1}, 0x20004050) r1 = socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYBLOB="3e0002"], 0x9a) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x9, 0x40, 0x6, 0x6, 0x0, 0x0, 0x41, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f00000002c0), 0x2}, 0x8, 0xfffffffffffffff8, 0xd, 0x2, 0xd9b, 0x0, 0x9c, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x0, r4, 0x0) r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x7, 0x80, 0x9, 0x95, 0x0, 0x3, 0x0, 0x3, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x20, 0x7fff, 0xd8b8, 0x1, 0x35, 0xed, 0x8001, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r5, 0x0, 0x5, &(0x7f0000000240)='-@-[\x00'}, 0x30) sendmsg$inet(r1, &(0x7f0000001080)={&(0x7f00000010c0)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001180)=[{&(0x7f00000011c0)="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", 0x7ffff000}, {&(0x7f00000021c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000002200)=[@ip_tos_int={{0x25, 0x29, 0x32, 0xc0fe}}, @ip_tos_u8={{0x11, 0x4410, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x64}, 0x0) 1.008096669s ago: executing program 3 (id=4118): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x28, 0x3, 0x80, 0xfffff008}, {0x6, 0x2, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r2, &(0x7f0000000400), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20070, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac03800060007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg(r3, &(0x7f0000000740)={&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/156, 0x9c}], 0x1}, 0x40002000) 1.007717569s ago: executing program 4 (id=4119): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r5 = openat$cgroup_subtree(r4, &(0x7f0000000300), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0xf, 0x3, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x401, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000cc0)={'pim6reg\x00', 0x2}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000bc0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000340)="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", 0x1ba}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r8, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x8, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8, 0x1}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0xa, 0x7}, {0xd, 0x5}, {0x8, 0x6}, {0xe, 0x40c6}, {0xa, 0x7}]}, @enum={0x8, 0x1, 0x0, 0x6, 0x4, [{0x10, 0x1}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}]}, {0x0, [0x0, 0xc9058651ebfcf25e, 0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f0000000b00)=""/12, 0xc4, 0xc, 0x0, 0x9}, 0x28) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0xefcb, '\x00', 0x0, r7, 0x1, 0x3}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0x0, 0x400, 0x18}, 0xc) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x1a, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x10}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x6, 0x4, 0xf, 0xfff, 0x1b20}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x16492749}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x88, &(0x7f0000000640)=""/136, 0x41100, 0x8, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000dc0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r11, r1, r4, r7, r12, r13], 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000f00)={r8, 0x0, 0x89, 0x0, &(0x7f0000000f80)="fc48271121d3c9949875dec5df5310cd6ad55b4ae4a7e9ff3c7d55a770ac6c6165b19c368806b843a2e7ef62e415810c1fb83c3c2e8280a6e851e2c3cb2af1dd9d4f974aaf3199bdce5ff01f1e19e91e6718746cf601400d0e8f1afa279ef74b4a4659cdfc9c6b36a24d89fbc2447d0c27b44180ae70b9b6cbf4ba4a116713da7d7fcac9a9a395bb88", 0x0, 0xfffffffc, 0x0, 0x11, 0x0, &(0x7f0000001040)="f2bc1e04f5fbfa3cc3cb85dadebcffbe8a"}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f0000000100)=0x100008000) r14 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0xf4, 0xb6, 0x2, 0xf9, 0x0, 0x8, 0x810, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x30c6, 0x7}, 0x6, 0xe516, 0x4, 0x1, 0x1000000000, 0x1, 0x9, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r14) 997.00504ms ago: executing program 0 (id=4120): close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0xc, 0xf, 0x81, 0x0, 0x2, 0x10244, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0xe04, 0x2, 0x9, 0x2, 0x0, 0x1ff, 0x2, 0x0, 0xa, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0x2, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{r2, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r3}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000680)={&(0x7f00000006c0)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000a80)="0a985d7879f1bb", 0x7}], 0x2}, 0x8045) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) close(r6) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440), 0xff7a}], 0x1, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 775.308922ms ago: executing program 2 (id=4121): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101614, 0x0, 0x0, 0x0, 0x0, 0x57fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000002900)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0x6, 0x4, &(0x7f0000002a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000002ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d1000c00000000000100b0b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000280), 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) 751.406135ms ago: executing program 3 (id=4122): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xd25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000640)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x111000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000740)={'veth0_virt_wifi\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594f94124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000000) setsockopt$sock_attach_bpf(r4, 0x29, 0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x6, 0x0, 0xfc, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0xfefffffffffffffe, 0x2, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000800), 0xcf) r7 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffec7, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0xfffffeff, &(0x7f00000008c0)=[{&(0x7f0000000900)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40010061) 709.318239ms ago: executing program 0 (id=4123): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r0], &(0x7f0000000540)=""/151, 0x29, 0x97, 0x1}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbd75}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='GPL\x00', 0x9, 0xe0, &(0x7f0000000d80)=""/224, 0x100, 0x45, '\x00', 0x0, 0x38, r1, 0x8, &(0x7f0000000e80)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x10105, r0, 0x2, &(0x7f0000000f00)=[0xffffffffffffffff, 0x1], &(0x7f0000000f40)=[{0x101, 0x2, 0x0, 0xc}, {0x0, 0x5, 0x1, 0x3}]}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={0xffffffffffffffff, 0x6db, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1c, 0x1b, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000001040d0000000000020000002a966cdfbcb7c522a168b81d8afba3db13c07264b30fb08266e759604c31f9bc6505d2762b21a0e76d809b7bcf561807378607a41bdf74d8ad8dc62e2c3fbd3c0982840eec2b6829991dfd88a3f3109fa2840756c7fcc724a4423a22b5552e91c083e772397310d85bde097fd451b74bb351616ef32e265b33f59623b20451cd28d713d416916fcb2a34ce40", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018110000", @ANYRES32=r2], &(0x7f0000000a00)='syzkaller\x00', 0x2004, 0xa8, &(0x7f0000000a40)=""/168, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x3, 0xc, 0x90d, 0x2}, 0x10, 0x0, r3, 0x1, &(0x7f0000001080), &(0x7f00000010c0)=[{0x4, 0x1, 0xc}], 0x10, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x5, 0x4, 0xc, 0xc}, 0x50) r6 = socket$kcm(0xa, 0x3, 0x87) recvmsg$kcm(r6, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0xc2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xd, &(0x7f0000001680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001740)={r7, r5}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0xffffff2d, &(0x7f00000017c0)=[{&(0x7f0000001800)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x1, 0x1, 0x9, 0x5, 0x0, 0xffffffffffffffff, 0x4d44c, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x74, 0x0, @perf_bp={0x0, 0x5}, 0x10810, 0x8, 0x400, 0x9, 0xc, 0x9, 0x4, 0x0, 0x3, 0x0, 0x7f}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r8) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 635.329506ms ago: executing program 1 (id=4124): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, 0x0, &(0x7f0000000600)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x4, 0xd, &(0x7f0000002a80)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32], &(0x7f0000002800)='GPL\x00', 0x5, 0xc3, &(0x7f0000002840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000002940), 0x8, 0x10, &(0x7f0000002980), 0x10}, 0x94) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0)=0x2000000, &(0x7f0000000000)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r1, &(0x7f0000000c80)='\x00', 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f00000008c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xe, 0x4, &(0x7f0000001f80)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000002100)='GPL\x00', 0x4, 0xfd90, &(0x7f0000002140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000002240), 0x366, 0x10, &(0x7f0000002280), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$inet(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000023c0)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002400)={{r6}, &(0x7f0000002440), &(0x7f0000002480)=r2}, 0x20) sendmsg$inet(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002540)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000002580)={0x0, 0x1400, &(0x7f00000025c0)=[{&(0x7f0000002600)=""/229, 0xec1}], 0x1}, 0xc10e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000dc0)={&(0x7f0000000e00)=""/86, 0x56, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000040000000800000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d00000006000000040000000900000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f1fffffffaffffff0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000bfa20000000000ffff85000000010000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 534.528846ms ago: executing program 2 (id=4125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000100940)={r0, 0xe0, &(0x7f0000100840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x1b, &(0x7f0000100740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f00001007c0), 0x8, 0x44, 0x8, 0x8, &(0x7f0000100800)}}, 0x10) r1 = gettid() perf_event_open(&(0x7f0000101fc0)={0x3, 0x80, 0x5, 0x7, 0x5, 0x7, 0x0, 0xffff, 0x10916, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe, 0x1, @perf_config_ext={0xfffffffffffffe01, 0xa507}, 0x0, 0xfffffffffffffffa, 0x550, 0x4, 0xb, 0x0, 0x8, 0x0, 0xce, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000100980), 0x0) close(r2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000100ac0)={{0x1}, &(0x7f0000100a40), &(0x7f0000100a80)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000100b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000100c40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x38}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a00"/70], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e007375"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="000000000000210018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 433.828166ms ago: executing program 3 (id=4126): r0 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000b40)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x8d, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x6, &(0x7f00000006c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5, 0x300}}, &(0x7f00000007c0)='GPL\x00', 0x2, 0x29e, &(0x7f0000000800)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 255.887104ms ago: executing program 0 (id=4127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x1}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x1, 0x2}, {0xb, 0x2, 0x3}, {0x6, 0xa, 0x5}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x6, [{0x2, 0x1, 0x4}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x5, 0x2}, {0x9}, {0x10}, {0xc}, {0xc, 0x4}, {0x8, 0x1}, {0xa}]}, @struct={0xb, 0x0, 0x0, 0x4, 0x1, 0x7}, @typedef={0x8}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/4, 0xfb, 0x4, 0x1, 0x5, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x3a, 0x0, 0x58) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f00000002c0), 0xcf) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x15, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @float={0x4, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x1}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0x0, [{0xa, 0x1, 0x2}, {0xb, 0x2, 0x3}, {0x6, 0xa, 0x5}]}, @float={0xc, 0x0, 0x0, 0x10, 0x2}, @union={0xe, 0x1, 0x0, 0x5, 0x0, 0x6, [{0x2, 0x1, 0x4}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x5, 0x2}, {0x9}, {0x10}, {0xc}, {0xc, 0x4}, {0x8, 0x1}, {0xa}]}, @struct={0xb, 0x0, 0x0, 0x4, 0x1, 0x7}, @typedef={0x8}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/4, 0xfb, 0x4, 0x1, 0x5, 0x10000}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r5, 0x0) (async) socket$kcm(0xa, 0x6, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x29, 0x3a, 0x0, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f00000002c0), 0xcf) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) 101.46361ms ago: executing program 1 (id=4128): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, 0x0, &(0x7f0000000600)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{}, &(0x7f0000000b00), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0)=0x2000000, &(0x7f0000000000)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c40)={r1, &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)=""/152}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0x20, &(0x7f0000000dc0)={&(0x7f0000000e00)=""/86, 0x56, 0x0, &(0x7f0000000e80)=""/4096, 0x1000}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80), 0x4) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xd, 0x6, 0x4, 0x9, 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x10, &(0x7f0000000300)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a51}}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}], {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 51.532944ms ago: executing program 3 (id=4129): close(0xffffffffffffffff) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0x2, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000340)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440), 0xff7a}], 0x1, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x300}}], 0x98}, 0x0) write$cgroup_type(r0, &(0x7f0000000240), 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=4130): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000280)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00', 0x5, 0x252, &(0x7f0000001040)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f00000011c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5ae) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r5, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000001240)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89ed, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280), 0x200002, 0x0) openat$cgroup_int(r7, 0x0, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000012c0)={0x0, 0xffffff0a, &(0x7f0000001300)=[{&(0x7f0000001340)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r9, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) kernel console output (not intermixed with test programs): 0x1c3/0x2b0 [ 749.889981][T13490] ? __x64_sys_sendmsg+0x80/0x80 [ 749.894999][T13490] ? lockdep_hardirqs_on+0x94/0x140 [ 749.900259][T13490] do_syscall_64+0x4c/0xa0 [ 749.904759][T13490] ? clear_bhb_loop+0x60/0xb0 [ 749.909509][T13490] ? clear_bhb_loop+0x60/0xb0 [ 749.914256][T13490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.920259][T13490] RIP: 0033:0x7fb25c7a8f19 [ 749.924726][T13490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.944397][T13490] RSP: 002b:00007fb25d6d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.952895][T13490] RAX: ffffffffffffffda RBX: 00007fb25ca25fa0 RCX: 00007fb25c7a8f19 [ 749.960921][T13490] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 749.968936][T13490] RBP: 00007fb25c837f6d R08: 0000000000000000 R09: 0000000000000000 [ 749.976976][T13490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.985064][T13490] R13: 00007fb25ca26038 R14: 00007fb25ca25fa0 R15: 