last executing test programs: 4m53.24693448s ago: executing program 2 (id=3): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 4m52.8074194s ago: executing program 2 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 4m36.833756243s ago: executing program 32 (id=13): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 5.334129526s ago: executing program 1 (id=1702): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/181, 0xb5, 0x0, &(0x7f0000000600)=""/38, 0x26}}, 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x40, 0x6, 0x7ffff018}, {0x6, 0x2, 0x4, 0x4}]}) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03ffffd9ffffff00000bb25056eccd7f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000200)={r8}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 4.052569831s ago: executing program 1 (id=1710): r0 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x6, 0x3, 0x100}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r4, 0x4000, r1}, 0x18) (async) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x27, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe42e}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2297}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xff}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x4c, &(0x7f0000000480)=""/76, 0x41000, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000005c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000600)=[r2, r4], &(0x7f0000000640)=[{0x1, 0x1, 0x2, 0x3}, {0x1, 0x2, 0x3, 0x6}, {0x5, 0x4, 0xe, 0x6}, {0x3, 0x1, 0xe, 0x6}, {0x1, 0x2, 0xa, 0x4}, {0x0, 0x1, 0xe, 0x3}, {0x0, 0x2, 0xb, 0x4}, {0x1, 0x2, 0x6}, {0x1, 0x1, 0x9, 0x7}], 0x10, 0xae4e}, 0x94) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000100)=r6, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x2f}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r7], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback=0x1c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 3.844535795s ago: executing program 3 (id=1716): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.722329067s ago: executing program 0 (id=1718): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0018c4000000000000000000f2f8ffffff0000", @ANYRES32, @ANYBLOB="8034ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000040001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000), 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000)=r4, 0xc) r5 = socket$kcm(0xa, 0x2, 0x73) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x11, &(0x7f0000000140)=r6, 0x4) 3.672515218s ago: executing program 3 (id=1719): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f0000"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.55887224s ago: executing program 0 (id=1720): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/181, 0xb5, 0x0, &(0x7f0000000600)=""/38, 0x26}}, 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x40, 0x6, 0x7ffff018}, {0x6, 0x2, 0x4, 0x4}]}) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03ffffd9ffffff00000bb25056eccd7f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000200)={r8}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 3.130070119s ago: executing program 1 (id=1721): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x1, 0x100, 0x0, 0x101, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xf}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x91}, 0x440d1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x822, 0x5cc2}, 0x0, 0x40000000000003, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x405}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r3, 0x21) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x40000004, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4080) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0xb}}, @ip_tos_int={{0x14}}], 0x28}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6eab6efb8000a007a290457f018900000000000000020000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f40fad95667e006dcdf63951f215ce3bb9ad809d5d6cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039200"/216, 0xd8}], 0x1}, 0x0) 2.907276183s ago: executing program 5 (id=1722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c081, 0x0) close(r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000880)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x800, 0x800}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x35a3a091}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02d90100000080000000000000000000000000009cde18a44a67675513ffe81e925d1cf15c956d8c4cb4d18851dbdd1441c30f9bf2b8fc8a87b3f818bbdb1f5c64b3475f6cf1098402a291df34d23967f31f492bd7ee43770c9c5ec434ae0d6844e23edcfb971c5ff6d482d1aeb2860ff030438d09cd5adf578c56978a8fe3a639e9c516f3c6e9f4b5e559ecf9d2136712ebb868b007"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="6000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000071106d00000000001ca00000000000009500000000000000", @ANYBLOB="1c816c855228e8cee033e0ed60c495f5a1e238b86e70ba60baf62cba8c4cda8c76ffcd579c7d4c18d9b786ccd07bb471fc9d256ee3e071ca890b026d8eaade191e12e89e388d590554dff172731421dc33664068a93b71244cd89dcf61ff86e9b41ee01ed1216aff1ba750878e04ea9f0d79cb4200242e3bd33d7ce16eba1074b17f85cd6b702c2d48a9991d7e1b0f6adf41d6bd21bc326167e19f3a1b4331c4bb64c68eb2692677ff1d6278fe7c2a4148f702c0d756671f812c08269ac842aad45cebb16bb9", @ANYRESDEC=r4, @ANYBLOB="4fd2857d51926f23f2da896a40905d364f10f18438a751af41575128a1edf6afe5150b3ae9a4b723e2a587eab44f9609ae2d39e1ead65bd39500ed4dc2f16afa1087acff5116f651b31cee389ed09c61591cd39baa29dbb82ee50efed337146f0d54f7736f6874f2737323f53d2f9d8de6a44d63e28840eba6c13901bc80e13ac941355604d0429035ba30d3075cf026920a3be6a67f6e5030ca655a342acccfe46ae277540c21c25f52f40ca1ef50897a0da0741e7f36767c44e05f0049ab1177a2ec307d26eb00da"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000737153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x709, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.830942315s ago: executing program 3 (id=1733): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.774230946s ago: executing program 0 (id=1724): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022, 0x0, 0x0, 0x3}]}, 0x94) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) close(r0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) 2.534419111s ago: executing program 1 (id=1725): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb425, 0x6}, 0x0, 0x5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbd, 0x5, 0x80, 0x9, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xf}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x5, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x43}}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000001c0)="90ac8e3e766e7f5500606c5fb152ac5262bcbcd6523fe46b084a759affb499c0e088476340f661bd3b16525d445c004d944e76fc804a254a5aead6466e26f7b3c177fab9b03ac5d41a7f3bac1d4e51d39b6a76dc2d18b1d471683012843ac829a25b9c0ca786f2c56c1bc52e669238f223c58f9d5782bb6b729cffd43f1d3202f490d190e853ba56678c9fb8b4096ae40874d1c268a60455e3079696907959e063d8f79e8af29c0f2c105036dcffca1d080eb6f49339e3bd89a4901f6f2c72583bc6fc322f708b845f8cbac488fca1aa796fb5f0e14c33232c5db79302f4234d92bc24f9b9ca0a71098dbe367026e2d5b912adbed92b4b1288", 0xf9}, 0x4008001) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 2.380602354s ago: executing program 4 (id=1727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.370478864s ago: executing program 5 (id=1728): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0xb, 0x80000, 0x3091, &(0x7f00000004c0)) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x10}}], 0x10}, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x3, 0xb0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fe, &(0x7f0000000300)={'ip6gre0\x00', @multicast}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3800, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2.04919519s ago: executing program 4 (id=1729): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.04875183s ago: executing program 0 (id=1730): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x44) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x100000000002, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db440000800000000015000000000000", 0x1c}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r4) recvmsg(r3, 0x0, 0x2002) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31", 0x1d}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000080000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xfefffeffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.03312613s ago: executing program 5 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x7102}) write$cgroup_devices(r0, &(0x7f0000001040)=ANY=[], 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], &(0x7f0000001740)=""/228, 0x26, 0xe4, 0x1}, 0x28) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x10000000000, 0x0, 0x9b64}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_bp={&(0x7f0000000200), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f0000000940)=""/4124, 0x101c}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000680)=""/198, 0xc6}, {&(0x7f0000000780)=""/89, 0x59}], 0x7}, 0x20) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6eab6efb8000a007a290457f018900000000000000020000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f40fad95667e006dcdf63951f215ce3bb9ad809d5d6cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039200"/216, 0xd8}], 0x1}, 0x0) 1.970772701s ago: executing program 4 (id=1732): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690040000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.895979073s ago: executing program 3 (id=1734): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005040000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005040000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000440), 0x3b, r0}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) (async) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x8d2142, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x8d2142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0x7, 0x0, 0x5, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0xfffffffffffffffe, 0x4, 0x6, 0xfffffffffffffffe, 0x2080000a, 0xfffc, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0xd) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) (async) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1001, 0x0, 0xfffffffe, 0x5, 0x0, 0x81, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1001, 0x0, 0xfffffffe, 0x5, 0x0, 0x81, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xfffffeb2}, 0x40002000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.788778465s ago: executing program 1 (id=1735): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0xffffffffffffffff, 0x800000000000, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000005f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xa, 0x0, &(0x7f0000000000)="c1bcb080cd21d308098e", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0x12, 0x60, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.084595149s ago: executing program 4 (id=1736): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x1, 0x100, 0x0, 0x101, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xf}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x91}, 0x440d1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x822, 0x5cc2}, 0x0, 0x40000000000003, 0x0, 0x1, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x405}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000200)=r3, 0x21) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x3, 0x40000004, 0x0, 0x7fe, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x4080) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0xb}}, @ip_tos_int={{0x14}}], 0x28}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6eab6efb8000a007a290457f018900000000000000020000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f40fad95667e006dcdf63951f215ce3bb9ad809d5d6cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039200"/216, 0xd8}], 0x1}, 0x0) 792.279515ms ago: executing program 0 (id=1737): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/pid\x00') close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000500)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={&(0x7f0000000540)=""/181, 0xb5, 0x0, &(0x7f0000000600)=""/38, 0x26}}, 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x83, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x28, 0x40, 0x6, 0x7ffff018}, {0x6, 0x2, 0x4, 0x4}]}) close(r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03ffffd9ffffff00000bb25056eccd7f", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000200)={r8}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 728.812436ms ago: executing program 1 (id=1738): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x2e}], 0x1}, 0x801) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="0900000005000000aad87b9c1b33a25f61260cd15bb0dbebf5", @ANYRESDEC=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000006c0)="140000003a000b05d25a806f8c63fcd6b3b31eb4", 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r2}, 0x38) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7ffffffffffffffd, 0x200000000000000}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x81, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) r7 = socket$kcm(0x28, 0x5, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r2, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x2e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x0, 0xb, 0xe, 0x1000, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit, @jmp={0x5, 0x1, 0xa, 0x8, 0x2, 0xc, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x4, 0x1, 0xa, 0x7, 0x1, 0x80, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000400)=""/4096, 0x0, 0x2, '\x00', r9, 0x0, r10, 0x8, &(0x7f00000014c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001500)={0xd, 0x2, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001540)=[0x1, r2, r0, r2, r0, 0x1], &(0x7f0000001580)=[{0x1, 0x3, 0x1, 0xa}], 0x10, 0x80}, 0x94) close(r11) 717.922057ms ago: executing program 3 (id=1739): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000855fa8f123ca7648fd0000000600000085000000070000009500"/104], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYRES16=r0], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000001980), 0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xd0939199c36b4d28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2933], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 698.838327ms ago: executing program 5 (id=1740): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 576.164969ms ago: executing program 0 (id=1741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x28c081, 0x0) close(r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000880)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x800, 0x800}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x35a3a091}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02d90100000080000000000000000000000000009cde18a44a67675513ffe81e925d1cf15c956d8c4cb4d18851dbdd1441c30f9bf2b8fc8a87b3f818bbdb1f5c64b3475f6cf1098402a291df34d23967f31f492bd7ee43770c9c5ec434ae0d6844e23edcfb971c5ff6d482d1aeb2860ff030438d09cd5adf578c56978a8fe3a639e9c516f3c6e9f4b5e559ecf9d2136712ebb868b007"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="6000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000071106d00000000001ca00000000000009500000000000000", @ANYBLOB="1c816c855228e8cee033e0ed60c495f5a1e238b86e70ba60baf62cba8c4cda8c76ffcd579c7d4c18d9b786ccd07bb471fc9d256ee3e071ca890b026d8eaade191e12e89e388d590554dff172731421dc33664068a93b71244cd89dcf61ff86e9b41ee01ed1216aff1ba750878e04ea9f0d79cb4200242e3bd33d7ce16eba1074b17f85cd6b702c2d48a9991d7e1b0f6adf41d6bd21bc326167e19f3a1b4331c4bb64c68eb2692677ff1d6278fe7c2a4148f702c0d756671f812c08269ac842aad45cebb16bb9", @ANYRESDEC=r4, @ANYBLOB="4fd2857d51926f23f2da896a40905d364f10f18438a751af41575128a1edf6afe5150b3ae9a4b723e2a587eab44f9609ae2d39e1ead65bd39500ed4dc2f16afa1087acff5116f651b31cee389ed09c61591cd39baa29dbb82ee50efed337146f0d54f7736f6874f2737323f53d2f9d8de6a44d63e28840eba6c13901bc80e13ac941355604d0429035ba30d3075cf026920a3be6a67f6e5030ca655a342acccfe46ae277540c21c25f52f40ca1ef50897a0da0741e7f36767c44e05f0049ab1177a2ec307d26eb00da"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000737153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x709, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 381.350663ms ago: executing program 5 (id=1742): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022, 0x0, 0x0, 0x3}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) close(r0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) 380.702843ms ago: executing program 4 (id=1743): perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000700)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 129.114458ms ago: executing program 4 (id=1744): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 128.857798ms ago: executing program 3 (id=1745): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) (rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="14000000300009116144f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f00000001c0)=[{0x74, 