last executing test programs: 3m3.154339139s ago: executing program 0 (id=1410): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r2, &(0x7f0000000000)={0x0, 0xf10f, &(0x7f0000001140)=[{&(0x7f0000001ac0)=""/4081, 0xff1}], 0x1}, 0x0) 3m2.988802042s ago: executing program 0 (id=1411): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x105}, 0x80, 0x0}, 0x24004059) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/109, 0x6d}, 0x40000060) close(r0) 3m2.862044683s ago: executing program 0 (id=1415): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x100402, 0x7, 0x8, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa6b, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a00000000180001", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 3m2.016985491s ago: executing program 0 (id=1428): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 3m1.724634974s ago: executing program 0 (id=1429): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x12}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x2afe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3m1.5284419s ago: executing program 1 (id=1431): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x108418, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95e24fc60040068000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3m1.191392197s ago: executing program 0 (id=1432): close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x186c, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x400008d1, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0xd8, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x7, 0x1}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0xe032, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0xf7, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 3m1.136590471s ago: executing program 1 (id=1433): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000600)=@tipc, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/228, 0xfffffe81}, {&(0x7f0000000940)=""/261, 0x105}, {&(0x7f0000000500)=""/226, 0xfffffffffffffd72}, {&(0x7f0000000a80)=""/165, 0xa5}], 0x4, &(0x7f00000006c0)=""/228, 0xe4}, 0x40012123) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000900000002000000090000004200000020b34a3f901e96c5f6e4b7a3c7e5ea381417b510d2ba4a49c28c61cad0d3300cb9ce75ff264421055f8fbcc1c4ba0f59e3a582f470fed782eac5dda7f3067ab9d4f16669fde3e33c5379b94bb17ec8b2aa73", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x39, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0xfffffffd}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) write$cgroup_type(r1, &(0x7f00000002c0), 0x9) r3 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='\x00') perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000000000006910a300000000248bcc5def15cabfc51b98419a985b0004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3m0.920962319s ago: executing program 4 (id=1435): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7400100006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x20000040) 2m59.973140845s ago: executing program 1 (id=1436): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m59.971462175s ago: executing program 4 (id=1437): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r2 = socket$kcm(0x22, 0x3, 0x0) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="fa82", 0x2}], 0x1}, 0x20000000) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x6018, r2}, 0x18) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff894fee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/133, 0x85}, {&(0x7f0000001400)="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", 0x181}], 0x3}, 0x0) 2m59.704052167s ago: executing program 4 (id=1438): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0xfffffffe, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m59.384434683s ago: executing program 1 (id=1439): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2c, '\x00', 0x0, @cgroup_sock=0x39, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000300)=[{0x4, 0x2, 0x10, 0x8}, {0x3, 0x4, 0x0, 0xa}, {0x4, 0x3, 0xb, 0x3}, {0x2, 0x5, 0x1000000d, 0x14}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x606bc94f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590200000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000000)='THAWED\x00', 0x7) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)='%pB \x00'}, 0x20) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f0000000040)=r6, 0x4) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) r9 = socket$kcm(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x100000001) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0xcf) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57bea000000000000000000000000ac1414aa"], 0xfdef) 2m58.829421578s ago: executing program 1 (id=1440): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90235fc60040011", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2m58.572156618s ago: executing program 4 (id=1441): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffd47) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x1, 0x2, 0xb, 0x9, 0x1, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x10, 0xa6, &(0x7f0000000100)=""/166, 0x40f00, 0x3, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xb, 0x6, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000000)=r2, 0x4) 2m58.469847856s ago: executing program 1 (id=1442): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="27011c00160014000000002f1eafbcf706e10500000089f7000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90187ce", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f008100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000340)={0x1, 0x9, [@link_local, @dev, @remote, @dev, @dev, @multicast, @remote, @broadcast, @random="91b42245db54"]}) 2m58.266822513s ago: executing program 4 (id=1443): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06fe857c3d452cc0aa8f1800fc55150081000000ff0f", @ANYRES32], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c0640", 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x246500, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000002300000004000000eb"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xe, &(0x7f00000000c0), 0xd8) 2m57.695008889s ago: executing program 4 (id=1446): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x100402, 0x7, 0x8, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa6b, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a00000000180001", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 2m46.039755797s ago: executing program 32 (id=1432): close(0xffffffffffffffff) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x186c, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x400008d1, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x0, 0x0, 0xd8, 0x8, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) socket$kcm(0x10, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x7, 0x1}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0xe032, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r1, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000100), 0x0, 0x0, 0xf7, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e697ab"], 0xfdef) 2m43.288883239s ago: executing program 33 (id=1442): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="27011c00160014000000002f1eafbcf706e10500000089f7000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90187ce", 0x32}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f008100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xd, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0xfffffffb) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000340)={0x1, 0x9, [@link_local, @dev, @remote, @dev, @dev, @multicast, @remote, @broadcast, @random="91b42245db54"]}) 2m42.215427596s ago: executing program 34 (id=1446): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x100402, 0x7, 0x8, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa6b, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a00000000180001", 0x18}], 0x1, 0x0, 0x0, 0x81000000}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 3.700123792s ago: executing program 3 (id=2858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.417034675s ago: executing program 3 (id=2870): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x95da}, @exit], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 3.216314801s ago: executing program 3 (id=2875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 3.204919762s ago: executing program 6 (id=2876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f8ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.158611076s ago: executing program 2 (id=2878): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x1, 0x2, 0x2, 0x2, 0x8, 0x40, 0x10}], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xf, &(0x7f0000000680)=""/15, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 3.091978931s ago: executing program 6 (id=2879): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1", 0x7a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000014000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bf360d44b28e75c05fc3074a93dfa5863cfa3f0e9a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8fffeffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000021c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) getpid() r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close(r7) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x401, 0x0, r3, 0x101, '\x00', r8, r3, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000440)="5aaee84c47ff946898c617ee41dea4754029716f4b400000000000000003fb83fc899e6a90a92d87545427d2", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.090029621s ago: executing program 7 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 3.028271677s ago: executing program 2 (id=2882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8840) 2.99160702s ago: executing program 3 (id=2883): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000150081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xf1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x4}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 2.969896261s ago: executing program 7 (id=2884): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f00000006c0)}, 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r0, 0x12) 2.48203269s ago: executing program 3 (id=2885): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c98cda2948ef0f440d7cad29567e15a7d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf225571f2487fc86acc2bff7d5664abebd6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552d703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8498856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa086d2a39f13f60b51136a945f780687aad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f91b52fc0b241c2db99a187c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b152d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f00000001c0)='\x9f&L\xe6/ \xeb:\x88kL\v1\x02LC\x05\x00B\x84\xa5Li\xc2XA\xb5\xd4fl\x95\xeeU\x19\xae\xc5\x1f\x1b\xc4\xf0\x85\xcb\xfbYD\x8ct\x88\x87\xfe3\x87Nx \xd8\x1aX\x12\x8d\xf715\xf6rD\x85!\x97Q\xc0\x18L\x1c\x1e\xf3/+T+>\x15\xe8\xef\xdaMy\x14quQH\x9e\xbc\xbb\xa7X\x8bYn\x1aw\xb5,\x93q\xc3\xa7\xbbG&\x84\f\xc3\xc4z\xf5\x8aq\xc3<\xc2\x9b\xc3fBp\x8f\xbb\"$~M\xa4\xed\x83\xdf\xf5+L\x0f\x18K\x8c\xe9\xb2W\xe5\xeb\xdb\x18\\S\xaac\x8eR\xc2b\xbb\x01\x00\x00\x00\x00\xbd\x8d\xbf\xcc\xbf\xb5ed1\x82\xa3\xabN!\xce\x8eI\x8a\x8f\xa0L 4\xc30 4\x13\x00\xe2\xbc\xfd\xb5\xbe\xca\xa7\xec\xf1[[u\r\xb8e\xad*\xb5\xdf\xb4{\'\xb1&)1\xe1\x90\x10\v\t3[hS\x85\xd9\t\x01\b\xd2Q|[<\xf7<\x18\xab{\x1d\x91Fj\xe1\xe8L\xda\xf8\xe1-)%\x0ez\x9d\x1c\x7fk\xf9\xd9N\xfb\xe0\xb4q\xd8\xa4\xfc\x8c~\x8c\x82\x06L\xe4\xaf\xc3\xedP\x00\xa2\xcb\xc8\xe7\x91\x108\xa3t\x94\x16\x9f\xd1\xb0\xf8\xcc\x0e\xf8O\x01v\xa1\x80\xa6\xb8x\xa4t7\xcc5x+ps\xb2V\xdb3\x94ly[\xb4\x9bLo\xb4\xf7p\x81\xeaD0;\x9c\xde\xaf\xec\xc9\xca\x17\xbd\xa1\x1ba\xef\x93\x9dT\x1d\xe7\xa7\x1b@Y\xf4*\xe8IrLz_\x8c\x03\x9a\xbc\xc6\x1eFK\xf1\xf0\x1e$\xff\xf4\xca\x16\xab*:\x9a\xc3\xb9\xaf*\x1c\xad\xe5\xad\xa4\xdc\x1b\x9f\xe0R\v\xbd-7@\xba\xa97\x8a*!Z\x8d\xf7n\x12\xb0M\x1b\xe7\xd8\xe5\x11') socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x805}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40047440, 0xf0ff1f00000000) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2.440222864s ago: executing program 7 (id=2895): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000150081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004", 0x23}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xf1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x4}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 2.252343879s ago: executing program 2 (id=2887): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.134894978s ago: executing program 7 (id=2888): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x3}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r0}, 0x18) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000b80)={&(0x7f0000000b00)=@abs, 0x6e, &(0x7f0000001c40), 0x0, &(0x7f0000000c00)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x2160) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x496, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', r6}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000a40)={0x2, 0x0, [0x0, 0x0]}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x43, 0x0) sendmsg$inet(r8, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) sendmsg$kcm(r5, &(0x7f0000000a00)={&(0x7f00000003c0)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000440)="22aedeecc4cd3660fa2b11148944a88f04523b89611162894bdba17021e6dee3118e11629dafe0f6b20697da8df4f4b568c9235b2733edf4846b81f38baf9e109e294a961b466fbe5723f3f73160ec94aa04e180bba20156944adc4fa09bae0dcd3ebdbb03f81b77b3c58a229f98d606439b660eb3b35d45c11879d9a8c5bc71273d13db29c2884a5d09e0d5e39df8b71532f8e7a6ad69db31680fb252", 0x9d}, {&(0x7f0000000500)="de6b00221bc08e55f8c2692cd28eff7b21974136214ea448627e9f089e758d7ff49701921c59921b4131d9a0b1202deabc85085b49fe51b0be7e79829f940519617e045cf695b8114aa8f9bd644772650a412c2d0913a3e940d249c9bd71b7f9ad0b02c7d04668a1fc8b890337703f69b15b3616d6e8a9cc08841ae467e93343c1ed42e4", 0x84}], 0x2, &(0x7f0000000880)=[{0xb8, 0x108, 0xd576, "20b6f0c3430f16ae36da7e29e53553734c700e4835ad94919217e1335b88d0b4221d7f0699c976b478b8cb70e11708ffbe5bdd6bf0e149524497139cc374f87830ca0aaf9e1994c89bc7551c8709f040abd37a9a05cdc23af46d5bf5cf0f327318ff960efc42221f4f801d0aa108dc56093471b83e59ff35847a13a600389020c81c20208aef724a7a87c5ee60f1b1eaec92098fbe8c1d12f08f5f0d2b40c2d9bf52bb1c"}, {0x30, 0x10f, 0x6, "6494ed7e798b66f67f285c27fb3d971c291be5dcb66c1c40668c0c7e"}, {0x80, 0x114, 0x6, "7bba5d293c2ee2bf9d37a83d53c6247acae27aa61b1296f06c4eeeb3ab8cd61aca1f7dd0e2689320aaf28fcec3814ca78d96e9fa5d2e77e2c26fff727d478195454fdf43d70dee32412e590d858c75600e303a9012484c9dea8217aa17ae53ba5d07bd1eac6a78196247a6b9"}], 0x168}, 0x20004811) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x7f, 0x6, 0x20, r2, 0x80000000, '\x00', r6, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0xe}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000580), 0x1f93, r9}, 0x38) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) syz_clone(0x80, &(0x7f0000000140)="0a4fd2dbf401f3853f9ce50b64e4c475dfd1efec01f6a74aa67a278444eb12e5191e40a54550dc88fe43af5d09", 0x2d, 0x0, &(0x7f00000001c0), &(0x7f0000000cc0)="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") 1.899687777s ago: executing program 5 (id=2889): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, 0xfffffffffffffffe, 0x49) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100665, 0x400000000000008, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_request_inode\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000a80)='./cgroup\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f00000003c0)=@file={0x1, './cgroup\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x8000) sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000340)=@abs={0x1, 0x2e, 0x2}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040040}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1400000000000000000000000000000000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000c1bf69537d71ebc6131ba31256cb9d556fc078e0beb2effbef981e0222f84b5d5c0b7dfe534cfc622e55dc81947cd38473393df858482385df8876cd35359edaef159f8efcaad61c24ea0228851e281630c20a1104aed0ca84806e17018f4116daa7804488dc5053cb63bb231bb668f174526b7f3735dc2f3ac67d34190a216c9f5ec13a315041a33221ccd0c3c1ebbbd32d23f7af33c0f3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000007000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$unix(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x20040011}, 0x4001000) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0xd, 0x0, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7040000000000008500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r9, r5}, 0xc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.796364496s ago: executing program 2 (id=2890): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f0000000440), 0x0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x104000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0xd, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x8040, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000100), 0x120) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r4, 0x0, 0x8, &(0x7f0000000000)='(`^.]