00007ffc3fcc20b8 [ 749.993086][T13490] [ 750.700674][ T4324] bond0: (slave syz_tun): Releasing backup interface [ 750.726917][T13504] netlink: 'syz.3.3172': attribute type 10 has an invalid length. [ 750.748131][T13504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3172'. [ 750.918281][ T4326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.928106][ T4326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.939340][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.948501][ T4326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.960749][ T4326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 750.968213][ T4326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.211684][T13504] batman_adv: batadv0: Adding interface: virt_wifi0 [ 751.221996][T13504] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.263450][T13504] batman_adv: batadv0: Interface activated: virt_wifi0 [ 751.325556][T13506] device syzkaller0 entered promiscuous mode [ 751.369538][ T8117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.032521][ T4317] Bluetooth: hci4: command 0x0409 tx timeout [ 753.573323][ T8117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.640260][T13519] rxe_eth0 speed is unknown, defaulting to 1000 [ 753.712459][ T8117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.755170][T13554] netlink: 'syz.1.3188': attribute type 2 has an invalid length. [ 753.769286][T13554] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3188'. [ 753.832657][ T8117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.076057][T13565] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3192'. [ 754.476328][ T8117] device 0 left promiscuous mode [ 754.717453][T13580] device syzkaller0 entered promiscuous mode [ 754.855649][T13591] netlink: 'syz.1.3198': attribute type 3 has an invalid length. [ 754.886022][T13591] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3198'. [ 755.008488][T13519] chnl_net:caif_netlink_parms(): no params data found [ 755.108841][ T4317] Bluetooth: hci4: command 0x041b tx timeout [ 757.188876][ T4317] Bluetooth: hci4: command 0x040f tx timeout [ 757.936462][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3203'. [ 758.136983][T13643] netlink: 'syz.4.3214': attribute type 2 has an invalid length. [ 758.176139][T13643] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3214'. [ 758.245006][T13647] netlink: 'syz.1.3215': attribute type 3 has an invalid length. [ 758.272635][T13647] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3215'. [ 758.462642][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.471935][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.503832][T13519] device bridge_slave_0 entered promiscuous mode [ 758.569497][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.576716][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.610032][T13519] device bridge_slave_1 entered promiscuous mode [ 758.695889][T13663] netlink: 'syz.1.3219': attribute type 2 has an invalid length. [ 758.726309][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.742926][T13663] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3219'. [ 758.810952][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.908075][T13519] team0: Port device team_slave_0 added [ 759.194557][T13519] team0: Port device team_slave_1 added [ 759.269515][ T4317] Bluetooth: hci4: command 0x0419 tx timeout [ 759.742687][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.760148][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.861004][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.925301][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.939523][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.040817][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.215555][T13711] netlink: 'syz.0.3229': attribute type 3 has an invalid length. [ 760.251936][T13711] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3229'. [ 760.312877][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 760.416657][T13519] device hsr_slave_0 entered promiscuous mode [ 760.424300][T13519] device hsr_slave_1 entered promiscuous mode [ 761.247138][ T8117] device hsr_slave_0 left promiscuous mode [ 761.272745][ T8117] device team0 left promiscuous mode [ 761.279298][ T8117] device team_slave_0 left promiscuous mode [ 761.308928][ T8117] device team_slave_1 left promiscuous mode [ 761.333922][ T8117] device geneve0 left promiscuous mode [ 761.364239][ T8117] bridge0: port 3(team0) entered disabled state [ 761.385049][ T8117] device bridge_slave_0 left promiscuous mode [ 761.478997][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.557038][ T8117] device veth1_vlan left promiscuous mode [ 761.588993][ T8117] device veth0_vlan left promiscuous mode [ 761.921466][T13766] netlink: 'syz.3.3245': attribute type 3 has an invalid length. [ 761.975308][T13766] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3245'. [ 762.243805][ T8117] team0 (unregistering): Port device geneve0 removed [ 763.243911][ T8117] team0 (unregistering): Port device team_slave_1 removed [ 763.304048][ T8117] team0 (unregistering): Port device team_slave_0 removed [ 763.365873][ T8117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.433372][ T8117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.662205][ T8117] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 763.716245][ T8117] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 763.727041][ T8117] bond0 (unregistering): Released all slaves [ 763.790937][T13774] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3247'. [ 763.919378][T13796] device syzkaller0 entered promiscuous mode [ 764.527215][T13825] FAULT_INJECTION: forcing a failure. [ 764.527215][T13825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.542517][T13825] CPU: 0 PID: 13825 Comm: syz.4.3258 Not tainted syzkaller #0 [ 764.550065][T13825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 764.560174][T13825] Call Trace: [ 764.563505][T13825] [ 764.566497][T13825] dump_stack_lvl+0x188/0x24e [ 764.571247][T13825] ? show_regs_print_info+0x12/0x12 [ 764.576533][T13825] ? load_image+0x410/0x410 [ 764.581097][T13825] ? __lock_acquire+0x7ea0/0x7ea0 [ 764.586233][T13825] ? snprintf+0xe5/0x140 [ 764.590625][T13825] should_fail_ex+0x390/0x4c0 [ 764.595335][T13825] _copy_to_user+0x2c/0x130 [ 764.599981][T13825] simple_read_from_buffer+0xe3/0x150 [ 764.605462][T13825] proc_fail_nth_read+0x1a6/0x220 [ 764.610544][T13825] ? proc_fault_inject_write+0x310/0x310 [ 764.616253][T13825] ? fsnotify_perm+0x248/0x550 [ 764.621094][T13825] ? proc_fault_inject_write+0x310/0x310 [ 764.627014][T13825] vfs_read+0x2db/0x960 [ 764.631512][T13825] ? kernel_read+0x1e0/0x1e0 [ 764.636330][T13825] ? __fget_files+0x28/0x460 [ 764.641317][T13825] ? __fget_files+0x3fc/0x460 [ 764.646151][T13825] ? __fdget_pos+0x2ae/0x360 [ 764.650878][T13825] ? ksys_read+0x70/0x260 [ 764.655540][T13825] ksys_read+0x14d/0x260 [ 764.659832][T13825] ? vfs_write+0x9a0/0x9a0 [ 764.664349][T13825] ? lockdep_hardirqs_on+0x94/0x140 [ 764.669590][T13825] do_syscall_64+0x4c/0xa0 [ 764.674108][T13825] ? clear_bhb_loop+0x60/0xb0 [ 764.678848][T13825] ? clear_bhb_loop+0x60/0xb0 [ 764.683668][T13825] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.689603][T13825] RIP: 0033:0x7ff58376974e [ 764.694054][T13825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 764.713776][T13825] RSP: 002b:00007ff58462efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 764.722396][T13825] RAX: ffffffffffffffda RBX: 00007ff58462f6c0 RCX: 00007ff58376974e [ 764.730439][T13825] RDX: 000000000000000f RSI: 00007ff58462f0a0 RDI: 000000000000000b [ 764.738787][T13825] RBP: 00007ff58462f090 R08: 0000000000000000 R09: 0000000000000000 [ 764.746784][T13825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.754787][T13825] R13: 00007ff583a26038 R14: 00007ff583a25fa0 R15: 00007ffe148ac048 [ 764.762917][T13825] [ 765.021403][T13829] netlink: 'syz.4.3260': attribute type 3 has an invalid length. [ 765.039909][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3260'. [ 766.484826][T13819] netlink: 'syz.0.3256': attribute type 21 has an invalid length. [ 766.502675][T13819] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3256'. [ 766.524826][T13819] netlink: 'syz.0.3256': attribute type 4 has an invalid length. [ 766.538925][T13819] netlink: 'syz.0.3256': attribute type 5 has an invalid length. [ 766.547083][T13819] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3256'. [ 766.852772][T13835] netlink: 'syz.0.3263': attribute type 3 has an invalid length. [ 766.863065][T13835] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3263'. [ 766.911672][T13837] netlink: 'syz.4.3262': attribute type 3 has an invalid length. [ 766.956968][T13837] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3262'. [ 768.105398][T13519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 768.163874][T13519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 768.194276][T13519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 768.215239][T13870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3272'. [ 768.222614][T13519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 768.254529][T13873] netlink: 'syz.3.3271': attribute type 3 has an invalid length. [ 768.377111][T13873] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3271'. [ 768.577641][T13519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.633820][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 768.656683][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 768.686448][T13519] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.727578][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 768.745647][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 768.787985][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.795269][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.865257][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 768.894555][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 768.925977][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 768.973933][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.981537][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.020255][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 769.070239][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 769.087001][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 769.091626][T13889] netlink: 'syz.0.3277': attribute type 3 has an invalid length. [ 769.106702][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 769.124326][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 769.148542][T13889] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3277'. [ 769.167142][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 769.200332][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 769.266603][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 769.290300][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 769.345278][T13519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.419781][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 769.441930][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 769.465080][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 769.837987][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3279'. [ 770.029097][T13912] netlink: 'syz.0.3283': attribute type 3 has an invalid length. [ 770.058953][T13912] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3283'. [ 770.344635][T13920] netlink: 'syz.0.3285': attribute type 3 has an invalid length. [ 770.380901][T13920] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3285'. [ 770.565963][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 770.594215][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 770.622436][T13519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.749590][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 770.771460][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 770.828755][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 770.862963][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 770.915987][T13939] netlink: 'syz.1.3289': attribute type 3 has an invalid length. [ 770.928317][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 770.945501][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 771.007056][T13519] device veth0_vlan entered promiscuous mode [ 771.146334][T13519] device veth1_vlan entered promiscuous mode [ 771.279028][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 771.291295][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 771.321702][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 771.361589][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 771.401514][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 771.420920][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 771.454000][T13519] device veth0_macvtap entered promiscuous mode [ 771.540571][T13519] device veth1_macvtap entered promiscuous mode [ 771.543884][T13958] netlink: 'syz.4.3294': attribute type 9 has an invalid length. [ 771.583842][T13958] __nla_validate_parse: 1 callbacks suppressed [ 771.583899][T13958] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3294'. [ 771.623926][T13959] netlink: 'syz.3.3295': attribute type 3 has an invalid length. [ 771.636527][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 771.653332][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 771.659725][T13959] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3295'. [ 771.690124][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.712179][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.737812][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 771.762756][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.787390][T13519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.807821][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 771.829616][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 771.870559][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.904550][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.921607][T13519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.978785][T13519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.013600][T13519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.045012][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 772.078292][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 772.152511][T13519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.203011][T13519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.256844][T13519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.323190][T13519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.406065][T13981] netlink: 'syz.3.3301': attribute type 3 has an invalid length. [ 772.429279][T13973] netlink: 'syz.0.3310': attribute type 3 has an invalid length. [ 772.452034][T13973] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3310'. [ 772.506284][T13981] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3301'. [ 772.576177][T13982] netlink: 'syz.1.3302': attribute type 3 has an invalid length. [ 772.668087][T13982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3302'. [ 772.759702][ T8116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.794117][ T8116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.816478][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 772.902327][T13991] FAULT_INJECTION: forcing a failure. [ 772.902327][T13991] name failslab, interval 1, probability 0, space 0, times 0 [ 772.924692][T13991] CPU: 1 PID: 13991 Comm: syz.3.3305 Not tainted syzkaller #0 [ 772.932253][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 772.942453][T13991] Call Trace: [ 772.945776][T13991] [ 772.948746][T13991] dump_stack_lvl+0x188/0x24e [ 772.953498][T13991] ? show_regs_print_info+0x12/0x12 [ 772.958874][T13991] ? load_image+0x410/0x410 [ 772.963450][T13991] ? __might_sleep+0xd0/0xd0 [ 772.968091][T13991] ? __lock_acquire+0x7ea0/0x7ea0 [ 772.973208][T13991] ? aa_file_perm+0x3ea/0xf00 [ 772.977951][T13991] should_fail_ex+0x390/0x4c0 [ 772.982691][T13991] should_failslab+0x5/0x20 [ 772.987240][T13991] slab_pre_alloc_hook+0x59/0x300 [ 772.992321][T13991] ? kernfs_fop_write_iter+0x154/0x520 [ 772.997926][T13991] __kmem_cache_alloc_node+0x4f/0x270 [ 773.003368][T13991] ? kernfs_fop_write_iter+0x154/0x520 [ 773.008899][T13991] __kmalloc+0xa3/0x240 [ 773.013104][T13991] kernfs_fop_write_iter+0x154/0x520 [ 773.018473][T13991] vfs_write+0x482/0x9a0 [ 773.022778][T13991] ? file_end_write+0x250/0x250 [ 773.027860][T13991] ? __fget_files+0x3fc/0x460 [ 773.032618][T13991] ? __fdget_pos+0x2ae/0x360 [ 773.037274][T13991] ? ksys_write+0x70/0x260 [ 