0x8, 0x0, 0x3}]}) (rerun: 32) 0s ago: executing program 5 (id=1746): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690040000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 112.017189][ T144] team0 (unregistering): Port device team_slave_0 removed [ 112.038291][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.056250][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.144886][ T144] bond0 (unregistering): Released all slaves [ 112.196704][ T4824] netlink: 164 bytes leftover after parsing attributes in process `syz.4.145'. [ 112.227321][ T4832] netlink: 'syz.0.149': attribute type 10 has an invalid length. [ 112.246319][ T4832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'. [ 112.270246][ T4834] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.150'. [ 112.620982][ T4840] device syzkaller0 entered promiscuous mode [ 113.547735][ T4883] netlink: 164 bytes leftover after parsing attributes in process `syz.1.159'. [ 113.863124][ T4886] netlink: 'syz.5.160': attribute type 1 has an invalid length. [ 113.889387][ T4894] netlink: 164 bytes leftover after parsing attributes in process `syz.4.163'. [ 113.960911][ T4886] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.160'. [ 114.047934][ T4901] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 114.087843][ T4901] netlink: 119 bytes leftover after parsing attributes in process `syz.0.165'. [ 114.203056][ T4892] netlink: 'syz.1.164': attribute type 272 has an invalid length. [ 115.058910][ T4934] device syzkaller0 entered promiscuous mode [ 115.594967][ T4956] __nla_validate_parse: 2 callbacks suppressed [ 115.594989][ T4956] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.177'. [ 115.984633][ T4963] netlink: 'syz.0.179': attribute type 10 has an invalid length. [ 116.731748][ T4992] netlink: 'syz.3.184': attribute type 272 has an invalid length. [ 116.839869][ T4992] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.184'. [ 116.908949][ T4995] netlink: 164 bytes leftover after parsing attributes in process `syz.5.189'. [ 117.307312][ T5012] netlink: 'syz.5.195': attribute type 10 has an invalid length. [ 117.377925][ T5012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.195'. [ 117.414817][ T5012] batman_adv: batadv0: Adding interface: virt_wifi0 [ 117.440906][ T5012] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.544211][ T5012] batman_adv: batadv0: Interface activated: virt_wifi0 [ 117.756863][ T4997] device syzkaller0 entered promiscuous mode [ 119.549423][ T5057] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.202'. [ 121.508633][ T5074] netlink: 'syz.4.203': attribute type 272 has an invalid length. [ 121.529828][ T5074] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.203'. [ 121.672892][ T5080] netlink: 164 bytes leftover after parsing attributes in process `syz.3.207'. [ 122.022951][ T5095] netlink: 'syz.5.209': attribute type 10 has an invalid length. [ 122.236018][ T5095] team0: Port device wlan1 added [ 122.276819][ T5092] netlink: 'syz.1.211': attribute type 10 has an invalid length. [ 122.320062][ T5092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.211'. [ 122.377619][ T5104] netlink: 164 bytes leftover after parsing attributes in process `syz.3.215'. [ 122.426324][ T5100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.462123][ T5107] netlink: 164 bytes leftover after parsing attributes in process `syz.0.214'. [ 122.723468][ T5124] netlink: 10 bytes leftover after parsing attributes in process `syz.0.222'. [ 122.865319][ T5128] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 122.899757][ T5128] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.221'. [ 122.931152][ T5126] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 122.969544][ T5126] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.220'. [ 123.619522][ T5147] netlink: 'syz.1.225': attribute type 2 has an invalid length. [ 123.749176][ T5147] netlink: 119 bytes leftover after parsing attributes in process `syz.1.225'. [ 123.807023][ T5147] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.225'. [ 123.984237][ T5162] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 124.098196][ T5171] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 124.184158][ T5172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.528996][ T5181] netlink: 'syz.1.235': attribute type 21 has an invalid length. [ 124.548848][ T5181] netlink: 'syz.1.235': attribute type 6 has an invalid length. [ 124.872429][ T5199] FAULT_INJECTION: forcing a failure. [ 124.872429][ T5199] name failslab, interval 1, probability 0, space 0, times 1 [ 124.982105][ T5199] CPU: 1 PID: 5199 Comm: syz.1.242 Not tainted syzkaller #0 [ 124.989446][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.999536][ T5199] Call Trace: [ 125.002873][ T5199] [ 125.005929][ T5199] dump_stack_lvl+0x188/0x250 [ 125.010728][ T5199] ? show_regs_print_info+0x20/0x20 [ 125.015973][ T5199] ? load_image+0x410/0x410 [ 125.020602][ T5199] ? __might_sleep+0xf0/0xf0 [ 125.025225][ T5199] ? __lock_acquire+0x7d40/0x7d40 [ 125.030542][ T5199] should_fail+0x383/0x4b0 [ 125.034989][ T5199] should_failslab+0x5/0x20 [ 125.039550][ T5199] slab_pre_alloc_hook+0x51/0xc0 [ 125.044714][ T5199] __kmalloc_node_track_caller+0x68/0x3a0 [ 125.050563][ T5199] ? pfkey_sendmsg+0xd64/0x1130 [ 125.055711][ T5199] ? __alloc_skb+0xf4/0x750 [ 125.060444][ T5199] ? pfkey_sendmsg+0xd64/0x1130 [ 125.065329][ T5199] __alloc_skb+0x22c/0x750 [ 125.069784][ T5199] pfkey_sendmsg+0xd64/0x1130 [ 125.074523][ T5199] ? pfkey_release+0x340/0x340 [ 125.079359][ T5199] ? aa_sock_msg_perm+0x94/0x150 [ 125.084524][ T5199] ? apparmor_socket_sendmsg+0x88/0x230 [ 125.090112][ T5199] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 125.095525][ T5199] ? security_socket_sendmsg+0x7c/0xa0 [ 125.101042][ T5199] ? pfkey_release+0x340/0x340 [ 125.105856][ T5199] ____sys_sendmsg+0x5be/0x8f0 [ 125.111478][ T5199] ? __sys_sendmsg_sock+0x30/0x30 [ 125.116731][ T5199] ? import_iovec+0x6f/0xa0 [ 125.121287][ T5199] ___sys_sendmsg+0x236/0x2e0 [ 125.126028][ T5199] ? __sys_sendmsg+0x290/0x290 [ 125.131081][ T5199] __se_sys_sendmsg+0x1b7/0x2a0 [ 125.135996][ T5199] ? __x64_sys_sendmsg+0x80/0x80 [ 125.141049][ T5199] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.147078][ T5199] ? lockdep_hardirqs_on+0x94/0x140 [ 125.152323][ T5199] do_syscall_64+0x4c/0xa0 [ 125.156755][ T5199] ? clear_bhb_loop+0x30/0x80 [ 125.161539][ T5199] ? clear_bhb_loop+0x30/0x80 [ 125.166325][ T5199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.172244][ T5199] RIP: 0033:0x7fb00e78a199 [ 125.176678][ T5199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.196435][ T5199] RSP: 002b:00007fb00c9e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.204975][ T5199] RAX: ffffffffffffffda RBX: 00007fb00ea11fa0 RCX: 00007fb00e78a199 [ 125.213053][ T5199] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 125.221038][ T5199] RBP: 00007fb00c9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 125.229024][ T5199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.237009][ T5199] R13: 00007fb00ea12038 R14: 00007fb00ea11fa0 R15: 00007fffd9caecc8 [ 125.245108][ T5199] [ 125.565356][ T5213] FAULT_INJECTION: forcing a failure. [ 125.565356][ T5213] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.664844][ T5213] CPU: 0 PID: 5213 Comm: syz.0.244 Not tainted syzkaller #0 [ 125.672204][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.682296][ T5213] Call Trace: [ 125.685612][ T5213] [ 125.688655][ T5213] dump_stack_lvl+0x188/0x250 [ 125.693483][ T5213] ? show_regs_print_info+0x20/0x20 [ 125.698712][ T5213] ? load_image+0x410/0x410 [ 125.703269][ T5213] should_fail+0x383/0x4b0 [ 125.707723][ T5213] strncpy_from_user+0x32/0x350 [ 125.712613][ T5213] strncpy_from_user_nofault+0x6d/0x140 [ 125.718280][ T5213] bpf_probe_read_user_str+0x26/0x70 [ 125.723600][ T5213] bpf_prog_06f22831d6c68d16+0x3d/0x250 [ 125.729260][ T5213] bpf_test_run+0x36b/0x800 [ 125.733897][ T5213] ? convert___skb_to_skb+0x4c0/0x4c0 [ 125.739414][ T5213] ? _copy_from_user+0x111/0x170 [ 125.744465][ T5213] ? bpf_test_init+0x171/0x1b0 [ 125.749275][ T5213] bpf_prog_test_run_xdp+0x3e8/0x910 [ 125.754600][ T5213] ? dev_put+0x70/0x70 [ 125.758845][ T5213] ? dev_put+0x70/0x70 [ 125.762949][ T5213] bpf_prog_test_run+0x31c/0x390 [ 125.767932][ T5213] __sys_bpf+0x5a5/0x6f0 [ 125.772239][ T5213] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 125.778521][ T5213] ? bpf_link_show_fdinfo+0x380/0x380 [ 125.783935][ T5213] ? rcu_nmi_exit+0x6f/0xf0 [ 125.788524][ T5213] __x64_sys_bpf+0x78/0x90 [ 125.792990][ T5213] do_syscall_64+0x4c/0xa0 [ 125.797509][ T5213] ? clear_bhb_loop+0x30/0x80 [ 125.802217][ T5213] ? clear_bhb_loop+0x30/0x80 [ 125.806949][ T5213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.812890][ T5213] RIP: 0033:0x7f07dfb9c199 [ 125.817345][ T5213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.837100][ T5213] RSP: 002b:00007f07dddf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.845639][ T5213] RAX: ffffffffffffffda RBX: 00007f07dfe23fa0 RCX: 00007f07dfb9c199 [ 125.853649][ T5213] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 125.861833][ T5213] RBP: 00007f07dddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 125.869924][ T5213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.877933][ T5213] R13: 00007f07dfe24038 R14: 00007f07dfe23fa0 R15: 00007ffe607e8f28 [ 125.885972][ T5213] [ 126.580138][ T5230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.610449][ T5237] validate_nla: 1 callbacks suppressed [ 126.610468][ T5237] netlink: 'syz.3.251': attribute type 21 has an invalid length. [ 126.702673][ T5237] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.946409][ T5240] __nla_validate_parse: 6 callbacks suppressed [ 126.948297][ T5240] netlink: 164 bytes leftover after parsing attributes in process `syz.5.249'. [ 127.521254][ T5262] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 127.643500][ T5262] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.255'. [ 128.605360][ T5282] netlink: 'syz.5.258': attribute type 1 has an invalid length. [ 128.634768][ T5282] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.258'. [ 130.709448][ T5293] netlink: 'syz.1.261': attribute type 10 has an invalid length. [ 130.772192][ T5293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.261'. [ 131.068482][ T5295] netlink: 'syz.5.262': attribute type 10 has an invalid length. [ 131.294606][ T5316] netlink: 164 bytes leftover after parsing attributes in process `syz.0.267'. [ 131.543958][ T5315] netlink: 'syz.1.268': attribute type 10 has an invalid length. [ 131.632607][ T5318] netlink: 'syz.3.269': attribute type 272 has an invalid length. [ 131.806108][ T5318] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.269'. [ 133.025297][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.031840][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.190877][ T5315] team0: Port device wlan1 added [ 134.482760][ T5349] netlink: 'syz.5.274': attribute type 1 has an invalid length. [ 134.528723][ T5349] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.274'. [ 134.890898][ T5358] netlink: 'syz.0.280': attribute type 3 has an invalid length. [ 135.152909][ T5360] netlink: 'syz.1.278': attribute type 10 has an invalid length. [ 135.199958][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.278'. [ 135.295778][ T5358] netlink: 'syz.0.280': attribute type 39 has an invalid length. [ 135.593286][ T5375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.747343][ T5394] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 135.879347][ T5394] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.287'. [ 136.168935][ T5390] netlink: 'syz.1.285': attribute type 272 has an invalid length. [ 136.244083][ T5390] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.285'. [ 136.960453][ T5417] netlink: 'syz.4.293': attribute type 10 has an invalid length. [ 136.991511][ T5418] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.292'. [ 137.864897][ T5424] netlink: 164 bytes leftover after parsing attributes in process `syz.1.294'. [ 139.142338][ T5455] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 139.171886][ T5455] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.300'. [ 139.757940][ T5473] netlink: 164 bytes leftover after parsing attributes in process `syz.4.306'. [ 139.993642][ T5475] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.307'. [ 140.383716][ T5492] netlink: 'syz.4.311': attribute type 1 has an invalid length. [ 140.421469][ T5491] netlink: 164 bytes leftover after parsing attributes in process `syz.5.321'. [ 140.450243][ T5492] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.311'. [ 140.788529][ T5497] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 140.809850][ T5497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'. [ 140.842844][ T5470] netlink: 'syz.0.304': attribute type 272 has an invalid length. [ 140.863866][ T5470] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.304'. [ 140.971428][ T5500] netlink: 'syz.3.312': attribute type 21 has an invalid length. [ 141.011941][ T5500] netlink: 'syz.3.312': attribute type 6 has an invalid length. [ 141.068835][ T5500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.312'. [ 141.265195][ T5501] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.314'. [ 141.411007][ T5519] netlink: 164 bytes leftover after parsing attributes in process `syz.1.319'. [ 141.507679][ T5501] netlink: 'syz.5.314': attribute type 9 has an invalid length. [ 141.567241][ T5501] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.314'. [ 141.774436][ T5523] netlink: 'syz.0.330': attribute type 272 has an invalid length. [ 142.167022][ T5552] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 142.178633][ T5545] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 142.230400][ T5552] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 142.280586][ T5556] netlink: 'syz.4.328': attribute type 3 has an invalid length. [ 142.512099][ T5545] team0: Port device wlan1 added [ 142.518248][ T5548] netlink: 'syz.5.327': attribute type 10 has an invalid length. [ 142.569947][ T5556] netlink: 'syz.4.328': attribute type 39 has an invalid length. [ 142.861276][ T5560] netlink: 'syz.1.329': attribute type 21 has an invalid length. [ 142.869846][ T5560] netlink: 'syz.1.329': attribute type 6 has an invalid length. [ 143.213936][ T5577] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 143.885372][ T5591] netlink: 'syz.3.340': attribute type 272 has an invalid length. [ 145.080373][ T5631] __nla_validate_parse: 12 callbacks suppressed [ 145.080394][ T5631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.351'. [ 145.382031][ T5647] netlink: 132 bytes leftover after parsing attributes in process `syz.1.362'. [ 145.686147][ T5656] netlink: 164 bytes leftover after parsing attributes in process `syz.1.356'. [ 145.844426][ T5662] netlink: set zone limit has 8 unknown bytes [ 146.773302][ T5697] netlink: 26 bytes leftover after parsing attributes in process `syz.1.366'. [ 147.063965][ T5698] device macvlan0 entered promiscuous mode [ 147.726641][ T5669] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.359'. [ 147.763292][ T5710] validate_nla: 8 callbacks suppressed [ 147.763309][ T5710] netlink: 'syz.3.367': attribute type 21 has an invalid length. [ 148.090632][ T5710] netlink: 'syz.3.367': attribute type 6 has an invalid length. [ 148.098331][ T5710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.367'. [ 149.249848][ T5727] netlink: 164 bytes leftover after parsing attributes in process `syz.3.371'. [ 149.379440][ T5735] netlink: 'syz.0.373': attribute type 10 has an invalid length. [ 149.449950][ T5735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.373'. [ 150.011990][ T5733] netlink: 'syz.1.372': attribute type 272 has an invalid length. [ 150.149807][ T5733] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.372'. [ 150.329015][ T5761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.380'. [ 151.452630][ T5771] netlink: 'syz.1.381': attribute type 21 has an invalid length. [ 151.517205][ T5771] netlink: 'syz.1.381': attribute type 6 has an invalid length. [ 151.670105][ T5771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.381'. [ 152.273160][ T5796] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.385'. [ 152.398557][ T5794] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 152.461434][ T5794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.388'. [ 153.609932][ T5816] netlink: 'syz.0.394': attribute type 10 has an invalid length. [ 153.911186][ T5821] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 154.275445][ T5834] netlink: 'syz.5.398': attribute type 21 has an invalid length. [ 154.326230][ T5834] netlink: 'syz.5.398': attribute type 6 has an invalid length. [ 154.369984][ T5834] netlink: 132 bytes leftover after parsing attributes in process `syz.5.398'. [ 154.640078][ T5835] netlink: 128 bytes leftover after parsing attributes in process `syz.4.399'. [ 154.938791][ T5856] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.403'. [ 