+)\x00'}, 0x30) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e0", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1.633302839s ago: executing program 6 (id=2891): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e00000064000000040000000400000000000500", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000050000000e1f00"/24, @ANYRES32, @ANYBLOB], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x6, 0x10}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) write$cgroup_type(r3, &(0x7f0000000340), 0x9) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x606bc94f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x23, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000a0f0ffff00000000ff00000918110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f7ffffff85000000060000008520000001000000185a0000030000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0xfffffe01, 0x0, &(0x7f00000004c0), 0x40f00, 0x24, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x10, 0xffffffff, 0x941}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000880)=[{0x0, 0x4, 0x8}, {0x4, 0x3, 0x0, 0x2}], 0x10, 0x1}, 0x94) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57bea000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, r3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000400000c0000000c00000002000000000000000000000a000000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r7, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x2f}}, 0x10) r8 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611220000000000061138f0000000000bf2000000000000015000f00511b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44"], 0x0}, 0x94) sendmsg$inet(r8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0x24, 0x110, 0xc, {[@timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@empty}, {@private=0xa010102, 0xdd76}]}]}}}], 0x48}, 0x4000894) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) 1.12257659s ago: executing program 5 (id=2892): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611561000000000061134c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 648.144588ms ago: executing program 5 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 601.094832ms ago: executing program 6 (id=2894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 595.293553ms ago: executing program 7 (id=2896): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETLE(r2, 0x400454de, &(0x7f0000001140)) 515.176889ms ago: executing program 5 (id=2897): socket$kcm(0x29, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xfffffff9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000b00000000000000010040060400000008000000000000000000610000000061715f00"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="cb3a9dffa4f5237a94df4c09c926ebd248be21c7bf3cf7106a231b76d684005a25e7e1cbf4e1e563f987bc39c559b03aa4fd71ca379bcf53a61782d098450f0abedd1d9d952f9590f96f2576078f8011271557b7f90181cf97c6e39229d6392ea88c4955001c5010af0f285b58e2ff8baa63bf957c8792445929e2dbbc9b082c18ed500dbf5e8c355f77b45a993e45fd86bf9c15c939ef024d45a3c7aecc24796c4b7a", 0xa3}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0xea, &(0x7f0000000500)=""/234, 0x40f00, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001000)={'veth0_vlan\x00', @local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d000000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 487.656731ms ago: executing program 3 (id=2898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x8840) 443.957515ms ago: executing program 2 (id=2899): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x64, 0x4, 0x4, 0x50000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xe}, 0x50) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400000400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009", 0x70}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x2, 0x0, 0x2, 0x0, 0x606bc94f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 443.325775ms ago: executing program 6 (id=2900): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000150081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e", 0x34}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xf1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x4}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 220.199043ms ago: executing program 6 (id=2901): r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000100)=r1, 0x120) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100000095000000000000008500000076"], 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c03407f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698dff062cf008004de7f9c7643600000002007af5f3da11ee93aa1a014409a65ca947348c5352c0c05cb77a502055b8874590de801045d4d4d34aa2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="ef33cfe6ada4b5bf760bd33f24fa75ba0cf1f09dfd64ff2021be74d3e283de302ba510d3300dc3299bf224a12ed3d327808a7f8270d313ad8feb69d843e8857b5675dd08abd881789c0f557d71814eeafe328089af8e140c171733d75275b9ab2729593a0baf75c5a469c5019b663a734008bf66c43bb590f81550f16dd5d1ef4a8f6de3a4188219dbd64184051dff387a928b2a8e0e2af4dbcbe7ceae6fecee09b0d02e9501b2f004c3294b7e0ef56a1193d5f029461c818d0b4e0ee377f9e5f4545f55cf29b546fe64f2434415b5f59e545cc873619c6b65e2"], 0xfe33) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0xffffffff, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00ab70c4ae527d2bb1000000000000003ff0ffcbb28c1e5b94d1be00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r8 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0xc, 0x80, 0x0, 0x4, 0x20025, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000140)}, 0x20, 0x5, 0x3, 0x8, 0x200, 0xfffffff9, 0x3, 0x0, 0x5c9, 0x0, 0xfffffffffffff3b9}, 0x0, 0x3, r0, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r6) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 219.388952ms ago: executing program 5 (id=2911): socket$kcm(0x29, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x18000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xfffffff9}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000b00000000000000010040060400000008000000000000000000610000000061715f00"], 0x0, 0x37}, 0x28) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="cb3a9dffa4f5237a94df4c09c926ebd248be21c7bf3cf7106a231b76d684005a25e7e1cbf4e1e563f987bc39c559b03aa4fd71ca379bcf53a61782d098450f0abedd1d9d952f9590f96f2576078f8011271557b7f90181cf97c6e39229d6392ea88c4955001c5010af0f285b58e2ff8baa63bf957c8792445929e2dbbc9b082c18ed500dbf5e8c355f77b45a993e45fd86bf9c15c939ef024d45a3c7aecc24796c4b7a", 0xa3}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0xea, &(0x7f0000000500)=""/234, 0x40f00, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001000)={'veth0_vlan\x00', @local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d000000000000000001000004001800000000000002000000000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) 191.329475ms ago: executing program 2 (id=2902): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1", 0x7a}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000014000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bf360d44b28e75c05fc3074a93dfa5863cfa3f0e9a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8fffeffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000021c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) getpid() r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6) close(r7) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x401, 0x0, r3, 0x101, '\x00', r8, r3, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x2c, 0x0, &(0x7f0000000440)="5aaee84c47ff946898c617ee41dea4754029716f4b400000000000000003fb83fc899e6a90a92d87545427d2", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 74.475324ms ago: executing program 5 (id=2903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x5, 0x0, 0x0, 0xfffffffffff7bbfe, 0xfffffffe, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000001380)=@raw=[@ringbuf_query], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13018, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x885}, 0x94) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000001ac0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6\x1cvU\xcc\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8\n\x95HoP\xb7\x93%/\x1a\x92\xe4f\a\xb2\f\xf9L\x02 \xe8>\xe0\x85D0H\f\xad8\xc1.|\x16\tk\xed\x1f`\x13g.\x8c\x14<\x12\xeb\x16\x81\vW\x1db\x823\x85\x9e\xe0') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791243a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a920c4d7666b0c97fcf8f8cbe2006", 0xd8}], 0x1}, 0x4004840) 0s ago: executing program 7 (id=2904): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x5, 0x0, 0x0, 0xfffffffffff7bbfe, 0xfffffffe, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000001380)=@raw=[@ringbuf_query], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13018, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x885}, 0x94) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000001}, 0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000001ac0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6\x1cvU\xcc\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8\n\x95HoP\xb7\x93%/\x1a\x92\xe4f\a\xb2\f\xf9L\x02 \xe8>\xe0\x85D0H\f\xad8\xc1.|\x16\tk\xed\x1f`\x13g.\x8c\x14<\x12\xeb\x16\x81\vW\x1db\x823\x85\x9e\xe0') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791243a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a920c4d7666b0c97fcf8f8cbe2006", 0xd8}], 0x1}, 0x4004840) kernel console output (not intermixed with test programs): [ 167.586765][ T6728] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 167.594863][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.597769][ T6735] netlink: 'syz.2.821': attribute type 5 has an invalid length. [ 167.602864][ T6728] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 167.602902][ T6728] [ 168.291357][ T6741] delete_channel: no stack [ 168.297126][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.315673][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.366851][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.385060][ T6772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.401471][ T6772] bond0: (slave batadv0): Releasing backup interface [ 168.466328][ T6775] netlink: 'syz.3.832': attribute type 10 has an invalid length. [ 168.577904][ T6780] FAULT_INJECTION: forcing a failure. [ 168.577904][ T6780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.594219][ T6780] CPU: 1 PID: 6780 Comm: syz.4.833 Not tainted 5.15.189-syzkaller #0 [ 168.602358][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.612442][ T6780] Call Trace: [ 168.615744][ T6780] [ 168.618700][ T6780] dump_stack_lvl+0x168/0x230 [ 168.623415][ T6780] ? show_regs_print_info+0x20/0x20 [ 168.628646][ T6780] ? load_image+0x3b0/0x3b0 [ 168.633186][ T6780] ? __lock_acquire+0x7c60/0x7c60 [ 168.638297][ T6780] should_fail+0x38c/0x4c0 [ 168.642844][ T6780] _copy_from_user+0x2e/0x170 [ 168.647649][ T6780] iovec_from_user+0x142/0x370 [ 168.652452][ T6780] __import_iovec+0x70/0x490 [ 168.657083][ T6780] import_iovec+0x6f/0xa0 [ 168.661621][ T6780] ___sys_sendmsg+0x1b9/0x260 [ 168.666343][ T6780] ? __sys_sendmsg+0x250/0x250 [ 168.671237][ T6780] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 168.677880][ T6780] ? __fdget+0x18b/0x210 [ 168.682152][ T6780] __se_sys_sendmsg+0x190/0x250 [ 168.682469][ T6788] netlink: 'syz.1.835': attribute type 10 has an invalid length. [ 168.687028][ T6780] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 168.701007][ T6780] ? __x64_sys_sendmsg+0x80/0x80 [ 168.705990][ T6780] ? syscall_enter_from_user_mode+0x2a/0x70 [ 168.711923][ T6780] do_syscall_64+0x4c/0xa0 [ 168.716381][ T6780] ? clear_bhb_loop+0x30/0x80 [ 168.721102][ T6780] ? clear_bhb_loop+0x30/0x80 [ 168.725923][ T6780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.731954][ T6780] RIP: 0033:0x7febab1c8be9 [ 168.736634][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.756287][ T6780] RSP: 002b:00007feba9430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.764756][ T6780] RAX: ffffffffffffffda RBX: 00007febab3effa0 RCX: 00007febab1c8be9 [ 168.772757][ T6780] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000004 [ 168.780943][ T6780] RBP: 00007feba9430090 R08: 0000000000000000 R09: 0000000000000000 [ 168.789218][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.797241][ T6780] R13: 00007febab3f0038 R14: 00007febab3effa0 R15: 00007ffeba936258 [ 168.805264][ T6780] [ 168.848919][ T6784] __nla_validate_parse: 16 callbacks suppressed [ 168.848937][ T6784] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.835'. [ 169.037064][ T6804] netlink: 14 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.604541][ T6830] netlink: 'syz.4.845': attribute type 28 has an invalid length. [ 169.622720][ T6830] netlink: 'syz.4.845': attribute type 29 has an invalid length. [ 169.722035][ T6830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.845'. [ 169.953231][ T6839] FAULT_INJECTION: forcing a failure. [ 169.953231][ T6839] name failslab, interval 1, probability 0, space 0, times 0 [ 169.992229][ T6839] CPU: 1 PID: 6839 Comm: syz.3.850 Not tainted 5.15.189-syzkaller #0 [ 170.000371][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.010555][ T6839] Call Trace: [ 170.013890][ T6839] [ 170.016851][ T6839] dump_stack_lvl+0x168/0x230 [ 170.021592][ T6839] ? show_regs_print_info+0x20/0x20 [ 170.026837][ T6839] ? load_image+0x3b0/0x3b0 [ 170.031383][ T6839] ? __might_sleep+0xf0/0xf0 [ 170.036003][ T6839] ? __lock_acquire+0x7c60/0x7c60 [ 170.041064][ T6839] ? mark_lock+0x94/0x320 [ 170.045452][ T6839] should_fail+0x38c/0x4c0 [ 170.049924][ T6839] should_failslab+0x5/0x20 [ 170.054505][ T6839] slab_pre_alloc_hook+0x51/0xc0 [ 170.059833][ T6839] __kmalloc+0x6b/0x330 [ 170.064034][ T6839] ? tomoyo_realpath_from_path+0x118/0x610 [ 170.070004][ T6839] tomoyo_realpath_from_path+0x118/0x610 [ 170.075802][ T6839] tomoyo_path_number_perm+0x1d5/0x5d0 [ 170.081314][ T6839] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 170.086807][ T6839] ? perf_trace_lock+0xdf/0x370 [ 170.091817][ T6839] security_file_ioctl+0x6c/0xa0 [ 170.096801][ T6839] __se_sys_ioctl+0x48/0x170 [ 170.101430][ T6839] do_syscall_64+0x4c/0xa0 [ 170.105875][ T6839] ? clear_bhb_loop+0x30/0x80 [ 170.110588][ T6839] ? clear_bhb_loop+0x30/0x80 [ 170.115317][ T6839] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.121251][ T6839] RIP: 0033:0x7f3a7676abe9 [ 170.125705][ T6839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.145471][ T6839] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.153930][ T6839] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 170.161938][ T6839] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 0000000000000005 [ 170.169943][ T6839] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.177949][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.185950][ T6839] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 170.194097][ T6839] [ 170.289721][ T6839] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.428392][ T6845] netlink: 'syz.3.852': attribute type 10 has an invalid length. [ 170.467490][ T6845] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.852'. [ 170.838689][ T6866] netlink: 'syz.1.861': attribute type 3 has an invalid length. [ 170.865545][ T6866] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.861'. [ 171.027569][ T6854] delete_channel: no stack [ 171.083580][ T6873] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.863'. [ 171.176808][ T6878] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.296399][ T6874] FAULT_INJECTION: forcing a failure. [ 171.296399][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 171.352417][ T6874] CPU: 1 PID: 6874 Comm: syz.1.864 Not tainted 5.15.189-syzkaller #0 [ 171.360659][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.370763][ T6874] Call Trace: [ 171.374084][ T6874] [ 171.377042][ T6874] dump_stack_lvl+0x168/0x230 [ 171.381758][ T6874] ? show_regs_print_info+0x20/0x20 [ 171.386982][ T6874] ? load_image+0x3b0/0x3b0 [ 171.391534][ T6874] ? __might_sleep+0xf0/0xf0 [ 171.396165][ T6874] ? __lock_acquire+0x7c60/0x7c60 [ 171.401216][ T6874] ? mark_lock+0x94/0x320 [ 171.405668][ T6874] should_fail+0x38c/0x4c0 [ 171.410133][ T6874] should_failslab+0x5/0x20 [ 171.414658][ T6874] slab_pre_alloc_hook+0x51/0xc0 [ 171.419738][ T6874] __kmalloc+0x6b/0x330 [ 171.424064][ T6874] ? tomoyo_realpath_from_path+0x118/0x610 [ 171.429924][ T6874] tomoyo_realpath_from_path+0x118/0x610 [ 171.435634][ T6874] tomoyo_path_number_perm+0x1d5/0x5d0 [ 171.441149][ T6874] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 171.446798][ T6874] security_file_ioctl+0x6c/0xa0 [ 171.451783][ T6874] __se_sys_ioctl+0x48/0x170 [ 171.456415][ T6874] do_syscall_64+0x4c/0xa0 [ 171.460858][ T6874] ? clear_bhb_loop+0x30/0x80 [ 171.465560][ T6874] ? clear_bhb_loop+0x30/0x80 [ 171.470270][ T6874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.476193][ T6874] RIP: 0033:0x7f07b5465be9 [ 171.480638][ T6874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.500272][ T6874] RSP: 002b:00007f07b36cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.508718][ T6874] RAX: ffffffffffffffda RBX: 00007f07b568cfa0 RCX: 00007f07b5465be9 [ 171.516711][ T6874] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000022 [ 171.524706][ T6874] RBP: 00007f07b36cd090 R08: 0000000000000000 R09: 0000000000000000 [ 171.532692][ T6874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.540686][ T6874] R13: 00007f07b568d038 R14: 00007f07b568cfa0 R15: 00007fff2a7f43c8 [ 171.548810][ T6874] [ 171.673654][ T6874] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.650340][ T6873] syz.4.863 (6873) used greatest stack depth: 16704 bytes left [ 172.859610][ T6906] netlink: 'syz.1.873': attribute type 10 has an invalid length. [ 172.921716][ T6906] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.873'. [ 172.921758][ T6917] netlink: 'syz.0.876': attribute type 3 has an invalid length. [ 172.957085][ T6917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.876'. [ 173.260396][ T6942] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.884'. [ 173.387893][ T6942] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.579078][ T6957] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 173.628817][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.674949][ T6957] device bridge_slave_1 left promiscuous mode [ 173.681401][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.706442][ T6957] device bridge_slave_1 entered promiscuous mode [ 173.714444][ T6957] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.749410][ T6960] netlink: 830 bytes leftover after parsing attributes in process `syz.0.890'. [ 173.770197][ T6963] netlink: 'syz.1.889': attribute type 6 has an invalid length. [ 173.805824][ T6962] netlink: 'syz.3.891': attribute type 10 has an invalid length. [ 173.823364][ T6964] netlink: 'syz.0.890': attribute type 21 has an invalid length. [ 173.837080][ T6960] netlink: 'syz.0.890': attribute type 3 has an invalid length. [ 173.873381][ T6960] __nla_validate_parse: 2 callbacks suppressed [ 173.873401][ T6960] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.890'. [ 173.973985][ T6973] netlink: 'syz.1.894': attribute type 28 has an invalid length. [ 173.981766][ T6973] netlink: 'syz.1.894': attribute type 29 has an invalid length. [ 174.015876][ T6975] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 174.025268][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.894'. [ 174.178924][ T6984] delete_channel: no stack [ 174.369460][ T6991] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.902'. [ 174.428177][ T6992] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.901'. [ 174.461070][ T6992] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 174.505141][ T6993] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.797155][ T7002] netlink: 830 bytes leftover after parsing attributes in process `syz.4.905'. [ 174.846745][ T7005] netlink: 'syz.4.905': attribute type 21 has an invalid length. [ 174.883740][ T7005] netlink: 156 bytes leftover after parsing attributes in process `syz.4.905'. [ 175.014588][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.909'. [ 175.046472][ T7009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.908'. [ 175.428797][ T7021] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.913'. [ 175.543601][ T7021] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.642653][ T7026] device bridge_slave_0 left promiscuous mode [ 175.661620][ T7026] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.805178][ T7026] device bridge0 left promiscuous mode [ 175.846116][ T7026] team0: Port device bridge0 removed [ 176.039655][ T7054] netlink: 830 bytes leftover after parsing attributes in process `syz.4.926'. [ 176.058009][ T7052] device veth1_macvtap left promiscuous mode [ 178.392414][ T7121] validate_nla: 7 callbacks suppressed [ 178.392434][ T7121] netlink: 'syz.4.947': attribute type 21 has an invalid length. [ 179.626046][ T7142] delete_channel: no stack [ 179.793942][ T7164] netlink: 'syz.3.960': attribute type 10 has an invalid length. [ 179.890752][ T7164] __nla_validate_parse: 6 callbacks suppressed [ 179.890812][ T7164] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.960'. [ 179.964225][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.963'. [ 180.064297][ T7172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'. [ 180.149954][ T7172] netlink: 'syz.0.963': attribute type 3 has an invalid length. [ 180.199480][ T7172] netlink: 152 bytes leftover after parsing attributes in process `syz.0.963'. [ 180.264572][ T7179] netlink: 'syz.2.966': attribute type 41 has an invalid length. [ 180.273915][ T7179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.966'. [ 180.285113][ T7179] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 180.332830][ T7183] netlink: 830 bytes leftover after parsing attributes in process `syz.4.967'. [ 180.349175][ T7183] netlink: 'syz.4.967': attribute type 21 has an invalid length. [ 180.462647][ T7183] netlink: 156 bytes leftover after parsing attributes in process `syz.4.967'. [ 180.570786][ T7189] FAULT_INJECTION: forcing a failure. [ 180.570786][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 180.600207][ T7185] netlink: 'syz.4.967': attribute type 3 has an invalid length. [ 180.633688][ T7185] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.967'. [ 180.653483][ T7189] CPU: 0 PID: 7189 Comm: syz.0.970 Not tainted 5.15.189-syzkaller #0 [ 180.661660][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.671982][ T7189] Call Trace: [ 180.675311][ T7189] [ 180.678425][ T7189] dump_stack_lvl+0x168/0x230 [ 180.683182][ T7189] ? show_regs_print_info+0x20/0x20 [ 180.688447][ T7189] ? load_image+0x3b0/0x3b0 [ 180.693024][ T7189] ? __might_sleep+0xf0/0xf0 [ 180.697670][ T7189] ? __lock_acquire+0x7c60/0x7c60 [ 180.703137][ T7189] should_fail+0x38c/0x4c0 [ 180.708009][ T7189] should_failslab+0x5/0x20 [ 180.713186][ T7189] slab_pre_alloc_hook+0x51/0xc0 [ 180.718458][ T7189] __kmalloc_node_track_caller+0x68/0x3a0 [ 180.724274][ T7189] ? alloc_skb_with_frags+0xa7/0x730 [ 180.729843][ T7189] ? kmem_cache_alloc_node+0x162/0x2d0 [ 180.736194][ T7189] ? __alloc_skb+0xf4/0x750 [ 180.741154][ T7189] ? alloc_skb_with_frags+0xa7/0x730 [ 180.746698][ T7189] __alloc_skb+0x22c/0x750 [ 180.751328][ T7189] alloc_skb_with_frags+0xa7/0x730 [ 180.756525][ T7189] ? trace_event_raw_event_lock+0x250/0x250 [ 180.763024][ T7189] sock_alloc_send_pskb+0x853/0x980 [ 180.768479][ T7189] ? sock_kzfree_s+0x50/0x50 [ 180.773153][ T7189] ? trace_call_bpf+0x509/0x5a0 [ 180.778121][ T7189] packet_sendmsg+0x3407/0x5110 [ 180.783418][ T7189] ? aa_sk_perm+0x8f0/0x8f0 [ 180.788169][ T7189] ? __might_sleep+0xf0/0xf0 [ 180.792883][ T7189] ? aa_sk_perm+0x7b4/0x8f0 [ 180.797459][ T7189] ? packet_getsockopt+0x950/0x950 [ 180.802668][ T7189] ? aa_sock_msg_perm+0x94/0x150 [ 180.807695][ T7189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 180.813124][ T7189] ? security_socket_sendmsg+0x7c/0xa0 [ 180.818649][ T7189] ? packet_getsockopt+0x950/0x950 [ 180.823834][ T7189] ____sys_sendmsg+0x5a2/0x8c0 [ 180.828791][ T7189] ? memset+0x1e/0x40 [ 180.832965][ T7189] ? __sys_sendmsg_sock+0x30/0x30 [ 180.838181][ T7189] ? import_iovec+0x6f/0xa0 [ 180.842767][ T7189] ___sys_sendmsg+0x1f0/0x260 [ 180.847543][ T7189] ? __sys_sendmsg+0x250/0x250 [ 180.852419][ T7189] ? trace_event_raw_event_lock+0x250/0x250 [ 180.858557][ T7189] ? vfs_write+0x84d/0xd00 [ 180.863110][ T7189] ? __fdget+0x18b/0x210 [ 180.867438][ T7189] __se_sys_sendmsg+0x190/0x250 [ 180.872370][ T7189] ? __x64_sys_sendmsg+0x80/0x80 [ 180.877377][ T7189] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 180.884340][ T7189] ? lockdep_hardirqs_on+0x94/0x140 [ 180.889744][ T7189] do_syscall_64+0x4c/0xa0 [ 180.894337][ T7189] ? clear_bhb_loop+0x30/0x80 [ 180.899158][ T7189] ? clear_bhb_loop+0x30/0x80 [ 180.903896][ T7189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 180.910026][ T7189] RIP: 0033:0x7f41b94f1be9 [ 180.914510][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.934716][ T7189] RSP: 002b:00007f41b7759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.943299][ T7189] RAX: ffffffffffffffda RBX: 00007f41b9718fa0 RCX: 00007f41b94f1be9 [ 180.951351][ T7189] RDX: 0000000000044000 RSI: 0000200000000140 RDI: 0000000000000003 [ 180.959506][ T7189] RBP: 00007f41b7759090 R08: 0000000000000000 R09: 0000000000000000 [ 180.967544][ T7189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.975601][ T7189] R13: 00007f41b9719038 R14: 00007f41b9718fa0 R15: 00007ffc32314188 [ 180.984559][ T7189] [ 181.116044][ T7191] delete_channel: no stack [ 181.149173][ T7202] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.156510][ T7202] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.392612][ T7210] netlink: 'syz.3.978': attribute type 10 has an invalid length. [ 181.484830][ T7213] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.978'. [ 181.876849][ T7214] delete_channel: no stack [ 182.080420][ T7219] delete_channel: no stack [ 182.137286][ T7230] netlink: 830 bytes leftover after parsing attributes in process `syz.0.985'. [ 182.194877][ T7230] netlink: 'syz.0.985': attribute type 21 has an invalid length. [ 182.248999][ T7230] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 182.685339][ T7253] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 182.822075][ T7257] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 182.939535][ T7254] delete_channel: no stack [ 183.628301][ T7284] validate_nla: 5 callbacks suppressed [ 183.628324][ T7284] netlink: 'syz.0.1007': attribute type 3 has an invalid length. [ 184.007545][ T7291] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 184.473715][ T7306] netlink: 'syz.1.1011': attribute type 41 has an invalid length. [ 184.514175][ T7306] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 184.552978][ T7297] delete_channel: no stack [ 184.855950][ T7325] netlink: 'syz.3.1017': attribute type 28 has an invalid length. [ 184.875881][ T7325] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 184.964943][ T7325] __nla_validate_parse: 14 callbacks suppressed [ 184.964961][ T7325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1017'. [ 185.047221][ T7330] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1021'. [ 185.156896][ T7330] netlink: 'syz.4.1021': attribute type 21 has an invalid length. [ 185.169610][ T7330] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1021'. [ 185.183758][ T7330] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 185.191931][ T7330] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1021'. [ 185.270139][ T7338] netlink: 'syz.1.1024': attribute type 10 has an invalid length. [ 185.329751][ T7338] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1024'. [ 185.573195][ T7339] delete_channel: no stack [ 185.686387][ T7359] Ÿë: port 1(ip6gretap0) entered blocking state [ 185.730251][ T7359] Ÿë: port 1(ip6gretap0) entered disabled state [ 185.767019][ T7359] device ip6gretap0 entered promiscuous mode [ 185.784006][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1032'. [ 185.799093][ T7357] delete_channel: no stack [ 186.041066][ T7378] netlink: 'syz.0.1037': attribute type 21 has an invalid length. [ 186.078438][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1037'. [ 186.112001][ T7381] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1039'. [ 186.167156][ T7381] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 186.205928][ T7383] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1040'. [ 186.217074][ T7381] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1039'. [ 186.944255][ T7391] delete_channel: no stack [ 186.955257][ T7404] team0: Device hsr_slave_0 failed to register rx_handler [ 187.417710][ T7415] device pim6reg1 entered promiscuous mode [ 187.691915][ T7429] device pim6reg1 entered promiscuous mode [ 188.171223][ T7437] delete_channel: no stack [ 188.173712][ T7442] team0: Device hsr_slave_0 failed to register rx_handler [ 188.746568][ T7464] device pim6reg1 entered promiscuous mode [ 189.084331][ T7477] validate_nla: 8 callbacks suppressed [ 189.084349][ T7477] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 189.192007][ T7477] team0: Device hsr_slave_0 failed to register rx_handler [ 189.245317][ T7472] delete_channel: no stack [ 189.252049][ T7480] netlink: 'syz.3.1076': attribute type 11 has an invalid length. [ 189.398614][ T7484] netlink: 'syz.0.1077': attribute type 39 has an invalid length. [ 189.541619][ T7488] netlink: 'syz.3.1079': attribute type 3 has an invalid length. [ 189.980818][ T7499] FAULT_INJECTION: forcing a failure. [ 189.980818][ T7499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.012284][ T7499] CPU: 1 PID: 7499 Comm: syz.0.1083 Not tainted 5.15.189-syzkaller #0 [ 190.020743][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 190.030935][ T7499] Call Trace: [ 190.034374][ T7499] [ 190.037344][ T7499] dump_stack_lvl+0x168/0x230 [ 190.042075][ T7499] ? show_regs_print_info+0x20/0x20 [ 190.047336][ T7499] ? load_image+0x3b0/0x3b0 [ 190.052897][ T7499] ? __lock_acquire+0x7c60/0x7c60 [ 190.058237][ T7499] ? bpf_test_run+0x778/0x7d0 [ 190.063153][ T7499] should_fail+0x38c/0x4c0 [ 190.067704][ T7499] _copy_to_user+0x2e/0x130 [ 190.072353][ T7499] bpf_test_finish+0x1ac/0x2d0 [ 190.077153][ T7499] ? convert_skb_to___skb+0x360/0x360 [ 190.082561][ T7499] ? __build_skb+0x1e2/0x2e0 [ 190.087280][ T7499] ? convert_skb_to___skb+0x1ff/0x360 [ 190.092686][ T7499] bpf_prog_test_run_skb+0xb8f/0x1180 [ 190.098106][ T7499] ? cpu_online+0x60/0x60 [ 190.102574][ T7499] bpf_prog_test_run+0x31e/0x390 [ 190.107568][ T7499] __sys_bpf+0x535/0x670 [ 190.111857][ T7499] ? bpf_link_show_fdinfo+0x340/0x340 [ 190.117272][ T7499] ? vtime_user_exit+0x2dc/0x400 [ 190.122346][ T7499] __x64_sys_bpf+0x78/0x90 [ 190.126807][ T7499] do_syscall_64+0x4c/0xa0 [ 190.131255][ T7499] ? clear_bhb_loop+0x30/0x80 [ 190.136053][ T7499] ? clear_bhb_loop+0x30/0x80 [ 190.140775][ T7499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.146710][ T7499] RIP: 0033:0x7f41b94f1be9 [ 190.151165][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.171836][ T7499] RSP: 002b:00007f41b7759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.180605][ T7499] RAX: ffffffffffffffda RBX: 00007f41b9718fa0 RCX: 00007f41b94f1be9 [ 190.188931][ T7499] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 190.197257][ T7499] RBP: 00007f41b7759090 R08: 0000000000000000 R09: 0000000000000000 [ 190.206678][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.214864][ T7499] R13: 00007f41b9719038 R14: 00007f41b9718fa0 R15: 00007ffc32314188 [ 190.223190][ T7499] [ 190.463052][ T7507] netlink: 'syz.1.1086': attribute type 21 has an invalid length. [ 190.471373][ T7507] __nla_validate_parse: 19 callbacks suppressed [ 190.471474][ T7507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1086'. [ 190.720129][ T7508] delete_channel: no stack [ 190.806695][ T7507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1086'. [ 190.895321][ T7520] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1092'. [ 190.963431][ T7520] netlink: 'syz.4.1092': attribute type 3 has an invalid length. [ 190.971606][ T7520] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1092'. [ 191.389632][ T7533] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1097'. [ 191.600779][ T7537] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1099'. [ 191.621323][ T7541] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1101'. [ 192.393055][ T7549] delete_channel: no stack [ 192.434036][ T7562] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1106'. [ 192.575325][ T7562] netlink: 'syz.1.1106': attribute type 3 has an invalid length. [ 192.638205][ T7562] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1106'. [ 193.029322][ T7578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1111'. [ 193.382953][ T7595] FAULT_INJECTION: forcing a failure. [ 193.382953][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 193.467717][ T7595] CPU: 1 PID: 7595 Comm: syz.0.1118 Not tainted 5.15.189-syzkaller #0 [ 193.475954][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.486054][ T7595] Call Trace: [ 193.489362][ T7595] [ 193.492323][ T7595] dump_stack_lvl+0x168/0x230 [ 193.497219][ T7595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 193.503632][ T7595] ? show_regs_print_info+0x20/0x20 [ 193.509234][ T7595] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 193.515942][ T7595] ? dump_stack+0x5/0x20 [ 193.520600][ T7595] should_fail+0x38c/0x4c0 [ 193.525109][ T7595] should_failslab+0x5/0x20 [ 193.529732][ T7595] slab_pre_alloc_hook+0x51/0xc0 [ 193.534711][ T7595] kmem_cache_alloc_trace+0x47/0x2a0 [ 193.541635][ T7595] ? dccp_feat_entry_new+0x169/0x3d0 [ 193.548526][ T7595] dccp_feat_entry_new+0x169/0x3d0 [ 193.553783][ T7595] __feat_register_sp+0x20b/0x410 [ 193.559597][ T7595] dccp_setsockopt_cscov+0x248/0x2e0 [ 193.566284][ T7595] dccp_setsockopt+0x5ff/0x820 [ 193.571163][ T7595] ? dccp_ioctl+0x1d0/0x1d0 [ 193.575722][ T7595] ? dccp_ioctl+0x1d0/0x1d0 [ 193.580262][ T7595] ? sock_common_recvmsg+0x1b0/0x1b0 [ 193.585765][ T7595] __sys_setsockopt+0x2bf/0x3d0 [ 193.590651][ T7595] __x64_sys_setsockopt+0xb1/0xc0 [ 193.595705][ T7595] do_syscall_64+0x4c/0xa0 [ 193.600161][ T7595] ? clear_bhb_loop+0x30/0x80 [ 193.604857][ T7595] ? clear_bhb_loop+0x30/0x80 [ 193.609604][ T7595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.615547][ T7595] RIP: 0033:0x7f41b94f1be9 [ 193.619997][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.639641][ T7595] RSP: 002b:00007f41b7759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 193.648103][ T7595] RAX: ffffffffffffffda RBX: 00007f41b9718fa0 RCX: 00007f41b94f1be9 [ 193.656196][ T7595] RDX: 000000000000000a RSI: 000000000000010d RDI: 0000000000000007 [ 193.664239][ T7595] RBP: 00007f41b7759090 R08: 0000000000000004 R09: 0000000000000000 [ 193.672424][ T7595] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.680517][ T7595] R13: 00007f41b9719038 R14: 00007f41b9718fa0 R15: 00007ffc32314188 [ 193.688535][ T7595] [ 193.716138][ T7599] netlink: zone id is out of range [ 193.726292][ T7599] netlink: zone id is out of range [ 193.735974][ T7599] netlink: zone id is out of range [ 193.747556][ T7599] netlink: zone id is out of range [ 193.757701][ T7599] netlink: zone id is out of range [ 193.766552][ T7599] netlink: zone id is out of range [ 193.776607][ T7599] netlink: zone id is out of range [ 193.784720][ T7599] netlink: zone id is out of range [ 193.793947][ T7599] netlink: zone id is out of range [ 193.816000][ T7599] netlink: zone id is out of range [ 193.904527][ T7607] netlink: 'syz.2.1121': attribute type 3 has an invalid length. [ 194.180969][ T7615] delete_channel: no stack [ 194.377941][ T7627] netlink: 'syz.2.1128': attribute type 6 has an invalid length. [ 194.517356][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524353][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.400747][ T7647] netlink: 'syz.2.1135': attribute type 29 has an invalid length. [ 195.568931][ T7647] netlink: 'syz.2.1135': attribute type 29 has an invalid length. [ 195.674027][ T7648] delete_channel: no stack [ 195.892415][ T7668] FAULT_INJECTION: forcing a failure. [ 195.892415][ T7668] name failslab, interval 1, probability 0, space 0, times 0 [ 195.918732][ T7668] CPU: 1 PID: 7668 Comm: syz.1.1141 Not tainted 5.15.189-syzkaller #0 [ 195.926967][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.937402][ T7668] Call Trace: [ 195.940724][ T7668] [ 195.943679][ T7668] dump_stack_lvl+0x168/0x230 [ 195.948391][ T7668] ? show_regs_print_info+0x20/0x20 [ 195.953603][ T7668] ? load_image+0x3b0/0x3b0 [ 195.958130][ T7668] ? __might_sleep+0xf0/0xf0 [ 195.962745][ T7668] ? __lock_acquire+0x7c60/0x7c60 [ 195.967823][ T7668] should_fail+0x38c/0x4c0 [ 195.972449][ T7668] should_failslab+0x5/0x20 [ 195.977153][ T7668] slab_pre_alloc_hook+0x51/0xc0 [ 195.982119][ T7668] __kmalloc_node_track_caller+0x68/0x3a0 [ 195.987867][ T7668] ? alloc_skb_with_frags+0xa7/0x730 [ 195.993175][ T7668] ? kmem_cache_alloc_node+0x162/0x2d0 [ 195.998644][ T7668] ? __alloc_skb+0xf4/0x750 [ 196.003190][ T7668] ? alloc_skb_with_frags+0xa7/0x730 [ 196.008499][ T7668] __alloc_skb+0x22c/0x750 [ 196.012947][ T7668] alloc_skb_with_frags+0xa7/0x730 [ 196.018080][ T7668] ? __lock_acquire+0x12d9/0x7c60 [ 196.023223][ T7668] ? __rwlock_init+0x140/0x140 [ 196.028030][ T7668] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 196.033442][ T7668] sock_alloc_send_pskb+0x853/0x980 [ 196.038950][ T7668] ? sock_kzfree_s+0x50/0x50 [ 196.043575][ T7668] ? __kasan_kmalloc+0xcc/0xf0 [ 196.048358][ T7668] ? __kasan_kmalloc+0xb5/0xf0 [ 196.053229][ T7668] ? kmemdup+0x22/0x50 [ 196.057418][ T7668] ? ip6_setup_cork+0x3fd/0x11e0 [ 196.062425][ T7668] ? ip6_append_data+0x20f/0x310 [ 196.067486][ T7668] ? ____sys_sendmsg+0x5a2/0x8c0 [ 196.072434][ T7668] ? ___sys_sendmsg+0x1f0/0x260 [ 196.077382][ T7668] ? __se_sys_sendmsg+0x190/0x250 [ 196.082607][ T7668] ? do_syscall_64+0x4c/0xa0 [ 196.087226][ T7668] __ip6_append_data+0x257b/0x3810 [ 196.092423][ T7668] ? ip6_setup_cork+0x11e0/0x11e0 [ 196.097563][ T7668] ? ip6_setup_cork+0xc63/0x11e0 [ 196.102527][ T7668] ip6_append_data+0x1d4/0x310 [ 196.107309][ T7668] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 196.112533][ T7668] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 196.117505][ T7668] l2tp_ip6_sendmsg+0x1294/0x1770 [ 196.122931][ T7668] ? __might_sleep+0xf0/0xf0 [ 196.127545][ T7668] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 196.133227][ T7668] ? aa_af_perm+0x2b0/0x2b0 [ 196.139187][ T7668] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 196.147172][ T7668] ? sock_rps_record_flow+0x17/0x3b0 [ 196.152709][ T7668] ? inet_send_prepare+0x260/0x260 [ 196.157852][ T7668] ? inet_sendmsg+0x78/0x2f0 [ 196.162559][ T7668] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 196.168471][ T7668] ? security_socket_sendmsg+0x7c/0xa0 [ 196.174039][ T7668] ? inet_send_prepare+0x260/0x260 [ 196.179492][ T7668] ____sys_sendmsg+0x5a2/0x8c0 [ 196.184422][ T7668] ? __sys_sendmsg_sock+0x30/0x30 [ 196.189550][ T7668] ? import_iovec+0x6f/0xa0 [ 196.194075][ T7668] ___sys_sendmsg+0x1f0/0x260 [ 196.198850][ T7668] ? __sys_sendmsg+0x250/0x250 [ 196.203751][ T7668] ? vfs_write+0x84d/0xd00 [ 196.208222][ T7668] ? __fdget+0x18b/0x210 [ 196.212642][ T7668] __se_sys_sendmsg+0x190/0x250 [ 196.217553][ T7668] ? __x64_sys_sendmsg+0x80/0x80 [ 196.222590][ T7668] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 196.228797][ T7668] ? lockdep_hardirqs_on+0x94/0x140 [ 196.234845][ T7668] do_syscall_64+0x4c/0xa0 [ 196.239877][ T7668] ? clear_bhb_loop+0x30/0x80 [ 196.244562][ T7668] ? clear_bhb_loop+0x30/0x80 [ 196.249547][ T7668] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.255554][ T7668] RIP: 0033:0x7f07b5465be9 [ 196.260014][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.279633][ T7668] RSP: 002b:00007f07b36cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.288143][ T7668] RAX: ffffffffffffffda RBX: 00007f07b568cfa0 RCX: 00007f07b5465be9 [ 196.296213][ T7668] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 196.304287][ T7668] RBP: 00007f07b36cd090 R08: 0000000000000000 R09: 0000000000000000 [ 196.312350][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.320343][ T7668] R13: 00007f07b568d038 R14: 00007f07b568cfa0 R15: 00007fff2a7f43c8 [ 196.328633][ T7668] [ 196.440000][ T7670] __nla_validate_parse: 7 callbacks suppressed [ 196.440115][ T7670] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1142'. [ 196.497315][ T7673] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1143'. [ 196.592523][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 196.602374][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 196.612519][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 196.632828][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 196.653485][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 197.527969][ T7678] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1155'. [ 199.181289][ T7730] netlink: 'syz.1.1159': attribute type 28 has an invalid length. [ 199.190601][ T7719] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1157'. [ 199.523844][ T7730] netlink: 'syz.1.1159': attribute type 29 has an invalid length. [ 199.531935][ T7730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'. [ 199.572890][ T7732] sctp: [Deprecated]: syz.4.1161 (pid 7732) Use of int in maxseg socket option. [ 199.572890][ T7732] Use struct sctp_assoc_value instead [ 199.981171][ T7727] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1160'. [ 200.543093][ T7745] netlink: 'syz.4.1166': attribute type 4 has an invalid length. [ 200.588854][ T7745] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1166'. [ 200.769381][ T7749] netlink: 'syz.3.1167': attribute type 3 has an invalid length. [ 200.856526][ T7749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1167'. [ 201.254676][ T7745] net_ratelimit: 171 callbacks suppressed [ 201.254840][ T7745] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.365374][ T7748] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1167'. [ 201.637063][ T7751] device pim6reg1 entered promiscuous mode [ 201.811011][ T7755] FAULT_INJECTION: forcing a failure. [ 201.811011][ T7755] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 201.825042][ T7739] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1162'. [ 201.872236][ T7755] CPU: 0 PID: 7755 Comm: syz.3.1170 Not tainted 5.15.189-syzkaller #0 [ 201.880453][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 201.890625][ T7755] Call Trace: [ 201.893968][ T7755] [ 201.896927][ T7755] dump_stack_lvl+0x168/0x230 [ 201.901739][ T7755] ? show_regs_print_info+0x20/0x20 [ 201.907506][ T7755] ? load_image+0x3b0/0x3b0 [ 201.912054][ T7755] ? __kasan_slab_alloc+0xb3/0xd0 [ 201.917101][ T7755] ? slab_post_alloc_hook+0x4c/0x380 [ 201.922409][ T7755] ? kmem_cache_alloc_node+0x12d/0x2d0 [ 201.928008][ T7755] ? __alloc_skb+0xf4/0x750 [ 201.932536][ T7755] ? netlink_recvmsg+0x653/0xdb0 [ 201.937498][ T7755] ? ____sys_recvmsg+0x291/0x580 [ 201.942463][ T7755] ? ___sys_recvmsg+0x1af/0x4f0 [ 201.947425][ T7755] ? __x64_sys_recvmsg+0x1dd/0x2a0 [ 201.952568][ T7755] should_fail+0x38c/0x4c0 [ 201.957023][ T7755] prepare_alloc_pages+0x1e4/0x5f0 [ 201.962205][ T7755] __alloc_pages+0x10e/0x470 [ 201.966829][ T7755] ? zone_statistics+0x170/0x170 [ 201.972001][ T7755] kmalloc_large_node+0x7d/0x190 [ 201.977053][ T7755] __kmalloc_node_track_caller+0x22e/0x3a0 [ 201.982888][ T7755] ? netlink_dump+0x18a/0xcd0 [ 201.987644][ T7755] ? kmem_cache_alloc_node+0x162/0x2d0 [ 201.993320][ T7755] ? __alloc_skb+0xf4/0x750 [ 201.997946][ T7755] ? netlink_dump+0x18a/0xcd0 [ 202.002751][ T7755] __alloc_skb+0x22c/0x750 [ 202.007217][ T7755] netlink_dump+0x18a/0xcd0 [ 202.012208][ T7755] ? lockdep_hardirqs_on+0x94/0x140 [ 202.017628][ T7755] ? slab_free_freelist_hook+0xea/0x170 [ 202.023218][ T7755] ? netlink_lookup+0x1d0/0x1d0 [ 202.028225][ T7755] netlink_recvmsg+0x653/0xdb0 [ 202.033033][ T7755] ? netlink_sendmsg+0xbc0/0xbc0 [ 202.038104][ T7755] ? aa_sk_perm+0x7b4/0x8f0 [ 202.042789][ T7755] ? aa_af_perm+0x2b0/0x2b0 [ 202.047337][ T7755] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 202.052735][ T7755] ? security_socket_recvmsg+0x85/0xb0 [ 202.059506][ T7755] ? netlink_sendmsg+0xbc0/0xbc0 [ 202.064697][ T7755] ____sys_recvmsg+0x291/0x580 [ 202.070415][ T7755] ? __might_fault+0xb3/0x110 [ 202.075145][ T7755] ? __sys_recvmsg_sock+0x40/0x40 [ 202.080219][ T7755] ? import_iovec+0x6f/0xa0 [ 202.084893][ T7755] ___sys_recvmsg+0x1af/0x4f0 [ 202.090046][ T7755] ? __sys_recvmsg+0x250/0x250 [ 202.094983][ T7755] ? __lock_acquire+0x7c60/0x7c60 [ 202.100540][ T7755] ? __fdget+0x18b/0x210 [ 202.104821][ T7755] __x64_sys_recvmsg+0x1dd/0x2a0 [ 202.110131][ T7755] ? ___sys_recvmsg+0x4f0/0x4f0 [ 202.115144][ T7755] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 202.121519][ T7755] ? lockdep_hardirqs_on+0x94/0x140 [ 202.126847][ T7755] do_syscall_64+0x4c/0xa0 [ 202.131469][ T7755] ? clear_bhb_loop+0x30/0x80 [ 202.136373][ T7755] ? clear_bhb_loop+0x30/0x80 [ 202.141443][ T7755] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 202.147612][ T7755] RIP: 0033:0x7f3a7676abe9 [ 202.152373][ T7755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.172186][ T7755] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 202.180897][ T7755] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 202.189335][ T7755] RDX: 0000000040000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 202.197769][ T7755] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 202.205882][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.214108][ T7755] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 202.222387][ T7755] [ 202.557575][ T7766] netlink: 'syz.3.1172': attribute type 28 has an invalid length. [ 202.642381][ T7766] netlink: 'syz.3.1172': attribute type 29 has an invalid length. [ 202.727663][ T7772] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1178'. [ 202.782806][ T7774] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1179'. [ 202.829490][ T7766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1172'. [ 202.858950][ T7774] netlink: 'syz.2.1179': attribute type 3 has an invalid length. [ 202.912492][ T7774] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1179'. [ 203.373787][ T7785] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1184'. [ 203.385487][ T7784] sctp: [Deprecated]: syz.1.1183 (pid 7784) Use of int in maxseg socket option. [ 203.385487][ T7784] Use struct sctp_assoc_value instead [ 204.702319][ T7811] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1192'. [ 204.749519][ T7811] netlink: 'syz.3.1192': attribute type 3 has an invalid length. [ 204.819831][ T7815] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1194'. [ 204.821785][ T7811] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1192'. [ 205.477549][ T7820] netlink: 'syz.1.1195': attribute type 11 has an invalid length. [ 205.502802][ T7821] netlink: 'syz.1.1195': attribute type 10 has an invalid length. [ 205.596470][ T7821] device team_slave_0 left promiscuous mode [ 205.691643][ T7821] team0 (unregistering): Port device team_slave_0 removed [ 205.713375][ T7821] device team_slave_1 left promiscuous mode [ 205.775136][ T7821] team0 (unregistering): Port device team_slave_1 removed [ 205.792960][ T7821] device geneve1 left promiscuous mode [ 205.896805][ T7821] team0 (unregistering): Port device geneve1 removed [ 205.914363][ T7821] device wlan1 left promiscuous mode [ 205.950456][ T7821] team0 (unregistering): Port device wlan1 removed [ 206.611324][ T7840] FAULT_INJECTION: forcing a failure. [ 206.611324][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 206.690672][ T7840] CPU: 0 PID: 7840 Comm: syz.1.1200 Not tainted 5.15.189-syzkaller #0 [ 206.691375][ T7844] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1203'. [ 206.698892][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.698909][ T7840] Call Trace: [ 206.698918][ T7840] [ 206.698929][ T7840] dump_stack_lvl+0x168/0x230 [ 206.698959][ T7840] ? show_regs_print_info+0x20/0x20 [ 206.698980][ T7840] ? load_image+0x3b0/0x3b0 [ 206.699004][ T7840] ? __might_sleep+0xf0/0xf0 [ 206.699025][ T7840] ? __lock_acquire+0x7c60/0x7c60 [ 206.699055][ T7840] should_fail+0x38c/0x4c0 [ 206.699084][ T7840] should_failslab+0x5/0x20 [ 206.699102][ T7840] slab_pre_alloc_hook+0x51/0xc0 [ 206.699120][ T7840] ? sockfs_init_fs_context+0xa0/0xa0 [ 206.699145][ T7840] ? sock_alloc_inode+0x17/0xb0 [ 206.699167][ T7840] kmem_cache_alloc+0x3d/0x290 [ 206.699192][ T7840] ? sockfs_init_fs_context+0xa0/0xa0 [ 206.699232][ T7840] sock_alloc_inode+0x17/0xb0 [ 206.699253][ T7840] ? sockfs_init_fs_context+0xa0/0xa0 [ 206.699275][ T7840] new_inode_pseudo+0x5f/0x210 [ 206.699301][ T7840] __sock_create+0x129/0x900 [ 206.699322][ T7840] ? __sys_socket+0x28/0x170 [ 206.809138][ T7840] __sys_socket+0xe2/0x170 [ 206.813643][ T7840] __x64_sys_socket+0x76/0x80 [ 206.818351][ T7840] do_syscall_64+0x4c/0xa0 [ 206.822776][ T7840] ? clear_bhb_loop+0x30/0x80 [ 206.827468][ T7840] ? clear_bhb_loop+0x30/0x80 [ 206.832153][ T7840] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.838071][ T7840] RIP: 0033:0x7f07b5465be9 [ 206.842631][ T7840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.862251][ T7840] RSP: 002b:00007f07b36cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.870690][ T7840] RAX: ffffffffffffffda RBX: 00007f07b568cfa0 RCX: 00007f07b5465be9 [ 206.878671][ T7840] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 [ 206.886833][ T7840] RBP: 00007f07b36cd090 R08: 0000000000000000 R09: 0000000000000000 [ 206.894908][ T7840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.903494][ T7840] R13: 00007f07b568d038 R14: 00007f07b568cfa0 R15: 00007fff2a7f43c8 [ 206.912029][ T7840] [ 206.993122][ T7850] netlink: 'syz.2.1206': attribute type 19 has an invalid length. [ 207.025212][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'. [ 207.160289][ T7856] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1207'. [ 207.182891][ T7840] socket: no more sockets [ 207.255866][ T7858] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1208'. [ 207.366113][ T7858] netlink: 'syz.2.1208': attribute type 3 has an invalid length. [ 207.399264][ T7858] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1208'. [ 207.519853][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'. [ 207.742851][ T7866] delete_channel: no stack [ 207.795137][ T7866] delete_channel: no stack [ 208.075593][ T7875] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 208.153205][ T7881] device bond0 entered promiscuous mode [ 208.203029][ T7881] device bond_slave_0 entered promiscuous mode [ 208.209627][ T7881] device bond_slave_1 entered promiscuous mode [ 208.237094][ T7881] device bridge0 entered promiscuous mode [ 208.355224][ T7888] netlink: 'syz.4.1219': attribute type 28 has an invalid length. [ 208.423659][ T7888] netlink: 'syz.4.1219': attribute type 29 has an invalid length. [ 208.467652][ T7888] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1219'. [ 208.609883][ T7893] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1220'. [ 208.726269][ T7899] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1224'. [ 209.900654][ T7920] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1226'. [ 210.624923][ T7932] netlink: 'syz.4.1233': attribute type 19 has an invalid length. [ 210.644238][ T7932] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1233'. [ 211.013574][ T7933] delete_channel: no stack [ 211.032993][ T7933] delete_channel: no stack [ 211.218917][ T7955] netlink: 'syz.0.1239': attribute type 28 has an invalid length. [ 211.235216][ T7955] netlink: 'syz.0.1239': attribute type 29 has an invalid length. [ 211.641326][ T7961] netlink: 'syz.3.1241': attribute type 3 has an invalid length. [ 212.515732][ T7980] delete_channel: no stack [ 212.578164][ T7983] delete_channel: no stack [ 212.770322][ T7991] netlink: 'syz.4.1249': attribute type 10 has an invalid length. [ 212.874885][ T7991] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.960509][ T8006] netlink: 'syz.2.1254': attribute type 28 has an invalid length. [ 213.004120][ T8006] netlink: 'syz.2.1254': attribute type 29 has an invalid length. [ 213.134229][ T8011] __nla_validate_parse: 5 callbacks suppressed [ 213.134249][ T8011] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1256'. [ 213.171713][ T8006] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1254'. [ 213.205912][ T8011] netlink: 'syz.0.1256': attribute type 3 has an invalid length. [ 213.297477][ T8011] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1256'. [ 213.535200][ T8023] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1260'. [ 213.553347][ T8020] delete_channel: no stack [ 213.772819][ T8026] delete_channel: no stack [ 214.031150][ T8047] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1270'. [ 214.117716][ T8047] netlink: 'syz.1.1270': attribute type 3 has an invalid length. [ 214.152711][ T8047] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1270'. [ 214.187066][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1271'. [ 214.540080][ T8063] netlink: 'syz.1.1273': attribute type 3 has an invalid length. [ 214.636215][ T8063] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1273'. [ 214.771703][ T8039] delete_channel: no stack [ 214.778847][ T8039] delete_channel: no stack [ 214.912764][ T8060] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1273'. [ 215.414369][ T8065] delete_channel: no stack [ 215.840693][ T8082] delete_channel: no stack [ 215.905570][ T8098] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1284'. [ 215.961801][ T8098] netlink: 'syz.2.1284': attribute type 3 has an invalid length. [ 216.906664][ T8152] delete_channel: no stack [ 217.821803][ T8157] delete_channel: no stack [ 217.851829][ T8157] delete_channel: no stack [ 217.954410][ T8203] netlink: 'syz.2.1299': attribute type 28 has an invalid length. [ 218.003255][ T8203] netlink: 'syz.2.1299': attribute type 29 has an invalid length. [ 218.014108][ T8202] FAULT_INJECTION: forcing a failure. [ 218.014108][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.104095][ T8209] device wg2 entered promiscuous mode [ 218.110645][ T8202] CPU: 1 PID: 8202 Comm: syz.0.1301 Not tainted 5.15.189-syzkaller #0 [ 218.119233][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.129951][ T8202] Call Trace: [ 218.134702][ T8202] [ 218.137802][ T8202] dump_stack_lvl+0x168/0x230 [ 218.143052][ T8202] ? show_regs_print_info+0x20/0x20 [ 218.149558][ T8202] ? load_image+0x3b0/0x3b0 [ 218.154635][ T8202] ? __lock_acquire+0x7c60/0x7c60 [ 218.159969][ T8202] should_fail+0x38c/0x4c0 [ 218.164802][ T8202] _copy_from_user+0x2e/0x170 [ 218.165735][ T8203] __nla_validate_parse: 6 callbacks suppressed [ 218.165753][ T8203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1299'. [ 218.169563][ T8202] __copy_msghdr_from_user+0xaf/0x5e0 [ 218.169608][ T8202] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 218.169655][ T8202] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 218.169727][ T8202] ? trace_event_raw_event_lock+0x250/0x250 [ 218.169781][ T8202] ___sys_sendmsg+0x156/0x260 [ 218.169847][ T8202] ? __sys_sendmsg+0x250/0x250 [ 218.169924][ T8202] ? trace_event_raw_event_lock+0x250/0x250 [ 218.169952][ T8202] ? vfs_write+0x84d/0xd00 [ 218.170049][ T8202] ? __fdget+0x18b/0x210 [ 218.170109][ T8202] __se_sys_sendmsg+0x190/0x250 [ 218.170150][ T8202] ? __x64_sys_sendmsg+0x80/0x80 [ 218.170178][ T8202] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 218.170260][ T8202] ? lockdep_hardirqs_on+0x94/0x140 [ 218.170310][ T8202] do_syscall_64+0x4c/0xa0 [ 218.170336][ T8202] ? clear_bhb_loop+0x30/0x80 [ 218.170359][ T8202] ? clear_bhb_loop+0x30/0x80 [ 218.170394][ T8202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.170427][ T8202] RIP: 0033:0x7f41b94f1be9 [ 218.170455][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.170481][ T8202] RSP: 002b:00007f41b7759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.170513][ T8202] RAX: ffffffffffffffda RBX: 00007f41b9718fa0 RCX: 00007f41b94f1be9 [ 218.170537][ T8202] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 218.170555][ T8202] RBP: 00007f41b7759090 R08: 0000000000000000 R09: 0000000000000000 [ 218.170584][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.170604][ T8202] R13: 00007f41b9719038 R14: 00007f41b9718fa0 R15: 00007ffc32314188 [ 218.170684][ T8202] [ 219.049935][ T8215] delete_channel: no stack [ 219.444282][ T8251] FAULT_INJECTION: forcing a failure. [ 219.444282][ T8251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.479297][ T8251] CPU: 0 PID: 8251 Comm: syz.4.1317 Not tainted 5.15.189-syzkaller #0 [ 219.487886][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.498008][ T8251] Call Trace: [ 219.501459][ T8251] [ 219.504600][ T8251] dump_stack_lvl+0x168/0x230 [ 219.509484][ T8251] ? show_regs_print_info+0x20/0x20 [ 219.514929][ T8251] ? load_image+0x3b0/0x3b0 [ 219.520307][ T8251] ? __lock_acquire+0x7c60/0x7c60 [ 219.526816][ T8251] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.533419][ T8251] should_fail+0x38c/0x4c0 [ 219.538046][ T8251] prepare_alloc_pages+0x1e4/0x5f0 [ 219.543233][ T8251] __alloc_pages+0x10e/0x470 [ 219.548114][ T8251] ? zone_statistics+0x170/0x170 [ 219.553171][ T8251] ? __phys_addr+0xb6/0x170 [ 219.557784][ T8251] ? alloc_pages+0x438/0x550 [ 219.562426][ T8251] alloc_skb_with_frags+0x215/0x730 [ 219.567672][ T8251] sock_alloc_send_pskb+0x853/0x980 [ 219.572882][ T8251] ? __might_fault+0xb3/0x110 [ 219.577737][ T8251] ? sock_kzfree_s+0x50/0x50 [ 219.582418][ T8251] packet_sendmsg+0x3407/0x5110 [ 219.587341][ T8251] ? aa_sk_perm+0x8f0/0x8f0 [ 219.591993][ T8251] ? perf_trace_buf_update+0x9c/0x220 [ 219.597428][ T8251] ? __might_sleep+0xf0/0xf0 [ 219.602191][ T8251] ? aa_sk_perm+0x7b4/0x8f0 [ 219.607053][ T8251] ? packet_getsockopt+0x950/0x950 [ 219.612931][ T8251] ? aa_sock_msg_perm+0x94/0x150 [ 219.618543][ T8251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.623849][ T8251] ? security_socket_sendmsg+0x7c/0xa0 [ 219.629526][ T8251] ? packet_getsockopt+0x950/0x950 [ 219.634714][ T8251] ____sys_sendmsg+0x5a2/0x8c0 [ 219.639513][ T8251] ? memset+0x1e/0x40 [ 219.643512][ T8251] ? __sys_sendmsg_sock+0x30/0x30 [ 219.648577][ T8251] ? import_iovec+0x6f/0xa0 [ 219.653105][ T8251] ___sys_sendmsg+0x1f0/0x260 [ 219.657902][ T8251] ? __sys_sendmsg+0x250/0x250 [ 219.662707][ T8251] ? vfs_write+0x84d/0xd00 [ 219.667163][ T8251] ? __fdget+0x18b/0x210 [ 219.671424][ T8251] __se_sys_sendmsg+0x190/0x250 [ 219.676318][ T8251] ? __x64_sys_sendmsg+0x80/0x80 [ 219.681271][ T8251] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 219.687290][ T8251] ? lockdep_hardirqs_on+0x94/0x140 [ 219.692511][ T8251] do_syscall_64+0x4c/0xa0 [ 219.696949][ T8251] ? clear_bhb_loop+0x30/0x80 [ 219.701652][ T8251] ? clear_bhb_loop+0x30/0x80 [ 219.706439][ T8251] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.712354][ T8251] RIP: 0033:0x7febab1c8be9 [ 219.716791][ T8251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.736502][ T8251] RSP: 002b:00007feba9430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.745479][ T8251] RAX: ffffffffffffffda RBX: 00007febab3effa0 RCX: 00007febab1c8be9 [ 219.753496][ T8251] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 219.761490][ T8251] RBP: 00007feba9430090 R08: 0000000000000000 R09: 0000000000000000 [ 219.769649][ T8251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.777637][ T8251] R13: 00007febab3f0038 R14: 00007febab3effa0 R15: 00007ffeba936258 [ 219.786094][ T8251] [ 219.839560][ T8259] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1319'. [ 219.856351][ T8259] netlink: 'syz.3.1319': attribute type 3 has an invalid length. [ 219.862555][ T8254] device pim6reg1 entered promiscuous mode [ 219.918731][ T8259] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1319'. [ 220.281494][ T8285] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1322'. [ 221.004649][ T8306] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1330'. [ 221.015422][ T8306] netlink: get zone limit has 4 unknown bytes [ 221.124438][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1330'. [ 221.138703][ T8311] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1333'. [ 221.190292][ T8311] netlink: 'syz.0.1333': attribute type 3 has an invalid length. [ 221.222064][ T8311] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1333'. [ 221.265423][ T8319] device pim6reg1 entered promiscuous mode [ 221.336193][ T8323] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1335'. [ 221.496242][ T8326] delete_channel: no stack [ 221.522045][ T8334] netlink: 'syz.2.1338': attribute type 10 has an invalid length. [ 221.614967][ T8334] bridge0: port 3(team0) entered disabled state [ 221.635872][ T8334] device team0 left promiscuous mode [ 221.643326][ T8334] device team_slave_0 left promiscuous mode [ 221.650897][ T8334] device team_slave_1 left promiscuous mode [ 221.665582][ T8334] device wlan1 left promiscuous mode [ 221.676129][ T8334] bridge0: port 3(team0) entered disabled state [ 221.740231][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.770601][ T8334] device team_slave_0 entered promiscuous mode [ 221.778331][ T8334] device team_slave_1 entered promiscuous mode [ 221.786226][ T8334] device wlan1 entered promiscuous mode [ 221.798086][ T8347] netlink: 'syz.0.1340': attribute type 28 has an invalid length. [ 221.798933][ T8334] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.820522][ T8347] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 221.873439][ T8347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1340'. [ 222.608998][ T8372] FAULT_INJECTION: forcing a failure. [ 222.608998][ T8372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.652862][ T8373] netlink: 'syz.2.1348': attribute type 3 has an invalid length. [ 222.716532][ T8374] syz.1.1347[8374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.719970][ T8374] syz.1.1347[8374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.738564][ T8372] CPU: 1 PID: 8372 Comm: syz.4.1346 Not tainted 5.15.189-syzkaller #0 [ 222.758153][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.768328][ T8372] Call Trace: [ 222.771642][ T8372] [ 222.774771][ T8372] dump_stack_lvl+0x168/0x230 [ 222.779599][ T8372] ? show_regs_print_info+0x20/0x20 [ 222.784822][ T8372] ? load_image+0x3b0/0x3b0 [ 222.789494][ T8372] ? __lock_acquire+0x7c60/0x7c60 [ 222.794569][ T8372] should_fail+0x38c/0x4c0 [ 222.799108][ T8372] _copy_from_user+0x2e/0x170 [ 222.803905][ T8372] __sys_bpf+0x21b/0x670 [ 222.808180][ T8372] ? bpf_link_show_fdinfo+0x340/0x340 [ 222.813629][ T8372] __x64_sys_bpf+0x78/0x90 [ 222.818201][ T8372] do_syscall_64+0x4c/0xa0 [ 222.822663][ T8372] ? clear_bhb_loop+0x30/0x80 [ 222.827392][ T8372] ? clear_bhb_loop+0x30/0x80 [ 222.832185][ T8372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.838738][ T8372] RIP: 0033:0x7febab1c8be9 [ 222.843989][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.865107][ T8372] RSP: 002b:00007feba9430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.873563][ T8372] RAX: ffffffffffffffda RBX: 00007febab3effa0 RCX: 00007febab1c8be9 [ 222.881903][ T8372] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 222.890098][ T8372] RBP: 00007feba9430090 R08: 0000000000000000 R09: 0000000000000000 [ 222.898196][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.906280][ T8372] R13: 00007febab3f0038 R14: 00007febab3effa0 R15: 00007ffeba936258 [ 222.914382][ T8372] [ 223.305235][ T8390] __nla_validate_parse: 4 callbacks suppressed [ 223.305254][ T8390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1353'. [ 223.321464][ T8390] netlink: get zone limit has 4 unknown bytes [ 223.330669][ T8381] delete_channel: no stack [ 223.342963][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 223.455899][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1353'. [ 223.657518][ T8406] netlink: 'syz.2.1354': attribute type 3 has an invalid length. [ 223.676547][ T8406] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1354'. [ 223.705340][ T8408] FAULT_INJECTION: forcing a failure. [ 223.705340][ T8408] name failslab, interval 1, probability 0, space 0, times 0 [ 223.749733][ T8408] CPU: 0 PID: 8408 Comm: syz.4.1356 Not tainted 5.15.189-syzkaller #0 [ 223.757988][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.768335][ T8408] Call Trace: [ 223.771684][ T8408] [ 223.774885][ T8408] dump_stack_lvl+0x168/0x230 [ 223.779768][ T8408] ? show_regs_print_info+0x20/0x20 [ 223.785157][ T8408] ? load_image+0x3b0/0x3b0 [ 223.789907][ T8408] ? __might_sleep+0xf0/0xf0 [ 223.794602][ T8408] ? __lock_acquire+0x7c60/0x7c60 [ 223.799696][ T8408] ? vfs_write+0x84d/0xd00 [ 223.804207][ T8408] should_fail+0x38c/0x4c0 [ 223.808706][ T8408] should_failslab+0x5/0x20 [ 223.813248][ T8408] slab_pre_alloc_hook+0x51/0xc0 [ 223.818372][ T8408] ? sockfs_init_fs_context+0xa0/0xa0 [ 223.823972][ T8408] ? sock_alloc_inode+0x17/0xb0 [ 223.829017][ T8408] kmem_cache_alloc+0x3d/0x290 [ 223.833835][ T8408] ? sockfs_init_fs_context+0xa0/0xa0 [ 223.839407][ T8408] sock_alloc_inode+0x17/0xb0 [ 223.844297][ T8408] ? sockfs_init_fs_context+0xa0/0xa0 [ 223.849805][ T8408] new_inode_pseudo+0x5f/0x210 [ 223.854710][ T8408] __sock_create+0x129/0x900 [ 223.859580][ T8408] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.865899][ T8408] __sys_socket+0xe2/0x170 [ 223.870552][ T8408] __x64_sys_socket+0x76/0x80 [ 223.875414][ T8408] do_syscall_64+0x4c/0xa0 [ 223.880329][ T8408] ? clear_bhb_loop+0x30/0x80 [ 223.885394][ T8408] ? clear_bhb_loop+0x30/0x80 [ 223.890152][ T8408] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.896427][ T8408] RIP: 0033:0x7febab1c8be9 [ 223.901324][ T8408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.923879][ T8408] RSP: 002b:00007feba9430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 223.932521][ T8408] RAX: ffffffffffffffda RBX: 00007febab3effa0 RCX: 00007febab1c8be9 [ 223.942218][ T8408] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000028 [ 223.950316][ T8408] RBP: 00007feba9430090 R08: 0000000000000000 R09: 0000000000000000 [ 223.958356][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.967029][ T8408] R13: 00007febab3f0038 R14: 00007febab3effa0 R15: 00007ffeba936258 [ 223.975445][ T8408] [ 224.065328][ T8408] socket: no more sockets [ 224.553354][ T8432] device pim6reg1 entered promiscuous mode [ 224.611194][ T8436] netlink: 'syz.4.1363': attribute type 10 has an invalid length. [ 224.660095][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.696240][ T8433] delete_channel: no stack [ 224.801224][ T8438] bond0: (slave bridge0): Error: Slave device does not support XDP [ 224.841877][ T8441] netlink: 'syz.0.1366': attribute type 10 has an invalid length. [ 224.872435][ T8441] bridge0: port 3(team0) entered disabled state [ 224.877321][ T8444] syz.3.1368[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.881673][ T8444] syz.3.1368[8444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.898034][ T8441] device team0 left promiscuous mode [ 224.916896][ T8441] device team_slave_0 left promiscuous mode [ 224.924414][ T8441] device team_slave_1 left promiscuous mode [ 224.931839][ T8441] device geneve1 left promiscuous mode [ 224.938761][ T8441] bridge0: port 3(team0) entered disabled state [ 224.950652][ T8441] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.959820][ T8441] device team0 entered promiscuous mode [ 224.966365][ T8441] device team_slave_0 entered promiscuous mode [ 224.973354][ T8441] device team_slave_1 entered promiscuous mode [ 224.979805][ T8441] device geneve1 entered promiscuous mode [ 224.987305][ T8441] bond0: (slave team0): Enslaving as an active interface with an up link [ 226.107902][ T8481] FAULT_INJECTION: forcing a failure. [ 226.107902][ T8481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.171076][ T8481] CPU: 1 PID: 8481 Comm: syz.3.1380 Not tainted 5.15.189-syzkaller #0 [ 226.180099][ T8481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.191339][ T8481] Call Trace: [ 226.194920][ T8481] [ 226.198662][ T8481] dump_stack_lvl+0x168/0x230 [ 226.204349][ T8481] ? show_regs_print_info+0x20/0x20 [ 226.209695][ T8481] ? load_image+0x3b0/0x3b0 [ 226.214667][ T8481] ? __lock_acquire+0x7c60/0x7c60 [ 226.220796][ T8481] should_fail+0x38c/0x4c0 [ 226.225778][ T8481] _copy_from_user+0x2e/0x170 [ 226.230735][ T8481] __copy_msghdr_from_user+0x448/0x5e0 [ 226.236341][ T8481] ? verify_lock_unused+0x140/0x140 [ 226.241694][ T8481] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 226.247470][ T8481] ___sys_sendmsg+0x156/0x260 [ 226.252296][ T8481] ? __sys_sendmsg+0x250/0x250 [ 226.258340][ T8481] ? vfs_write+0x84d/0xd00 [ 226.263254][ T8481] ? __fdget+0x18b/0x210 [ 226.267563][ T8481] __se_sys_sendmsg+0x190/0x250 [ 226.272477][ T8481] ? __x64_sys_sendmsg+0x80/0x80 [ 226.277869][ T8481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 226.284101][ T8481] ? lockdep_hardirqs_on+0x94/0x140 [ 226.289953][ T8481] do_syscall_64+0x4c/0xa0 [ 226.294518][ T8481] ? clear_bhb_loop+0x30/0x80 [ 226.299846][ T8481] ? clear_bhb_loop+0x30/0x80 [ 226.304961][ T8481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.310966][ T8481] RIP: 0033:0x7f3a7676abe9 [ 226.315520][ T8481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.335564][ T8481] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.344037][ T8481] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 226.352300][ T8481] RDX: 0000000020040000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 226.360618][ T8481] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 226.368733][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.376891][ T8481] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 226.385718][ T8481] [ 226.411805][ T8483] netlink: 'syz.1.1379': attribute type 28 has an invalid length. [ 226.431816][ T8486] device pim6reg1 entered promiscuous mode [ 226.445760][ T8483] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 226.462449][ T8483] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1379'. [ 226.486794][ T8474] delete_channel: no stack [ 226.564020][ T8488] syz.4.1382[8488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.564211][ T8488] syz.4.1382[8488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.962337][ T8511] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 226.987826][ T8511] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1390'. [ 227.168598][ T8521] netlink: 'syz.2.1393': attribute type 3 has an invalid length. [ 227.179246][ T8521] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1393'. [ 227.268376][ T8531] device pim6reg1 entered promiscuous mode [ 227.500495][ T8529] delete_channel: no stack [ 227.550664][ T8534] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1398'. [ 227.632846][ T8542] syz.2.1399[8542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.633039][ T8542] syz.2.1399[8542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.381454][ T8554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1404'. [ 229.233664][ T8544] delete_channel: no stack [ 229.433219][ T8570] netlink: set zone limit has 8 unknown bytes [ 229.441341][ T8569] device pim6reg1 entered promiscuous mode [ 229.736397][ T8586] netlink: 'syz.3.1414': attribute type 3 has an invalid length. [ 229.791054][ T8586] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1414'. [ 229.876048][ T8599] FAULT_INJECTION: forcing a failure. [ 229.876048][ T8599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.920344][ T8599] CPU: 0 PID: 8599 Comm: syz.4.1419 Not tainted 5.15.189-syzkaller #0 [ 229.928662][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.939008][ T8599] Call Trace: [ 229.942331][ T8599] [ 229.945293][ T8599] dump_stack_lvl+0x168/0x230 [ 229.950015][ T8599] ? show_regs_print_info+0x20/0x20 [ 229.955244][ T8599] ? load_image+0x3b0/0x3b0 [ 229.959890][ T8599] ? __lock_acquire+0x7c60/0x7c60 [ 229.964956][ T8599] should_fail+0x38c/0x4c0 [ 229.969409][ T8599] _copy_from_user+0x2e/0x170 [ 229.974115][ T8599] __sys_bpf+0x21b/0x670 [ 229.978393][ T8599] ? bpf_link_show_fdinfo+0x340/0x340 [ 229.983798][ T8599] ? vtime_user_exit+0x2dc/0x400 [ 229.988767][ T8599] __x64_sys_bpf+0x78/0x90 [ 229.993205][ T8599] do_syscall_64+0x4c/0xa0 [ 229.997637][ T8599] ? clear_bhb_loop+0x30/0x80 [ 230.002321][ T8599] ? clear_bhb_loop+0x30/0x80 [ 230.007009][ T8599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.012916][ T8599] RIP: 0033:0x7febab1c8be9 [ 230.017345][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.037048][ T8599] RSP: 002b:00007feba9430038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.045570][ T8599] RAX: ffffffffffffffda RBX: 00007febab3effa0 RCX: 00007febab1c8be9 [ 230.054368][ T8599] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 230.062361][ T8599] RBP: 00007feba9430090 R08: 0000000000000000 R09: 0000000000000000 [ 230.070344][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.078516][ T8599] R13: 00007febab3f0038 R14: 00007febab3effa0 R15: 00007ffeba936258 [ 230.087731][ T8599] [ 230.242716][ T8610] device pim6reg1 entered promiscuous mode [ 231.128945][ T8612] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1420'. [ 231.220561][ T8637] netlink: 'syz.1.1431': attribute type 3 has an invalid length. [ 231.270804][ T8637] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1431'. [ 232.884989][ T8658] device pim6reg1 entered promiscuous mode [ 234.264617][ T8679] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 234.395817][ T8679] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1442'. [ 235.721236][ T8703] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1448'. [ 236.889960][ T8722] netlink: 'syz.3.1455': attribute type 3 has an invalid length. [ 236.908820][ T8722] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1455'. [ 237.998640][ T8739] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1460'. [ 239.236863][ T8754] FAULT_INJECTION: forcing a failure. [ 239.236863][ T8754] name failslab, interval 1, probability 0, space 0, times 0 [ 239.323317][ T8754] CPU: 0 PID: 8754 Comm: syz.2.1466 Not tainted 5.15.189-syzkaller #0 [ 239.331557][ T8754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.342371][ T8754] Call Trace: [ 239.345769][ T8754] [ 239.348723][ T8754] dump_stack_lvl+0x168/0x230 [ 239.353468][ T8754] ? show_regs_print_info+0x20/0x20 [ 239.358691][ T8754] ? load_image+0x3b0/0x3b0 [ 239.363326][ T8754] ? __might_sleep+0xf0/0xf0 [ 239.367947][ T8754] ? __lock_acquire+0x7c60/0x7c60 [ 239.373023][ T8754] should_fail+0x38c/0x4c0 [ 239.377506][ T8754] should_failslab+0x5/0x20 [ 239.382043][ T8754] slab_pre_alloc_hook+0x51/0xc0 [ 239.387010][ T8754] __kmalloc+0x6b/0x330 [ 239.391188][ T8754] ? bpf_test_init+0xf8/0x1b0 [ 239.395986][ T8754] ? __lock_acquire+0x7c60/0x7c60 [ 239.401664][ T8754] bpf_test_init+0xf8/0x1b0 [ 239.406560][ T8754] bpf_prog_test_run_skb+0x181/0x1180 [ 239.412088][ T8754] ? __fget_files+0x40f/0x480 [ 239.416813][ T8754] ? cpu_online+0x60/0x60 [ 239.421216][ T8754] bpf_prog_test_run+0x31e/0x390 [ 239.426194][ T8754] __sys_bpf+0x535/0x670 [ 239.430482][ T8754] ? bpf_link_show_fdinfo+0x340/0x340 [ 239.436987][ T8754] ? rcu_nmi_exit+0x6f/0xf0 [ 239.441587][ T8754] ? vtime_user_exit+0x2dc/0x400 [ 239.446927][ T8754] __x64_sys_bpf+0x78/0x90 [ 239.451440][ T8754] do_syscall_64+0x4c/0xa0 [ 239.456614][ T8754] ? clear_bhb_loop+0x30/0x80 [ 239.461662][ T8754] ? clear_bhb_loop+0x30/0x80 [ 239.466399][ T8754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 239.473423][ T8754] RIP: 0033:0x7fc23b521be9 [ 239.478378][ T8754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.498550][ T8754] RSP: 002b:00007fc239789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.507024][ T8754] RAX: ffffffffffffffda RBX: 00007fc23b748fa0 RCX: 00007fc23b521be9 [ 239.515314][ T8754] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 239.523565][ T8754] RBP: 00007fc239789090 R08: 0000000000000000 R09: 0000000000000000 [ 239.531574][ T8754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.539587][ T8754] R13: 00007fc23b749038 R14: 00007fc23b748fa0 R15: 00007ffea452d718 [ 239.547634][ T8754] [ 241.594034][ T8777] netlink: 18187 bytes leftover after parsing attributes in process `syz.3.1473'. [ 242.859593][ T8792] netlink: set zone limit has 8 unknown bytes [ 243.486958][ T8800] netlink: 80128 bytes leftover after parsing attributes in process `syz.2.1480'. [ 244.864518][ T8815] netlink: 'syz.3.1485': attribute type 28 has an invalid length. [ 244.931526][ T8815] netlink: 'syz.3.1485': attribute type 29 has an invalid length. [ 245.000122][ T8815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1485'. [ 248.348313][ T8849] device pim6reg1 entered promiscuous mode [ 248.900849][ T8855] netlink: 'syz.2.1498': attribute type 3 has an invalid length. [ 248.901789][ T8843] chnl_net:caif_netlink_parms(): no params data found [ 248.922521][ T8855] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1498'. [ 249.716922][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.750868][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.807541][ T8843] device bridge_slave_0 entered promiscuous mode [ 249.872252][ T1336] Bluetooth: hci5: command 0x0409 tx timeout [ 249.876204][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.942388][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.012441][ T8843] device bridge_slave_1 entered promiscuous mode [ 250.390124][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.474410][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.665255][ T8843] team0: Port device team_slave_0 added [ 250.751419][ T8843] team0: Port device team_slave_1 added [ 251.557445][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.576739][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.784960][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.923712][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.962319][ T1336] Bluetooth: hci5: command 0x041b tx timeout [ 252.006712][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.211029][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.433303][ T1336] Bluetooth: hci6: command 0x0409 tx timeout [ 252.493003][ T8892] delete_channel: no stack [ 252.640100][ T8843] device hsr_slave_0 entered promiscuous mode [ 252.724388][ T8843] device hsr_slave_1 entered promiscuous mode [ 252.750372][ T8843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.798934][ T8843] Cannot create hsr debugfs directory [ 253.626311][ T8897] delete_channel: no stack [ 253.642561][ T1336] Bluetooth: hci7: command 0x0409 tx timeout [ 254.033871][ T1110] Bluetooth: hci5: command 0x040f tx timeout [ 254.329749][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 254.384429][ T8913] netlink: 'syz.2.1514': attribute type 28 has an invalid length. [ 254.515774][ T1110] Bluetooth: hci6: command 0x041b tx timeout [ 254.525334][ T8913] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 254.625125][ T8913] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'. [ 254.996227][ T8889] chnl_net:caif_netlink_parms(): no params data found [ 255.562877][ T8843] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.633029][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.640969][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.712407][ T1110] Bluetooth: hci7: command 0x041b tx timeout [ 255.741536][ T8869] device bridge_slave_0 entered promiscuous mode [ 255.798116][ T8843] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.821647][ T8843] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 255.922492][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.930187][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.994784][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.001136][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028583][ T8869] device bridge_slave_1 entered promiscuous mode [ 256.114633][ T4240] Bluetooth: hci5: command 0x0419 tx timeout [ 256.192901][ T8927] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1516'. [ 256.224940][ T8843] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.353936][ T8889] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.392391][ T8889] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.400885][ T8889] device bridge_slave_0 entered promiscuous mode [ 256.557091][ T8889] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.582293][ T8889] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.590772][ T8889] device bridge_slave_1 entered promiscuous mode [ 256.612267][ T4240] Bluetooth: hci6: command 0x040f tx timeout [ 256.796094][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.846101][ T8932] device pim6reg1 entered promiscuous mode [ 256.927841][ T8942] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 257.024577][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.125703][ T8889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.192341][ T8942] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 257.298403][ T8889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.411638][ T8943] netlink: 'syz.2.1518': attribute type 29 has an invalid length. [ 257.454927][ T8869] team0: Port device team_slave_0 added [ 257.620559][ T8869] team0: Port device team_slave_1 added [ 257.647972][ T8889] team0: Port device team_slave_0 added [ 257.792487][ T1110] Bluetooth: hci7: command 0x040f tx timeout [ 258.006196][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.043618][ T8944] delete_channel: no stack [ 258.075910][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.202660][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.267684][ T8889] team0: Port device team_slave_1 added [ 258.504185][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.512011][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.674102][ T1110] Bluetooth: hci6: command 0x0419 tx timeout [ 258.684249][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.835980][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.882265][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.066297][ T8889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.204703][ T8889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.211790][ T8889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.412555][ T8889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.497733][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.583856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.610041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.872540][ T23] Bluetooth: hci7: command 0x0419 tx timeout [ 259.924095][ T8889] device hsr_slave_0 entered promiscuous mode [ 259.968493][ T8889] device hsr_slave_1 entered promiscuous mode [ 260.023156][ T8889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.031141][ T8889] Cannot create hsr debugfs directory [ 260.087708][ T8960] netlink: 'syz.2.1523': attribute type 3 has an invalid length. [ 260.100265][ T8869] device hsr_slave_0 entered promiscuous mode [ 260.111220][ T8869] device hsr_slave_1 entered promiscuous mode [ 260.119078][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.130675][ T8869] Cannot create hsr debugfs directory [ 260.137975][ T8960] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1523'. [ 260.156068][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.294733][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 260.345647][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 260.360743][ T8963] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1525'. [ 260.409567][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.417213][ T8145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.565005][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.613370][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.720834][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.728181][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.794658][ T8964] delete_channel: no stack [ 261.209271][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.362976][ T8972] delete_channel: no stack [ 261.406595][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.511906][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.526854][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.565678][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.618873][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.638238][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.655044][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.688794][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.807518][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.873644][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.015054][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.048303][ T8976] delete_channel: no stack [ 262.067451][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.158903][ T8843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.171560][ T8982] netlink: 'syz.2.1530': attribute type 29 has an invalid length. [ 262.258046][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.308169][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.346069][ T8982] netlink: 'syz.2.1530': attribute type 29 has an invalid length. [ 262.380923][ T8983] netlink: 'syz.2.1530': attribute type 29 has an invalid length. [ 262.734264][ T8994] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 262.781090][ T8994] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1533'. [ 262.840031][ T8996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1534'. [ 263.143175][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.151185][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 263.209686][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.589668][ T8869] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.656957][ T8869] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.747041][ T8869] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.761984][ T9002] delete_channel: no stack [ 263.825796][ T8869] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.114217][ T9012] device pim6reg1 entered promiscuous mode [ 264.300060][ T8889] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.356650][ T8889] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.406148][ T8889] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 264.482967][ T8889] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 264.536587][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.552995][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.701028][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 264.743351][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.785489][ T8843] device veth0_vlan entered promiscuous mode [ 264.796602][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.806646][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.863157][ T8843] device veth1_vlan entered promiscuous mode [ 264.940933][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.957307][ T8889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.002323][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 265.017366][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 265.027639][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.036473][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.061470][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.083519][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.097897][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.108458][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.121657][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.138893][ T8843] device veth0_macvtap entered promiscuous mode [ 265.172015][ T8889] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.184396][ T8843] device veth1_macvtap entered promiscuous mode [ 265.196451][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.206969][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.216500][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.226450][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.235827][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.243800][ T5447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.274091][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.289015][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.297779][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.309161][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.320158][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.327824][ T5447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.344997][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.355782][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.365979][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.373832][ T5447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.382769][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.391739][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.401266][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 265.429210][ T154] device hsr_slave_0 left promiscuous mode [ 265.437444][ T154] device hsr_slave_1 left promiscuous mode [ 265.446157][ T154] device macsec0 left promiscuous mode [ 265.452250][ T154] bridge0: port 4(macsec0) entered disabled state [ 265.468470][ T154] bridge0: port 3(bond0) entered disabled state [ 265.478249][ T154] device bridge_slave_1 left promiscuous mode [ 265.484733][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.496492][ T154] device bridge_slave_0 left promiscuous mode [ 265.503019][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.516889][ T154] device veth1_macvtap left promiscuous mode [ 265.523976][ T154] device veth0_macvtap left promiscuous mode [ 265.530459][ T154] device veth1_vlan left promiscuous mode [ 265.645916][ T154] team0 (unregistering): Port device geneve1 removed [ 265.740213][ T154] team0 (unregistering): Port device team_slave_1 removed [ 265.757673][ T154] team0 (unregistering): Port device team_slave_0 removed [ 265.772489][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.781923][ T154] device bond_slave_1 left promiscuous mode [ 265.796392][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.807093][ T154] device bond_slave_0 left promiscuous mode [ 265.854060][ T154] team0 (unregistering): Port device bridge0 removed [ 265.878297][ T154] bond0 (unregistering): Released all slaves [ 265.942289][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.951549][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.962312][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.969669][ T5447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.977964][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.987927][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.997249][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.009440][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.047622][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 266.058977][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.070263][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.101803][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.114899][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.125179][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.135469][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.145246][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.158167][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.167689][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.177598][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.187502][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.196262][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.209914][ T8843] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.232214][ T8843] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.250162][ T8843] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.262190][ T8843] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.303132][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.323181][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.356431][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.365640][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.376328][ T8869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.410112][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.419983][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.439771][ T8889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.473028][ T8889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.502569][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.511428][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.714776][ T8145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.742201][ T8145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.781795][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.785001][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.810366][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.856047][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.012041][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.046969][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.087922][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.151723][ T8889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.215252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.235927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.344274][ T9075] netlink: 'syz.2.1547': attribute type 3 has an invalid length. [ 267.448926][ T9075] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1547'. [ 268.254653][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.292734][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.385342][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.415165][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.462022][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.475488][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.519453][ T8889] device veth0_vlan entered promiscuous mode [ 268.539842][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.673337][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.710884][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.741688][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.756001][ T9112] netlink: 'syz.2.1543': attribute type 28 has an invalid length. [ 268.770670][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.894191][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.092262][ T9112] netlink: 'syz.2.1543': attribute type 29 has an invalid length. [ 269.103327][ T8869] device veth0_vlan entered promiscuous mode [ 269.121986][ T8889] device veth1_vlan entered promiscuous mode [ 269.142212][ T9112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1543'. [ 269.242818][ T8869] device veth1_vlan entered promiscuous mode [ 269.264500][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.324768][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.361807][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.371721][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.381631][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.448625][ T8889] device veth0_macvtap entered promiscuous mode [ 269.483922][ T9121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1549'. [ 269.543609][ T8889] device veth1_macvtap entered promiscuous mode [ 269.585236][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.615461][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.638642][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.672704][ T8869] device veth0_macvtap entered promiscuous mode [ 269.731057][ T8869] device veth1_macvtap entered promiscuous mode [ 269.783936][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.812514][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.867514][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.002937][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 270.020937][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 270.030269][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.059734][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.148102][ T8889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.179874][ T8889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.216157][ T8889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.263619][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.300947][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.341320][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.378901][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.403796][ T9143] delete_channel: no stack [ 270.414399][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.436375][ T9146] device pim6reg1 entered promiscuous mode [ 270.453940][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.475442][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.500432][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 270.520714][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.548415][ T8889] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.569387][ T8889] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.579054][ T8889] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.595760][ T8889] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.944324][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.979659][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.993763][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.016005][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.036903][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.050914][ T8869] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.060283][ T8869] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.069390][ T8869] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.078807][ T8869] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.164719][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 271.183749][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.359863][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.376148][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.473303][ T9174] netlink: 'syz.5.1559': attribute type 28 has an invalid length. [ 271.500855][ T9174] netlink: 'syz.5.1559': attribute type 29 has an invalid length. [ 271.514332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.548009][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.573859][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.586246][ T8145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.596315][ T9174] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1559'. [ 271.606419][ T8145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.636037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.664008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.730189][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.811035][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.850175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.030746][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.454070][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.674404][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.821162][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.852758][ T9190] delete_channel: no stack [ 272.900419][ T9207] sctp: [Deprecated]: syz.2.1568 (pid 9207) Use of int in max_burst socket option deprecated. [ 272.900419][ T9207] Use struct sctp_assoc_value instead [ 273.041313][ T9210] device pim6reg1 entered promiscuous mode [ 273.249653][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.271505][ T9221] netlink: 'syz.5.1572': attribute type 3 has an invalid length. [ 273.309765][ T9221] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1572'. [ 273.376705][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.440818][ T9226] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1574'. [ 273.519671][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.576404][ T9232] netlink: 'syz.5.1576': attribute type 21 has an invalid length. [ 273.622212][ T9232] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1576'. [ 273.661837][ T9232] netlink: 'syz.5.1576': attribute type 4 has an invalid length. [ 273.680113][ T9232] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1576'. [ 273.765649][ T9240] netlink: set zone limit has 8 unknown bytes [ 273.966081][ T9241] netlink: 'syz.5.1576': attribute type 39 has an invalid length. [ 274.081934][ T9242] delete_channel: no stack [ 274.307732][ T9258] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1586'. [ 274.400235][ T9266] netlink: 'syz.6.1587': attribute type 3 has an invalid length. [ 274.425246][ T9266] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1587'. [ 274.495445][ T9269] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1588'. [ 274.764070][ T154] device ip6gretap0 left promiscuous mode [ 274.814326][ T154] Ÿë: port 1(ip6gretap0) entered disabled state [ 275.513910][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.569834][ T9290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.628190][ T9290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.676537][ T9290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.416668][ T9306] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.655833][ T9309] delete_channel: no stack [ 277.116283][ T9334] netlink: 'syz.6.1602': attribute type 3 has an invalid length. [ 277.175069][ T9334] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1602'. [ 277.240255][ T9326] netlink: 'syz.3.1600': attribute type 28 has an invalid length. [ 277.262839][ T9326] netlink: 'syz.3.1600': attribute type 29 has an invalid length. [ 277.312874][ T9326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1600'. [ 277.437645][ T9325] delete_channel: no stack [ 277.947992][ T9352] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1606'. [ 278.154204][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.182688][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.204025][ T9359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.244143][ T9359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.570616][ T9368] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1609'. [ 279.027128][ T9391] netlink: 'syz.6.1614': attribute type 28 has an invalid length. [ 279.049326][ T9390] netlink: 'syz.3.1616': attribute type 3 has an invalid length. [ 279.128931][ T9391] netlink: 'syz.6.1614': attribute type 29 has an invalid length. [ 279.145076][ T9390] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1616'. [ 279.156684][ T9386] delete_channel: no stack [ 279.192797][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1614'. [ 279.355304][ T9392] delete_channel: no stack [ 279.462351][ T9399] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.733836][ T9407] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 279.815479][ T9413] netlink: 4063 bytes leftover after parsing attributes in process `syz.3.1621'. [ 279.976321][ T9407] bridge0: port 3(team0) entered disabled state [ 280.017224][ T9407] device team0 left promiscuous mode [ 280.034353][ T9407] device team_slave_0 left promiscuous mode [ 280.060613][ T9407] device team_slave_1 left promiscuous mode [ 280.085702][ T9407] bridge0: port 3(team0) entered disabled state [ 280.134800][ T9407] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.163902][ T9407] bond0: (slave team0): Enslaving as an active interface with an up link [ 280.247216][ T9424] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1624'. [ 280.274900][ T154] device hsr_slave_0 left promiscuous mode [ 280.282029][ T154] device hsr_slave_1 left promiscuous mode [ 280.326568][ T154] device bridge_slave_1 left promiscuous mode [ 280.353986][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.385427][ T154] device bridge_slave_0 left promiscuous mode [ 280.391777][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.430683][ T154] device hsr_slave_0 left promiscuous mode [ 280.483139][ T154] device hsr_slave_1 left promiscuous mode [ 280.509498][ T154] device veth1_macvtap left promiscuous mode [ 280.523448][ T154] device veth0_macvtap left promiscuous mode [ 280.529684][ T154] device veth1_vlan left promiscuous mode [ 280.558817][ T154] device veth1_macvtap left promiscuous mode [ 280.576368][ T154] device veth0_macvtap left promiscuous mode [ 280.590812][ T154] device veth1_vlan left promiscuous mode [ 280.918848][ T154] device geneve1 left promiscuous mode [ 280.935538][ T154] team0 (unregistering): Port device geneve1 removed [ 281.087914][ T154] device team_slave_1 left promiscuous mode [ 281.097070][ T154] team0 (unregistering): Port device team_slave_1 removed [ 281.112055][ T154] device team_slave_0 left promiscuous mode [ 281.125503][ T154] team0 (unregistering): Port device team_slave_0 removed [ 281.140485][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.150767][ T154] device bond_slave_1 left promiscuous mode [ 281.166353][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.178362][ T154] device bond_slave_0 left promiscuous mode [ 281.248241][ T154] bond0 (unregistering): (slave team0): Releasing backup interface [ 281.257587][ T154] device team0 left promiscuous mode [ 281.286549][ T154] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 281.295852][ T154] device bridge0 left promiscuous mode [ 281.301666][ T154] bond0 (unregistering): Released all slaves [ 281.452800][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.473871][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.491187][ T154] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 281.547603][ T154] bond0 (unregistering): Released all slaves [ 282.574386][ T9457] delete_channel: no stack [ 282.580199][ T9457] delete_channel: no stack [ 282.740636][ T9477] netlink: 'syz.5.1637': attribute type 3 has an invalid length. [ 282.854621][ T9477] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1637'. [ 283.116098][ T9466] delete_channel: no stack [ 283.628838][ T9499] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1642'. [ 284.546509][ T9526] device syzkaller0 entered promiscuous mode [ 284.559143][ T9533] netlink: 'syz.6.1649': attribute type 3 has an invalid length. [ 284.574188][ T9533] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1649'. [ 284.590435][ T9529] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1659'. [ 284.780872][ T9537] delete_channel: no stack [ 285.018742][ T9545] device pim6reg1 entered promiscuous mode [ 285.352178][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.389521][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.456588][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.475221][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.760423][ T9572] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.1658'. [ 285.947863][ T9586] netlink: 'syz.5.1662': attribute type 3 has an invalid length. [ 285.983302][ T9583] delete_channel: no stack [ 286.020325][ T9586] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1662'. [ 286.345406][ T9601] device pim6reg1 entered promiscuous mode [ 286.493534][ T9603] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1669'. [ 286.844680][ T9613] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 286.948926][ T9616] netlink: 'syz.7.1673': attribute type 3 has an invalid length. [ 286.977058][ T9616] netlink: 118424 bytes leftover after parsing attributes in process `syz.7.1673'. [ 287.201849][ T9625] delete_channel: no stack [ 287.257793][ T9632] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 287.292301][ T9632] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1677'. [ 287.467041][ T9647] device pim6reg1 entered promiscuous mode [ 287.916090][ T9667] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1690'. [ 288.000467][ T9671] FAULT_INJECTION: forcing a failure. [ 288.000467][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.104729][ T9671] CPU: 1 PID: 9671 Comm: syz.7.1691 Not tainted 5.15.189-syzkaller #0 [ 288.112957][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.123351][ T9671] Call Trace: [ 288.126806][ T9671] [ 288.129788][ T9671] dump_stack_lvl+0x168/0x230 [ 288.134686][ T9671] ? show_regs_print_info+0x20/0x20 [ 288.140119][ T9671] ? load_image+0x3b0/0x3b0 [ 288.145158][ T9671] ? __lock_acquire+0x7c60/0x7c60 [ 288.150749][ T9671] should_fail+0x38c/0x4c0 [ 288.155337][ T9671] _copy_from_user+0x2e/0x170 [ 288.160752][ T9671] __sys_bpf+0x21b/0x670 [ 288.165230][ T9671] ? bpf_link_show_fdinfo+0x340/0x340 [ 288.170761][ T9671] __x64_sys_bpf+0x78/0x90 [ 288.175239][ T9671] do_syscall_64+0x4c/0xa0 [ 288.179795][ T9671] ? clear_bhb_loop+0x30/0x80 [ 288.184611][ T9671] ? clear_bhb_loop+0x30/0x80 [ 288.189346][ T9671] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.195277][ T9671] RIP: 0033:0x7f368f452be9 [ 288.199722][ T9671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.219495][ T9671] RSP: 002b:00007f368d6ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 288.227945][ T9671] RAX: ffffffffffffffda RBX: 00007f368f679fa0 RCX: 00007f368f452be9 [ 288.235944][ T9671] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 288.243939][ T9671] RBP: 00007f368d6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 288.252134][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.260214][ T9671] R13: 00007f368f67a038 R14: 00007f368f679fa0 R15: 00007ffc661f8658 [ 288.268499][ T9671] [ 288.477441][ T9684] netlink: 'syz.3.1695': attribute type 3 has an invalid length. [ 288.572194][ T9684] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1695'. [ 288.873653][ T9696] device pim6reg1 entered promiscuous mode [ 289.238294][ T9714] netlink: 17267 bytes leftover after parsing attributes in process `syz.6.1706'. [ 289.895643][ T9738] netlink: 'syz.2.1711': attribute type 3 has an invalid length. [ 289.934510][ T9738] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1711'. [ 290.013173][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1712'. [ 290.038175][ T9745] device pim6reg1 entered promiscuous mode [ 290.960585][ T9791] netlink: 'syz.5.1727': attribute type 3 has an invalid length. [ 290.991954][ T9791] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1727'. [ 291.377290][ T9802] device pim6reg1 entered promiscuous mode [ 291.606035][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1731'. [ 292.633024][ T9830] delete_channel: no stack [ 292.713978][ T9843] netlink: 'syz.2.1737': attribute type 28 has an invalid length. [ 292.748205][ T9843] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 292.806240][ T9843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 293.706542][ T9876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1750'. [ 294.014812][ T9896] device pim6reg1 entered promiscuous mode [ 294.145034][ T9901] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 294.279079][ T9905] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1759'. [ 294.353247][ T9901] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 294.473812][ T9906] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 296.623390][ T9945] netlink: 'syz.6.1768': attribute type 1 has an invalid length. [ 296.633319][ T9949] FAULT_INJECTION: forcing a failure. [ 296.633319][ T9949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.692529][ T9950] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1770'. [ 296.723593][ T9949] CPU: 0 PID: 9949 Comm: syz.3.1769 Not tainted 5.15.189-syzkaller #0 [ 296.731803][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.741983][ T9949] Call Trace: [ 296.745292][ T9949] [ 296.748336][ T9949] dump_stack_lvl+0x168/0x230 [ 296.753042][ T9949] ? show_regs_print_info+0x20/0x20 [ 296.758484][ T9949] ? load_image+0x3b0/0x3b0 [ 296.763053][ T9949] ? __lock_acquire+0x7c60/0x7c60 [ 296.768216][ T9949] should_fail+0x38c/0x4c0 [ 296.772669][ T9949] _copy_from_user+0x2e/0x170 [ 296.777370][ T9949] __copy_msghdr_from_user+0x448/0x5e0 [ 296.782854][ T9949] ? verify_lock_unused+0x140/0x140 [ 296.788093][ T9949] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 296.793605][ T9949] ___sys_sendmsg+0x156/0x260 [ 296.798365][ T9949] ? __sys_sendmsg+0x250/0x250 [ 296.803167][ T9949] ? vfs_write+0x84d/0xd00 [ 296.807628][ T9949] ? __fdget+0x18b/0x210 [ 296.811938][ T9949] __se_sys_sendmsg+0x190/0x250 [ 296.816816][ T9949] ? __x64_sys_sendmsg+0x80/0x80 [ 296.821776][ T9949] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 296.827790][ T9949] ? lockdep_hardirqs_on+0x94/0x140 [ 296.833014][ T9949] do_syscall_64+0x4c/0xa0 [ 296.837457][ T9949] ? clear_bhb_loop+0x30/0x80 [ 296.842153][ T9949] ? clear_bhb_loop+0x30/0x80 [ 296.846863][ T9949] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.852782][ T9949] RIP: 0033:0x7f3a7676abe9 [ 296.857307][ T9949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.877027][ T9949] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.885484][ T9949] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 296.893478][ T9949] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 296.901651][ T9949] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 296.909644][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.917636][ T9949] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 296.925652][ T9949] [ 297.105288][ T9957] device pim6reg1 entered promiscuous mode [ 297.424069][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1776'. [ 297.613824][ T9969] netlink: 'syz.3.1775': attribute type 28 has an invalid length. [ 297.621711][ T9969] netlink: 'syz.3.1775': attribute type 29 has an invalid length. [ 297.630049][ T9969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1775'. [ 297.805977][ T9996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.829460][ T9998] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 297.913948][T10003] FAULT_INJECTION: forcing a failure. [ 297.913948][T10003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.960577][T10003] CPU: 1 PID: 10003 Comm: syz.6.1782 Not tainted 5.15.189-syzkaller #0 [ 297.968947][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.979320][T10003] Call Trace: [ 297.982624][T10003] [ 297.985586][T10003] dump_stack_lvl+0x168/0x230 [ 297.990500][T10003] ? show_regs_print_info+0x20/0x20 [ 297.995822][T10003] ? load_image+0x3b0/0x3b0 [ 298.000630][T10003] ? __lock_acquire+0x7c60/0x7c60 [ 298.005793][T10003] should_fail+0x38c/0x4c0 [ 298.010255][T10003] _copy_from_user+0x2e/0x170 [ 298.014974][T10003] tcp_setsockopt+0x5c2/0x1d70 [ 298.019772][T10003] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 298.025180][T10003] ? aa_af_perm+0x2b0/0x2b0 [ 298.029708][T10003] ? __fget_files+0x40f/0x480 [ 298.034446][T10003] ? aa_sock_opt_perm+0x74/0x100 [ 298.039402][T10003] ? sock_common_setsockopt+0x32/0xb0 [ 298.044879][T10003] ? sock_common_recvmsg+0x1b0/0x1b0 [ 298.050284][T10003] __sys_setsockopt+0x2bf/0x3d0 [ 298.055162][T10003] __x64_sys_setsockopt+0xb1/0xc0 [ 298.060241][T10003] do_syscall_64+0x4c/0xa0 [ 298.064694][T10003] ? clear_bhb_loop+0x30/0x80 [ 298.069388][T10003] ? clear_bhb_loop+0x30/0x80 [ 298.074184][T10003] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.080246][T10003] RIP: 0033:0x7f92b1c47be9 [ 298.084686][T10003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.104407][T10003] RSP: 002b:00007f92afe8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.112841][T10003] RAX: ffffffffffffffda RBX: 00007f92b1e6f090 RCX: 00007f92b1c47be9 [ 298.121050][T10003] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 298.129326][T10003] RBP: 00007f92afe8e090 R08: 0000000000000021 R09: 0000000000000000 [ 298.137532][T10003] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 298.145724][T10003] R13: 00007f92b1e6f128 R14: 00007f92b1e6f090 R15: 00007ffccd2cca78 [ 298.154036][T10003] [ 298.178118][T10001] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1783'. [ 