773.041760][T13991] ksys_write+0x14d/0x260 [ 773.046337][T13991] ? __ia32_sys_read+0x80/0x80 [ 773.051168][T13991] ? lockdep_hardirqs_on+0x94/0x140 [ 773.056431][T13991] do_syscall_64+0x4c/0xa0 [ 773.060944][T13991] ? clear_bhb_loop+0x60/0xb0 [ 773.065708][T13991] ? clear_bhb_loop+0x60/0xb0 [ 773.070487][T13991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.076458][T13991] RIP: 0033:0x7f0826fa8f19 [ 773.080943][T13991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.100617][T13991] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.109131][T13991] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 773.117427][T13991] RDX: 0000000000000031 RSI: 0000200000000240 RDI: 0000000000000004 [ 773.125470][T13991] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 773.133635][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.142399][T13991] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 773.151240][T13991] [ 773.157182][ T8112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.193041][ T8112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.214339][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.731877][T14001] netlink: 'syz.3.3308': attribute type 3 has an invalid length. [ 773.786598][T14001] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3308'. [ 774.210492][T14014] netlink: 'syz.4.3313': attribute type 3 has an invalid length. [ 774.249814][T14014] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3313'. [ 774.562935][T14026] netlink: 'syz.3.3316': attribute type 3 has an invalid length. [ 774.613172][T14026] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3316'. [ 774.667521][T14028] netlink: 'syz.2.3315': attribute type 3 has an invalid length. [ 774.700520][T14028] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3315'. [ 774.724077][T14030] netlink: 'syz.0.3317': attribute type 17 has an invalid length. [ 775.069841][ T4317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 775.080134][ T4317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 775.088308][ T4317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 775.099270][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 775.107011][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 775.115103][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.435902][ T8113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.526145][T14043] rxe_eth0 speed is unknown, defaulting to 1000 [ 775.671953][ T8113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.711736][T14062] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3326'. [ 775.934214][ T8113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.078012][ T8113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.083112][T14084] __nla_validate_parse: 1 callbacks suppressed [ 777.083133][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3333'. [ 777.120284][T14099] validate_nla: 2 callbacks suppressed [ 777.120304][T14099] netlink: 'syz.2.3336': attribute type 3 has an invalid length. [ 777.192842][ T4326] Bluetooth: hci0: command 0x0409 tx timeout [ 777.231537][T14099] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3336'. [ 779.274421][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 780.647049][T14107] device syzkaller0 entered promiscuous mode [ 780.999744][T14137] netlink: 'syz.3.3342': attribute type 3 has an invalid length. [ 781.007876][T14137] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3342'. [ 781.349432][ T4326] Bluetooth: hci0: command 0x040f tx timeout [ 781.706765][T14150] netlink: 'syz.2.3346': attribute type 3 has an invalid length. [ 781.715236][T14150] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3346'. [ 783.396378][T14043] chnl_net:caif_netlink_parms(): no params data found [ 783.431170][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 783.576165][T14158] netlink: 'syz.3.3350': attribute type 9 has an invalid length. [ 783.608877][T14158] netlink: 90128 bytes leftover after parsing attributes in process `syz.3.3350'. [ 783.788313][T14168] netlink: 'syz.2.3358': attribute type 3 has an invalid length. [ 783.839505][T14168] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3358'. [ 783.985748][T14166] netlink: 'syz.4.3349': attribute type 3 has an invalid length. [ 784.025647][T14166] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3349'. [ 784.467213][T14043] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.490029][T14043] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.538388][T14043] device bridge_slave_0 entered promiscuous mode [ 784.573144][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 784.681658][T14043] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.703938][T14043] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.736996][T14043] device bridge_slave_1 entered promiscuous mode [ 784.934446][T14197] netlink: 'syz.3.3359': attribute type 3 has an invalid length. [ 784.973234][T14199] netlink: 'syz.0.3360': attribute type 3 has an invalid length. [ 784.987102][T14195] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 784.989749][T14197] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3359'. [ 785.005992][T14195] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3357'. [ 785.019440][T14199] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3360'. [ 785.048524][T14195] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 785.096191][T14043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.195456][T14043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.330661][T14043] team0: Port device team_slave_0 added [ 785.358344][T14043] team0: Port device team_slave_1 added [ 785.457503][T14208] netlink: 'syz.4.3363': attribute type 3 has an invalid length. [ 785.487166][T14208] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3363'. [ 785.547525][T14043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.554903][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.673297][T14043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.728051][T14043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.759970][T14043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.824190][T14043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.855519][T14217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3365'. [ 786.045542][T14043] device hsr_slave_0 entered promiscuous mode [ 786.076474][T14043] device hsr_slave_1 entered promiscuous mode [ 786.090426][T14043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.139689][T14043] Cannot create hsr debugfs directory [ 786.404648][T14228] device syzkaller0 entered promiscuous mode [ 786.876519][T14257] netlink: 'syz.2.3375': attribute type 3 has an invalid length. [ 786.895802][T14257] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3375'. [ 787.103114][T14266] netlink: 'syz.0.3377': attribute type 3 has an invalid length. [ 788.805410][ T8113] team0: Port device wlan0 removed [ 788.928451][T14263] device syzkaller0 entered promiscuous mode [ 790.923241][T14274] rxe_eth0 speed is unknown, defaulting to 1000 [ 790.979627][T14293] __nla_validate_parse: 1 callbacks suppressed [ 790.979649][T14293] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.3382'. [ 791.008821][T14293] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.3382'. [ 791.030291][T14293] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.3382'. [ 791.459657][T14305] FAULT_INJECTION: forcing a failure. [ 791.459657][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 791.507249][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.548031][T14306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.557335][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.570106][T14306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.575639][T14305] CPU: 1 PID: 14305 Comm: syz.2.3387 Not tainted syzkaller #0 [ 791.584889][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 791.595071][T14305] Call Trace: [ 791.598426][T14305] [ 791.601400][T14305] dump_stack_lvl+0x188/0x24e [ 791.606218][T14305] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 791.612435][T14305] ? show_regs_print_info+0x12/0x12 [ 791.617680][T14305] ? load_image+0x410/0x410 [ 791.622233][T14305] should_fail_ex+0x390/0x4c0 [ 791.626961][T14305] should_failslab+0x5/0x20 [ 791.631521][T14305] slab_pre_alloc_hook+0x59/0x300 [ 791.636605][T14305] ? kernfs_fop_write_iter+0x154/0x520 [ 791.642106][T14305] __kmem_cache_alloc_node+0x4f/0x270 [ 791.647511][T14305] ? kernfs_fop_write_iter+0x154/0x520 [ 791.653001][T14305] __kmalloc+0xa3/0x240 [ 791.657186][T14305] kernfs_fop_write_iter+0x154/0x520 [ 791.662501][T14305] vfs_write+0x482/0x9a0 [ 791.666775][T14305] ? file_end_write+0x250/0x250 [ 791.671650][T14305] ? __fget_files+0x3fc/0x460 [ 791.676368][T14305] ? __fdget_pos+0x2ae/0x360 [ 791.680989][T14305] ? ksys_write+0x70/0x260 [ 791.685432][T14305] ksys_write+0x14d/0x260 [ 791.689783][T14305] ? __ia32_sys_read+0x80/0x80 [ 791.694573][T14305] ? lockdep_hardirqs_on+0x94/0x140 [ 791.699811][T14305] do_syscall_64+0x4c/0xa0 [ 791.704276][T14305] ? clear_bhb_loop+0x60/0xb0 [ 791.709007][T14305] ? clear_bhb_loop+0x60/0xb0 [ 791.713746][T14305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 791.719712][T14305] RIP: 0033:0x7ff48e3a8f19 [ 791.724276][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.744351][T14305] RSP: 002b:00007ff48f288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 791.752794][T14305] RAX: ffffffffffffffda RBX: 00007ff48e625fa0 RCX: 00007ff48e3a8f19 [ 791.760876][T14305] RDX: 0000000000000031 RSI: 0000200000000240 RDI: 0000000000000005 [ 791.768871][T14305] RBP: 00007ff48f288090 R08: 0000000000000000 R09: 0000000000000000 [ 791.776918][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.784913][T14305] R13: 00007ff48e626038 R14: 00007ff48e625fa0 R15: 00007ffe5b67b148 [ 791.792928][T14305] [ 791.913154][ T8113] device hsr_slave_0 left promiscuous mode [ 791.921422][ T8113] device hsr_slave_1 left promiscuous mode [ 791.969718][T14308] netlink: 'syz.0.3388': attribute type 3 has an invalid length. [ 791.979189][ T8113] bridge0: port 2(batadv_slave_0) entered disabled state [ 791.986623][T14308] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3388'. [ 792.015411][T14314] netlink: 'syz.4.3389': attribute type 3 has an invalid length. [ 792.024309][ T8113] device bridge_slave_0 left promiscuous mode [ 792.039523][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.049758][T14314] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3389'. [ 792.119509][ T8113] device veth1_vlan left promiscuous mode [ 792.128101][ T8113] device veth0_vlan left promiscuous mode [ 792.532308][ T8113] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 793.105615][ T8113] team0 (unregistering): Port device team_slave_1 removed [ 793.147570][ T8113] team0 (unregistering): Port device team_slave_0 removed [ 793.191066][ T8113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.235702][ T8113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.408257][ T8113] team0 (unregistering): Port device dummy0 removed [ 793.456916][ T8113] bond0 (unregistering): Released all slaves [ 793.989499][T14343] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3397'. [ 794.006388][T14043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 794.048528][T14043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.099974][T14043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.124263][T14043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.413979][T14043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.476522][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 794.494293][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 794.529946][T14043] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.577689][T14357] netlink: 'syz.4.3402': attribute type 3 has an invalid length. [ 794.587457][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 794.599635][T14357] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3402'. [ 794.603398][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 794.639479][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.646767][ T8110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.680450][T14359] netlink: 'syz.0.3403': attribute type 3 has an invalid length. [ 794.689263][T14359] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3403'. [ 794.746214][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 794.796258][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 794.823372][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 794.835565][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.842890][ T8110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.869320][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 794.899404][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 794.928713][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 794.937831][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 794.993958][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 795.013517][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 795.057229][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 795.084712][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 795.114843][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 795.133524][T14043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 795.165943][T14043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 795.193909][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 795.221399][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 795.886643][T14397] FAULT_INJECTION: forcing a failure. [ 795.886643][T14397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.953057][T14397] CPU: 1 PID: 14397 Comm: syz.4.3414 Not tainted syzkaller #0 [ 795.960653][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 795.970777][T14397] Call Trace: [ 795.974208][T14397] [ 795.977184][T14397] dump_stack_lvl+0x188/0x24e [ 795.981927][T14397] ? show_regs_print_info+0x12/0x12 [ 795.987278][T14397] ? load_image+0x410/0x410 [ 795.991871][T14397] ? __lock_acquire+0x7ea0/0x7ea0 [ 795.996961][T14397] should_fail_ex+0x390/0x4c0 [ 796.001699][T14397] _copy_from_iter+0x1c0/0x1130 [ 796.006622][T14397] ? copyout_mc+0x110/0x110 [ 796.011171][T14397] ? __virt_addr_valid+0x188/0x540 [ 796.016442][T14397] ? __virt_addr_valid+0x188/0x540 [ 796.021607][T14397] ? __virt_addr_valid+0x467/0x540 [ 796.026803][T14397] ? __phys_addr_symbol+0x2b/0x70 [ 796.031882][T14397] ? __check_object_size+0x4f6/0xa70 [ 796.037906][T14397] kernfs_fop_write_iter+0x19a/0x520 [ 796.043250][T14397] vfs_write+0x482/0x9a0 [ 796.047534][T14397] ? file_end_write+0x250/0x250 [ 796.052438][T14397] ? __fget_files+0x3fc/0x460 [ 796.057198][T14397] ? __fdget_pos+0x2ae/0x360 [ 796.061839][T14397] ? ksys_write+0x70/0x260 [ 796.066312][T14397] ksys_write+0x14d/0x260 [ 796.070696][T14397] ? __ia32_sys_read+0x80/0x80 [ 796.075522][T14397] ? lockdep_hardirqs_on+0x94/0x140 [ 796.080768][T14397] do_syscall_64+0x4c/0xa0 [ 796.085316][T14397] ? clear_bhb_loop+0x60/0xb0 [ 796.090040][T14397] ? clear_bhb_loop+0x60/0xb0 [ 796.094868][T14397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.100806][T14397] RIP: 0033:0x7ff5837a8f19 [ 796.105251][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.124898][T14397] RSP: 002b:00007ff58462f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.133350][T14397] RAX: ffffffffffffffda RBX: 00007ff583a25fa0 RCX: 00007ff5837a8f19 [ 796.141350][T14397] RDX: 0000000000000031 RSI: 0000200000000240 RDI: 0000000000000004 [ 796.149374][T14397] RBP: 00007ff58462f090 R08: 0000000000000000 R09: 0000000000000000 [ 796.157421][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.165431][T14397] R13: 00007ff583a26038 R14: 00007ff583a25fa0 R15: 00007ffe148ac048 [ 796.173487][T14397] [ 796.270894][T14399] netlink: 'syz.2.3415': attribute type 3 has an invalid length. [ 796.299743][T14399] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3415'. [ 796.475045][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 796.494740][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 796.534768][T14043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.604320][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 796.633870][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 796.705342][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 796.724038][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 796.762722][T14043] device veth0_vlan entered promiscuous mode [ 796.776767][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 796.810537][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 796.852120][T14043] device veth1_vlan entered promiscuous mode [ 796.927733][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 796.938047][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 796.947432][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 796.959909][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 796.972549][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 796.997067][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 797.026975][T14043] device veth0_macvtap entered promiscuous mode [ 797.051927][T14043] device veth1_macvtap entered promiscuous mode [ 797.085991][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.110985][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.121831][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.133398][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.145988][T14043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.154912][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 797.165041][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 797.174850][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 797.185832][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 797.204377][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.216866][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.243321][T14043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.268300][T14043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.296633][T14043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.312431][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 797.333282][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 797.348439][T14043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.363046][T14043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.373572][T14043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.386395][T14043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.568086][ T8117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.582441][ T8117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.612950][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 797.634101][ T8115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 797.652776][T14429] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 797.786203][T14433] netlink: 'syz.3.3429': attribute type 3 has an invalid length. [ 797.805055][T14433] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3429'. [ 798.242459][ T8114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.252329][T14444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 798.269955][ T8114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.368753][T14444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.393486][T14444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 798.420080][T14444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.502730][T14458] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3438'. [ 798.517833][T14458] openvswitch: netlink: Message has 6 unknown bytes. [ 798.683701][ T8117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 798.699827][T14453] netlink: 'syz.4.3436': attribute type 10 has an invalid length. [ 800.582118][ T4326] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 800.592551][ T4326] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 800.601553][ T4325] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 800.610333][ T4326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 800.623592][ T4326] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 800.632428][ T4326] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 800.834262][T14496] rxe_eth0 speed is unknown, defaulting to 1000 [ 801.532915][T14496] chnl_net:caif_netlink_parms(): no params data found [ 801.804412][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.822218][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.847714][T14496] device bridge_slave_0 entered promiscuous mode [ 801.876106][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.901635][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.930252][T14496] device bridge_slave_1 entered promiscuous mode [ 802.024169][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.053363][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.157549][T14496] team0: Port device team_slave_0 added [ 802.183956][T14496] team0: Port device team_slave_1 added [ 802.266703][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.285941][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.361467][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.503576][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.538215][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.573743][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.709544][ T4326] Bluetooth: hci5: command 0x0409 tx timeout [ 802.813615][T14509] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3450'. [ 802.859185][T14509] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 803.158570][ T8115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.298264][T14496] device hsr_slave_0 entered promiscuous mode [ 803.316249][T14496] device hsr_slave_1 entered promiscuous mode [ 803.349506][T14496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.364520][T14496] Cannot create hsr debugfs directory [ 803.374608][T14516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3451'. [ 803.473508][ T8115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.691406][ T8115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.900223][ T8115] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.226486][T14548] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3466'. [ 804.257175][T14548] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 804.788809][ T4326] Bluetooth: hci5: command 0x041b tx timeout [ 805.400024][T14582] device syzkaller0 entered promiscuous mode [ 805.804868][T14602] netlink: 'syz.2.3480': attribute type 3 has an invalid length. [ 805.840917][T14600] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3478'. [ 805.843164][T14602] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3480'. [ 805.876951][T14600] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 806.874087][ T4326] Bluetooth: hci5: command 0x040f tx timeout [ 808.550190][T14625] netlink: 'syz.3.3488': attribute type 2 has an invalid length. [ 808.571272][T14496] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 808.749400][T14496] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 808.794351][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.800960][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.816689][T14496] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 808.891176][T14496] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 808.948951][ T4326] Bluetooth: hci5: command 0x0419 tx timeout [ 809.620001][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.696643][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 809.720511][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 809.736899][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.781639][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 809.795398][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 809.853051][ T8116] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.860304][ T8116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.915564][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 809.945916][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 809.982411][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 809.996234][ T8116] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.003515][ T8116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.040790][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 810.061844][T14669] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3498'. [ 810.164982][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 810.191482][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 810.205793][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 810.248891][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 810.442616][T14675] netlink: 'syz.3.3499': attribute type 10 has an invalid length. [ 810.501183][T14675] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3499'. [ 810.562135][T14675] device hsr0 entered promiscuous mode [ 810.568238][T14675] bridge0: port 3(hsr0) entered blocking state [ 810.601800][T14675] bridge0: port 3(hsr0) entered disabled state [ 810.616509][T14675] bridge0: port 3(hsr0) entered blocking state [ 810.623460][T14675] bridge0: port 3(hsr0) entered forwarding state [ 810.665121][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 810.680117][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 810.711422][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 810.748922][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 810.769391][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 810.780983][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 810.922146][ T8115] team0: Port device wlan0 removed [ 810.997571][T14496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 811.593171][ T8115] device hsr_slave_0 left promiscuous mode [ 811.629471][ T8115] device hsr_slave_1 left promiscuous mode [ 811.691676][ T8115] device veth1_vlan left promiscuous mode [ 811.697759][ T8115] device veth0_vlan left promiscuous mode [ 812.937486][T14752] netlink: 'syz.2.3526': attribute type 3 has an invalid length. [ 812.957269][T14752] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3526'. [ 813.066625][ T8115] team0 (unregistering): Port device team_slave_1 removed [ 813.133404][T14756] netlink: 'syz.1.3529': attribute type 3 has an invalid length. [ 813.143030][T14756] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3529'. [ 813.960014][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 813.971305][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 813.999224][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.084793][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 814.747926][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3539'. [ 815.767717][T14795] netlink: 'syz.1.3541': attribute type 3 has an invalid length. [ 815.816073][T14795] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3541'. [ 816.259092][T14800] netlink: 'syz.2.3542': attribute type 3 has an invalid length. [ 816.292838][T14800] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3542'. [ 816.794083][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 816.820765][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 816.877359][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 816.896933][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 816.930044][T14496] device veth0_vlan entered promiscuous mode [ 816.957568][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 817.043813][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 817.070735][T14496] device veth1_vlan entered promiscuous mode [ 817.277619][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 817.315102][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 817.484713][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 817.511976][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 817.525820][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 817.536700][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 817.555256][T14496] device veth0_macvtap entered promiscuous mode [ 817.608950][T14496] device veth1_macvtap entered promiscuous mode [ 817.730313][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.758657][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.808839][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 817.848728][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 817.911248][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.984373][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 818.018342][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 818.031483][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 818.089401][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 818.171568][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.203909][T14830] netlink: 'syz.0.3553': attribute type 3 has an invalid length. [ 818.269812][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.326440][T14830] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3553'. [ 818.352931][T14496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.411730][T14496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.477899][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.572778][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 818.626347][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 818.691249][T14496] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.744494][T14496] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.838029][T14496] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.898805][T14496] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.261803][T14835] netlink: 134048 bytes leftover after parsing attributes in process `syz.2.3555'. [ 819.335888][ T8116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.350119][ T8116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.403843][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 819.580202][ T8116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.615010][ T8116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.705492][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 819.977039][T14843] netlink: 'syz.0.3557': attribute type 3 has an invalid length. [ 819.985567][T14843] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3557'. [ 820.695320][T14858] device syzkaller0 entered promiscuous mode [ 821.244595][T14864] netlink: 'syz.0.3565': attribute type 3 has an invalid length. [ 821.255198][T14864] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3565'. [ 828.538831][T14894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3576'. [ 828.570270][T14903] device syzkaller0 entered promiscuous mode [ 828.792204][T14900] can: request_module (can-proto-0) failed. [ 828.884487][T14911] netlink: 134048 bytes leftover after parsing attributes in process `syz.1.3578'. [ 829.955572][T14931] netlink: 'syz.3.3583': attribute type 3 has an invalid length. [ 829.980209][T14931] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3583'. [ 830.311762][T14939] netlink: 'syz.2.3588': attribute type 2 has an invalid length. [ 830.328319][T14939] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.3588'. [ 830.504768][T14945] netlink: 'syz.0.3589': attribute type 3 has an invalid length. [ 830.601327][T14947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.647390][T14944] FAULT_INJECTION: forcing a failure. [ 830.647390][T14944] name failslab, interval 1, probability 0, space 0, times 0 [ 830.668779][T14945] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3589'. [ 830.736087][T14947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.762681][T14944] CPU: 0 PID: 14944 Comm: syz.1.3590 Not tainted syzkaller #0 [ 830.772792][T14944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 830.783795][T14944] Call Trace: [ 830.787989][T14944] [ 830.791679][T14944] dump_stack_lvl+0x188/0x24e [ 830.796472][T14944] ? show_regs_print_info+0x12/0x12 [ 830.803931][T14944] ? load_image+0x410/0x410 [ 830.808511][T14944] ? __might_sleep+0xd0/0xd0 [ 830.813188][T14944] ? __lock_acquire+0x7ea0/0x7ea0 [ 830.818292][T14944] should_fail_ex+0x390/0x4c0 [ 830.823127][T14944] should_failslab+0x5/0x20 [ 830.827688][T14944] slab_pre_alloc_hook+0x59/0x300 [ 830.832862][T14944] ? alloc_trial_cpuset+0x23/0x140 [ 830.838583][T14944] ? alloc_trial_cpuset+0x23/0x140 [ 830.843758][T14944] __kmem_cache_alloc_node+0x4f/0x270 [ 830.849468][T14944] ? alloc_trial_cpuset+0x23/0x140 [ 830.854828][T14944] __kmalloc_node_track_caller+0xa0/0x240 [ 830.860711][T14944] kmemdup+0x27/0x60 [ 830.864817][T14944] alloc_trial_cpuset+0x23/0x140 [ 830.869952][T14944] cpuset_write_resmask+0x1fa/0x1cf0 [ 830.875317][T14944] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 830.881628][T14944] ? lockdep_hardirqs_on+0x94/0x140 [ 830.886894][T14944] ? cpuset_common_seq_show+0x230/0x230 [ 830.893346][T14944] ? cpuset_common_seq_show+0x230/0x230 [ 830.898984][T14944] cgroup_file_write+0x2c9/0x6a0 [ 830.904078][T14944] ? cgroup_seqfile_stop+0xd0/0xd0 [ 830.909477][T14944] ? cgroup_seqfile_stop+0xd0/0xd0 [ 830.914831][T14944] kernfs_fop_write_iter+0x3a0/0x520 [ 830.920202][T14944] vfs_write+0x482/0x9a0 [ 830.924868][T14944] ? file_end_write+0x250/0x250 [ 830.929994][T14944] ? __fget_files+0x3fc/0x460 [ 830.934946][T14944] ? __fdget_pos+0x2ae/0x360 [ 830.939702][T14944] ? ksys_write+0x70/0x260 [ 830.944629][T14944] ksys_write+0x14d/0x260 [ 