154.969752][ T5835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.125503][ T5843] netlink: 164 bytes leftover after parsing attributes in process `syz.1.400'. [ 155.281288][ T5836] netlink: 128 bytes leftover after parsing attributes in process `syz.4.399'. [ 155.341402][ T5836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.429430][ T5851] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 155.572733][ T5851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.402'. [ 156.352796][ T5868] netlink: 'syz.1.408': attribute type 10 has an invalid length. [ 156.776706][ T5874] netlink: 'syz.0.409': attribute type 8 has an invalid length. [ 156.950619][ T5874] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.409'. [ 157.238005][ T5884] netlink: 'syz.1.412': attribute type 25 has an invalid length. [ 157.341261][ T5884] netlink: 'syz.1.412': attribute type 28 has an invalid length. [ 157.356250][ T5887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.559960][ T5881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.579567][ T5895] netlink: 'syz.5.416': attribute type 272 has an invalid length. [ 157.616450][ T5895] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.416'. [ 157.788866][ T5897] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.415'. [ 159.140105][ T5932] validate_nla: 1 callbacks suppressed [ 159.140123][ T5932] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 159.216014][ T5932] netlink: 'syz.0.425': attribute type 29 has an invalid length. [ 159.313832][ T5927] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.424'. [ 159.352897][ T5933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.487059][ T5939] netlink: 'syz.3.428': attribute type 272 has an invalid length. [ 159.549846][ T5939] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.428'. [ 159.991432][ T5942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.139309][ T5956] netlink: 'syz.5.431': attribute type 1 has an invalid length. [ 160.159718][ T5956] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.431'. [ 160.467540][ T5958] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 160.553921][ T5958] netlink: 40 bytes leftover after parsing attributes in process `syz.1.433'. [ 162.240165][ T5984] netlink: 'syz.1.437': attribute type 10 has an invalid length. [ 162.294147][ T6042] netlink: 'syz.5.440': attribute type 272 has an invalid length. [ 162.303384][ T5984] netlink: 'syz.1.437': attribute type 4 has an invalid length. [ 162.359433][ T6042] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.440'. [ 162.400242][ T5984] netlink: 116 bytes leftover after parsing attributes in process `syz.1.437'. [ 162.935326][ T5984] wlan1: mtu greater than device maximum [ 162.979283][ T5984] team0: Device wlan1 failed to change mtu [ 163.093310][ T6052] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.442'. [ 163.115730][ T5984] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 163.844127][ T6066] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 163.995783][ T6071] netlink: 164 bytes leftover after parsing attributes in process `syz.3.446'. [ 164.019812][ T6066] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.445'. [ 164.450277][ T6074] netlink: 'syz.5.447': attribute type 10 has an invalid length. [ 164.543168][ T6074] netlink: 40 bytes leftover after parsing attributes in process `syz.5.447'. [ 165.636617][ T6093] netlink: 'syz.5.454': attribute type 272 has an invalid length. [ 165.689327][ T6093] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.454'. [ 165.799199][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.106217][ T6109] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.458'. [ 167.009064][ T6126] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 167.281812][ T6126] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.461'. [ 167.903991][ T6137] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.467'. [ 168.451795][ T6143] mac80211_hwsim hwsim12 »»»»»»: renamed from wlan0 [ 168.520341][ T6147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.033166][ T6178] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 170.094263][ T6178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.479'. [ 170.491327][ T6175] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 170.611526][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.478'. [ 171.289682][ T6189] netlink: 'syz.3.481': attribute type 272 has an invalid length. [ 171.314015][ T6189] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.481'. [ 171.746017][ T6197] netlink: 164 bytes leftover after parsing attributes in process `syz.1.482'. [ 171.910446][ T6206] netlink: 'syz.0.483': attribute type 46 has an invalid length. [ 172.000556][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.926943][ T6228] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 172.980103][ T6228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.492'. [ 173.519655][ T6236] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.493'. [ 174.222450][ T6235] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.494'. [ 174.516147][ T6246] netlink: 'syz.5.495': attribute type 272 has an invalid length. [ 174.659379][ T6246] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.495'. [ 174.849228][ T6251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.271780][ T6270] netlink: 164 bytes leftover after parsing attributes in process `syz.5.503'. [ 175.840871][ T6277] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 175.880938][ T6277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.506'. [ 176.117454][ T6288] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.508'. [ 176.903376][ T6298] netlink: 'syz.4.510': attribute type 1 has an invalid length. [ 177.481113][ T6298] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.510'. [ 177.949996][ T6302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.349474][ T6314] netlink: 192 bytes leftover after parsing attributes in process `syz.0.514'. [ 180.277095][ T6330] netlink: 'syz.3.519': attribute type 272 has an invalid length. [ 180.400231][ T6330] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.519'. [ 180.479243][ T6335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.883346][ T6359] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 181.958756][ T6353] netlink: 'syz.0.526': attribute type 272 has an invalid length. [ 182.009954][ T6353] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.526'. [ 182.109745][ T6359] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.527'. [ 186.239760][ T4229] Bluetooth: hci1: command 0x0406 tx timeout [ 186.245947][ T4229] Bluetooth: hci0: command 0x0406 tx timeout [ 186.269741][ T4229] Bluetooth: hci3: command 0x0406 tx timeout [ 186.290249][ T4229] Bluetooth: hci2: command 0x0406 tx timeout [ 186.584535][ T6399] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 186.587590][ T6390] netlink: 'syz.4.535': attribute type 272 has an invalid length. [ 186.603088][ T6390] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.535'. [ 187.010724][ T6404] netlink: 'syz.5.538': attribute type 10 has an invalid length. [ 187.272462][ T6404] device veth0_macvtap left promiscuous mode [ 187.331253][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.934609][ T6419] netlink: 'syz.1.541': attribute type 272 has an invalid length. [ 187.945834][ T6419] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.541'. [ 188.290376][ T6425] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.542'. [ 188.435620][ T6424] netlink: 'syz.3.542': attribute type 21 has an invalid length. [ 188.576674][ T6424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.542'. [ 188.958855][ T6432] netlink: 'syz.5.544': attribute type 1 has an invalid length. [ 188.989139][ T6432] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.544'. [ 192.282377][ T6456] netlink: 'syz.4.556': attribute type 10 has an invalid length. [ 192.314578][ T6452] netlink: 'syz.1.553': attribute type 10 has an invalid length. [ 192.351017][ T6453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.627562][ T6461] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.557'. [ 192.720953][ T6458] netlink: 'syz.5.555': attribute type 272 has an invalid length. [ 192.769038][ T6458] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.555'. [ 193.635332][ T6478] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.559'. [ 194.405220][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.411603][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.903537][ T6487] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 195.929452][ T6487] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.562'. [ 196.125505][ T6516] netlink: 'syz.1.570': attribute type 272 has an invalid length. [ 196.177475][ T6516] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.570'. [ 196.414777][ T6510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.527274][ T6537] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.575'. [ 199.635520][ T6537] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 199.856216][ T6550] netlink: 'syz.1.580': attribute type 1 has an invalid length. [ 200.003249][ T6550] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.580'. [ 200.053828][ T6558] netlink: 192 bytes leftover after parsing attributes in process `syz.5.582'. [ 200.409178][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.421460][ T6575] netlink: 'syz.1.585': attribute type 10 has an invalid length. [ 201.105341][ T6589] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.602'. [ 201.468711][ T6593] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.592'. [ 201.570732][ T6604] netlink: 'syz.4.592': attribute type 21 has an invalid length. [ 201.758081][ T6604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.592'. [ 201.959660][ T6593] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 202.428420][ T6616] netlink: 'syz.1.598': attribute type 272 has an invalid length. [ 202.448411][ T6616] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.598'. [ 202.521843][ T6603] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 202.551244][ T6603] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.595'. [ 202.589789][ T6614] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.596'. [ 202.682153][ T6628] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 203.011423][ T6620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.230019][ T6658] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.612'. [ 204.723195][ T6665] netlink: 'syz.5.614': attribute type 1 has an invalid length. [ 204.879663][ T6665] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.614'. [ 205.437156][ T6689] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 205.467650][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.608343][ T6689] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.618'. [ 205.961616][ T6704] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 206.390087][ T6715] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.628'. [ 206.597445][ T6707] device syzkaller0 entered promiscuous mode [ 207.391222][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.906547][ T6751] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 207.993141][ T6751] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.640'. [ 208.660381][ T6764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.919461][ T6779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.218881][ T6787] netlink: 192 bytes leftover after parsing attributes in process `syz.0.654'. [ 210.081052][ T6799] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 210.628962][ T6818] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 211.080272][ T6823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.329219][ T6834] netlink: 'syz.0.667': attribute type 1 has an invalid length. [ 211.501366][ T6834] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.667'. [ 211.679269][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.835333][ T6843] netlink: 192 bytes leftover after parsing attributes in process `syz.4.671'. [ 211.856806][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 212.789808][ T6863] netlink: 'syz.4.680': attribute type 10 has an invalid length. [ 212.810668][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.680'. [ 213.079895][ T6874] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.677'. [ 213.283239][ T6878] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.677'. [ 213.382366][ T6890] netlink: 192 bytes leftover after parsing attributes in process `syz.1.683'. [ 213.396430][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.935909][ T6903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.974804][ T6910] netlink: 'syz.5.689': attribute type 21 has an invalid length. [ 214.671259][ T6929] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.691'. [ 215.404669][ T6926] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 215.460273][ T6926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.520513][ T6926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.583684][ T6926] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 215.638560][ T6930] netlink: 'syz.0.695': attribute type 10 has an invalid length. [ 215.679165][ T6930] netlink: 40 bytes leftover after parsing attributes in process `syz.0.695'. [ 215.953163][ T6943] netlink: 192 bytes leftover after parsing attributes in process `syz.4.698'. [ 215.975911][ T6938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.127743][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.575002][ T6954] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.704'. [ 217.226980][ T6965] netlink: 'syz.5.707': attribute type 10 has an invalid length. [ 217.256823][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.353670][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.464380][ T6965] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 217.590691][ T6972] netlink: 'syz.4.710': attribute type 10 has an invalid length. [ 217.598490][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.4.710'. [ 217.643294][ T6978] FAULT_INJECTION: forcing a failure. [ 217.643294][ T6978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.758972][ T6978] CPU: 0 PID: 6978 Comm: syz.1.712 Not tainted syzkaller #0 [ 217.766349][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 217.776466][ T6978] Call Trace: [ 217.779794][ T6978] [ 217.782850][ T6978] dump_stack_lvl+0x188/0x250 [ 217.787598][ T6978] ? show_regs_print_info+0x20/0x20 [ 217.792841][ T6978] ? load_image+0x410/0x410 [ 217.797418][ T6978] ? __lock_acquire+0x7d40/0x7d40 [ 217.802520][ T6978] should_fail+0x383/0x4b0 [ 217.806999][ T6978] _copy_from_user+0x2e/0x170 [ 217.811737][ T6978] iovec_from_user+0x142/0x370 [ 217.816575][ T6978] __import_iovec+0x70/0x490 [ 217.821239][ T6978] import_iovec+0x6f/0xa0 [ 217.825635][ T6978] ___sys_sendmsg+0x1fd/0x2e0 [ 217.830397][ T6978] ? __sys_sendmsg+0x290/0x290 [ 217.835248][ T6978] ? trace_event_raw_event_lock+0x250/0x250 [ 217.841264][ T6978] __se_sys_sendmsg+0x1b7/0x2a0 [ 217.846171][ T6978] ? __x64_sys_sendmsg+0x80/0x80 [ 217.851150][ T6978] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 217.857223][ T6978] ? lockdep_hardirqs_on+0x94/0x140 [ 217.862687][ T6978] do_syscall_64+0x4c/0xa0 [ 217.867152][ T6978] ? clear_bhb_loop+0x30/0x80 [ 217.871891][ T6978] ? clear_bhb_loop+0x30/0x80 [ 217.876633][ T6978] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.882573][ T6978] RIP: 0033:0x7fb00e78a199 [ 217.887045][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.906829][ T6978] RSP: 002b:00007fb00c9e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.915308][ T6978] RAX: ffffffffffffffda RBX: 00007fb00ea11fa0 RCX: 00007fb00e78a199 [ 217.923333][ T6978] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 217.931366][ T6978] RBP: 00007fb00c9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 217.953476][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.961495][ T6978] R13: 00007fb00ea12038 R14: 00007fb00ea11fa0 R15: 00007fffd9caecc8 [ 217.969568][ T6978] [ 218.021628][ T6983] netlink: 192 bytes leftover after parsing attributes in process `syz.4.713'. [ 218.284771][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.532375][ T7002] netlink: 'syz.5.716': attribute type 10 has an invalid length. [ 219.037177][ T7007] netlink: 'syz.1.721': attribute type 272 has an invalid length. [ 219.066256][ T7012] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 219.090246][ T7012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 219.421439][ T7007] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.721'. [ 219.441994][ T7022] netlink: 192 bytes leftover after parsing attributes in process `syz.4.727'. [ 219.526913][ T7014] netlink: 'syz.0.724': attribute type 10 has an invalid length. [ 219.549556][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.797928][ T7028] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 219.828996][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.966820][ T7028] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.728'. [ 220.357436][ T7014] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 220.411166][ T7027] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.729'. [ 220.550048][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.746255][ T7037] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.731'. [ 221.207179][ T7047] netlink: 'syz.4.737': attribute type 10 has an invalid length. [ 221.306517][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.737'. [ 221.381058][ T7056] FAULT_INJECTION: forcing a failure. [ 221.381058][ T7056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.556800][ T7056] CPU: 0 PID: 7056 Comm: syz.1.736 Not tainted syzkaller #0 [ 221.564159][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.574327][ T7056] Call Trace: [ 221.577635][ T7056] [ 221.580587][ T7056] dump_stack_lvl+0x188/0x250 [ 221.585295][ T7056] ? show_regs_print_info+0x20/0x20 [ 221.590527][ T7056] ? load_image+0x410/0x410 [ 221.595068][ T7056] ? __lock_acquire+0x7d40/0x7d40 [ 221.600119][ T7056] should_fail+0x383/0x4b0 [ 221.604653][ T7056] _copy_to_user+0x2e/0x130 [ 221.609185][ T7056] simple_read_from_buffer+0xe3/0x150 [ 221.614594][ T7056] proc_fail_nth_read+0x1a6/0x220 [ 221.619654][ T7056] ? proc_fault_inject_write+0x310/0x310 [ 221.625321][ T7056] ? fsnotify_perm+0x254/0x560 [ 221.630172][ T7056] ? proc_fault_inject_write+0x310/0x310 [ 221.635849][ T7056] vfs_read+0x2ff/0xd50 [ 221.640035][ T7056] ? __lock_acquire+0x7d40/0x7d40 [ 221.645087][ T7056] ? kernel_read+0x1e0/0x1e0 [ 221.649720][ T7056] ? mutex_lock_nested+0x17/0x20 [ 221.654761][ T7056] ? __fdget_pos+0x2bf/0x370 [ 221.659373][ T7056] ? ksys_read+0x70/0x260 [ 221.663741][ T7056] ksys_read+0x153/0x260 [ 221.668032][ T7056] ? vfs_write+0xd70/0xd70 [ 221.672479][ T7056] ? lockdep_hardirqs_on+0x94/0x140 [ 221.677711][ T7056] do_syscall_64+0x4c/0xa0 [ 221.682145][ T7056] ? clear_bhb_loop+0x30/0x80 [ 221.686828][ T7056] ? clear_bhb_loop+0x30/0x80 [ 221.691520][ T7056] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.697418][ T7056] RIP: 0033:0x7fb00e74a9ce [ 221.701839][ T7056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.721538][ T7056] RSP: 002b:00007fb00c99ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.729957][ T7056] RAX: ffffffffffffffda RBX: 00007fb00c9a06c0 RCX: 00007fb00e74a9ce [ 221.738017][ T7056] RDX: 000000000000000f RSI: 00007fb00c9a00a0 RDI: 0000000000000009 [ 221.746085][ T7056] RBP: 00007fb00c9a0090 R08: 0000000000000000 R09: 0000000000000000 [ 221.754066][ T7056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.762211][ T7056] R13: 00007fb00ea12218 R14: 00007fb00ea12180 R15: 00007fffd9caecc8 [ 221.770198][ T7056] [ 221.834576][ T7062] netlink: 192 bytes leftover after parsing attributes in process `syz.4.739'. [ 222.419501][ T7076] netlink: 'syz.3.740': attribute type 21 has an invalid length. [ 222.459385][ T7076] netlink: 'syz.3.740': attribute type 6 has an invalid length. [ 222.490243][ T7076] netlink: 132 bytes leftover after parsing attributes in process `syz.3.740'. [ 223.151866][ T7081] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 223.209557][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.266345][ T7082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.443187][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.632952][ T7081] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 223.705154][ T7087] delete_channel: no stack [ 223.811411][ T7095] netlink: 'syz.5.749': attribute type 10 has an invalid length. [ 223.819326][ T7095] netlink: 40 bytes leftover after parsing attributes in process `syz.5.749'. [ 224.171047][ T7102] netlink: 192 bytes leftover after parsing attributes in process `syz.4.752'. [ 224.428383][ T7114] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 224.908104][ T7122] netlink: 'syz.1.757': attribute type 21 has an invalid length. [ 224.941936][ T7122] netlink: 'syz.1.757': attribute type 6 has an invalid length. [ 224.993287][ T7122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.757'. [ 225.068999][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.089859][ T7139] netlink: 'syz.1.764': attribute type 10 has an invalid length. [ 228.097694][ T7139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.764'. [ 228.122015][ T7143] netlink: 188 bytes leftover after parsing attributes in process `syz.5.765'. [ 228.258775][ T7155] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 228.411149][ T7159] netlink: 'syz.3.771': attribute type 33 has an invalid length. [ 228.419266][ T7159] netlink: 152 bytes leftover after parsing attributes in process `syz.3.771'. [ 228.530189][ T7155] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.769'. [ 229.250814][ T7174] netlink: 'syz.1.774': attribute type 21 has an invalid length. [ 229.269798][ T7174] netlink: 'syz.1.774': attribute type 6 has an invalid length. [ 229.291801][ T7174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.774'. [ 229.468711][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.617913][ T7187] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 229.659149][ T7187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.780'. [ 229.694568][ T7192] FAULT_INJECTION: forcing a failure. [ 229.694568][ T7192] name failslab, interval 1, probability 0, space 0, times 0 [ 229.830171][ T7192] CPU: 1 PID: 7192 Comm: syz.0.782 Not tainted syzkaller #0 [ 229.837649][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.847731][ T7192] Call Trace: [ 229.851151][ T7192] [ 229.854321][ T7192] dump_stack_lvl+0x188/0x250 [ 229.859022][ T7192] ? show_regs_print_info+0x20/0x20 [ 229.864356][ T7192] ? load_image+0x410/0x410 [ 229.868887][ T7192] ? __might_sleep+0xf0/0xf0 [ 229.873497][ T7192] ? __lock_acquire+0x7d40/0x7d40 [ 229.878559][ T7192] ? __local_bh_enable_ip+0x136/0x1c0 [ 229.884069][ T7192] should_fail+0x383/0x4b0 [ 229.888697][ T7192] should_failslab+0x5/0x20 [ 229.893242][ T7192] slab_pre_alloc_hook+0x51/0xc0 [ 229.898208][ T7192] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 229.899413][ T7191] netlink: 'syz.4.781': attribute type 272 has an invalid length. [ 229.904125][ T7192] ? __get_vm_area_node+0x119/0x2d0 [ 229.904158][ T7192] __get_vm_area_node+0x119/0x2d0 [ 229.904183][ T7192] __vmalloc_node_range+0xef/0x8b0 [ 229.904204][ T7192] ? netlink_sendmsg+0x5ec/0xbe0 [ 229.904221][ T7192] ? netlink_data_ready+0x10/0x10 [ 229.904254][ T7192] ? netlink_sendmsg+0x5ec/0xbe0 [ 229.904272][ T7192] vmalloc+0x75/0x80 [ 229.904291][ T7192] ? netlink_sendmsg+0x5ec/0xbe0 [ 229.904309][ T7192] netlink_sendmsg+0x5ec/0xbe0 [ 229.904339][ T7192] ? netlink_getsockopt+0x570/0x570 [ 229.904355][ T7192] ? aa_sock_msg_perm+0x94/0x150 [ 229.904378][ T7192] ? apparmor_socket_sendmsg+0x88/0x230 [ 229.904399][ T7192] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 229.904419][ T7192] ? security_socket_sendmsg+0x7c/0xa0 [ 229.904444][ T7192] sock_write_iter+0x2a6/0x3a0 [ 229.904470][ T7192] ? sock_read_iter+0x380/0x380 [ 229.904502][ T7192] ? memset+0x1e/0x40 [ 229.904520][ T7192] ? iov_iter_init+0xb4/0x170 [ 229.904544][ T7192] vfs_write+0x748/0xd70 [ 229.904574][ T7192] ? file_end_write+0x250/0x250 [ 229.904602][ T7192] ? __fget_files+0x402/0x470 [ 229.904631][ T7192] ? __fdget_pos+0x1e2/0x370 [ 229.904647][ T7192] ? ksys_write+0x70/0x260 [ 229.904669][ T7192] ksys_write+0x153/0x260 [ 229.904691][ T7192] ? __ia32_sys_read+0x80/0x80 [ 229.904715][ T7192] ? lockdep_hardirqs_on+0x94/0x140 [ 229.904742][ T7192] do_syscall_64+0x4c/0xa0 [ 229.904760][ T7192] ? clear_bhb_loop+0x30/0x80 [ 229.904780][ T7192] ? clear_bhb_loop+0x30/0x80 [ 229.904802][ T7192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.904823][ T7192] RIP: 0033:0x7f07dfb9c199 [ 229.904843][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.904858][ T7192] RSP: 002b:00007f07dddf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.904889][ T7192] RAX: ffffffffffffffda RBX: 00007f07dfe23fa0 RCX: 00007f07dfb9c199 [ 229.904903][ T7192] RDX: 00000000000082d7 RSI: 0000200000000000 RDI: 0000000000000003 [ 229.904917][ T7192] RBP: 00007f07dddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 229.904929][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.904941][ T7192] R13: 00007f07dfe24038 R14: 00007f07dfe23fa0 R15: 00007ffe607e8f28 [ 229.904973][ T7192] [ 230.007781][ T7196] netlink: 188 bytes leftover after parsing attributes in process `syz.3.783'. [ 230.034750][ T7192] syz.0.782: vmalloc error: size 33856, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 230.169626][ T7191] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.781'. [ 230.905588][ T7216] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 230.982439][ T7217] netlink: 'syz.1.790': attribute type 21 has an invalid length. [ 230.993172][ T7216] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.788'. [ 231.010183][ T7217] netlink: 'syz.1.790': attribute type 6 has an invalid length. [ 231.018249][ T7217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.790'. [ 231.130564][ T7192] ,cpuset=syz0,mems_allowed=0-1 [ 231.182299][ T7192] CPU: 1 PID: 7192 Comm: syz.0.782 Not tainted syzkaller #0 [ 231.189735][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 231.199816][ T7192] Call Trace: [ 231.203118][ T7192] [ 231.206071][ T7192] dump_stack_lvl+0x188/0x250 [ 231.210856][ T7192] ? rcu_lock_release+0x5/0x20 [ 231.215646][ T7192] ? show_regs_print_info+0x20/0x20 [ 231.220866][ T7192] ? load_image+0x410/0x410 [ 231.225836][ T7192] warn_alloc+0x245/0x320 [ 231.230244][ T7192] ? zone_watermark_ok_safe+0x250/0x250 [ 231.235926][ T7192] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 231.241951][ T7192] ? __get_vm_area_node+0x119/0x2d0 [ 231.247207][ T7192] __vmalloc_node_range+0x2b1/0x8b0 [ 231.252438][ T7192] ? netlink_data_ready+0x10/0x10 [ 231.257610][ T7192] ? netlink_sendmsg+0x5ec/0xbe0 [ 231.262578][ T7192] vmalloc+0x75/0x80 [ 231.266515][ T7192] ? netlink_sendmsg+0x5ec/0xbe0 [ 231.271559][ T7192] netlink_sendmsg+0x5ec/0xbe0 [ 231.276351][ T7192] ? netlink_getsockopt+0x570/0x570 [ 231.281615][ T7192] ? aa_sock_msg_perm+0x94/0x150 [ 231.286597][ T7192] ? apparmor_socket_sendmsg+0x88/0x230 [ 231.292170][ T7192] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 231.297484][ T7192] ? security_socket_sendmsg+0x7c/0xa0 [ 231.303006][ T7192] sock_write_iter+0x2a6/0x3a0 [ 231.307828][ T7192] ? sock_read_iter+0x380/0x380 [ 231.312721][ T7192] ? memset+0x1e/0x40 [ 231.316736][ T7192] ? iov_iter_init+0xb4/0x170 [ 231.321449][ T7192] vfs_write+0x748/0xd70 [ 231.325732][ T7192] ? file_end_write+0x250/0x250 [ 231.330624][ T7192] ? __fget_files+0x402/0x470 [ 231.335421][ T7192] ? __fdget_pos+0x1e2/0x370 [ 231.340029][ T7192] ? ksys_write+0x70/0x260 [ 231.344575][ T7192] ksys_write+0x153/0x260 [ 231.348938][ T7192] ? __ia32_sys_read+0x80/0x80 [ 231.353859][ T7192] ? lockdep_hardirqs_on+0x94/0x140 [ 231.359096][ T7192] do_syscall_64+0x4c/0xa0 [ 231.363544][ T7192] ? clear_bhb_loop+0x30/0x80 [ 231.368503][ T7192] ? clear_bhb_loop+0x30/0x80 [ 231.373210][ T7192] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.379134][ T7192] RIP: 0033:0x7f07dfb9c199 [ 231.383584][ T7192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.403747][ T7192] RSP: 002b:00007f07dddf4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 231.412193][ T7192] RAX: ffffffffffffffda RBX: 00007f07dfe23fa0 RCX: 00007f07dfb9c199 [ 231.420192][ T7192] RDX: 00000000000082d7 RSI: 0000200000000000 RDI: 0000000000000003 [ 231.428190][ T7192] RBP: 00007f07dddf4090 R08: 0000000000000000 R09: 0000000000000000 [ 231.436197][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.444199][ T7192] R13: 00007f07dfe24038 R14: 00007f07dfe23fa0 R15: 00007ffe607e8f28 [ 231.452224][ T7192] [ 231.473404][ T7192] Mem-Info: [ 231.545664][ T7192] active_anon:285 inactive_anon:55895 isolated_anon:0 [ 231.545664][ T7192] active_file:24953 inactive_file:35827 isolated_file:0 [ 231.545664][ T7192] unevictable:768 dirty:200 writeback:0 [ 231.545664][ T7192] slab_reclaimable:21481 slab_unreclaimable:96140 [ 231.545664][ T7192] mapped:37802 shmem:51542 pagetables:737 bounce:0 [ 231.545664][ T7192] kernel_misc_reclaimable:0 [ 231.545664][ T7192] free:1312282 free_pcp:12098 free_cma:0 [ 232.015184][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.126824][ T7192] Node 0 active_anon:1108kB inactive_anon:200596kB active_file:99608kB inactive_file:143308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155232kB dirty:888kB writeback:0kB shmem:181492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:2996kB all_unreclaimable? no [ 234.230441][ T7192] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 234.707452][ T7267] validate_nla: 3 callbacks suppressed [ 234.707472][ T7267] netlink: 'syz.1.802': attribute type 21 has an invalid length. [ 234.770527][ T7267] netlink: 'syz.1.802': attribute type 6 has an invalid length. [ 234.778224][ T7267] __nla_validate_parse: 3 callbacks suppressed [ 234.778238][ T7267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.802'. [ 234.841485][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.906399][ T7284] netlink: 'syz.3.808': attribute type 10 has an invalid length. [ 234.960826][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.808'. [ 235.168195][ T7192] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.347559][ T7291] netlink: 164 bytes leftover after parsing attributes in process `syz.4.811'. [ 235.364183][ T7192] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 235.457651][ T7192] Node 0 DMA32 free:1373872kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1116kB inactive_anon:171624kB active_file:99616kB inactive_file:143308kB unevictable:1536kB writepending:912kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:38048kB local_pcp:19376kB free_cma:0kB [ 235.842974][ T7192] lowmem_reserve[]: 0 0 0 0 0 [ 236.028338][ T7192] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.040969][ T7304] netlink: 'syz.1.816': attribute type 272 has an invalid length. [ 236.170368][ T7304] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.816'. [ 236.177292][ T7192] lowmem_reserve[]: 0 0 0 0 0 [ 236.244445][ T7192] Node 1 Normal free:3915720kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5868kB local_pcp:3792kB free_cma:0kB [ 236.539673][ T7192] lowmem_reserve[]: 0 0 0 0 0 [ 236.544547][ T7192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 236.677579][ T7321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.710381][ T7192] Node 0 DMA32: 3860*4kB (UME) 3316*8kB (UME) 1768*16kB (UM) 1401*32kB (UME) 927*64kB (UME) 593*128kB (UME) 337*256kB (UME) 146*512kB (UM) 51*1024kB (UM) 21*2048kB (UM) 210*4096kB (UM) = 1366736kB [ 236.939764][ T7192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 236.969193][ T7327] netlink: 'syz.4.822': attribute type 21 has an invalid length. [ 237.007180][ T7192] Node 1 Normal: 88*4kB (UME) 33*8kB (UE) 26*16kB (UME) 168*32kB (UE) 67*64kB (UME) 16*128kB (UME) 8*256kB (UM) 1*512kB (U) 1*1024kB (U) 2*2048kB (ME) 951*4096kB (M) = 3915720kB [ 237.070277][ T7327] netlink: 'syz.4.822': attribute type 6 has an invalid length. [ 237.078320][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.822'. [ 237.171565][ T7336] netlink: 'syz.5.824': attribute type 10 has an invalid length. [ 237.265638][ T7192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.265717][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.5.824'. [ 237.342388][ T7192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.444490][ T7192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.539701][ T7192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.629726][ T7192] 108827 total pagecache pages [ 237.634723][ T7192] 0 pages in swap cache [ 237.639434][ T7192] Swap cache stats: add 0, delete 0, find 0/0 [ 237.747782][ T7192] Free swap = 124996kB [ 237.779170][ T7192] Total swap = 124996kB [ 237.811197][ T7345] netlink: 164 bytes leftover after parsing attributes in process `syz.5.828'. [ 237.832456][ T7192] 2097051 pages RAM [ 237.836331][ T7192] 0 pages HighMem/MovableOnly [ 237.886262][ T7192] 415313 pages reserved [ 237.930960][ T7192] 0 pages cma reserved [ 238.151217][ T7357] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 238.158099][ T7357] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 238.201357][ T7362] netlink: 'syz.5.833': attribute type 10 has an invalid length. [ 238.235386][ T7357] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.834'. [ 238.343704][ T7357] netlink: zone id is out of range [ 238.362748][ T7359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.399841][ T7357] netlink: zone id is out of range [ 239.184055][ T7376] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 239.232541][ T7376] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.837'. [ 239.423668][ T7377] netlink: 'syz.1.838': attribute type 10 has an invalid length. [ 239.530533][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.838'. [ 239.757424][ T7384] netlink: 'syz.5.840': attribute type 10 has an invalid length. [ 239.861594][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.5.840'. [ 241.421448][ T7413] netlink: 'syz.1.849': attribute type 9 has an invalid length. [ 241.429145][ T7413] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.849'. [ 241.689142][ T7418] netlink: 'syz.1.849': attribute type 9 has an invalid length. [ 241.697091][ T7406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.839116][ T7418] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.849'. [ 241.883926][ T7421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 241.890452][ T7421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 242.120728][ T7421] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.851'. [ 242.282860][ T7421] netlink: zone id is out of range [ 242.362323][ T7426] netlink: 'syz.0.853': attribute type 1 has an invalid length. [ 242.449812][ T7421] netlink: zone id is out of range [ 242.797949][ T7426] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.853'. [ 243.189191][ T7432] netlink: 'syz.5.855': attribute type 272 has an invalid length. [ 243.211576][ T7425] netlink: 'syz.3.852': attribute type 21 has an invalid length. [ 243.230967][ T7432] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.855'. [ 243.269964][ T7425] netlink: 'syz.3.852': attribute type 6 has an invalid length. [ 243.294888][ T7425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.852'. [ 243.466138][ T7441] netlink: 'syz.4.857': attribute type 10 has an invalid length. [ 243.522760][ T7441] netlink: 40 bytes leftover after parsing attributes in process `syz.4.857'. [ 244.925387][ T7477] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 244.932231][ T7477] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 244.988018][ T7477] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.868'. [ 245.099997][ T7477] netlink: zone id is out of range [ 245.110272][ T7477] netlink: zone id is out of range [ 246.794155][ T7488] netlink: 'syz.5.870': attribute type 1 has an invalid length. [ 246.907896][ T7488] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.870'. [ 247.135863][ T7494] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 247.153239][ T7494] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 247.430337][ T7501] FAULT_INJECTION: forcing a failure. [ 247.430337][ T7501] name failslab, interval 1, probability 0, space 0, times 0 [ 247.456900][ T7503] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 247.499993][ T7501] CPU: 0 PID: 7501 Comm: syz.5.876 Not tainted syzkaller #0 [ 247.507642][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.517899][ T7501] Call Trace: [ 247.521200][ T7501] [ 247.524153][ T7501] dump_stack_lvl+0x188/0x250 [ 247.528866][ T7501] ? show_regs_print_info+0x20/0x20 [ 247.534093][ T7501] ? load_image+0x410/0x410 [ 247.538634][ T7501] ? __might_sleep+0xf0/0xf0 [ 247.543249][ T7501] ? __lock_acquire+0x7d40/0x7d40 [ 247.548407][ T7501] should_fail+0x383/0x4b0 [ 247.552867][ T7501] should_failslab+0x5/0x20 [ 247.557397][ T7501] slab_pre_alloc_hook+0x51/0xc0 [ 247.562367][ T7501] __kmalloc_node+0x6d/0x3a0 [ 247.566994][ T7501] ? kvmalloc_node+0x84/0x130 [ 247.571783][ T7501] kvmalloc_node+0x84/0x130 [ 247.576313][ T7501] map_get_next_key+0x289/0x5f0 [ 247.581203][ T7501] __sys_bpf+0x3e5/0x6f0 [ 247.585560][ T7501] ? bpf_link_show_fdinfo+0x380/0x380 [ 247.590989][ T7501] __x64_sys_bpf+0x78/0x90 [ 247.595433][ T7501] do_syscall_64+0x4c/0xa0 [ 247.599880][ T7501] ? clear_bhb_loop+0x30/0x80 [ 247.604579][ T7501] ? clear_bhb_loop+0x30/0x80 [ 247.609368][ T7501] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.615278][ T7501] RIP: 0033:0x7f8908996199 [ 247.619820][ T7501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.639544][ T7501] RSP: 002b:00007f8906bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.647983][ T7501] RAX: ffffffffffffffda RBX: 00007f8908c1dfa0 RCX: 00007f8908996199 [ 247.656064][ T7501] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000004 [ 247.664058][ T7501] RBP: 00007f8906bee090 R08: 0000000000000000 R09: 0000000000000000 [ 247.672048][ T7501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.680041][ T7501] R13: 00007f8908c1e038 R14: 00007f8908c1dfa0 R15: 00007ffc6e4a8d68 [ 247.688057][ T7501] [ 248.057178][ T7511] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 248.279354][ T7515] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 248.367140][ T7515] netlink: 'syz.1.878': attribute type 6 has an invalid length. [ 248.404169][ T7520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 248.410735][ T7520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 248.415816][ T7515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.878'. [ 248.424113][ T7520] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.882'. [ 248.469907][ T7520] netlink: zone id is out of range [ 248.475377][ T7520] netlink: zone id is out of range [ 248.742245][ T7529] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 248.879806][ T7529] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.886'. [ 248.923136][ T7531] netlink: 'syz.4.887': attribute type 10 has an invalid length. [ 249.079846][ T7531] netlink: 40 bytes leftover after parsing attributes in process `syz.4.887'. [ 249.531119][ T7541] device syzkaller0 entered promiscuous mode [ 252.047255][ T7558] device syzkaller0 entered promiscuous mode [ 252.858617][ T7573] netlink: 'syz.5.897': attribute type 21 has an invalid length. [ 252.874402][ T7573] netlink: 'syz.5.897': attribute type 6 has an invalid length. [ 252.888498][ T7573] netlink: 132 bytes leftover after parsing attributes in process `syz.5.897'. [ 253.465439][ T7575] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 253.533866][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.3.903'. [ 254.243944][ T7605] netlink: 164 bytes leftover after parsing attributes in process `syz.4.912'. [ 254.328294][ T7608] netlink: 164 bytes leftover after parsing attributes in process `syz.1.913'. [ 254.621138][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.669958][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.732172][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.873724][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.901318][ T7619] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 254.930421][ T7619] batman_adv: batadv0: Removing interface: virt_wifi0 [ 255.020988][ T7621] netlink: 'syz.4.916': attribute type 21 has an invalid length. [ 255.121446][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 255.232429][ T7628] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 255.261038][ T7628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.921'. [ 255.669036][ T7655] netlink: 164 bytes leftover after parsing attributes in process `syz.0.928'. [ 255.836143][ T7659] netlink: 164 bytes leftover after parsing attributes in process `syz.0.931'. [ 255.880728][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880815][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.224824][ T7673] netlink: 'syz.4.937': attribute type 10 has an invalid length. [ 256.248217][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.937'. [ 256.427497][ T7685] netlink: 164 bytes leftover after parsing attributes in process `syz.3.942'. [ 257.063854][ T7699] netlink: 'syz.1.946': attribute type 2 has an invalid length. [ 257.436146][ T7709] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 258.080764][ T7704] netlink: 'syz.3.950': attribute type 272 has an invalid length. [ 258.109708][ T7704] __nla_validate_parse: 1 callbacks suppressed [ 258.109728][ T7704] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.950'. [ 258.210253][ T7714] netlink: 'syz.5.953': attribute type 21 has an invalid length. [ 258.229339][ T7716] netlink: 'syz.1.954': attribute type 29 has an invalid length. [ 258.358581][ T7714] netlink: 'syz.5.953': attribute type 6 has an invalid length. [ 258.456478][ T7714] netlink: 132 bytes leftover after parsing attributes in process `syz.5.953'. [ 258.486491][ T7716] netlink: 'syz.1.954': attribute type 29 has an invalid length. [ 258.534843][ T7721] netlink: 'syz.4.955': attribute type 10 has an invalid length. [ 258.581102][ T7721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.955'. [ 258.636907][ T7719] netlink: 'syz.1.954': attribute type 29 has an invalid length. [ 259.276142][ T7736] netlink: 'syz.4.962': attribute type 2 has an invalid length. [ 259.333567][ T7736] netlink: 164 bytes leftover after parsing attributes in process `syz.4.962'. [ 259.444609][ T7744] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 259.712381][ T7748] netlink: 132 bytes leftover after parsing attributes in process `syz.5.966'. [ 259.768801][ T7750] netlink: 'syz.4.967': attribute type 272 has an invalid length. [ 259.842225][ T7750] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.967'. [ 260.237205][ T7757] netlink: 'syz.5.970': attribute type 10 has an invalid length. [ 260.249486][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.5.970'. [ 260.503187][ T7766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.968'. [ 260.663358][ T7775] netlink: 164 bytes leftover after parsing attributes in process `syz.4.977'. [ 260.976399][ T7782] device syzkaller0 entered promiscuous mode [ 261.233093][ T7787] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.982'. [ 262.363123][ T7821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.410234][ T7821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.433989][ T7827] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 262.520867][ T7821] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 262.539515][ T7821] batman_adv: batadv0: Removing interface: virt_wifi0 [ 262.940538][ T7810] FAULT_INJECTION: forcing a failure. [ 262.940538][ T7810] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 262.954874][ T7810] CPU: 1 PID: 7810 Comm: syz.1.988 Not tainted syzkaller #0 [ 262.962194][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.972272][ T7810] Call Trace: [ 262.975739][ T7810] [ 262.978686][ T7810] dump_stack_lvl+0x188/0x250 [ 262.983394][ T7810] ? verify_lock_unused+0x140/0x140 [ 262.988704][ T7810] ? show_regs_print_info+0x20/0x20 [ 262.993919][ T7810] ? load_image+0x410/0x410 [ 262.998448][ T7810] ? mark_lock+0x94/0x320 [ 263.002790][ T7810] should_fail+0x383/0x4b0 [ 263.007342][ T7810] prepare_alloc_pages+0x1e3/0x5b0 [ 263.012476][ T7810] __alloc_pages+0x11b/0x480 [ 263.017099][ T7810] ? zone_statistics+0x170/0x170 [ 263.022148][ T7810] ? rcu_lock_acquire+0x30/0x30 [ 263.027050][ T7810] ? alloc_pages+0x452/0x560 [ 263.031662][ T7810] __get_free_pages+0x8/0x30 [ 263.036270][ T7810] __tlb_remove_page_size+0x1f2/0x3f0 [ 263.041770][ T7810] unmap_page_range+0xfcf/0x2410 [ 263.046756][ T7810] unmap_vmas+0x131/0x250 [ 263.051106][ T7810] ? unmap_page_range+0x2410/0x2410 [ 263.056315][ T7810] ? __mutex_lock_common+0x435/0x2400 [ 263.061703][ T7810] ? exit_mm_release+0x16/0x30 [ 263.066493][ T7810] exit_mmap+0x3b9/0x640 [ 263.070752][ T7810] ? vm_brk+0x20/0x20 [ 263.074762][ T7810] ? uprobe_clear_state+0x2f6/0x460 [ 263.079981][ T7810] __mmput+0x115/0x390 [ 263.084063][ T7810] exit_mm+0x632/0x7b0 [ 263.088158][ T7810] ? perf_pmu_migrate_context+0xb70/0xb70 [ 263.093905][ T7810] ? do_exit+0x2110/0x2110 [ 263.098334][ T7810] ? __ia32_sys_timer_delete+0x40/0x40 [ 263.103807][ T7810] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 263.109284][ T7810] ? tty_audit_exit+0x149/0x1f0 [ 263.114157][ T7810] do_exit+0x5b8/0x2110 [ 263.118343][ T7810] ? put_task_struct+0x80/0x80 [ 263.123208][ T7810] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 263.129230][ T7810] ? _raw_spin_lock_irq+0xb7/0xf0 [ 263.134305][ T7810] do_group_exit+0x12c/0x2f0 [ 263.138914][ T7810] ? lockdep_hardirqs_on+0x94/0x140 [ 263.144150][ T7810] get_signal+0x7eb/0x12e0 [ 263.148602][ T7810] arch_do_signal_or_restart+0xe6/0x12a0 [ 263.154265][ T7810] ? kick_process+0xd4/0x140 [ 263.158870][ T7810] ? get_sigframe_size+0x10/0x10 [ 263.163842][ T7810] ? exit_to_user_mode_loop+0x3b/0x130 [ 263.169320][ T7810] exit_to_user_mode_loop+0x9e/0x130 [ 263.174630][ T7810] exit_to_user_mode_prepare+0xee/0x180 [ 263.180215][ T7810] syscall_exit_to_user_mode+0x16/0x40 [ 263.185716][ T7810] do_syscall_64+0x58/0xa0 [ 263.190153][ T7810] ? clear_bhb_loop+0x30/0x80 [ 263.194861][ T7810] ? clear_bhb_loop+0x30/0x80 [ 263.199727][ T7810] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.205640][ T7810] RIP: 0033:0x7fb00e78a199 [ 263.210070][ T7810] Code: Unable to access opcode bytes at RIP 0x7fb00e78a16f. [ 263.217443][ T7810] RSP: 002b:00007fb00c9e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 263.225870][ T7810] RAX: 0000000000000000 RBX: 00007fb00ea11fa0 RCX: 00007fb00e78a199 [ 263.233942][ T7810] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 263.241937][ T7810] RBP: 00007fb00c9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 263.250094][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.258076][ T7810] R13: 00007fb00ea12038 R14: 00007fb00ea11fa0 R15: 00007fffd9caecc8 [ 263.266075][ T7810] [ 263.573454][ T7846] validate_nla: 10 callbacks suppressed [ 263.574275][ T7846] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 263.644651][ T7846] __nla_validate_parse: 5 callbacks suppressed [ 263.644702][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1003'. [ 263.692374][ T7846] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.713507][ T7859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 263.799270][ T7853] netlink: 'syz.1.1004': attribute type 2 has an invalid length. [ 263.832548][ T7853] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1004'. [ 263.912507][ T7858] netlink: 'syz.5.1001': attribute type 21 has an invalid length. [ 264.031688][ T7858] netlink: 'syz.5.1001': attribute type 6 has an invalid length. [ 264.185934][ T7858] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1001'. [ 264.653280][ T7864] netlink: 'syz.0.1009': attribute type 272 has an invalid length. [ 264.675841][ T7870] device syzkaller0 entered promiscuous mode [ 264.776269][ T7864] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1009'. [ 265.337878][ T7883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.368797][ T7883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.406764][ T7883] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 265.462810][ T7883] batman_adv: batadv0: Removing interface: virt_wifi0 [ 265.579365][ T7892] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 265.655783][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'. [ 266.202894][ T7899] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 266.222853][ T7899] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1021'. [ 266.667478][ T7914] netlink: 'syz.5.1022': attribute type 21 has an invalid length. [ 266.745126][ T7914] netlink: 'syz.5.1022': attribute type 6 has an invalid length. [ 266.815684][ T7906] netlink: 'syz.3.1024': attribute type 272 has an invalid length. [ 266.834242][ T7914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1022'. [ 266.845440][ T7906] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1024'. [ 267.083883][ T7930] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 267.090434][ T7930] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.153048][ T7933] netlink: 'syz.0.1035': attribute type 2 has an invalid length. [ 267.191348][ T7933] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1035'. [ 267.958169][ T7959] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1042'. [ 268.489553][ T7971] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 268.551637][ T7964] À: port 1(vlan0) entered blocking state [ 268.568425][ T7964] À: port 1(vlan0) entered disabled state [ 268.626068][ T7964] device vlan0 entered promiscuous mode [ 269.671193][ T7996] validate_nla: 4 callbacks suppressed [ 269.671243][ T7996] netlink: 'syz.0.1057': attribute type 272 has an invalid length. [ 269.729905][ T7996] __nla_validate_parse: 3 callbacks suppressed [ 269.730723][ T7996] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1057'. [ 269.807099][ T8003] netlink: 'syz.4.1059': attribute type 2 has an invalid length. [ 269.856498][ T8003] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1059'. [ 270.263011][ T8027] netlink: 'syz.5.1067': attribute type 3 has an invalid length. [ 270.350449][ T8027] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1067'. [ 271.055657][ T8047] netlink: 'syz.3.1073': attribute type 21 has an invalid length. [ 271.093829][ T8047] netlink: 'syz.3.1073': attribute type 6 has an invalid length. [ 271.103670][ T8047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1073'. [ 271.196959][ T8049] netlink: 'syz.4.1075': attribute type 2 has an invalid length. [ 271.219842][ T8049] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1075'. [ 271.391557][ T8058] netlink: 'syz.1.1076': attribute type 272 has an invalid length. [ 271.399521][ T8058] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1076'. [ 271.599036][ T8063] netlink: 'syz.4.1079': attribute type 29 has an invalid length. [ 271.620103][ T8063] netlink: 'syz.4.1079': attribute type 29 has an invalid length. [ 271.629381][ T8063] netlink: 'syz.4.1079': attribute type 29 has an invalid length. [ 271.964108][ T8072] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 271.970622][ T8072] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.683206][ T8084] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1089'. [ 272.918505][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1088'. [ 275.551237][ T8117] validate_nla: 5 callbacks suppressed [ 275.552857][ T8117] netlink: 'syz.0.1100': attribute type 2 has an invalid length. [ 275.571161][ T8117] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1100'. [ 276.387980][ T8138] netlink: 'syz.3.1107': attribute type 10 has an invalid length. [ 276.418231][ T8142] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.424729][ T8142] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.450474][ T8133] netlink: 'syz.1.1106': attribute type 21 has an invalid length. [ 276.489011][ T8133] netlink: 'syz.1.1106': attribute type 6 has an invalid length. [ 276.530651][ T8133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1106'. [ 276.582998][ T8145] netlink: 'syz.4.1111': attribute type 2 has an invalid length. [ 276.604597][ T8145] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1111'. [ 280.060351][ T8168] netlink: 'syz.0.1115': attribute type 29 has an invalid length. [ 280.106306][ T8168] netlink: 'syz.0.1115': attribute type 29 has an invalid length. [ 280.145095][ T8171] netlink: 'syz.0.1115': attribute type 29 has an invalid length. [ 280.190401][ T8175] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 280.414108][ T8179] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 280.444725][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1122'. [ 280.554525][ T8179] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 280.635077][ T8185] netlink: 'syz.4.1125': attribute type 1 has an invalid length. [ 280.697368][ T8185] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1125'. [ 280.733020][ T8181] netlink: 'syz.5.1124': attribute type 2 has an invalid length. [ 280.763211][ T8181] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1124'. [ 281.676420][ T8194] netlink: 'syz.0.1128': attribute type 21 has an invalid length. [ 281.710286][ T8194] netlink: 'syz.0.1128': attribute type 6 has an invalid length. [ 281.739226][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1128'. [ 281.911213][ T8211] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 281.969219][ T8213] netlink: 'syz.1.1136': attribute type 2 has an invalid length. [ 282.002180][ T8213] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1136'. [ 282.189622][ T8217] netlink: 'syz.4.1137': attribute type 10 has an invalid length. [ 282.214275][ T8226] netlink: 'syz.3.1139': attribute type 29 has an invalid length. [ 282.215509][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1137'. [ 282.274834][ T8226] netlink: 'syz.3.1139': attribute type 29 has an invalid length. [ 282.491261][ T8227] netlink: 'syz.3.1139': attribute type 29 has an invalid length. [ 282.965438][ T8242] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 283.074980][ T8234] netlink: 'syz.4.1145': attribute type 21 has an invalid length. [ 283.188563][ T8234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1145'. [ 283.208737][ T8241] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1147'. [ 283.267653][ T8247] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1149'. [ 283.338944][ T8249] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1151'. [ 283.453025][ T8254] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1152'. [ 283.485237][ T8254] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 285.203046][ T8290] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 285.793801][ T8296] validate_nla: 10 callbacks suppressed [ 285.794855][ T8296] netlink: 'syz.0.1178': attribute type 272 has an invalid length. [ 285.868777][ T8296] __nla_validate_parse: 4 callbacks suppressed [ 285.868818][ T8296] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1178'. [ 286.594518][ T8304] netlink: 'syz.5.1181': attribute type 21 has an invalid length. [ 286.640475][ T8304] netlink: 'syz.5.1181': attribute type 6 has an invalid length. [ 286.651223][ T8304] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1181'. [ 288.474862][ T8329] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 288.485521][ T8330] netlink: 'syz.3.1177': attribute type 2 has an invalid length. [ 288.516461][ T8330] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1177'. [ 288.585794][ T8326] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 288.612571][ T8326] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1176'. [ 288.655394][ T8337] FAULT_INJECTION: forcing a failure. [ 288.655394][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 288.700665][ T8337] CPU: 1 PID: 8337 Comm: syz.3.1183 Not tainted syzkaller #0 [ 288.708109][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 288.718200][ T8337] Call Trace: [ 288.721539][ T8337] [ 288.724493][ T8337] dump_stack_lvl+0x188/0x250 [ 288.729203][ T8337] ? show_regs_print_info+0x20/0x20 [ 288.734419][ T8337] ? load_image+0x410/0x410 [ 288.738949][ T8337] ? __might_sleep+0xf0/0xf0 [ 288.743570][ T8337] ? __lock_acquire+0x7d40/0x7d40 [ 288.748649][ T8337] should_fail+0x383/0x4b0 [ 288.753116][ T8337] should_failslab+0x5/0x20 [ 288.757652][ T8337] slab_pre_alloc_hook+0x51/0xc0 [ 288.762691][ T8337] __kmalloc+0x6b/0x340 [ 288.766881][ T8337] ? bpf_test_init+0xf8/0x1b0 [ 288.771588][ T8337] bpf_test_init+0xf8/0x1b0 [ 288.776147][ T8337] bpf_prog_test_run_skb+0x181/0x1190 [ 288.781564][ T8337] ? __fget_files+0x402/0x470 [ 288.786281][ T8337] ? cpu_online+0x60/0x60 [ 288.790636][ T8337] bpf_prog_test_run+0x31c/0x390 [ 288.795614][ T8337] __sys_bpf+0x5a5/0x6f0 [ 288.799892][ T8337] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 288.806166][ T8337] ? bpf_link_show_fdinfo+0x380/0x380 [ 288.811557][ T8337] ? rcu_nmi_exit+0x6f/0xf0 [ 288.816209][ T8337] __x64_sys_bpf+0x78/0x90 [ 288.820656][ T8337] do_syscall_64+0x4c/0xa0 [ 288.825095][ T8337] ? clear_bhb_loop+0x30/0x80 [ 288.829888][ T8337] ? clear_bhb_loop+0x30/0x80 [ 288.834687][ T8337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.837139][ T8335] netlink: 'syz.5.1182': attribute type 1 has an invalid length. [ 288.840602][ T8337] RIP: 0033:0x7facf344e199 [ 288.840627][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.840644][ T8337] RSP: 002b:00007facf16a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.840668][ T8337] RAX: ffffffffffffffda RBX: 00007facf36d5fa0 RCX: 00007facf344e199 [ 288.840683][ T8337] RDX: 000000000000002a RSI: 0000200000000080 RDI: 000000000000000a [ 288.840696][ T8337] RBP: 00007facf16a6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.840709][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.840722][ T8337] R13: 00007facf36d6038 R14: 00007facf36d5fa0 R15: 00007ffe667a3698 [ 288.840757][ T8337] [ 288.946080][ T8335] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.1182'. [ 289.047332][ T8339] netlink: 'syz.0.1184': attribute type 272 has an invalid length. [ 289.113763][ T8339] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1184'. [ 289.379287][ T8356] netlink: 'syz.3.1187': attribute type 21 has an invalid length. [ 289.431214][ T8356] netlink: 'syz.3.1187': attribute type 6 has an invalid length. [ 289.485826][ T8356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1187'. [ 291.732937][ T8372] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 291.749870][ T8372] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1193'. [ 291.798663][ T8376] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1196'. [ 291.956882][ T8375] netlink: 'syz.5.1197': attribute type 10 has an invalid length. [ 291.975775][ T8375] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1197'. [ 292.038961][ T8375] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 292.128734][ T8378] netlink: 'syz.0.1198': attribute type 272 has an invalid length. [ 292.142139][ T8378] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1198'. [ 292.142177][ T8387] netlink: 'syz.3.1200': attribute type 29 has an invalid length. [ 292.142507][ T8387] netlink: 'syz.3.1200': attribute type 29 has an invalid length. [ 292.196104][ T8391] netlink: 'syz.3.1200': attribute type 29 has an invalid length. [ 292.262511][ T8387] netlink: 'syz.3.1200': attribute type 29 has an invalid length. [ 292.346102][ T8398] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1205'. [ 292.523375][ T8396] netlink: 'syz.0.1204': attribute type 1 has an invalid length. [ 292.559385][ T8396] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1204'. [ 292.637041][ T8395] netlink: 'syz.5.1203': attribute type 21 has an invalid length. [ 292.701792][ T8395] netlink: 'syz.5.1203': attribute type 6 has an invalid length. [ 292.739124][ T8395] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1203'. [ 292.794367][ T8411] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1210'. [ 293.055759][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1213'. [ 293.076130][ T8418] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 293.511684][ T8421] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1214'. [ 295.206950][ T8444] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.725852][ T8491] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 296.753982][ T8497] validate_nla: 16 callbacks suppressed [ 296.754019][ T8497] netlink: 'syz.3.1238': attribute type 2 has an invalid length. [ 296.782910][ T8497] __nla_validate_parse: 6 callbacks suppressed [ 296.782952][ T8497] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1238'. [ 296.837324][ T8500] netlink: 'syz.1.1239': attribute type 2 has an invalid length. [ 296.856094][ T8500] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1239'. [ 296.954525][ T8506] netlink: 'syz.3.1241': attribute type 272 has an invalid length. [ 296.975794][ T8506] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1241'. [ 298.954168][ T8530] netlink: 'syz.4.1248': attribute type 10 has an invalid length. [ 298.973733][ T8530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1248'. [ 298.996162][ T8536] netlink: 'syz.5.1251': attribute type 2 has an invalid length. [ 299.009539][ T8536] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1251'. [ 299.033671][ T8539] device syzkaller0 entered promiscuous mode [ 299.118091][ T8541] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1253'. [ 299.618184][ T8543] netlink: 'syz.1.1254': attribute type 272 has an invalid length. [ 299.636730][ T8543] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1254'. [ 299.704176][ T8559] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 301.665565][ T8590] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1267'. [ 302.340046][ T8598] netlink: 'syz.1.1270': attribute type 29 has an invalid length. [ 302.369232][ T8598] netlink: 'syz.1.1270': attribute type 29 has an invalid length. [ 302.440643][ T8598] netlink: 'syz.1.1270': attribute type 29 has an invalid length. [ 302.609840][ T8603] netlink: 'syz.4.1268': attribute type 21 has an invalid length. [ 302.668390][ T8603] netlink: 'syz.4.1268': attribute type 6 has an invalid length. [ 302.694391][ T8603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1268'. [ 303.202354][ T8625] netlink: 'syz.5.1280': attribute type 2 has an invalid length. [ 303.233020][ T8625] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1280'. [ 303.280652][ T8622] netlink: 'syz.1.1276': attribute type 10 has an invalid length. [ 303.700934][ T8644] netlink: 'syz.0.1282': attribute type 21 has an invalid length. [ 303.800112][ T8644] netlink: 'syz.0.1282': attribute type 6 has an invalid length. [ 303.808249][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1282'. [ 304.110848][ T8654] netlink: 'syz.5.1287': attribute type 29 has an invalid length. [ 304.129176][ T8649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1288'. [ 304.445729][ T8658] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1291'. [ 305.518304][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1300'. [ 305.717999][ T8693] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1302'. [ 308.072428][ T8702] validate_nla: 5 callbacks suppressed [ 308.072446][ T8702] netlink: 'syz.3.1307': attribute type 3 has an invalid length. [ 308.086899][ T8702] netlink: 'syz.3.1307': attribute type 1 has an invalid length. [ 308.097070][ T8702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1307'. [ 308.114465][ T8697] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 308.125193][ T8697] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1305'. [ 308.199307][ T8705] netlink: 'syz.5.1303': attribute type 10 has an invalid length. [ 309.456849][ T8727] netlink: 'syz.3.1314': attribute type 272 has an invalid length. [ 309.479044][ T8727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1314'. [ 309.623073][ T8741] netlink: 'syz.3.1319': attribute type 10 has an invalid length. [ 311.939374][ T8741] device veth0_vlan left promiscuous mode [ 312.012781][ T8741] device veth0_vlan entered promiscuous mode [ 312.097096][ T8741] team0: Device veth0_vlan failed to register rx_handler [ 312.167656][ T8748] netlink: 'syz.0.1320': attribute type 29 has an invalid length. [ 312.251585][ T8748] netlink: 'syz.0.1320': attribute type 29 has an invalid length. [ 312.274223][ T8750] netlink: 'syz.0.1320': attribute type 29 has an invalid length. [ 312.491719][ T8768] netlink: 'syz.4.1326': attribute type 10 has an invalid length. [ 312.525239][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1325'. [ 312.555406][ T8759] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 312.756538][ T8774] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1329'. [ 313.796860][ T8801] FAULT_INJECTION: forcing a failure. [ 313.796860][ T8801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.813115][ T8801] CPU: 1 PID: 8801 Comm: syz.4.1339 Not tainted syzkaller #0 [ 313.820638][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.830708][ T8801] Call Trace: [ 313.834083][ T8801] [ 313.837017][ T8801] dump_stack_lvl+0x188/0x250 [ 313.841714][ T8801] ? show_regs_print_info+0x20/0x20 [ 313.846923][ T8801] ? load_image+0x410/0x410 [ 313.851433][ T8801] ? __lock_acquire+0x7d40/0x7d40 [ 313.856486][ T8801] should_fail+0x383/0x4b0 [ 313.860915][ T8801] _copy_from_user+0x2e/0x170 [ 313.865595][ T8801] __copy_msghdr_from_user+0x48a/0x630 [ 313.871062][ T8801] ? verify_lock_unused+0x140/0x140 [ 313.876263][ T8801] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 313.881561][ T8801] ___sys_sendmsg+0x19a/0x2e0 [ 313.886255][ T8801] ? __sys_sendmsg+0x290/0x290 [ 313.891031][ T8801] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 313.896774][ T8801] __se_sys_sendmsg+0x1b7/0x2a0 [ 313.901799][ T8801] ? __x64_sys_sendmsg+0x80/0x80 [ 313.906754][ T8801] ? syscall_enter_from_user_mode+0x2a/0x70 [ 313.912651][ T8801] do_syscall_64+0x4c/0xa0 [ 313.917086][ T8801] ? clear_bhb_loop+0x30/0x80 [ 313.921764][ T8801] ? clear_bhb_loop+0x30/0x80 [ 313.926444][ T8801] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.932340][ T8801] RIP: 0033:0x7f0876fe5199 [ 313.936765][ T8801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.956900][ T8801] RSP: 002b:00007f087523d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.965403][ T8801] RAX: ffffffffffffffda RBX: 00007f087726cfa0 RCX: 00007f0876fe5199 [ 313.973379][ T8801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 313.981349][ T8801] RBP: 00007f087523d090 R08: 0000000000000000 R09: 0000000000000000 [ 313.989320][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.997295][ T8801] R13: 00007f087726d038 R14: 00007f087726cfa0 R15: 00007ffd0ef424c8 [ 314.005373][ T8801] [ 314.577700][ T8812] validate_nla: 2 callbacks suppressed [ 314.577755][ T8812] netlink: 'syz.1.1343': attribute type 272 has an invalid length. [ 314.609167][ T8812] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1343'. [ 315.009303][ T8829] netlink: 'syz.1.1349': attribute type 10 has an invalid length. [ 315.917510][ T8847] netlink: 'syz.3.1351': attribute type 21 has an invalid length. [ 315.944695][ T8847] netlink: 'syz.3.1351': attribute type 6 has an invalid length. [ 315.960387][ T8847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1351'. [ 316.222803][ T8862] netlink: 'syz.3.1359': attribute type 272 has an invalid length. [ 316.237201][ T8862] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1359'. [ 317.215384][ T8881] netlink: 'syz.0.1367': attribute type 8 has an invalid length. [ 317.282109][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.288521][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.793284][ T8896] netlink: 'syz.4.1374': attribute type 272 has an invalid length. [ 317.831266][ T8896] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1374'. [ 319.338679][ T8920] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 319.566263][ T8910] netlink: 'syz.5.1390': attribute type 21 has an invalid length. [ 319.587375][ T8910] netlink: 'syz.5.1390': attribute type 6 has an invalid length. [ 319.608458][ T8910] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1390'. [ 319.745902][ T8935] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 319.787773][ T8939] FAULT_INJECTION: forcing a failure. [ 319.787773][ T8939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.861987][ T8940] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 319.870579][ T8939] CPU: 0 PID: 8939 Comm: syz.1.1391 Not tainted syzkaller #0 [ 319.878090][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 319.888363][ T8939] Call Trace: [ 319.891713][ T8939] [ 319.894691][ T8939] dump_stack_lvl+0x188/0x250 [ 319.899591][ T8939] ? show_regs_print_info+0x20/0x20 [ 319.904829][ T8939] ? load_image+0x410/0x410 [ 319.909589][ T8939] ? __lock_acquire+0x7d40/0x7d40 [ 319.914842][ T8939] should_fail+0x383/0x4b0 [ 319.919427][ T8939] _copy_from_user+0x2e/0x170 [ 319.924153][ T8939] vmemdup_user+0xa4/0x170 [ 319.928609][ T8939] map_lookup_elem+0x2c4/0x660 [ 319.933410][ T8939] ? bpf_lsm_bpf+0x5/0x10 [ 319.937870][ T8939] __sys_bpf+0x4c0/0x6f0 [ 319.942414][ T8939] ? bpf_link_show_fdinfo+0x380/0x380 [ 319.947982][ T8939] __x64_sys_bpf+0x78/0x90 [ 319.952458][ T8939] do_syscall_64+0x4c/0xa0 [ 319.956995][ T8939] ? clear_bhb_loop+0x30/0x80 [ 319.961702][ T8939] ? clear_bhb_loop+0x30/0x80 [ 319.966441][ T8939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.972563][ T8939] RIP: 0033:0x7fb00e78a199 [ 319.977031][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.996801][ T8939] RSP: 002b:00007fb00c9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.005270][ T8939] RAX: ffffffffffffffda RBX: 00007fb00ea11fa0 RCX: 00007fb00e78a199 [ 320.013281][ T8939] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000001 [ 320.021284][ T8939] RBP: 00007fb00c9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 320.029297][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.037316][ T8939] R13: 00007fb00ea12038 R14: 00007fb00ea11fa0 R15: 00007fffd9caecc8 [ 320.045355][ T8939] [ 321.061154][ T8962] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1397'. [ 321.608519][ T8985] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 322.479493][ T9006] netlink: 'syz.5.1409': attribute type 10 has an invalid length. [ 322.754912][ T9008] netlink: 'syz.3.1415': attribute type 272 has an invalid length. [ 322.770785][ T9008] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1415'. [ 322.878829][ T9022] netlink: 'syz.0.1418': attribute type 21 has an invalid length. [ 322.927823][ T9022] netlink: 'syz.0.1418': attribute type 6 has an invalid length. [ 322.966550][ T9022] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1418'. [ 323.125997][ T9027] netlink: 'syz.3.1421': attribute type 10 has an invalid length. [ 323.134438][ T9027] device veth0_vlan left promiscuous mode [ 323.145696][ T9027] device veth0_vlan entered promiscuous mode [ 323.154561][ T9027] team0: Device veth0_vlan failed to register rx_handler [ 323.846829][ T9034] netlink: 'syz.0.1423': attribute type 10 has an invalid length. [ 324.393636][ T9056] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1432'. [ 324.537795][ T9053] device syzkaller0 entered promiscuous mode [ 324.777482][ T9063] validate_nla: 2 callbacks suppressed [ 324.777503][ T9063] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 324.803568][ T9063] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 324.835762][ T9064] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 324.967956][ T9062] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 325.114436][ T9075] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 325.122893][ T9075] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1437'. [ 326.006327][ T9111] netlink: 'syz.4.1449': attribute type 10 has an invalid length. [ 326.942442][ T9133] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 326.987911][ T9133] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1458'. [ 327.042143][ T9140] netlink: 209608 bytes leftover after parsing attributes in process `syz.5.1461'. [ 327.874293][ T9133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.902839][ T9151] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 327.930328][ T9133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.960086][ T9151] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1464'. [ 328.331024][ T9133] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 328.367342][ T9133] batman_adv: batadv0: Removing interface: virt_wifi0 [ 328.530939][ T9164] FAULT_INJECTION: forcing a failure. [ 328.530939][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.558708][ T9163] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 328.609035][ T9164] CPU: 0 PID: 9164 Comm: syz.5.1468 Not tainted syzkaller #0 [ 328.616747][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 328.626948][ T9164] Call Trace: [ 328.630305][ T9164] [ 328.633272][ T9164] dump_stack_lvl+0x188/0x250 [ 328.637991][ T9164] ? show_regs_print_info+0x20/0x20 [ 328.643230][ T9164] ? load_image+0x410/0x410 [ 328.647782][ T9164] ? __lock_acquire+0x7d40/0x7d40 [ 328.652866][ T9164] should_fail+0x383/0x4b0 [ 328.657335][ T9164] _copy_from_user+0x2e/0x170 [ 328.662040][ T9164] __copy_msghdr_from_user+0xc9/0x630 [ 328.667448][ T9164] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 328.673209][ T9164] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 328.678563][ T9164] ___sys_sendmsg+0x19a/0x2e0 [ 328.683287][ T9164] ? __sys_sendmsg+0x290/0x290 [ 328.688105][ T9164] ? trace_event_raw_event_lock+0x250/0x250 [ 328.694079][ T9164] __se_sys_sendmsg+0x1b7/0x2a0 [ 328.698975][ T9164] ? __x64_sys_sendmsg+0x80/0x80 [ 328.703947][ T9164] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 328.709997][ T9164] ? lockdep_hardirqs_on+0x94/0x140 [ 328.715242][ T9164] do_syscall_64+0x4c/0xa0 [ 328.719692][ T9164] ? clear_bhb_loop+0x30/0x80 [ 328.724402][ T9164] ? clear_bhb_loop+0x30/0x80 [ 328.729115][ T9164] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 328.735037][ T9164] RIP: 0033:0x7f8908996199 [ 328.739481][ T9164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.759296][ T9164] RSP: 002b:00007f8906bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.767765][ T9164] RAX: ffffffffffffffda RBX: 00007f8908c1dfa0 RCX: 00007f8908996199 [ 328.775784][ T9164] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 328.783788][ T9164] RBP: 00007f8906bee090 R08: 0000000000000000 R09: 0000000000000000 [ 328.791801][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.799814][ T9164] R13: 00007f8908c1e038 R14: 00007f8908c1dfa0 R15: 00007ffc6e4a8d68 [ 328.807865][ T9164] [ 328.976222][ T9181] netlink: 'syz.5.1475': attribute type 21 has an invalid length. [ 329.181816][ T9184] device syzkaller0 entered promiscuous mode [ 329.230006][ T9186] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1476'. [ 329.361723][ T9200] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1479'. [ 330.456431][ T9221] validate_nla: 1 callbacks suppressed [ 330.456471][ T9221] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 330.985390][ T9252] netlink: 'syz.3.1495': attribute type 1 has an invalid length. [ 331.009994][ T9252] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1495'. [ 331.542357][ T9288] netlink: 'syz.1.1504': attribute type 9 has an invalid length. [ 331.551310][ T9288] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1504'. [ 331.629318][ T9291] netlink: 'syz.5.1505': attribute type 10 has an invalid length. [ 332.067212][ T9308] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 332.119937][ T9308] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1510'. [ 332.272085][ T9323] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1517'. [ 332.702532][ T9337] netlink: 'syz.1.1521': attribute type 21 has an invalid length. [ 332.764215][ T9337] netlink: 'syz.1.1521': attribute type 6 has an invalid length. [ 332.816758][ T9337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1521'. [ 333.535449][ T9348] FAULT_INJECTION: forcing a failure. [ 333.535449][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 333.605256][ T9348] CPU: 1 PID: 9348 Comm: syz.3.1523 Not tainted syzkaller #0 [ 333.612744][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 333.622844][ T9348] Call Trace: [ 333.626169][ T9348] [ 333.629314][ T9348] dump_stack_lvl+0x188/0x250 [ 333.634055][ T9348] ? show_regs_print_info+0x20/0x20 [ 333.639333][ T9348] ? load_image+0x410/0x410 [ 333.643901][ T9348] ? __might_sleep+0xf0/0xf0 [ 333.648569][ T9348] ? __lock_acquire+0x7d40/0x7d40 [ 333.653661][ T9348] should_fail+0x383/0x4b0 [ 333.658149][ T9348] should_failslab+0x5/0x20 [ 333.662707][ T9348] slab_pre_alloc_hook+0x51/0xc0 [ 333.667705][ T9348] ? skb_clone+0x1bd/0x350 [ 333.672216][ T9348] kmem_cache_alloc+0x3d/0x280 [ 333.677055][ T9348] skb_clone+0x1bd/0x350 [ 333.681346][ T9348] ? pfkey_broadcast_one+0x7d/0x340 [ 333.686614][ T9348] pfkey_broadcast_one+0x9b/0x340 [ 333.691696][ T9348] ? pfkey_broadcast+0x362/0x3a0 [ 333.696695][ T9348] pfkey_broadcast+0x36f/0x3a0 [ 333.701531][ T9348] pfkey_sendmsg+0xe8a/0x1130 [ 333.706326][ T9348] ? pfkey_release+0x340/0x340 [ 333.711226][ T9348] ? aa_sock_msg_perm+0x94/0x150 [ 333.716229][ T9348] ? apparmor_socket_sendmsg+0x88/0x230 [ 333.721939][ T9348] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 333.727275][ T9348] ? security_socket_sendmsg+0x7c/0xa0 [ 333.732775][ T9348] ? pfkey_release+0x340/0x340 [ 333.737599][ T9348] ____sys_sendmsg+0x5be/0x8f0 [ 333.742462][ T9348] ? __sys_sendmsg_sock+0x30/0x30 [ 333.747582][ T9348] ? import_iovec+0x6f/0xa0 [ 333.752164][ T9348] ___sys_sendmsg+0x236/0x2e0 [ 333.756939][ T9348] ? __sys_sendmsg+0x290/0x290 [ 333.761811][ T9348] ? trace_event_raw_event_lock+0x250/0x250 [ 333.767963][ T9348] __se_sys_sendmsg+0x1b7/0x2a0 [ 333.772876][ T9348] ? __x64_sys_sendmsg+0x80/0x80 [ 333.778003][ T9348] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 333.784184][ T9348] ? lockdep_hardirqs_on+0x94/0x140 [ 333.789577][ T9348] do_syscall_64+0x4c/0xa0 [ 333.794033][ T9348] ? clear_bhb_loop+0x30/0x80 [ 333.798763][ T9348] ? clear_bhb_loop+0x30/0x80 [ 333.803521][ T9348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.809505][ T9348] RIP: 0033:0x7facf344e199 [ 333.814062][ T9348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.833985][ T9348] RSP: 002b:00007facf16a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.842460][ T9348] RAX: ffffffffffffffda RBX: 00007facf36d5fa0 RCX: 00007facf344e199 [ 333.850475][ T9348] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 333.858487][ T9348] RBP: 00007facf16a6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.866494][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.874506][ T9348] R13: 00007facf36d6038 R14: 00007facf36d5fa0 R15: 00007ffe667a3698 [ 333.882602][ T9348] [ 334.157356][ T9352] netlink: 'syz.0.1524': attribute type 10 has an invalid length. [ 335.610845][ T9364] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 335.618649][ T9364] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1528'. [ 335.924188][ T9358] netlink: 'syz.1.1526': attribute type 272 has an invalid length. [ 335.935257][ T9358] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1526'. [ 335.993250][ T9372] FAULT_INJECTION: forcing a failure. [ 335.993250][ T9372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.044026][ T9372] CPU: 1 PID: 9372 Comm: syz.3.1531 Not tainted syzkaller #0 [ 336.051462][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.061632][ T9372] Call Trace: [ 336.064935][ T9372] [ 336.067891][ T9372] dump_stack_lvl+0x188/0x250 [ 336.072647][ T9372] ? show_regs_print_info+0x20/0x20 [ 336.077871][ T9372] ? load_image+0x410/0x410 [ 336.082414][ T9372] should_fail+0x383/0x4b0 [ 336.086864][ T9372] strncpy_from_user+0x32/0x350 [ 336.091749][ T9372] strncpy_from_user_nofault+0x6d/0x140 [ 336.097329][ T9372] bpf_probe_read_user_str+0x26/0x70 [ 336.102642][ T9372] bpf_prog_06f22831d6c68d16+0x3d/0x62c [ 336.108325][ T9372] bpf_test_run+0x36b/0x800 [ 336.112889][ T9372] ? convert___skb_to_skb+0x4c0/0x4c0 [ 336.118295][ T9372] ? _copy_from_user+0x111/0x170 [ 336.123257][ T9372] ? bpf_test_init+0x171/0x1b0 [ 336.128058][ T9372] bpf_prog_test_run_xdp+0x3e8/0x910 [ 336.133391][ T9372] ? dev_put+0x70/0x70 [ 336.137508][ T9372] ? dev_put+0x70/0x70 [ 336.141609][ T9372] bpf_prog_test_run+0x31c/0x390 [ 336.146586][ T9372] __sys_bpf+0x5a5/0x6f0 [ 336.150903][ T9372] ? bpf_link_show_fdinfo+0x380/0x380 [ 336.156308][ T9372] ? rcu_nmi_exit+0x6f/0xf0 [ 336.160866][ T9372] __x64_sys_bpf+0x78/0x90 [ 336.165318][ T9372] do_syscall_64+0x4c/0xa0 [ 336.169754][ T9372] ? clear_bhb_loop+0x30/0x80 [ 336.174470][ T9372] ? clear_bhb_loop+0x30/0x80 [ 336.179175][ T9372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.185206][ T9372] RIP: 0033:0x7facf344e199 [ 336.189654][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.209545][ T9372] RSP: 002b:00007facf16a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.217994][ T9372] RAX: ffffffffffffffda RBX: 00007facf36d5fa0 RCX: 00007facf344e199 [ 336.226002][ T9372] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 336.234008][ T9372] RBP: 00007facf16a6090 R08: 0000000000000000 R09: 0000000000000000 [ 336.242097][ T9372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.250097][ T9372] R13: 00007facf36d6038 R14: 00007facf36d5fa0 R15: 00007ffe667a3698 [ 336.258117][ T9372] [ 336.684089][ T9391] device syzkaller0 entered promiscuous mode [ 337.261484][ T9395] netlink: 'syz.5.1537': attribute type 10 has an invalid length. [ 337.615287][ T9415] netlink: 'syz.0.1543': attribute type 272 has an invalid length. [ 337.716191][ T9415] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1543'. [ 337.868087][ T9418] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 337.881367][ T9418] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1546'. [ 338.386441][ T9438] netlink: 'syz.3.1550': attribute type 10 has an invalid length. [ 338.951034][ T9451] FAULT_INJECTION: forcing a failure. [ 338.951034][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.966032][ T9451] CPU: 1 PID: 9451 Comm: syz.1.1553 Not tainted syzkaller #0 [ 338.973453][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 338.983533][ T9451] Call Trace: [ 338.986837][ T9451] [ 338.989798][ T9451] dump_stack_lvl+0x188/0x250 [ 338.994519][ T9451] ? show_regs_print_info+0x20/0x20 [ 338.999746][ T9451] ? load_image+0x410/0x410 [ 339.004284][ T9451] ? __lock_acquire+0x7d40/0x7d40 [ 339.009342][ T9451] should_fail+0x383/0x4b0 [ 339.014034][ T9451] _copy_from_user+0x2e/0x170 [ 339.018750][ T9451] __sys_bpf+0x26d/0x6f0 [ 339.023033][ T9451] ? bpf_link_show_fdinfo+0x380/0x380 [ 339.028464][ T9451] __x64_sys_bpf+0x78/0x90 [ 339.032901][ T9451] do_syscall_64+0x4c/0xa0 [ 339.037347][ T9451] ? clear_bhb_loop+0x30/0x80 [ 339.042082][ T9451] ? clear_bhb_loop+0x30/0x80 [ 339.046803][ T9451] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 339.052736][ T9451] RIP: 0033:0x7fb00e78a199 [ 339.057167][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.077033][ T9451] RSP: 002b:00007fb00c9e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.085444][ T9451] RAX: ffffffffffffffda RBX: 00007fb00ea11fa0 RCX: 00007fb00e78a199 [ 339.093413][ T9451] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000000a [ 339.101382][ T9451] RBP: 00007fb00c9e2090 R08: 0000000000000000 R09: 0000000000000000 [ 339.109373][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.117342][ T9451] R13: 00007fb00ea12038 R14: 00007fb00ea11fa0 R15: 00007fffd9caecc8 [ 339.125342][ T9451] [ 339.156141][ T9455] netlink: 'syz.4.1554': attribute type 10 has an invalid length. [ 339.354707][ T9465] netlink: 'syz.1.1560': attribute type 3 has an invalid length. [ 339.580391][ T9469] netlink: 'syz.1.1560': attribute type 39 has an invalid length. [ 339.636615][ T9464] netlink: 'syz.3.1558': attribute type 272 has an invalid length. [ 339.671553][ T9464] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1558'. [ 340.556457][ T9491] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1567'. [ 341.144444][ T9504] netlink: 'syz.3.1569': attribute type 4 has an invalid length. [ 341.204210][ T9504] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.1569'. [ 341.243472][ T9507] netlink: 'syz.3.1569': attribute type 4 has an invalid length. [ 341.363332][ T9507] netlink: 164548 bytes leftover after parsing attributes in process `syz.3.1569'. [ 341.398171][ T9525] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 342.286119][ T9533] netlink: 'syz.4.1575': attribute type 272 has an invalid length. [ 342.327293][ T9533] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1575'. [ 342.431603][ T9553] netlink: 'syz.0.1577': attribute type 21 has an invalid length. [ 342.490408][ T9553] netlink: 'syz.0.1577': attribute type 6 has an invalid length. [ 342.523710][ T9553] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1577'. [ 343.357726][ T9561] FAULT_INJECTION: forcing a failure. [ 343.357726][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.399204][ T9561] CPU: 1 PID: 9561 Comm: syz.5.1582 Not tainted syzkaller #0 [ 343.406641][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.416731][ T9561] Call Trace: [ 343.420039][ T9561] [ 343.423000][ T9561] dump_stack_lvl+0x188/0x250 [ 343.427717][ T9561] ? show_regs_print_info+0x20/0x20 [ 343.432946][ T9561] ? load_image+0x410/0x410 [ 343.437487][ T9561] ? __lock_acquire+0x7d40/0x7d40 [ 