830.949385][T14944] ? __ia32_sys_read+0x80/0x80 [ 830.954453][T14944] do_syscall_64+0x4c/0xa0 [ 830.959577][T14944] ? clear_bhb_loop+0x60/0xb0 [ 830.964774][T14944] ? clear_bhb_loop+0x60/0xb0 [ 830.970179][T14944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.976164][T14944] RIP: 0033:0x7efef59a8f19 [ 830.980916][T14944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.001227][T14944] RSP: 002b:00007efef6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 831.010119][T14944] RAX: ffffffffffffffda RBX: 00007efef5c25fa0 RCX: 00007efef59a8f19 [ 831.018331][T14944] RDX: 0000000000000031 RSI: 0000200000000240 RDI: 0000000000000005 [ 831.027064][T14944] RBP: 00007efef6931090 R08: 0000000000000000 R09: 0000000000000000 [ 831.035279][T14944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.043544][T14944] R13: 00007efef5c26038 R14: 00007efef5c25fa0 R15: 00007ffff0c9c668 [ 831.051830][T14944] [ 831.095217][T14947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.103674][T14947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.753244][T14960] device syzkaller0 entered promiscuous mode [ 831.977368][T14978] netlink: 'syz.2.3600': attribute type 1 has an invalid length. [ 832.034535][T14978] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3600'. [ 832.520241][T14989] netlink: 'syz.3.3604': attribute type 3 has an invalid length. [ 832.531231][T14989] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3604'. [ 834.810408][T15014] netlink: 'syz.2.3613': attribute type 3 has an invalid length. [ 834.819675][T15014] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3613'. [ 835.199856][T15021] netlink: 'syz.4.3616': attribute type 6 has an invalid length. [ 835.209892][T15021] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3616'. [ 836.468886][ T4326] Bluetooth: hci1: command 0x0406 tx timeout [ 836.572751][T15001] netlink: 'syz.1.3607': attribute type 39 has an invalid length. [ 836.977417][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 837.283357][T15047] device syzkaller0 entered promiscuous mode [ 837.327494][T15050] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3625'. [ 837.532995][T15061] netlink: 'syz.3.3629': attribute type 3 has an invalid length. [ 837.562235][T15061] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3629'. [ 840.244750][T15068] netlink: 'syz.4.3631': attribute type 3 has an invalid length. [ 840.254466][T15068] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3631'. [ 840.307329][T15075] device syzkaller0 entered promiscuous mode [ 841.372652][T15086] device syzkaller0 entered promiscuous mode [ 841.714861][T15075] can: request_module (can-proto-0) failed. [ 842.154337][T15104] netlink: 'syz.3.3644': attribute type 3 has an invalid length. [ 842.198150][T15104] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3644'. [ 842.683760][T15120] FAULT_INJECTION: forcing a failure. [ 842.683760][T15120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.718302][T15120] CPU: 0 PID: 15120 Comm: syz.4.3652 Not tainted syzkaller #0 [ 842.727242][T15120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 842.737617][T15120] Call Trace: [ 842.741029][T15120] [ 842.744708][T15120] dump_stack_lvl+0x188/0x24e [ 842.749441][T15120] ? show_regs_print_info+0x12/0x12 [ 842.754762][T15120] ? load_image+0x410/0x410 [ 842.759394][T15120] ? __lock_acquire+0x7ea0/0x7ea0 [ 842.764458][T15120] should_fail_ex+0x390/0x4c0 [ 842.769238][T15120] _copy_from_user+0x2c/0x170 [ 842.773979][T15120] __sys_bpf+0x2ea/0x780 [ 842.778353][T15120] ? bpf_link_show_fdinfo+0x550/0x550 [ 842.783779][T15120] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 842.790007][T15120] __x64_sys_bpf+0x78/0x90 [ 842.794470][T15120] do_syscall_64+0x4c/0xa0 [ 842.799471][T15120] ? clear_bhb_loop+0x60/0xb0 [ 842.804615][T15120] ? clear_bhb_loop+0x60/0xb0 [ 842.809414][T15120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.815389][T15120] RIP: 0033:0x7f34ecda8f19 [ 842.819853][T15120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.839862][T15120] RSP: 002b:00007f34edd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 842.848499][T15120] RAX: ffffffffffffffda RBX: 00007f34ed025fa0 RCX: 00007f34ecda8f19 [ 842.856511][T15120] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 842.865042][T15120] RBP: 00007f34edd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 842.873065][T15120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.881445][T15120] R13: 00007f34ed026038 R14: 00007f34ed025fa0 R15: 00007fff3039a198 [ 842.890174][T15120] [ 842.925387][T15122] netlink: 'syz.3.3653': attribute type 21 has an invalid length. [ 842.948809][T15122] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3653'. [ 843.147480][T15128] netlink: 'syz.0.3654': attribute type 27 has an invalid length. [ 843.172181][T15128] netlink: 'syz.0.3654': attribute type 4 has an invalid length. [ 843.190840][T15128] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3654'. [ 843.382783][T15136] netlink: 'syz.3.3658': attribute type 3 has an invalid length. [ 843.411802][T15136] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3658'. [ 843.530862][T15135] device syzkaller0 entered promiscuous mode [ 843.779394][T15154] netlink: 'syz.1.3663': attribute type 29 has an invalid length. [ 843.836206][T15154] netlink: 'syz.1.3663': attribute type 29 has an invalid length. [ 843.866663][T15152] netlink: 'syz.1.3663': attribute type 29 has an invalid length. [ 843.982453][T15154] netlink: 'syz.1.3663': attribute type 4 has an invalid length. [ 844.051641][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3663'. [ 844.742450][T15140] can: request_module (can-proto-0) failed. [ 844.872037][ T4326] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 844.935252][T15176] FAULT_INJECTION: forcing a failure. [ 844.935252][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.948903][T15176] CPU: 0 PID: 15176 Comm: syz.3.3671 Not tainted syzkaller #0 [ 844.956430][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 844.966718][T15176] Call Trace: [ 844.970220][T15176] [ 844.973242][T15176] dump_stack_lvl+0x188/0x24e [ 844.978101][T15176] ? show_regs_print_info+0x12/0x12 [ 844.983413][T15176] ? load_image+0x410/0x410 [ 844.987989][T15176] ? __lock_acquire+0x7ea0/0x7ea0 [ 844.993097][T15176] should_fail_ex+0x390/0x4c0 [ 844.997929][T15176] _copy_from_user+0x2c/0x170 [ 845.002706][T15176] iovec_from_user+0x143/0x360 [ 845.007631][T15176] __import_iovec+0x6c/0x510 [ 845.012293][T15176] import_iovec+0x6f/0xa0 [ 845.017231][T15176] ___sys_sendmsg+0x252/0x360 [ 845.021988][T15176] ? __sys_sendmsg+0x2a0/0x2a0 [ 845.026830][T15176] ? __lock_acquire+0x7ea0/0x7ea0 [ 845.031955][T15176] __se_sys_sendmsg+0x1c3/0x2b0 [ 845.036865][T15176] ? __x64_sys_sendmsg+0x80/0x80 [ 845.041874][T15176] ? lockdep_hardirqs_on+0x94/0x140 [ 845.048269][T15176] do_syscall_64+0x4c/0xa0 [ 845.053146][T15176] ? clear_bhb_loop+0x60/0xb0 [ 845.059048][T15176] ? clear_bhb_loop+0x60/0xb0 [ 845.064534][T15176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.071056][T15176] RIP: 0033:0x7f0826fa8f19 [ 845.075525][T15176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.097449][T15176] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.105928][T15176] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 845.114691][T15176] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 845.123213][T15176] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 845.131460][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.139584][T15176] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 845.147634][T15176] [ 845.567322][T15185] netlink: 'syz.0.3672': attribute type 3 has an invalid length. [ 845.615912][T15185] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3672'. [ 845.888159][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.921377][T15191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.415261][T15191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 846.449461][T15191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 846.910311][T15191] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 846.917488][T15191] batman_adv: batadv0: Removing interface: virt_wifi0 [ 846.948784][ T4326] Bluetooth: hci1: command 0x2016 tx timeout [ 847.027332][T15194] netlink: 'syz.2.3677': attribute type 12 has an invalid length. [ 847.035460][T15194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3677'. [ 847.056902][T15226] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3685'. [ 847.187618][T15214] device syzkaller0 entered promiscuous mode [ 848.353438][T15254] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 848.404357][T15254] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3690'. [ 848.485159][T15251] can: request_module (can-proto-0) failed. [ 850.258286][T15244] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3688'. [ 850.295000][T15236] device syzkaller0 entered promiscuous mode [ 850.971983][T15280] FAULT_INJECTION: forcing a failure. [ 850.971983][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.030835][T15280] CPU: 0 PID: 15280 Comm: syz.1.3701 Not tainted syzkaller #0 [ 851.038392][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 851.048581][T15280] Call Trace: [ 851.051987][T15280] [ 851.054994][T15280] dump_stack_lvl+0x188/0x24e [ 851.059731][T15280] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 851.066031][T15280] ? show_regs_print_info+0x12/0x12 [ 851.071309][T15280] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 851.077569][T15280] should_fail_ex+0x390/0x4c0 [ 851.082485][T15280] _copy_from_user+0x2c/0x170 [ 851.087263][T15280] ___sys_sendmsg+0x1c3/0x360 [ 851.092008][T15280] ? __sys_sendmsg+0x2a0/0x2a0 [ 851.096903][T15280] __se_sys_sendmsg+0x1c3/0x2b0 [ 851.101821][T15280] ? __x64_sys_sendmsg+0x80/0x80 [ 851.106913][T15280] ? syscall_enter_from_user_mode+0x2a/0x80 [ 851.112873][T15280] do_syscall_64+0x4c/0xa0 [ 851.117336][T15280] ? clear_bhb_loop+0x60/0xb0 [ 851.122058][T15280] ? clear_bhb_loop+0x60/0xb0 [ 851.126792][T15280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.132749][T15280] RIP: 0033:0x7efef59a8f19 [ 851.137212][T15280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.156952][T15280] RSP: 002b:00007efef6931028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.165423][T15280] RAX: ffffffffffffffda RBX: 00007efef5c25fa0 RCX: 00007efef59a8f19 [ 851.173449][T15280] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 851.181457][T15280] RBP: 00007efef6931090 R08: 0000000000000000 R09: 0000000000000000 [ 851.189474][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.197484][T15280] R13: 00007efef5c26038 R14: 00007efef5c25fa0 R15: 00007ffff0c9c668 [ 851.205514][T15280] [ 851.424963][T15292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3704'. [ 851.545331][T15294] netlink: 'syz.4.3705': attribute type 3 has an invalid length. [ 851.554791][T15294] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3705'. [ 851.839347][ T4326] Bluetooth: hci2: command 0x0406 tx timeout [ 852.143793][T15310] rxe_eth0 speed is unknown, defaulting to 1000 [ 852.406161][T15323] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.3716'. [ 852.660146][T15333] netlink: 'syz.2.3718': attribute type 3 has an invalid length. [ 852.667976][T15333] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3718'. [ 853.388246][T15355] device syzkaller0 entered promiscuous mode [ 853.433623][T15349] netlink: 'syz.1.3725': attribute type 21 has an invalid length. [ 853.466698][T15349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3725'. [ 853.617672][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 853.762283][T15370] netlink: 'syz.1.3733': attribute type 3 has an invalid length. [ 853.781763][T15370] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3733'. [ 855.955713][T15396] netlink: 'syz.0.3743': attribute type 10 has an invalid length. [ 856.412633][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 856.726074][T15449] netlink: 'syz.4.3763': attribute type 3 has an invalid length. [ 856.734973][T15449] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3763'. [ 856.748213][T15452] FAULT_INJECTION: forcing a failure. [ 856.748213][T15452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.788452][T15452] CPU: 1 PID: 15452 Comm: syz.3.3764 Not tainted syzkaller #0 [ 856.796013][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 856.806110][T15452] Call Trace: [ 856.809428][T15452] [ 856.812396][T15452] dump_stack_lvl+0x188/0x24e [ 856.817135][T15452] ? show_regs_print_info+0x12/0x12 [ 856.822399][T15452] ? load_image+0x410/0x410 [ 856.826967][T15452] ? __lock_acquire+0x7ea0/0x7ea0 [ 856.832059][T15452] should_fail_ex+0x390/0x4c0 [ 856.836795][T15452] _copy_from_user+0x2c/0x170 [ 856.841567][T15452] btf_get_info_by_fd+0x100/0x5a0 [ 856.846729][T15452] ? __fget_files+0x28/0x460 [ 856.851379][T15452] ? btf_get_by_fd+0x160/0x160 [ 856.857241][T15452] ? __fdget+0x17c/0x200 [ 856.861549][T15452] bpf_obj_get_info_by_fd+0xc5b/0x2fb0 [ 856.867071][T15452] ? perf_trace_buf_alloc+0x300/0x300 [ 856.872495][T15452] ? verify_lock_unused+0x140/0x140 [ 856.877759][T15452] ? perf_tp_event+0xa8e/0xc10 [ 856.882570][T15452] ? bpf_map_get_fd_by_id+0x330/0x330 [ 856.888365][T15452] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 856.894429][T15452] ? __might_fault+0xa6/0x120 [ 856.899259][T15452] ? __lock_acquire+0x7ea0/0x7ea0 [ 856.904351][T15452] ? __might_fault+0xa6/0x120 [ 856.909085][T15452] ? __might_fault+0xc2/0x120 [ 856.913813][T15452] ? __might_fault+0xa6/0x120 [ 856.918603][T15452] ? bpf_lsm_bpf+0x5/0x10 [ 856.923705][T15452] ? security_bpf+0x7a/0xa0 [ 856.928341][T15452] __sys_bpf+0x505/0x780 [ 856.932617][T15452] ? bpf_link_show_fdinfo+0x550/0x550 [ 856.938095][T15452] ? lock_chain_count+0x20/0x20 [ 856.943034][T15452] __x64_sys_bpf+0x78/0x90 [ 856.947532][T15452] do_syscall_64+0x4c/0xa0 [ 856.952011][T15452] ? clear_bhb_loop+0x60/0xb0 [ 856.956768][T15452] ? clear_bhb_loop+0x60/0xb0 [ 856.962040][T15452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.968749][T15452] RIP: 0033:0x7f0826fa8f19 [ 856.973218][T15452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.995403][T15452] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.003884][T15452] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 857.011907][T15452] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 857.019923][T15452] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 857.027963][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.035984][T15452] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 857.044031][T15452] [ 858.184525][T15491] FAULT_INJECTION: forcing a failure. [ 858.184525][T15491] name failslab, interval 1, probability 0, space 0, times 0 [ 858.258724][T15491] CPU: 1 PID: 15491 Comm: syz.3.3776 Not tainted syzkaller #0 [ 858.266279][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 858.276651][T15491] Call Trace: [ 858.279974][T15491] [ 858.282947][T15491] dump_stack_lvl+0x188/0x24e [ 858.287196][T15494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 858.287673][T15491] ? show_regs_print_info+0x12/0x12 [ 858.287712][T15491] ? load_image+0x410/0x410 [ 858.287744][T15491] ? __might_sleep+0xd0/0xd0 [ 858.287767][T15491] ? __lock_acquire+0x7ea0/0x7ea0 [ 858.287799][T15491] ? verify_lock_unused+0x140/0x140 [ 858.287847][T15491] should_fail_ex+0x390/0x4c0 [ 858.287881][T15491] should_failslab+0x5/0x20 [ 858.287903][T15491] slab_pre_alloc_hook+0x59/0x300 [ 858.287933][T15491] ? __get_vm_area_node+0x122/0x330 [ 858.344149][T15491] __kmem_cache_alloc_node+0x4f/0x270 [ 858.349581][T15491] ? __get_vm_area_node+0x122/0x330 [ 858.354825][T15491] kmalloc_node_trace+0x22/0xe0 [ 858.359834][T15491] __get_vm_area_node+0x122/0x330 [ 858.364912][T15491] ? __local_bh_enable_ip+0x136/0x1c0 [ 858.370411][T15491] __vmalloc_node_range+0x357/0x1380 [ 858.375740][T15491] ? netlink_sendmsg+0x5ec/0xbd0 [ 858.380751][T15491] ? free_vm_area+0x50/0x50 [ 858.385313][T15491] ? netlink_sendmsg+0x5ec/0xbd0 [ 858.390296][T15491] vmalloc+0x75/0x80 [ 858.394246][T15491] ? netlink_sendmsg+0x5ec/0xbd0 [ 858.399239][T15491] netlink_sendmsg+0x5ec/0xbd0 [ 858.404081][T15491] ? netlink_getsockopt+0x550/0x550 [ 858.409327][T15491] ? apparmor_socket_sendmsg+0x8a/0x330 [ 858.414914][T15491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 858.420248][T15491] ? security_socket_sendmsg+0x7c/0xa0 [ 858.425750][T15491] ? netlink_getsockopt+0x550/0x550 [ 858.431002][T15491] ____sys_sendmsg+0x5ed/0x9a0 [ 858.435818][T15491] ? __sys_sendmsg_sock+0x30/0x30 [ 858.440874][T15491] ? __import_iovec+0x306/0x510 [ 858.445863][T15491] ? import_iovec+0x6f/0xa0 [ 858.450406][T15491] ___sys_sendmsg+0x2a2/0x360 [ 858.455129][T15491] ? __sys_sendmsg+0x2a0/0x2a0 [ 858.459960][T15491] ? __lock_acquire+0x7ea0/0x7ea0 [ 858.465052][T15491] __se_sys_sendmsg+0x1c3/0x2b0 [ 858.469953][T15491] ? __x64_sys_sendmsg+0x80/0x80 [ 858.474963][T15491] ? lockdep_hardirqs_on+0x94/0x140 [ 858.480207][T15491] do_syscall_64+0x4c/0xa0 [ 858.484933][T15491] ? clear_bhb_loop+0x60/0xb0 [ 858.489752][T15491] ? clear_bhb_loop+0x60/0xb0 [ 858.494473][T15491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.500408][T15491] RIP: 0033:0x7f0826fa8f19 [ 858.504864][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.524546][T15491] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.533005][T15491] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 858.541011][T15491] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 858.549020][T15491] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 858.557026][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.565034][T15491] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 858.573071][T15491] [ 858.593392][T15494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 858.629201][T15491] syz.3.3776: vmalloc error: size 65088, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 858.660398][T15497] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3777'. [ 858.718113][T15500] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3779'. [ 858.719714][T15491] CPU: 0 PID: 15491 Comm: syz.3.3776 Not tainted syzkaller #0 [ 858.734911][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 858.745014][T15491] Call Trace: [ 858.748413][T15491] [ 858.751400][T15491] dump_stack_lvl+0x188/0x24e [ 858.756135][T15491] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 858.762608][T15491] ? show_regs_print_info+0x12/0x12 [ 858.767858][T15491] ? load_image+0x410/0x410 [ 858.772442][T15491] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 858.778909][T15491] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 858.785464][T15491] warn_alloc+0x242/0x330 [ 858.789847][T15491] ? __get_vm_area_node+0x122/0x330 [ 858.795095][T15491] ? zone_watermark_ok_safe+0x270/0x270 [ 858.800695][T15491] ? rcu_is_watching+0x11/0xa0 [ 858.804452][T15501] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3779'. [ 858.805503][T15491] ? __get_vm_area_node+0x318/0x330 [ 858.819688][T15491] ? __local_bh_enable_ip+0x136/0x1c0 [ 858.825291][T15491] __vmalloc_node_range+0x37c/0x1380 [ 858.831085][T15491] ? free_vm_area+0x50/0x50 [ 858.835742][T15491] ? netlink_sendmsg+0x5ec/0xbd0 [ 858.840827][T15491] vmalloc+0x75/0x80 [ 858.844786][T15491] ? netlink_sendmsg+0x5ec/0xbd0 [ 858.849806][T15491] netlink_sendmsg+0x5ec/0xbd0 [ 858.854636][T15491] ? netlink_getsockopt+0x550/0x550 [ 858.859890][T15491] ? apparmor_socket_sendmsg+0x8a/0x330 [ 858.865497][T15491] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 858.870954][T15491] ? security_socket_sendmsg+0x7c/0xa0 [ 858.876489][T15491] ? netlink_getsockopt+0x550/0x550 [ 858.881755][T15491] ____sys_sendmsg+0x5ed/0x9a0 [ 858.886700][T15491] ? __sys_sendmsg_sock+0x30/0x30 [ 858.891877][T15491] ? __import_iovec+0x306/0x510 [ 858.896824][T15491] ? import_iovec+0x6f/0xa0 [ 858.901479][T15491] ___sys_sendmsg+0x2a2/0x360 [ 858.906228][T15491] ? __sys_sendmsg+0x2a0/0x2a0 [ 858.911107][T15491] ? __lock_acquire+0x7ea0/0x7ea0 [ 858.916214][T15491] __se_sys_sendmsg+0x1c3/0x2b0 [ 858.921115][T15491] ? __x64_sys_sendmsg+0x80/0x80 [ 858.926124][T15491] ? lockdep_hardirqs_on+0x94/0x140 [ 858.931375][T15491] do_syscall_64+0x4c/0xa0 [ 858.935849][T15491] ? clear_bhb_loop+0x60/0xb0 [ 858.940572][T15491] ? clear_bhb_loop+0x60/0xb0 [ 858.945320][T15491] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.951454][T15491] RIP: 0033:0x7f0826fa8f19 [ 858.955913][T15491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.975594][T15491] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.984062][T15491] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 858.992080][T15491] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 859.000142][T15491] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 859.008427][T15491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.017058][T15491] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 859.025094][T15491] [ 859.331440][T15491] Mem-Info: [ 859.344662][T15491] active_anon:6645 inactive_anon:0 isolated_anon:0 [ 859.344662][T15491] active_file:19911 inactive_file:40190 isolated_file:0 [ 859.344662][T15491] unevictable:768 dirty:219 writeback:0 [ 859.344662][T15491] slab_reclaimable:21585 slab_unreclaimable:97818 [ 859.344662][T15491] mapped:29742 shmem:1364 pagetables:650 [ 859.344662][T15491] sec_pagetables:0 bounce:0 [ 859.344662][T15491] kernel_misc_reclaimable:0 [ 859.344662][T15491] free:1310498 free_pcp:11250 free_cma:0 [ 859.496881][T15491] Node 0 active_anon:26580kB inactive_anon:0kB active_file:79644kB inactive_file:160560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118968kB dirty:876kB writeback:0kB shmem:3920kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10500kB pagetables:2600kB sec_pagetables:0kB all_unreclaimable? no [ 859.534507][T15491] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 859.584296][T15514] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3783'. [ 859.708744][T15491] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.794361][T15518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3785'. [ 859.863933][T15491] lowmem_reserve[]: 0 2509 2510 2510 2510 [ 859.873281][T15491] Node 0 DMA32 free:1323600kB boost:0kB min:34540kB low:43172kB high:51804kB reserved_highatomic:0KB active_anon:26280kB inactive_anon:0kB active_file:79644kB inactive_file:160560kB unevictable:1536kB writepending:976kB present:3129332kB managed:2574604kB mlocked:0kB bounce:0kB free_pcp:28520kB local_pcp:14268kB free_cma:0kB [ 859.928722][T15491] lowmem_reserve[]: 0 0 1 1 1 [ 859.933572][T15491] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.962143][T15520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 859.981589][T15520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.021516][T15491] lowmem_reserve[]: 0 0 0 0 0 [ 860.021669][T15491] Node 1 Normal free:3902784kB boost:0kB min:55344kB low:69180kB high:83016kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17664kB local_pcp:11808kB free_cma:0kB [ 860.021735][T15491] lowmem_reserve[]: 0 0 0 0 0 [ 860.021779][T15491] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 860.021926][T15491] Node 0 DMA32: 638*4kB (UM) 2103*8kB (UME) 1500*16kB (UME) 793*32kB (UME) 607*64kB (UME) 570*128kB (UME) 381*256kB (UM) 284*512kB (UME) 229*1024kB (UME) 17*2048kB (M) 154*4096kB (UM) = 1323600kB [ 860.022131][T15491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 860.022256][T15491] Node 1 Normal: 198*4kB (UME) 39*8kB (UE) 33*16kB (UME) 121*32kB (UME) 35*64kB (UM) 18*128kB (UME) 14*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3902784kB [ 860.022485][T15491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.143674][T15520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.168393][T15520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.252266][T15491] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 860.278957][T15491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 860.340070][T15491] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 860.382085][T15491] 61465 total pagecache pages [ 860.401354][T15491] 0 pages in swap cache [ 860.431404][T15491] Free swap = 124996kB [ 860.448093][T15491] Total swap = 124996kB [ 860.454508][T15491] 2097051 pages RAM [ 860.459077][T15491] 0 pages HighMem/MovableOnly [ 860.463899][T15491] 419799 pages reserved [ 860.468273][T15491] 0 pages cma reserved [ 860.593396][T15524] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3788'. [ 860.751532][T15535] netlink: 'syz.3.3791': attribute type 11 has an invalid length. [ 860.766078][T15535] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3791'. [ 861.403865][T15553] netlink: 'syz.0.3799': attribute type 11 has an invalid length. [ 861.604869][T15563] FAULT_INJECTION: forcing a failure. [ 861.604869][T15563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.660108][T15563] CPU: 1 PID: 15563 Comm: syz.1.3803 Not tainted syzkaller #0 [ 861.667684][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 861.677798][T15563] Call Trace: [ 861.681122][T15563] [ 861.684130][T15563] dump_stack_lvl+0x188/0x24e [ 861.688878][T15563] ? show_regs_print_info+0x12/0x12 [ 861.694134][T15563] ? load_image+0x410/0x410 [ 861.698691][T15563] ? __lock_acquire+0x7ea0/0x7ea0 [ 861.704020][T15563] should_fail_ex+0x390/0x4c0 [ 861.709936][T15563] _copy_from_user+0x2c/0x170 [ 861.714669][T15563] iovec_from_user+0x143/0x360 [ 861.719500][T15563] __import_iovec+0x6c/0x510 [ 861.724137][T15563] import_iovec+0x6f/0xa0 [ 861.728817][T15563] ___sys_sendmsg+0x252/0x360 [ 861.733585][T15563] ? __sys_sendmsg+0x2a0/0x2a0 [ 861.739170][T15563] __se_sys_sendmsg+0x1c3/0x2b0 [ 861.744074][T15563] ? __x64_sys_sendmsg+0x80/0x80 [ 861.749196][T15563] ? syscall_enter_from_user_mode+0x2a/0x80 [ 861.755503][T15563] do_syscall_64+0x4c/0xa0 [ 861.760508][T15563] ? clear_bhb_loop+0x60/0xb0 [ 861.765857][T15563] ? clear_bhb_loop+0x60/0xb0 [ 861.770593][T15563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.776539][T15563] RIP: 0033:0x7efef59a8f19 [ 861.780982][T15563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.800631][T15563] RSP: 002b:00007efef6931028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.809430][T15563] RAX: ffffffffffffffda RBX: 00007efef5c25fa0 RCX: 00007efef59a8f19 [ 861.817532][T15563] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 861.825526][T15563] RBP: 00007efef6931090 R08: 0000000000000000 R09: 0000000000000000 [ 861.833541][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.841535][T15563] R13: 00007efef5c26038 R14: 00007efef5c25fa0 R15: 00007ffff0c9c668 [ 861.849633][T15563] [ 862.187570][T15572] netlink: 'syz.2.3806': attribute type 21 has an invalid length. [ 862.239790][T15570] delete_channel: no stack [ 863.427676][T15598] __nla_validate_parse: 1 callbacks suppressed [ 863.427767][T15598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3813'. [ 864.477350][T15629] netlink: 'syz.3.3829': attribute type 3 has an invalid length. [ 864.488872][T15629] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3829'. [ 864.545018][T15632] device syzkaller0 entered promiscuous mode [ 864.579359][T15634] FAULT_INJECTION: forcing a failure. [ 864.579359][T15634] name failslab, interval 1, probability 0, space 0, times 0 [ 864.649628][T15634] CPU: 0 PID: 15634 Comm: syz.0.3830 Not tainted syzkaller #0 [ 864.659566][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 864.673155][T15634] Call Trace: [ 864.676489][T15634] [ 864.680174][T15634] dump_stack_lvl+0x188/0x24e [ 864.685447][T15634] ? show_regs_print_info+0x12/0x12 [ 864.692480][T15634] ? load_image+0x410/0x410 [ 864.697304][T15634] ? __might_sleep+0xd0/0xd0 [ 864.702761][T15634] ? __lock_acquire+0x7ea0/0x7ea0 [ 864.708107][T15634] ? aa_file_perm+0x3ea/0xf00 [ 864.713106][T15634] ? verify_lock_unused+0x140/0x140 [ 864.718803][T15634] should_fail_ex+0x390/0x4c0 [ 864.724575][T15634] should_failslab+0x5/0x20 [ 864.731038][T15634] slab_pre_alloc_hook+0x59/0x300 [ 864.736403][T15634] ? aa_path_link+0x8a0/0x8a0 [ 864.741512][T15634] kmem_cache_alloc_node+0x5a/0x310 [ 864.747036][T15634] ? __alloc_skb+0xf9/0x7d0 [ 864.753603][T15634] __alloc_skb+0xf9/0x7d0 [ 864.758567][T15634] ppp_write+0xb0/0x3e0 [ 864.763235][T15634] ? vfs_write+0x2c7/0x9a0 [ 864.768151][T15634] ? ppp_read+0x8c0/0x8c0 [ 864.772529][T15634] vfs_write+0x2dc/0x9a0 [ 864.776899][T15634] ? file_end_write+0x250/0x250 [ 864.781808][T15634] ? __fget_files+0x28/0x460 [ 864.786528][T15634] ? __fget_files+0x3fc/0x460 [ 864.791273][T15634] ? __fdget_pos+0x1d4/0x360 [ 864.796120][T15634] ? ksys_write+0x70/0x260 [ 864.800880][T15634] ksys_write+0x14d/0x260 [ 864.805781][T15634] ? __ia32_sys_read+0x80/0x80 [ 864.811683][T15634] ? lockdep_hardirqs_on+0x94/0x140 [ 864.817371][T15634] do_syscall_64+0x4c/0xa0 [ 864.821836][T15634] ? clear_bhb_loop+0x60/0xb0 [ 864.826638][T15634] ? clear_bhb_loop+0x60/0xb0 [ 864.831525][T15634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.837462][T15634] RIP: 0033:0x7ff06d1a8f19 [ 864.841908][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.862902][T15634] RSP: 002b:00007ff06dfc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 864.871375][T15634] RAX: ffffffffffffffda RBX: 00007ff06d425fa0 RCX: 00007ff06d1a8f19 [ 864.879665][T15634] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000007 [ 864.887665][T15634] RBP: 00007ff06dfc1090 R08: 0000000000000000 R09: 0000000000000000 [ 864.895835][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.903934][T15634] R13: 00007ff06d426038 R14: 00007ff06d425fa0 R15: 00007ffe8d4d6d38 [ 864.912217][T15634] [ 866.865987][T15640] netlink: 'syz.2.3833': attribute type 10 has an invalid length. [ 867.080748][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3839'. [ 867.112420][T15648] netlink: 'syz.3.3836': attribute type 3 has an invalid length. [ 867.129943][T15648] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3836'. [ 867.357212][T15663] netlink: 'syz.3.3844': attribute type 3 has an invalid length. [ 867.372818][T15663] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3844'. [ 868.010261][T15692] netlink: 'syz.1.3854': attribute type 10 has an invalid length. [ 868.376797][T15696] netlink: 'syz.2.3855': attribute type 3 has an invalid length. [ 868.393209][T15696] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3855'. [ 868.476163][T15694] device syzkaller0 entered promiscuous mode [ 868.609848][T15705] netlink: 'syz.1.3858': attribute type 3 has an invalid length. [ 868.673338][T15705] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3858'. [ 870.232190][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.238679][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.377133][T15707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3860'. [ 870.621371][T15720] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3863'. [ 870.689588][T15720] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 870.725341][T15725] FAULT_INJECTION: forcing a failure. [ 870.725341][T15725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.754819][T15720] CPU: 1 PID: 15720 Comm: syz.0.3863 Not tainted syzkaller #0 [ 870.762380][T15720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 870.772504][T15720] Call Trace: [ 870.775826][T15720] [ 870.778796][T15720] dump_stack_lvl+0x188/0x24e [ 870.783576][T15720] ? show_regs_print_info+0x12/0x12 [ 870.788841][T15720] ? load_image+0x410/0x410 [ 870.793414][T15720] sysfs_warn_dup+0x8a/0xa0 [ 870.797973][T15720] sysfs_do_create_link_sd+0xc0/0x110 [ 870.803407][T15720] device_add+0x83b/0x1050 [ 870.807877][T15720] wiphy_register+0x1f16/0x2c50 [ 870.812807][T15720] ? cfg80211_event_work+0x40/0x40 [ 870.817968][T15720] ? minstrel_ht_alloc+0x894/0xa20 [ 870.823170][T15720] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 870.829302][T15720] ieee80211_register_hw+0x2e33/0x3b00 [ 870.834855][T15720] ? ieee80211_register_hw+0xec1/0x3b00 [ 870.840451][T15720] ? ieee80211_register_hw+0xec1/0x3b00 [ 870.846059][T15720] ? ieee80211_tasklet_handler+0x20/0x20 [ 870.851786][T15720] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 870.857743][T15720] ? __debug_object_init+0xed/0x440 [ 870.863148][T15720] ? memset+0x1e/0x40 [ 870.867261][T15720] ? __hrtimer_init+0x189/0x270 [ 870.872152][T15720] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 870.877929][T15720] ? memcpy+0x3c/0x60 [ 870.881944][T15720] hwsim_new_radio_nl+0xab7/0xc90 [ 870.887019][T15720] genl_family_rcv_msg_doit+0x22f/0x350 [ 870.892598][T15720] ? end_current_label_crit_section+0x170/0x170 [ 870.898884][T15720] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 870.904820][T15720] ? bpf_lsm_capable+0x5/0x10 [ 870.909527][T15720] ? security_capable+0x85/0xb0 [ 870.914410][T15720] genl_rcv_msg+0x601/0x790 [ 870.918951][T15720] ? genl_bind+0x360/0x360 [ 870.923400][T15720] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 870.929795][T15720] netlink_rcv_skb+0x1ef/0x440 [ 870.934690][T15720] ? genl_bind+0x360/0x360 [ 870.939143][T15720] ? netlink_ack+0x1160/0x1160 [ 870.944047][T15720] ? down_read+0x1a8/0x2d0 [ 870.948490][T15720] genl_rcv+0x24/0x40 [ 870.952505][T15720] netlink_unicast+0x7ad/0x920 [ 870.957313][T15720] netlink_sendmsg+0x8ad/0xbd0 [ 870.962118][T15720] ? netlink_getsockopt+0x550/0x550 [ 870.967349][T15720] ? apparmor_socket_sendmsg+0x8a/0x330 [ 870.972929][T15720] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 