343.442556][ T9561] should_fail+0x383/0x4b0 [ 343.447009][ T9561] _copy_from_user+0x2e/0x170 [ 343.451720][ T9561] __sys_bpf+0x26d/0x6f0 [ 343.456000][ T9561] ? bpf_link_show_fdinfo+0x380/0x380 [ 343.461434][ T9561] __x64_sys_bpf+0x78/0x90 [ 343.465883][ T9561] do_syscall_64+0x4c/0xa0 [ 343.470332][ T9561] ? clear_bhb_loop+0x30/0x80 [ 343.475055][ T9561] ? clear_bhb_loop+0x30/0x80 [ 343.479774][ T9561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.485702][ T9561] RIP: 0033:0x7f8908996199 [ 343.490240][ T9561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.509894][ T9561] RSP: 002b:00007f8906bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.518621][ T9561] RAX: ffffffffffffffda RBX: 00007f8908c1dfa0 RCX: 00007f8908996199 [ 343.526628][ T9561] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 000000000000000a [ 343.534631][ T9561] RBP: 00007f8906bee090 R08: 0000000000000000 R09: 0000000000000000 [ 343.542753][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.550766][ T9561] R13: 00007f8908c1e038 R14: 00007f8908c1dfa0 R15: 00007ffc6e4a8d68 [ 343.558883][ T9561] [ 343.871678][ T9584] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 343.959953][ T9587] netlink: 'syz.4.1589': attribute type 3 has an invalid length. [ 343.968457][ T9587] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1589'. [ 344.384799][ T9590] netlink: 'syz.0.1590': attribute type 272 has an invalid length. [ 344.432734][ T9590] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1590'. [ 344.548240][ T9592] netlink: 'syz.5.1591': attribute type 272 has an invalid length. [ 344.563558][ T9592] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1591'. [ 344.880313][ T9606] netlink: 'syz.5.1595': attribute type 1 has an invalid length. [ 344.929656][ T9606] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.1595'. [ 345.491341][ T9611] netlink: 'syz.4.1597': attribute type 21 has an invalid length. [ 345.559013][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1597'. [ 346.318530][ T9623] validate_nla: 1 callbacks suppressed [ 346.318550][ T9623] netlink: 'syz.5.1602': attribute type 3 has an invalid length. [ 346.457114][ T9623] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1602'. [ 346.459822][ T9632] netlink: 'syz.5.1602': attribute type 39 has an invalid length. [ 346.672912][ T9632] device macvlan0 entered promiscuous mode [ 346.710633][ T9633] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.793678][ T9624] netlink: 'syz.0.1611': attribute type 21 has an invalid length. [ 346.947392][ T9624] netlink: 'syz.0.1611': attribute type 6 has an invalid length. [ 346.993796][ T9624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'. [ 347.141793][ T9638] netlink: 'syz.1.1606': attribute type 272 has an invalid length. [ 347.154606][ T9638] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1606'. [ 347.710311][ T9659] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 347.718778][ T9659] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1613'. [ 348.299021][ T9678] netlink: 'syz.0.1618': attribute type 10 has an invalid length. [ 349.209293][ T9694] netlink: 'syz.3.1626': attribute type 1 has an invalid length. [ 349.322790][ T9694] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1626'. [ 349.402581][ T9687] netlink: 'syz.1.1622': attribute type 21 has an invalid length. [ 349.485353][ T9687] netlink: 'syz.1.1622': attribute type 6 has an invalid length. [ 349.534988][ T9705] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1630'. [ 349.545521][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1622'. [ 349.735515][ T9713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1631'. [ 350.837749][ T9736] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1641'. [ 351.720406][ T9752] validate_nla: 2 callbacks suppressed [ 351.720424][ T9752] netlink: 'syz.3.1642': attribute type 21 has an invalid length. [ 351.852363][ T9752] netlink: 'syz.3.1642': attribute type 6 has an invalid length. [ 351.891292][ T9752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1642'. [ 351.912123][ T9756] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1648'. [ 352.034873][ T9764] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1648'. [ 352.139486][ T9770] FAULT_INJECTION: forcing a failure. [ 352.139486][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 352.152849][ T9770] CPU: 0 PID: 9770 Comm: syz.1.1649 Not tainted syzkaller #0 [ 352.160279][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 352.170464][ T9770] Call Trace: [ 352.173760][ T9770] [ 352.176697][ T9770] dump_stack_lvl+0x188/0x250 [ 352.181498][ T9770] ? show_regs_print_info+0x20/0x20 [ 352.186724][ T9770] ? load_image+0x410/0x410 [ 352.191236][ T9770] ? __lock_acquire+0x7d40/0x7d40 [ 352.196343][ T9770] should_fail+0x383/0x4b0 [ 352.200855][ T9770] should_failslab+0x5/0x20 [ 352.205406][ T9770] slab_pre_alloc_hook+0x51/0xc0 [ 352.210390][ T9770] ? security_inode_alloc+0x30/0x110 [ 352.215710][ T9770] kmem_cache_alloc+0x3d/0x280 [ 352.220482][ T9770] security_inode_alloc+0x30/0x110 [ 352.225617][ T9770] inode_init_always+0x8e5/0xc90 [ 352.230584][ T9770] new_inode_pseudo+0x8e/0x210 [ 352.235411][ T9770] __sock_create+0x128/0x910 [ 352.240066][ T9770] __sys_socketpair+0x1bd/0x540 [ 352.244930][ T9770] __x64_sys_socketpair+0x97/0xb0 [ 352.250049][ T9770] do_syscall_64+0x4c/0xa0 [ 352.254495][ T9770] ? clear_bhb_loop+0x30/0x80 [ 352.259235][ T9770] ? clear_bhb_loop+0x30/0x80 [ 352.264012][ T9770] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.269908][ T9770] RIP: 0033:0x7fb00e78a199 [ 352.274418][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.294202][ T9770] RSP: 002b:00007fb00c9c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 352.302668][ T9770] RAX: ffffffffffffffda RBX: 00007fb00ea12090 RCX: 00007fb00e78a199 [ 352.310662][ T9770] RDX: 000000002be9a820 RSI: 0000000000080000 RDI: 0000000000000006 [ 352.318638][ T9770] RBP: 00007fb00c9c1090 R08: 0000000000000000 R09: 0000000000000000 [ 352.326618][ T9770] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 352.334591][ T9770] R13: 00007fb00ea12128 R14: 00007fb00ea12090 R15: 00007fffd9caecc8 [ 352.342590][ T9770] [ 352.358730][ T9770] socket: no more sockets [ 352.733683][ T9773] netlink: 'syz.0.1661': attribute type 21 has an invalid length. [ 352.767754][ T9773] netlink: 'syz.0.1661': attribute type 6 has an invalid length. [ 352.808475][ T9785] netlink: 'syz.1.1656': attribute type 272 has an invalid length. [ 352.823143][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1661'. [ 352.841211][ T9785] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1656'. [ 353.604754][ T9800] netlink: 'syz.0.1662': attribute type 6 has an invalid length. [ 354.669031][ T9831] netlink: 'syz.5.1673': attribute type 272 has an invalid length. [ 354.696844][ T9824] netlink: 'syz.1.1672': attribute type 3 has an invalid length. [ 354.735331][ T9824] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1672'. [ 354.751950][ T9828] netlink: 'syz.3.1671': attribute type 21 has an invalid length. [ 354.766041][ T9831] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1673'. [ 354.789897][ T9828] netlink: 'syz.3.1671': attribute type 6 has an invalid length. [ 354.810573][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1671'. [ 356.231567][ T9878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1688'. [ 358.369198][ T9904] netlink: 207976 bytes leftover after parsing attributes in process `syz.4.1698'. [ 358.482253][ T9908] validate_nla: 2 callbacks suppressed [ 358.482298][ T9908] netlink: 'syz.5.1700': attribute type 1 has an invalid length. [ 358.522732][ T9908] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.1700'. [ 358.562494][ T9916] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1700'. [ 359.641865][ T9926] netlink: 'syz.0.1705': attribute type 21 has an invalid length. [ 359.653800][ T9926] netlink: 'syz.0.1705': attribute type 6 has an invalid length. [ 359.680101][ T9926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1705'. [ 359.726697][ T9930] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 359.737982][ T9930] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1708'. [ 359.750519][ T9930] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1708'. [ 359.811188][ T9935] netlink: 'syz.1.1710': attribute type 4 has an invalid length. [ 359.863079][ T9935] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1710'. [ 361.129152][ T9963] netlink: 'syz.1.1721': attribute type 21 has an invalid length. [ 361.137914][ T9963] netlink: 'syz.1.1721': attribute type 6 has an invalid length. [ 361.147167][ T9963] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1721'. [ 361.260215][ T9965] netlink: 'syz.5.1722': attribute type 3 has an invalid length. [ 361.268951][ T9965] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1722'. [ 361.484466][ T9982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 361.882384][ T9991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 361.973469][ T9991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 362.022748][ T9998] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 362.034702][ T9991] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1731'. [ 362.054709][ T9991] netlink: 'syz.5.1731': attribute type 21 has an invalid length. [ 362.063588][ T9991] netlink: 'syz.5.1731': attribute type 6 has an invalid length. [ 362.072191][ T9991] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1731'. [ 363.217552][T10006] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1736'. [ 363.750909][T10027] validate_nla: 2 callbacks suppressed [ 363.750931][T10027] netlink: 'syz.3.1745': attribute type 21 has an invalid length. [ 363.764534][ C1] [ 363.764548][ C1] ================================ [ 363.764552][ C1] WARNING: inconsistent lock state [ 363.764557][ C1] syzkaller #0 Not tainted [ 363.764565][ C1] -------------------------------- [ 363.764569][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 363.764576][ C1] syz.3.1745/10028 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 363.764605][ C1] ffff8880289598f8 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b0/0x520 [ 363.764712][ C1] {INITIAL USE} state was registered at: [ 363.764718][ C1] lock_acquire+0x19f/0x400 [ 363.764734][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 363.764750][ C1] htab_map_delete_elem+0x1b0/0x520 [ 363.764761][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x148 [ 363.764774][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 363.764815][ C1] __perf_event_overflow+0x35f/0x550 [ 363.764828][ C1] perf_bp_event+0x276/0x320 [ 363.764840][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 363.764877][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 363.764926][ C1] notify_die+0x141/0x1a0 [ 363.764938][ C1] notify_debug+0x20/0x30 [ 363.764976][ C1] noist_exc_debug+0x73/0x120 [ 363.765012][ C1] asm_exc_debug+0x2f/0x40 [ 363.765025][ C1] irq event stamp: 1902 [ 363.765031][ C1] hardirqs last enabled at (1901): [] do_syscall_64+0x58/0xa0 [ 363.765050][ C1] hardirqs last disabled at (1902): [] noist_exc_debug+0x49/0x120 [ 363.765067][ C1] softirqs last enabled at (1870): [] __irq_exit_rcu+0x13b/0x230 [ 363.765103][ C1] softirqs last disabled at (1777): [] __irq_exit_rcu+0x13b/0x230 [ 363.765120][ C1] [ 363.765120][ C1] other info that might help us debug this: [ 363.765124][ C1] Possible unsafe locking scenario: [ 363.765124][ C1] [ 363.765128][ C1] CPU0 [ 363.765131][ C1] ---- [ 363.765134][ C1] lock(&htab->lockdep_key); [ 363.765144][ C1] [ 363.765147][ C1] lock(&htab->lockdep_key); [ 363.765156][ C1] [ 363.765156][ C1] *** DEADLOCK *** [ 363.765156][ C1] [ 363.765160][ C1] 1 lock held by syz.3.1745/10028: [ 363.765169][ C1] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 363.765205][ C1] [ 363.765205][ C1] stack backtrace: [ 363.765209][ C1] CPU: 1 PID: 10028 Comm: syz.3.1745 Not tainted syzkaller #0 [ 363.765224][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 363.765232][ C1] Call Trace: [ 363.765237][ C1] <#DB> [ 363.765243][ C1] dump_stack_lvl+0x188/0x250 [ 363.765261][ C1] ? show_regs_print_info+0x20/0x20 [ 363.765279][ C1] ? print_usage_bug+0x43d/0x6a0 [ 363.765300][ C1] ? verify_lock_unused+0x15/0x140 [ 363.765318][ C1] lock_acquire+0x2c3/0x400 [ 363.765334][ C1] ? read_lock_is_recursive+0x10/0x10 [ 363.765351][ C1] ? htab_map_delete_elem+0x1b0/0x520 [ 363.765365][ C1] ? read_lock_is_recursive+0x10/0x10 [ 363.765381][ C1] ? look_up_lock_class+0x71/0x110 [ 363.765398][ C1] ? verify_lock_unused+0x15/0x140 [ 363.765416][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 363.765431][ C1] ? htab_map_delete_elem+0x1b0/0x520 [ 363.765444][ C1] ? _raw_spin_lock+0x40/0x40 [ 363.765459][ C1] ? htab_map_hash+0x329/0x6d0 [ 363.765474][ C1] htab_map_delete_elem+0x1b0/0x520 [ 363.765492][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x148 [ 363.765507][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 363.765523][ C1] ? perf_get_page_size+0x430/0x430 [ 363.765539][ C1] ? perf_event_switch_output+0x730/0x730 [ 363.765559][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 363.765575][ C1] __perf_event_overflow+0x35f/0x550 [ 363.765600][ C1] perf_bp_event+0x276/0x320 [ 363.765617][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 363.765646][ C1] ? rcu_lock_acquire+0x9/0x30 [ 363.765661][ C1] ? read_lock_is_recursive+0x10/0x10 [ 363.765681][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 363.765698][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 363.765716][ C1] notify_die+0x141/0x1a0 [ 363.765732][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 363.765751][ C1] ? exc_debug+0x6e/0x130 [ 363.765765][ C1] ? trace_hardirqs_off_finish+0x24/0x1f0 [ 363.765804][ C1] notify_debug+0x20/0x30 [ 363.765818][ C1] exc_debug+0xcf/0x130 [ 363.765834][ C1] asm_exc_debug+0x1a/0x40 [ 363.765849][ C1] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 363.765872][ C1] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 363.765885][ C1] RSP: 0000:ffffc90002faf6a0 EFLAGS: 00040806 [ 363.765897][ C1] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88802b2b3b80 [ 363.765909][ C1] RDX: 000074656e2f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 363.765919][ C1] RBP: 0000000000000000 R08: ffffffff8e6b282f R09: 1ffffffff1cd6505 [ 363.765930][ C1] R10: dffffc0000000000 R11: fffffbfff1cd6506 R12: ffff88802b2b5328 [ 363.765940][ C1] R13: 00000000ffffffff R14: 0000200000000300 R15: 0000000000000007 [ 363.765959][ C1] [ 363.765964][ C1] [ 363.765968][ C1] perf_callchain_user+0x423/0xf80 [ 363.765996][ C1] ? get_callchain_entry+0x181/0x3b0 [ 363.766012][ C1] get_perf_callchain+0x33d/0x460 [ 363.766027][ C1] ? put_callchain_entry+0xb0/0xb0 [ 363.766044][ C1] ? __perf_event_header__init_id+0x3ea/0x4f0 [ 363.766062][ C1] perf_prepare_sample+0x352/0x1cb0 [ 363.766080][ C1] ? perf_callchain+0x190/0x190 [ 363.766095][ C1] ? perf_event_output_forward+0x261/0x2e0 [ 363.766112][ C1] perf_event_output_forward+0x185/0x2e0 [ 363.766128][ C1] ? perf_get_page_size+0x430/0x430 [ 363.766149][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 363.766166][ C1] __perf_event_overflow+0x35f/0x550 [ 363.766183][ C1] perf_swevent_event+0x4b8/0x540 [ 363.766201][ C1] perf_tp_event+0x324/0xbe0 [ 363.766217][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 363.766250][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 363.766271][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 363.766288][ C1] perf_trace_preemptirq_template+0x2aa/0x360 [ 363.766305][ C1] ? irqentry_exit_to_user_mode+0xa/0x30 [ 363.766319][ C1] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 363.766336][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 363.766354][ C1] ? irqentry_exit_to_user_mode+0xa/0x30 [ 363.766369][ C1] trace_hardirqs_on_prepare+0x193/0x1f0 [ 363.766385][ C1] irqentry_exit_to_user_mode+0xa/0x30 [ 363.766397][ C1] noist_exc_debug+0xee/0x120 [ 363.766412][ C1] ? clear_bhb_loop+0x30/0x80 [ 363.766428][ C1] asm_exc_debug+0x2f/0x40 [ 363.766442][ C1] RIP: 0033:0x7facf342cf3d [ 363.766454][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 363.766466][ C1] RSP: 002b:00007facf16848a8 EFLAGS: 00000283 [ 363.766478][ C1] RAX: 0000000000000300 RBX: 00007facf1684de0 RCX: 0000000000000000 [ 363.766488][ C1] RDX: 0000200000000300 RSI: 00007facf3510180 RDI: 0000200000000300 [ 363.766498][ C1] RBP: 0000200000000300 R08: 00007facf1685010 R09: 00000000ffffffff [ 363.766507][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 363.766516][ C1] R13: 0000000000000073 R14: 00007facf34e4c02 R15: 00007facf1684ea0 [ 363.766534][ C1] [ 364.484073][T10027] netlink: 'syz.3.1745': attribute type 11 has an invalid length. [ 364.492097][T10027] netlink: 'syz.3.1745': attribute type 12 has an invalid length. [ 364.500179][T10027] netlink: 'syz.3.1745': attribute type 13 has an invalid length. [ 364.508205][T10027] netlink: 'syz.3.1745': attribute type 14 has an invalid length. [ 364.520134][T10027] netlink: 'syz.3.1745': attribute type 15 has an invalid length. [ 364.528013][T10027] netlink: 'syz.3.1745': attribute type 16 has an invalid length.