870.978243][T15720] ? security_socket_sendmsg+0x7c/0xa0 [ 870.983732][T15720] ? netlink_getsockopt+0x550/0x550 [ 870.988962][T15720] ____sys_sendmsg+0x5ed/0x9a0 [ 870.993776][T15720] ? __sys_sendmsg_sock+0x30/0x30 [ 870.998837][T15720] ? __import_iovec+0x306/0x510 [ 871.003721][T15720] ? import_iovec+0x6f/0xa0 [ 871.008258][T15720] ___sys_sendmsg+0x2a2/0x360 [ 871.012971][T15720] ? __sys_sendmsg+0x2a0/0x2a0 [ 871.017803][T15720] __se_sys_sendmsg+0x1c3/0x2b0 [ 871.022691][T15720] ? __x64_sys_sendmsg+0x80/0x80 [ 871.027678][T15720] ? lockdep_hardirqs_on+0x94/0x140 [ 871.032905][T15720] do_syscall_64+0x4c/0xa0 [ 871.037367][T15720] ? clear_bhb_loop+0x60/0xb0 [ 871.042073][T15720] ? clear_bhb_loop+0x60/0xb0 [ 871.046782][T15720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.052796][T15720] RIP: 0033:0x7ff06d1a8f19 [ 871.057233][T15720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.076861][T15720] RSP: 002b:00007ff06dfa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.085313][T15720] RAX: ffffffffffffffda RBX: 00007ff06d426090 RCX: 00007ff06d1a8f19 [ 871.093320][T15720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 871.101316][T15720] RBP: 00007ff06d237f6d R08: 0000000000000000 R09: 0000000000000000 [ 871.109307][T15720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.117296][T15720] R13: 00007ff06d426128 R14: 00007ff06d426090 R15: 00007ffe8d4d6d38 [ 871.125328][T15720] [ 871.136185][T15725] CPU: 1 PID: 15725 Comm: syz.4.3865 Not tainted syzkaller #0 [ 871.143738][T15725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 871.153865][T15725] Call Trace: [ 871.157204][T15725] [ 871.160183][T15725] dump_stack_lvl+0x188/0x24e [ 871.164931][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.171157][T15725] ? show_regs_print_info+0x12/0x12 [ 871.176454][T15725] ? load_image+0x410/0x410 [ 871.181033][T15725] should_fail_ex+0x390/0x4c0 [ 871.185765][T15725] _copy_to_user+0x2c/0x130 [ 871.190335][T15725] btf_get_info_by_fd+0x1c9/0x5a0 [ 871.195421][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.201639][T15725] ? btf_get_by_fd+0x160/0x160 [ 871.206475][T15725] bpf_obj_get_info_by_fd+0xc5b/0x2fb0 [ 871.211998][T15725] ? lock_chain_count+0x20/0x20 [ 871.216917][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.223255][T15725] ? bpf_map_get_fd_by_id+0x330/0x330 [ 871.228694][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.234925][T15725] ? lock_acquire+0x226/0x4a0 [ 871.239787][T15725] ? __might_fault+0xa6/0x120 [ 871.244517][T15725] ? __lock_acquire+0x7ea0/0x7ea0 [ 871.249606][T15725] ? __might_fault+0xa6/0x120 [ 871.254357][T15725] ? __might_fault+0xc2/0x120 [ 871.259085][T15725] ? __might_fault+0xa6/0x120 [ 871.263829][T15725] ? bpf_lsm_bpf+0x5/0x10 [ 871.268305][T15725] ? security_bpf+0x7a/0xa0 [ 871.272865][T15725] __sys_bpf+0x505/0x780 [ 871.277195][T15725] ? bpf_link_show_fdinfo+0x550/0x550 [ 871.282636][T15725] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 871.288875][T15725] __x64_sys_bpf+0x78/0x90 [ 871.293368][T15725] do_syscall_64+0x4c/0xa0 [ 871.297850][T15725] ? clear_bhb_loop+0x60/0xb0 [ 871.302675][T15725] ? clear_bhb_loop+0x60/0xb0 [ 871.307421][T15725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.313376][T15725] RIP: 0033:0x7f34ecda8f19 [ 871.317839][T15725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.337532][T15725] RSP: 002b:00007f34edd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 871.346091][T15725] RAX: ffffffffffffffda RBX: 00007f34ed025fa0 RCX: 00007f34ecda8f19 [ 871.354187][T15725] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 871.362209][T15725] RBP: 00007f34edd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 871.370229][T15725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 871.378248][T15725] R13: 00007f34ed026038 R14: 00007f34ed025fa0 R15: 00007fff3039a198 [ 871.386289][T15725] [ 871.897751][T15743] netlink: 'syz.2.3871': attribute type 3 has an invalid length. [ 871.928782][T15743] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3871'. [ 873.031239][T15769] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3880'. [ 873.970971][T15780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3882'. [ 874.275255][T15788] netlink: 'syz.3.3887': attribute type 3 has an invalid length. [ 874.296492][T15788] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3887'. [ 875.104310][T15824] FAULT_INJECTION: forcing a failure. [ 875.104310][T15824] name failslab, interval 1, probability 0, space 0, times 0 [ 875.178373][T15824] CPU: 1 PID: 15824 Comm: syz.3.3901 Not tainted syzkaller #0 [ 875.185959][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 875.196070][T15824] Call Trace: [ 875.199392][T15824] [ 875.202364][T15824] dump_stack_lvl+0x188/0x24e [ 875.207234][T15824] ? show_regs_print_info+0x12/0x12 [ 875.212499][T15824] ? load_image+0x410/0x410 [ 875.217071][T15824] ? __might_sleep+0xd0/0xd0 [ 875.221720][T15824] ? __lock_acquire+0x7ea0/0x7ea0 [ 875.226817][T15824] should_fail_ex+0x390/0x4c0 [ 875.231552][T15824] should_failslab+0x5/0x20 [ 875.236113][T15824] slab_pre_alloc_hook+0x59/0x300 [ 875.241207][T15824] kmem_cache_alloc_node+0x5a/0x310 [ 875.246475][T15824] ? __alloc_skb+0xf9/0x7d0 [ 875.251038][T15824] __alloc_skb+0xf9/0x7d0 [ 875.255423][T15824] netlink_sendmsg+0x654/0xbd0 [ 875.260247][T15824] ? lockdep_hardirqs_on+0x94/0x140 [ 875.265506][T15824] ? netlink_getsockopt+0x550/0x550 [ 875.270763][T15824] ? bpf_lsm_socket_accept+0x10/0x10 [ 875.276188][T15824] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 875.281634][T15824] ? security_socket_sendmsg+0x7c/0xa0 [ 875.287578][T15824] ? netlink_getsockopt+0x550/0x550 [ 875.292845][T15824] ____sys_sendmsg+0x5ed/0x9a0 [ 875.297698][T15824] ? __sys_sendmsg_sock+0x30/0x30 [ 875.302783][T15824] ? __import_iovec+0x306/0x510 [ 875.307698][T15824] ? import_iovec+0x6f/0xa0 [ 875.312266][T15824] ___sys_sendmsg+0x2a2/0x360 [ 875.317007][T15824] ? __sys_sendmsg+0x2a0/0x2a0 [ 875.321880][T15824] __se_sys_sendmsg+0x1c3/0x2b0 [ 875.326792][T15824] ? __x64_sys_sendmsg+0x80/0x80 [ 875.331808][T15824] do_syscall_64+0x4c/0xa0 [ 875.336280][T15824] ? clear_bhb_loop+0x60/0xb0 [ 875.341020][T15824] ? clear_bhb_loop+0x60/0xb0 [ 875.345768][T15824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.351720][T15824] RIP: 0033:0x7f0826fa8f19 [ 875.356179][T15824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.375949][T15824] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.384740][T15824] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 875.392790][T15824] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 875.400814][T15824] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 875.408876][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.416998][T15824] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 875.425037][T15824] [ 876.083203][T15829] netlink: 'syz.1.3904': attribute type 3 has an invalid length. [ 876.138985][T15829] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3904'. [ 876.378501][T15840] device syzkaller0 entered promiscuous mode [ 876.442547][T15844] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3910'. [ 877.117003][T15863] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3916'. [ 877.429502][ T4317] Bluetooth: hci4: command 0x0406 tx timeout [ 878.461622][T15844] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3910'. [ 878.476844][T15853] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3913'. [ 878.486503][T15855] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3913'. [ 878.898762][T15875] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 878.925232][T15875] syzkaller1: linktype set to 825 [ 878.972657][T15881] netlink: 'syz.0.3920': attribute type 3 has an invalid length. [ 879.076385][T15883] syzkaller1: tun_chr_ioctl cmd 35092 [ 879.092176][T15881] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3920'. [ 879.491795][T15886] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.3933'. [ 880.706763][T15908] netlink: 'syz.2.3931': attribute type 3 has an invalid length. [ 880.827809][T15908] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3931'. [ 881.373158][T15921] netlink: 'syz.1.3936': attribute type 3 has an invalid length. [ 881.406781][T15921] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3936'. [ 881.455146][T15924] netlink: 'syz.4.3946': attribute type 3 has an invalid length. [ 881.478941][T15924] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3946'. [ 881.697885][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 881.926011][T15952] netlink: 'syz.0.3945': attribute type 3 has an invalid length. [ 881.944183][T15952] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3945'. [ 882.209709][T15959] netlink: 'syz.2.3951': attribute type 3 has an invalid length. [ 882.221035][T15959] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3951'. [ 882.703961][T15968] netlink: 'syz.3.3954': attribute type 3 has an invalid length. [ 882.730368][T15968] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3954'. [ 883.053166][T15983] syz.2.3961[15983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.053279][T15983] syz.2.3961[15983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 883.638336][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 883.815106][T16008] device syzkaller0 entered promiscuous mode [ 883.852874][T16009] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 884.163514][T16009] team0: Port device geneve0 added [ 884.803218][T16039] FAULT_INJECTION: forcing a failure. [ 884.803218][T16039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.825640][T16039] CPU: 1 PID: 16039 Comm: syz.0.3984 Not tainted syzkaller #0 [ 884.833195][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 884.843295][T16039] Call Trace: [ 884.846611][T16039] [ 884.849583][T16039] dump_stack_lvl+0x188/0x24e [ 884.854339][T16039] ? show_regs_print_info+0x12/0x12 [ 884.859598][T16039] ? load_image+0x410/0x410 [ 884.864175][T16039] ? __lock_acquire+0x7ea0/0x7ea0 [ 884.869268][T16039] should_fail_ex+0x390/0x4c0 [ 884.874010][T16039] _copy_to_user+0x2c/0x130 [ 884.878728][T16039] btf_get_info_by_fd+0x417/0x5a0 [ 884.883904][T16039] ? btf_get_by_fd+0x160/0x160 [ 884.888765][T16039] ? __fdget+0x17c/0x200 [ 884.893076][T16039] bpf_obj_get_info_by_fd+0xc5b/0x2fb0 [ 884.898596][T16039] ? perf_trace_buf_alloc+0x300/0x300 [ 884.904026][T16039] ? verify_lock_unused+0x140/0x140 [ 884.909293][T16039] ? bpf_map_get_fd_by_id+0x330/0x330 [ 884.914724][T16039] ? perf_trace_preemptirq_template+0x268/0x320 [ 884.921021][T16039] ? irqentry_enter+0x33/0x50 [ 884.926204][T16039] ? __might_fault+0xa6/0x120 [ 884.930938][T16039] ? __lock_acquire+0x7ea0/0x7ea0 [ 884.936019][T16039] ? __might_fault+0xa6/0x120 [ 884.940754][T16039] ? __might_fault+0xc2/0x120 [ 884.945476][T16039] ? __might_fault+0xa6/0x120 [ 884.950238][T16039] ? bpf_lsm_bpf+0x5/0x10 [ 884.954620][T16039] ? security_bpf+0x7a/0xa0 [ 884.959182][T16039] __sys_bpf+0x505/0x780 [ 884.963501][T16039] ? bpf_link_show_fdinfo+0x550/0x550 [ 884.968953][T16039] ? lock_chain_count+0x20/0x20 [ 884.973870][T16039] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 884.979930][T16039] __x64_sys_bpf+0x78/0x90 [ 884.984518][T16039] do_syscall_64+0x4c/0xa0 [ 884.988997][T16039] ? clear_bhb_loop+0x60/0xb0 [ 884.993765][T16039] ? clear_bhb_loop+0x60/0xb0 [ 884.998517][T16039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.004485][T16039] RIP: 0033:0x7ff06d1a8f19 [ 885.008956][T16039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.028610][T16039] RSP: 002b:00007ff06dfc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 885.037081][T16039] RAX: ffffffffffffffda RBX: 00007ff06d425fa0 RCX: 00007ff06d1a8f19 [ 885.045106][T16039] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 000000000000000f [ 885.053129][T16039] RBP: 00007ff06dfc1090 R08: 0000000000000000 R09: 0000000000000000 [ 885.061151][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.069251][T16039] R13: 00007ff06d426038 R14: 00007ff06d425fa0 R15: 00007ffe8d4d6d38 [ 885.077268][T16039] [ 885.957977][T16064] netlink: 'syz.0.3994': attribute type 1 has an invalid length. [ 885.966324][T16064] netlink: 'syz.0.3994': attribute type 3 has an invalid length. [ 885.974588][T16064] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3994'. [ 886.499251][T16074] netlink: 'syz.0.3997': attribute type 11 has an invalid length. [ 886.507961][T16074] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3997'. [ 887.024077][T16085] netlink: 'syz.4.4001': attribute type 2 has an invalid length. [ 887.033009][T16085] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4001'. [ 888.041890][T16087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4002'. [ 888.699924][T16115] FAULT_INJECTION: forcing a failure. [ 888.699924][T16115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.738698][T16115] CPU: 0 PID: 16115 Comm: syz.2.4010 Not tainted syzkaller #0 [ 888.746267][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 888.756381][T16115] Call Trace: [ 888.759700][T16115] [ 888.762683][T16115] dump_stack_lvl+0x188/0x24e [ 888.767432][T16115] ? show_regs_print_info+0x12/0x12 [ 888.772696][T16115] ? load_image+0x410/0x410 [ 888.777248][T16115] ? __lock_acquire+0x7ea0/0x7ea0 [ 888.782339][T16115] should_fail_ex+0x390/0x4c0 [ 888.787085][T16115] _copy_from_user+0x2c/0x170 [ 888.791915][T16115] __sys_bpf+0x2ea/0x780 [ 888.796220][T16115] ? bpf_link_show_fdinfo+0x550/0x550 [ 888.801699][T16115] ? lock_chain_count+0x20/0x20 [ 888.806621][T16115] __x64_sys_bpf+0x78/0x90 [ 888.811128][T16115] do_syscall_64+0x4c/0xa0 [ 888.815614][T16115] ? clear_bhb_loop+0x60/0xb0 [ 888.820400][T16115] ? clear_bhb_loop+0x60/0xb0 [ 888.825137][T16115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.831093][T16115] RIP: 0033:0x7ff48e3a8f19 [ 888.835565][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.855224][T16115] RSP: 002b:00007ff48f288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 888.863692][T16115] RAX: ffffffffffffffda RBX: 00007ff48e625fa0 RCX: 00007ff48e3a8f19 [ 888.871719][T16115] RDX: 0000000000000048 RSI: 0000200000001700 RDI: 000000000000000a [ 888.879755][T16115] RBP: 00007ff48f288090 R08: 0000000000000000 R09: 0000000000000000 [ 888.887899][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.895928][T16115] R13: 00007ff48e626038 R14: 00007ff48e625fa0 R15: 00007ffe5b67b148 [ 888.903970][T16115] [ 889.159541][T16132] tap0: tun_chr_ioctl cmd 1074025676 [ 889.165170][T16132] tap0: owner set to 768 [ 889.401095][T16141] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4018'. [ 889.602922][T16152] netlink: 'syz.3.4024': attribute type 10 has an invalid length. [ 889.748344][T16158] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4027'. [ 890.014629][T16162] device syzkaller0 entered promiscuous mode [ 890.495552][T16180] FAULT_INJECTION: forcing a failure. [ 890.495552][T16180] name failslab, interval 1, probability 0, space 0, times 0 [ 890.510889][T16180] CPU: 0 PID: 16180 Comm: syz.3.4036 Not tainted syzkaller #0 [ 890.518542][T16180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 890.528653][T16180] Call Trace: [ 890.532021][T16180] [ 890.535022][T16180] dump_stack_lvl+0x188/0x24e [ 890.539791][T16180] ? show_regs_print_info+0x12/0x12 [ 890.545057][T16180] ? load_image+0x410/0x410 [ 890.549615][T16180] ? __lock_acquire+0x7ea0/0x7ea0 [ 890.554721][T16180] should_fail_ex+0x390/0x4c0 [ 890.559489][T16180] should_failslab+0x5/0x20 [ 890.564128][T16180] slab_pre_alloc_hook+0x59/0x300 [ 890.569211][T16180] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 890.574815][T16180] __kmem_cache_alloc_node+0x4f/0x270 [ 890.580686][T16180] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 890.587423][T16180] __kmalloc+0xa3/0x240 [ 890.591646][T16180] bpf_prog_test_run_skb+0x23e/0x18e0 [ 890.597097][T16180] ? __fget_files+0x28/0x460 [ 890.601766][T16180] ? __fget_files+0x3fc/0x460 [ 890.606696][T16180] ? cpu_online+0xa0/0xa0 [ 890.611091][T16180] bpf_prog_test_run+0x31c/0x390 [ 890.616104][T16180] __sys_bpf+0x62b/0x780 [ 890.620873][T16180] ? bpf_link_show_fdinfo+0x550/0x550 [ 890.626331][T16180] ? lock_chain_count+0x20/0x20 [ 890.631295][T16180] __x64_sys_bpf+0x78/0x90 [ 890.636159][T16180] do_syscall_64+0x4c/0xa0 [ 890.640762][T16180] ? clear_bhb_loop+0x60/0xb0 [ 890.645503][T16180] ? clear_bhb_loop+0x60/0xb0 [ 890.650313][T16180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 890.656924][T16180] RIP: 0033:0x7f0826fa8f19 [ 890.662184][T16180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.682021][T16180] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 890.690570][T16180] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 890.698851][T16180] RDX: 0000000000000048 RSI: 0000200000001700 RDI: 000000000000000a [ 890.706974][T16180] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 890.715001][T16180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.723102][T16180] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 890.733326][T16180] [ 891.183081][T16201] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4038'. [ 891.188048][T16196] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4038'. [ 892.911295][T16201] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 892.928927][T16201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 892.949195][T16201] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 893.113098][T16216] netlink: 'syz.0.4045': attribute type 10 has an invalid length. [ 893.528095][T16233] FAULT_INJECTION: forcing a failure. [ 893.528095][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.608216][T16233] CPU: 0 PID: 16233 Comm: syz.1.4050 Not tainted syzkaller #0 [ 893.615775][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 893.625916][T16233] Call Trace: [ 893.629244][T16233] [ 893.632214][T16233] dump_stack_lvl+0x188/0x24e [ 893.636962][T16233] ? show_regs_print_info+0x12/0x12 [ 893.642274][T16233] ? load_image+0x410/0x410 [ 893.646856][T16233] ? __lock_acquire+0x7ea0/0x7ea0 [ 893.651942][T16233] should_fail_ex+0x390/0x4c0 [ 893.656767][T16233] _copy_from_user+0x2c/0x170 [ 893.661512][T16233] ppp_write+0x18b/0x3e0 [ 893.665811][T16233] ? ppp_read+0x8c0/0x8c0 [ 893.670182][T16233] vfs_write+0x2dc/0x9a0 [ 893.674478][T16233] ? file_end_write+0x250/0x250 [ 893.679401][T16233] ? __fget_files+0x28/0x460 [ 893.684070][T16233] ? __fget_files+0x3fc/0x460 [ 893.688846][T16233] ? __fdget_pos+0x1d4/0x360 [ 893.693522][T16233] ? ksys_write+0x70/0x260 [ 893.697993][T16233] ksys_write+0x14d/0x260 [ 893.702380][T16233] ? __ia32_sys_read+0x80/0x80 [ 893.707211][T16233] ? lockdep_hardirqs_on+0x94/0x140 [ 893.712475][T16233] do_syscall_64+0x4c/0xa0 [ 893.716987][T16233] ? clear_bhb_loop+0x60/0xb0 [ 893.722176][T16233] ? clear_bhb_loop+0x60/0xb0 [ 893.727018][T16233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.733035][T16233] RIP: 0033:0x7efef59a8f19 [ 893.737505][T16233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.757257][T16233] RSP: 002b:00007efef6931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 893.765825][T16233] RAX: ffffffffffffffda RBX: 00007efef5c25fa0 RCX: 00007efef59a8f19 [ 893.773963][T16233] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000007 [ 893.781994][T16233] RBP: 00007efef6931090 R08: 0000000000000000 R09: 0000000000000000 [ 893.790025][T16233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.798131][T16233] R13: 00007efef5c26038 R14: 00007efef5c25fa0 R15: 00007ffff0c9c668 [ 893.806183][T16233] [ 893.832716][T16237] netlink: 'syz.0.4051': attribute type 3 has an invalid length. [ 893.938741][T16237] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4051'. [ 894.466537][T16262] sctp: [Deprecated]: syz.2.4057 (pid 16262) Use of struct sctp_assoc_value in delayed_ack socket option. [ 894.466537][T16262] Use struct sctp_sack_info instead [ 894.502368][T16263] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4060'. [ 894.559452][T16263] openvswitch: netlink: Flow actions attr not present in new flow. [ 894.866877][T16279] netlink: 'syz.1.4064': attribute type 3 has an invalid length. [ 894.895501][T16279] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4064'. [ 895.089074][T16286] netlink: 'syz.4.4069': attribute type 5 has an invalid length. [ 895.117121][T16289] netlink: 'syz.4.4069': attribute type 5 has an invalid length. [ 895.978927][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'. [ 896.247276][T16326] netlink: 'syz.4.4080': attribute type 39 has an invalid length. [ 896.738883][T16328] netlink: 'syz.4.4080': attribute type 13 has an invalid length. [ 897.121780][T16347] netlink: 'syz.3.4086': attribute type 3 has an invalid length. [ 897.149003][T16347] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4086'. [ 897.331202][T16359] FAULT_INJECTION: forcing a failure. [ 897.331202][T16359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.421346][T16359] CPU: 0 PID: 16359 Comm: syz.0.4089 Not tainted syzkaller #0 [ 897.428992][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 897.439192][T16359] Call Trace: [ 897.442615][T16359] [ 897.445680][T16359] dump_stack_lvl+0x188/0x24e [ 897.450429][T16359] ? show_regs_print_info+0x12/0x12 [ 897.455783][T16359] ? load_image+0x410/0x410 [ 897.460483][T16359] ? __lock_acquire+0x7ea0/0x7ea0 [ 897.465655][T16359] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 897.471544][T16359] should_fail_ex+0x390/0x4c0 [ 897.476574][T16359] _copy_from_user+0x2c/0x170 [ 897.481416][T16359] ___sys_sendmsg+0x1c3/0x360 [ 897.486164][T16359] ? __sys_sendmsg+0x2a0/0x2a0 [ 897.491017][T16359] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 897.496839][T16359] __se_sys_sendmsg+0x1c3/0x2b0 [ 897.502033][T16359] ? __x64_sys_sendmsg+0x80/0x80 [ 897.507178][T16359] ? syscall_enter_from_user_mode+0x2a/0x80 [ 897.513173][T16359] do_syscall_64+0x4c/0xa0 [ 897.517690][T16359] ? clear_bhb_loop+0x60/0xb0 [ 897.522684][T16359] ? clear_bhb_loop+0x60/0xb0 [ 897.527962][T16359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 897.533929][T16359] RIP: 0033:0x7ff06d1a8f19 [ 897.538423][T16359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.558170][T16359] RSP: 002b:00007ff06dfc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 897.566650][T16359] RAX: ffffffffffffffda RBX: 00007ff06d425fa0 RCX: 00007ff06d1a8f19 [ 897.574714][T16359] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 897.582839][T16359] RBP: 00007ff06dfc1090 R08: 0000000000000000 R09: 0000000000000000 [ 897.590886][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.598912][T16359] R13: 00007ff06d426038 R14: 00007ff06d425fa0 R15: 00007ffe8d4d6d38 [ 897.606956][T16359] [ 897.908770][ T4326] Bluetooth: hci0: command 0x0406 tx timeout [ 898.469869][T16381] netlink: 'syz.4.4098': attribute type 4 has an invalid length. [ 898.487035][T16381] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4098'. [ 898.764583][T16387] netlink: 'syz.3.4101': attribute type 3 has an invalid length. [ 898.810843][T16387] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4101'. [ 898.967614][T16393] netlink: 'syz.3.4104': attribute type 10 has an invalid length. [ 900.211708][T16415] FAULT_INJECTION: forcing a failure. [ 900.211708][T16415] name failslab, interval 1, probability 0, space 0, times 0 [ 900.261334][T16415] CPU: 1 PID: 16415 Comm: syz.3.4114 Not tainted syzkaller #0 [ 900.269097][T16415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 900.279219][T16415] Call Trace: [ 900.282640][T16415] [ 900.285632][T16415] dump_stack_lvl+0x188/0x24e [ 900.290390][T16415] ? show_regs_print_info+0x12/0x12 [ 900.295668][T16415] ? load_image+0x410/0x410 [ 900.300376][T16415] ? __lock_acquire+0x7ea0/0x7ea0 [ 900.305576][T16415] should_fail_ex+0x390/0x4c0 [ 900.310335][T16415] should_failslab+0x5/0x20 [ 900.315033][T16415] slab_pre_alloc_hook+0x59/0x300 [ 900.320142][T16415] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 900.325856][T16415] __kmem_cache_alloc_node+0x4f/0x270 [ 900.331314][T16415] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 900.337295][T16415] __kmalloc+0xa3/0x240 [ 900.341799][T16415] bpf_prog_test_run_skb+0x23e/0x18e0 [ 900.347253][T16415] ? __fget_files+0x28/0x460 [ 900.351919][T16415] ? __fget_files+0x3fc/0x460 [ 900.356680][T16415] ? cpu_online+0xa0/0xa0 [ 900.361166][T16415] bpf_prog_test_run+0x31c/0x390 [ 900.366193][T16415] __sys_bpf+0x62b/0x780 [ 900.370510][T16415] ? bpf_link_show_fdinfo+0x550/0x550 [ 900.375991][T16415] ? lock_chain_count+0x20/0x20 [ 900.381366][T16415] __x64_sys_bpf+0x78/0x90 [ 900.386062][T16415] do_syscall_64+0x4c/0xa0 [ 900.390836][T16415] ? clear_bhb_loop+0x60/0xb0 [ 900.395594][T16415] ? clear_bhb_loop+0x60/0xb0 [ 900.400352][T16415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.406616][T16415] RIP: 0033:0x7f0826fa8f19 [ 900.411097][T16415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.431820][T16415] RSP: 002b:00007f0827ea4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 900.440326][T16415] RAX: ffffffffffffffda RBX: 00007f0827225fa0 RCX: 00007f0826fa8f19 [ 900.448450][T16415] RDX: 0000000000000048 RSI: 0000200000001700 RDI: 000000000000000a [ 900.456578][T16415] RBP: 00007f0827ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 900.464615][T16415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.473113][T16415] R13: 00007f0827226038 R14: 00007f0827225fa0 R15: 00007fff66f6cd68 [ 900.481194][T16415] [ 900.805537][T16425] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4117'. [ 900.894731][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4119'. [ 901.754818][ C0] [ 901.754829][ C0] ================================ [ 901.754835][ C0] WARNING: inconsistent lock state [ 901.754858][ C0] syzkaller #0 Not tainted [ 901.754868][ C0] -------------------------------- [ 901.754873][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 901.754882][ C0] syz.0.4127/16450 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 901.754903][ C0] ffff8880569f9020 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 901.755038][ C0] {INITIAL USE} state was registered at: [ 901.755045][ C0] lock_acquire+0x1bc/0x4a0 [ 901.755071][ C0] _raw_spin_lock+0x2a/0x40 [ 901.755093][ C0] htab_lock_bucket+0x179/0x2f0 [ 901.755114][ C0] htab_map_delete_elem+0x196/0x630 [ 901.755134][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 901.755152][ C0] bpf_overflow_handler+0x50b/0x790 [ 901.755173][ C0] __perf_event_overflow+0x457/0x630 [ 901.755201][ C0] perf_swevent_event+0x315/0x570 [ 901.755217][ C0] perf_bp_event+0x311/0x3f0 [ 901.755232][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 901.755289][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 901.755334][ C0] notify_die+0x141/0x1a0 [ 901.755353][ C0] notify_debug+0x20/0x30 [ 901.755398][ C0] noist_exc_debug+0x73/0x120 [ 901.755414][ C0] asm_exc_debug+0x2f/0x40 [ 901.755437][ C0] irq event stamp: 5934 [ 901.755443][ C0] hardirqs last enabled at (5933): [] __local_bh_enable_ip+0x136/0x1c0 [ 901.755468][ C0] hardirqs last disabled at (5934): [] exc_debug+0x6e/0x130 [ 901.755489][ C0] softirqs last enabled at (5932): [] do_ipv6_setsockopt+0x3d1/0x3c30 [ 901.755547][ C0] softirqs last disabled at (5930): [] lock_sock_nested+0x66/0x100 [ 901.755573][ C0] [ 901.755573][ C0] other info that might help us debug this: [ 901.755579][ C0] Possible unsafe locking scenario: [ 901.755579][ C0] [ 901.755583][ C0] CPU0 [ 901.755586][ C0] ---- [ 901.755590][ C0] lock(&htab->lockdep_key); [ 901.755602][ C0] [ 901.755605][ C0] lock(&htab->lockdep_key); [ 901.755616][ C0] [ 901.755616][ C0] *** DEADLOCK *** [ 901.755616][ C0] [ 901.755620][ C0] 1 lock held by syz.0.4127/16450: [ 901.755631][ C0] #0: ffff888019eab930 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x3d1/0x3c30 [ 901.755678][ C0] [ 901.755678][ C0] stack backtrace: [ 901.755684][ C0] CPU: 0 PID: 16450 Comm: syz.0.4127 Not tainted syzkaller #0 [ 901.755701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 901.755712][ C0] Call Trace: [ 901.755718][ C0] <#DB> [ 901.755755][ C0] dump_stack_lvl+0x188/0x24e [ 901.755787][ C0] ? show_regs_print_info+0x12/0x12 [ 901.755821][ C0] ? print_usage_bug+0x43d/0x6a0 [ 901.755849][ C0] ? verify_lock_unused+0x15/0x140 [ 901.755878][ C0] lock_acquire+0x2df/0x4a0 [ 901.755907][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 901.755932][ C0] ? read_lock_is_recursive+0x10/0x10 [ 901.755969][ C0] ? rcu_is_watching+0x11/0xa0 [ 901.755998][ C0] ? lock_release+0xcf/0x920 [ 901.756027][ C0] _raw_spin_lock+0x2a/0x40 [ 901.756049][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 901.756071][ C0] htab_lock_bucket+0x179/0x2f0 [ 901.756097][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 901.756121][ C0] ? look_up_lock_class+0x75/0x140 [ 901.756143][ C0] ? verify_lock_unused+0x15/0x140 [ 901.756171][ C0] ? htab_map_hash+0x2b1/0x6d0 [ 901.756196][ C0] htab_map_delete_elem+0x196/0x630 [ 901.756222][ C0] ? htab_map_update_elem+0x1070/0x1070 [ 901.756252][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 901.756272][ C0] bpf_overflow_handler+0x50b/0x790 [ 901.756298][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 901.756321][ C0] ? perf_swevent_overflow+0x230/0x230 [ 901.756349][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 901.756382][ C0] __perf_event_overflow+0x457/0x630 [ 901.756416][ C0] perf_swevent_event+0x315/0x570 [ 901.756436][ C0] ? perf_tp_event+0xc10/0xc10 [ 901.756462][ C0] perf_bp_event+0x311/0x3f0 [ 901.756483][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 901.756501][ C0] ? perf_trace_lock+0xf8/0x390 [ 901.756541][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 901.756565][ C0] ? read_lock_is_recursive+0x10/0x10 [ 901.756598][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 901.756629][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 901.756652][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 901.756677][ C0] notify_die+0x141/0x1a0 [ 901.756700][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 901.756733][ C0] notify_debug+0x20/0x30 [ 901.756756][ C0] exc_debug+0xd9/0x130 [ 901.756776][ C0] asm_exc_debug+0x1a/0x40 [ 901.756802][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 901.756834][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 901.756851][ C0] RSP: 0018:ffffc9000491f788 EFLAGS: 00050202 [ 901.756868][ C0] RAX: ffffffff8410fd01 RBX: 00000000000000cf RCX: 000000000000007f [ 901.756881][ C0] RDX: 00000000000000cf RSI: 0000200000000310 RDI: ffff88801b2efa50 [ 901.756894][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000007 [ 901.756905][ C0] R10: dffffc0000000000 R11: ffffed100365df59 R12: 00007fffffffef31 [ 901.756919][ C0] R13: 00002000000002c0 R14: ffff88801b2efa00 R15: 00002000000002c0 [ 901.756938][ C0] ? _copy_from_user+0x11/0x170 [ 901.756982][ C0] [ 901.756987][ C0] [ 901.756992][ C0] _copy_from_user+0xf4/0x170 [ 901.757021][ C0] xfrm_user_policy+0x1ed/0x740 [ 901.757079][ C0] ? xfrm_unregister_translator+0x70/0x70 [ 901.757099][ C0] ? apparmor_capable+0x12c/0x190 [ 901.757120][ C0] ? bpf_lsm_capable+0x5/0x10 [ 901.757142][ C0] ? security_capable+0x85/0xb0 [ 901.757171][ C0] do_ipv6_setsockopt+0x1140/0x3c30 [ 901.757201][ C0] ? sk_dst_reset+0xa0/0xa0 [ 901.757222][ C0] ? __schedule+0x1091/0x4140 [ 901.757306][ C0] ? mark_lock+0x94/0x320 [ 901.757335][ C0] ? __lock_acquire+0x1359/0x7ea0 [ 901.757362][ C0] ? perf_tp_event+0xc10/0xc10 [ 901.757391][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 901.757407][ C0] ? futex_wait+0x525/0x640 [ 901.757455][ C0] ? verify_lock_unused+0x140/0x140 [ 901.757481][ C0] ? aa_label_sk_perm+0x501/0x6b0 [ 901.757542][ C0] ? perf_trace_lock+0xf8/0x390 [ 901.757566][ C0] ? aa_sk_perm+0x8c0/0x8c0 [ 901.757594][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 901.757628][ C0] ? __fget_files+0x28/0x460 [ 901.757671][ C0] ? __lock_acquire+0x7ea0/0x7ea0 [ 901.757697][ C0] ? do_futex+0x310/0x320 [ 901.757718][ C0] ? aa_sk_perm+0x795/0x8c0 [ 901.757759][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 901.757780][ C0] ? aa_af_perm+0x340/0x340 [ 901.757808][ C0] ? __fget_files+0x3fc/0x460 [ 901.757840][ C0] ? aa_sock_opt_perm+0x74/0x100 [ 901.757865][ C0] ipv6_setsockopt+0x55/0x190 [ 901.757887][ C0] ? sock_common_recvmsg+0x190/0x190 [ 901.757918][ C0] __sys_setsockopt+0x2bf/0x3d0 [ 901.757947][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 901.757981][ C0] do_syscall_64+0x4c/0xa0 [ 901.758009][ C0] ? clear_bhb_loop+0x60/0xb0 [ 901.758036][ C0] ? clear_bhb_loop+0x60/0xb0 [ 901.758065][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 901.758092][ C0] RIP: 0033:0x7ff06d1a8f19 [ 901.758108][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.758124][ C0] RSP: 002b:00007ff06dfc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 901.758144][ C0] RAX: ffffffffffffffda RBX: 00007ff06d425fa0 RCX: 00007ff06d1a8f19 [ 901.758159][ C0] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 000000000000000b [ 901.758171][ C0] RBP: 00007ff06d237f6d R08: 00000000000000cf R09: 0000000000000000 [ 901.758183][ C0] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 901.758195][ C0] R13: 00007ff06d426038 R14: 00007ff06d425fa0 R15: 00007ffe8d4d6d38 [ 901.758219][ C0] [ 902.584490][T16461] netlink: 'syz.2.4130': attribute type 3 has an invalid length. [ 902.592468][T16461] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4130'.