298.303295][T10007] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.1784'. [ 298.581180][T10019] netlink: 'syz.3.1787': attribute type 3 has an invalid length. [ 298.609229][T10019] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1787'. [ 298.809932][T10036] netlink: 163260 bytes leftover after parsing attributes in process `syz.3.1792'. [ 299.101754][T10054] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1797'. [ 299.254347][T10061] device pim6reg1 entered promiscuous mode [ 299.333709][T10066] netlink: 'syz.7.1799': attribute type 28 has an invalid length. [ 299.341798][T10066] netlink: 'syz.7.1799': attribute type 29 has an invalid length. [ 299.411196][T10066] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1799'. [ 299.549491][T10074] FAULT_INJECTION: forcing a failure. [ 299.549491][T10074] name failslab, interval 1, probability 0, space 0, times 0 [ 299.599174][T10074] CPU: 1 PID: 10074 Comm: syz.3.1803 Not tainted 5.15.189-syzkaller #0 [ 299.602494][T10076] netlink: 'syz.6.1804': attribute type 3 has an invalid length. [ 299.608286][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 299.608326][T10074] Call Trace: [ 299.608335][T10074] [ 299.608345][T10074] dump_stack_lvl+0x168/0x230 [ 299.608378][T10074] ? show_regs_print_info+0x20/0x20 [ 299.608402][T10074] ? load_image+0x3b0/0x3b0 [ 299.608429][T10074] ? __might_sleep+0xf0/0xf0 [ 299.608450][T10074] ? __lock_acquire+0x7c60/0x7c60 [ 299.608482][T10074] should_fail+0x38c/0x4c0 [ 299.608513][T10074] should_failslab+0x5/0x20 [ 299.608533][T10074] slab_pre_alloc_hook+0x51/0xc0 [ 299.670861][T10074] kmem_cache_alloc_trace+0x47/0x2a0 [ 299.676189][T10074] ? __inet_diag_dump_start+0x8b/0x970 [ 299.681687][T10074] __inet_diag_dump_start+0x8b/0x970 [ 299.687009][T10074] __netlink_dump_start+0x3e8/0x700 [ 299.692239][T10074] inet_diag_handler_cmd+0x1be/0x290 [ 299.697645][T10074] ? rcu_lock_release+0x20/0x20 [ 299.702518][T10074] ? inet_diag_handler_get_info+0xb80/0xb80 [ 299.708431][T10074] ? inet_diag_dump_start+0x20/0x20 [ 299.713644][T10074] ? inet_diag_dump+0x50/0x50 [ 299.718345][T10074] ? memcpy+0x3c/0x60 [ 299.722368][T10074] ? sock_diag_rcv+0x17/0x40 [ 299.726994][T10074] ? sock_diag_rcv+0x17/0x40 [ 299.731613][T10074] ? rcu_lock_release+0x20/0x20 [ 299.736580][T10074] sock_diag_rcv_msg+0x164/0x3e0 [ 299.741747][T10074] netlink_rcv_skb+0x1e0/0x430 [ 299.746547][T10074] ? sock_diag_bind+0xa0/0xa0 [ 299.751349][T10074] ? netlink_ack+0xb60/0xb60 [ 299.755964][T10074] ? __lock_acquire+0x7c60/0x7c60 [ 299.761027][T10074] sock_diag_rcv+0x26/0x40 [ 299.765466][T10074] netlink_unicast+0x774/0x920 [ 299.770463][T10074] netlink_sendmsg+0x8ab/0xbc0 [ 299.775276][T10074] ? netlink_getsockopt+0x560/0x560 [ 299.780502][T10074] ? aa_sock_msg_perm+0x94/0x150 [ 299.785472][T10074] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 299.790774][T10074] ? security_socket_sendmsg+0x7c/0xa0 [ 299.796254][T10074] ? netlink_getsockopt+0x560/0x560 [ 299.801479][T10074] ____sys_sendmsg+0x5a2/0x8c0 [ 299.806276][T10074] ? memset+0x1e/0x40 [ 299.810277][T10074] ? __sys_sendmsg_sock+0x30/0x30 [ 299.815334][T10074] ? import_iovec+0x6f/0xa0 [ 299.819865][T10074] ___sys_sendmsg+0x1f0/0x260 [ 299.824599][T10074] ? __sys_sendmsg+0x250/0x250 [ 299.829407][T10074] ? trace_event_raw_event_lock+0x250/0x250 [ 299.835318][T10074] ? vfs_write+0x84d/0xd00 [ 299.839866][T10074] ? __fdget+0x18b/0x210 [ 299.844135][T10074] __se_sys_sendmsg+0x190/0x250 [ 299.849021][T10074] ? __x64_sys_sendmsg+0x80/0x80 [ 299.853981][T10074] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 299.860261][T10074] ? lockdep_hardirqs_on+0x94/0x140 [ 299.865482][T10074] do_syscall_64+0x4c/0xa0 [ 299.869919][T10074] ? clear_bhb_loop+0x30/0x80 [ 299.874623][T10074] ? clear_bhb_loop+0x30/0x80 [ 299.879418][T10074] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 299.885338][T10074] RIP: 0033:0x7f3a7676abe9 [ 299.889777][T10074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.909493][T10074] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.918067][T10074] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 299.926070][T10074] RDX: 0000000020000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 299.934194][T10074] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 299.942280][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.950279][T10074] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 299.958290][T10074] [ 299.987738][T10076] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1804'. [ 300.182572][T10089] netlink: 'syz.5.1809': attribute type 10 has an invalid length. [ 300.191273][T10089] bridge0: port 3(macsec0) entered blocking state [ 300.245210][T10089] bridge0: port 3(macsec0) entered disabled state [ 300.253262][T10089] device macsec0 entered promiscuous mode [ 300.259686][T10089] bridge0: port 3(macsec0) entered blocking state [ 300.266244][T10089] bridge0: port 3(macsec0) entered forwarding state [ 300.337524][T10097] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1811'. [ 300.391726][T10109] device pim6reg1 entered promiscuous mode [ 300.585342][T10120] netlink: 'syz.7.1817': attribute type 3 has an invalid length. [ 300.627050][T10120] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.1817'. [ 300.683422][T10126] netlink: 15998 bytes leftover after parsing attributes in process `syz.5.1819'. [ 300.741423][T10129] netlink: 'syz.2.1821': attribute type 28 has an invalid length. [ 300.757031][T10129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1821'. [ 301.002832][T10140] netlink: 11562 bytes leftover after parsing attributes in process `syz.7.1825'. [ 301.096199][T10143] FAULT_INJECTION: forcing a failure. [ 301.096199][T10143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.138623][T10143] CPU: 0 PID: 10143 Comm: syz.5.1826 Not tainted 5.15.189-syzkaller #0 [ 301.146937][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.157256][T10143] Call Trace: [ 301.160657][T10143] [ 301.163611][T10143] dump_stack_lvl+0x168/0x230 [ 301.168380][T10143] ? show_regs_print_info+0x20/0x20 [ 301.173871][T10143] ? load_image+0x3b0/0x3b0 [ 301.178417][T10143] ? __lock_acquire+0x7c60/0x7c60 [ 301.183595][T10143] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 301.190034][T10143] should_fail+0x38c/0x4c0 [ 301.195057][T10143] _copy_from_user+0x2e/0x170 [ 301.200203][T10143] __copy_msghdr_from_user+0x448/0x5e0 [ 301.206739][T10143] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 301.212755][T10143] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 301.218487][T10143] ? trace_event_raw_event_lock+0x250/0x250 [ 301.224440][T10143] ___sys_sendmsg+0x156/0x260 [ 301.229172][T10143] ? __sys_sendmsg+0x250/0x250 [ 301.234177][T10143] ? trace_event_raw_event_lock+0x250/0x250 [ 301.240170][T10143] ? __fdget+0x18b/0x210 [ 301.244483][T10143] __se_sys_sendmsg+0x190/0x250 [ 301.249484][T10143] ? __x64_sys_sendmsg+0x80/0x80 [ 301.254616][T10143] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 301.260758][T10143] ? trace_sys_enter+0x1f/0x80 [ 301.265655][T10143] do_syscall_64+0x4c/0xa0 [ 301.270110][T10143] ? clear_bhb_loop+0x30/0x80 [ 301.274834][T10143] ? clear_bhb_loop+0x30/0x80 [ 301.279562][T10143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.285491][T10143] RIP: 0033:0x7f3566b44be9 [ 301.289960][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.309875][T10143] RSP: 002b:00007f3564dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.318691][T10143] RAX: ffffffffffffffda RBX: 00007f3566d6bfa0 RCX: 00007f3566b44be9 [ 301.326729][T10143] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000014 [ 301.335272][T10143] RBP: 00007f3564dac090 R08: 0000000000000000 R09: 0000000000000000 [ 301.343451][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.351642][T10143] R13: 00007f3566d6c038 R14: 00007f3566d6bfa0 R15: 00007ffdd9128a48 [ 301.359862][T10143] [ 301.871981][T10160] device pim6reg1 entered promiscuous mode [ 302.888425][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1841'. [ 303.137142][T10206] sctp: [Deprecated]: syz.2.1847 (pid 10206) Use of int in maxseg socket option. [ 303.137142][T10206] Use struct sctp_assoc_value instead [ 303.180661][T10210] netlink: 1057 bytes leftover after parsing attributes in process `syz.7.1845'. [ 303.253553][T10209] validate_nla: 2 callbacks suppressed [ 303.253576][T10209] netlink: 'syz.6.1846': attribute type 3 has an invalid length. [ 303.286183][T10209] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1846'. [ 304.512039][T10250] device pim6reg1 entered promiscuous mode [ 304.688451][T10259] netlink: 'syz.7.1860': attribute type 3 has an invalid length. [ 304.717432][T10259] __nla_validate_parse: 1 callbacks suppressed [ 304.717448][T10259] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.1860'. [ 305.181586][T10282] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1867'. [ 305.411064][T10299] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1871'. [ 305.761915][T10312] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1876'. [ 306.350116][T10323] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1881'. [ 306.609968][T10334] netlink: 'syz.2.1886': attribute type 10 has an invalid length. [ 307.412682][T10334] device geneve1 entered promiscuous mode [ 307.450766][T10334] team0: Port device geneve1 added [ 307.459034][T10340] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1889'. [ 307.751459][T10377] netlink: 'syz.2.1896': attribute type 28 has an invalid length. [ 307.785765][T10377] netlink: 'syz.2.1896': attribute type 29 has an invalid length. [ 307.801356][T10377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1896'. [ 307.841311][T10374] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1897'. [ 307.996230][T10382] netlink: 'syz.5.1898': attribute type 3 has an invalid length. [ 308.040992][T10382] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1898'. [ 308.050431][T10366] delete_channel: no stack [ 308.963617][T10404] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1905'. [ 309.230942][T10416] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 309.498956][T10416] device veth0_vlan left promiscuous mode [ 309.564432][T10434] netlink: 'syz.7.1911': attribute type 28 has an invalid length. [ 309.583305][T10416] device veth0_vlan entered promiscuous mode [ 309.627310][T10434] netlink: 'syz.7.1911': attribute type 29 has an invalid length. [ 309.683443][T10416] team0: Device veth0_vlan failed to register rx_handler [ 310.317295][T10454] __nla_validate_parse: 1 callbacks suppressed [ 310.317405][T10454] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1918'. [ 310.600781][T10460] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1919'. [ 311.067324][T10480] device pim6reg1 entered promiscuous mode [ 311.580202][T10505] netlink: 'syz.7.1932': attribute type 29 has an invalid length. [ 311.651207][T10505] netlink: 'syz.7.1932': attribute type 29 has an invalid length. [ 311.785527][T10509] netlink: 'syz.7.1932': attribute type 29 has an invalid length. [ 311.838832][T10513] netlink: 'syz.5.1937': attribute type 29 has an invalid length. [ 311.874147][T10500] delete_channel: no stack [ 311.892821][T10513] netlink: 'syz.5.1937': attribute type 29 has an invalid length. [ 311.934214][T10518] netlink: 'syz.5.1937': attribute type 29 has an invalid length. [ 312.116237][T10528] device pim6reg1 entered promiscuous mode [ 312.138817][T10529] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1940'. [ 312.529294][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1942'. [ 313.907122][T10569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'. [ 314.031264][T10571] delete_channel: no stack [ 314.383014][T10590] netlink: 'syz.3.1953': attribute type 28 has an invalid length. [ 314.415874][T10590] netlink: 'syz.3.1953': attribute type 29 has an invalid length. [ 314.457095][T10590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1953'. [ 314.872760][T10600] netlink: 'syz.7.1957': attribute type 21 has an invalid length. [ 314.892465][T10600] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1957'. [ 314.966834][T10610] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1961'. [ 315.098719][T10608] device pim6reg1 entered promiscuous mode [ 316.266149][T10642] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1967'. [ 316.575409][T10665] netlink: 'syz.6.1970': attribute type 21 has an invalid length. [ 316.730146][T10669] netlink: 'syz.5.1974': attribute type 21 has an invalid length. [ 316.754161][T10669] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1974'. [ 316.768963][T10670] netlink: 'syz.3.1973': attribute type 28 has an invalid length. [ 316.819445][T10670] netlink: 'syz.3.1973': attribute type 29 has an invalid length. [ 316.892222][T10670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1973'. [ 317.012369][T10676] device pim6reg1 entered promiscuous mode [ 317.428334][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434744][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.931088][T10700] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1980'. [ 318.212387][T10709] netlink: 'syz.6.1983': attribute type 10 has an invalid length. [ 318.299801][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.307530][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.445411][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.452634][T10709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.460183][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.467368][T10709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.496350][T10708] FAULT_INJECTION: forcing a failure. [ 318.496350][T10708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.547045][T10708] CPU: 0 PID: 10708 Comm: syz.6.1983 Not tainted 5.15.189-syzkaller #0 [ 318.555447][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.565541][T10708] Call Trace: [ 318.568858][T10708] [ 318.571806][T10708] dump_stack_lvl+0x168/0x230 [ 318.576613][T10708] ? show_regs_print_info+0x20/0x20 [ 318.581935][T10708] ? load_image+0x3b0/0x3b0 [ 318.586478][T10708] ? __lock_acquire+0x7c60/0x7c60 [ 318.591537][T10708] should_fail+0x38c/0x4c0 [ 318.595984][T10708] _copy_from_user+0x2e/0x170 [ 318.600783][T10708] __copy_msghdr_from_user+0xaf/0x5e0 [ 318.606185][T10708] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 318.612578][T10708] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 318.617897][T10708] ? ___sys_sendmsg+0x20/0x260 [ 318.622693][T10708] ___sys_sendmsg+0x156/0x260 [ 318.627405][T10708] ? __sys_sendmsg+0x250/0x250 [ 318.632227][T10708] ? __fdget+0x18b/0x210 [ 318.636493][T10708] __se_sys_sendmsg+0x190/0x250 [ 318.641760][T10708] ? __x64_sys_sendmsg+0x80/0x80 [ 318.646822][T10708] ? lockdep_hardirqs_on+0x94/0x140 [ 318.652065][T10708] do_syscall_64+0x4c/0xa0 [ 318.657779][T10708] ? clear_bhb_loop+0x30/0x80 [ 318.662488][T10708] ? clear_bhb_loop+0x30/0x80 [ 318.667208][T10708] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.673706][T10708] RIP: 0033:0x7f92b1c47be9 [ 318.678158][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.698149][T10708] RSP: 002b:00007f92afeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.708192][T10708] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c47be9 [ 318.716214][T10708] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 318.724776][T10708] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 318.732783][T10708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.740780][T10708] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 318.748919][T10708] [ 318.777829][T10709] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 318.915236][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1984'. [ 319.030191][T10719] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1985'. [ 319.206826][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1987'. [ 319.221333][T10732] device pim6reg1 entered promiscuous mode [ 319.513544][T10736] delete_channel: no stack [ 319.617169][T10752] FAULT_INJECTION: forcing a failure. [ 319.617169][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 319.647525][T10742] netlink: 'syz.6.1992': attribute type 10 has an invalid length. [ 319.672945][T10742] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.685303][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.730139][T10752] CPU: 1 PID: 10752 Comm: syz.2.1995 Not tainted 5.15.189-syzkaller #0 [ 319.738597][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.748887][T10752] Call Trace: [ 319.752279][T10752] [ 319.755293][T10752] dump_stack_lvl+0x168/0x230 [ 319.760083][T10752] ? show_regs_print_info+0x20/0x20 [ 319.765427][T10752] ? load_image+0x3b0/0x3b0 [ 319.770008][T10752] ? __might_sleep+0xf0/0xf0 [ 319.774660][T10752] ? __lock_acquire+0x7c60/0x7c60 [ 319.779778][T10752] should_fail+0x38c/0x4c0 [ 319.784459][T10752] should_failslab+0x5/0x20 [ 319.789103][T10752] slab_pre_alloc_hook+0x51/0xc0 [ 319.794258][T10752] __kmalloc_node_track_caller+0x68/0x3a0 [ 319.800113][T10752] ? netlink_sendmsg+0x645/0xbc0 [ 319.805101][T10752] ? kmem_cache_alloc_node+0x162/0x2d0 [ 319.810698][T10752] ? __alloc_skb+0xf4/0x750 [ 319.815251][T10752] ? netlink_sendmsg+0x645/0xbc0 [ 319.820255][T10752] __alloc_skb+0x22c/0x750 [ 319.824753][T10752] netlink_sendmsg+0x645/0xbc0 [ 319.829618][T10752] ? netlink_getsockopt+0x560/0x560 [ 319.835100][T10752] ? aa_sock_msg_perm+0x94/0x150 [ 319.840361][T10752] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 319.846317][T10752] ? security_socket_sendmsg+0x7c/0xa0 [ 319.852108][T10752] ? netlink_getsockopt+0x560/0x560 [ 319.857645][T10752] ____sys_sendmsg+0x5a2/0x8c0 [ 319.862502][T10752] ? memset+0x1e/0x40 [ 319.866643][T10752] ? __sys_sendmsg_sock+0x30/0x30 [ 319.871870][T10752] ? import_iovec+0x6f/0xa0 [ 319.876460][T10752] ___sys_sendmsg+0x1f0/0x260 [ 319.881325][T10752] ? __sys_sendmsg+0x250/0x250 [ 319.886184][T10752] ? trace_event_raw_event_lock+0x250/0x250 [ 319.892209][T10752] ? vfs_write+0x84d/0xd00 [ 319.896752][T10752] ? __fdget+0x18b/0x210 [ 319.901055][T10752] __se_sys_sendmsg+0x190/0x250 [ 319.905963][T10752] ? __x64_sys_sendmsg+0x80/0x80 [ 319.910944][T10752] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 319.917035][T10752] ? lockdep_hardirqs_on+0x94/0x140 [ 319.922316][T10752] do_syscall_64+0x4c/0xa0 [ 319.926944][T10752] ? clear_bhb_loop+0x30/0x80 [ 319.932246][T10752] ? clear_bhb_loop+0x30/0x80 [ 319.937009][T10752] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.942965][T10752] RIP: 0033:0x7fc23b521be9 [ 319.947430][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.967291][T10752] RSP: 002b:00007fc239789038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.975862][T10752] RAX: ffffffffffffffda RBX: 00007fc23b748fa0 RCX: 00007fc23b521be9 [ 319.983887][T10752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 319.991914][T10752] RBP: 00007fc239789090 R08: 0000000000000000 R09: 0000000000000000 [ 319.999933][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.007953][T10752] R13: 00007fc23b749038 R14: 00007fc23b748fa0 R15: 00007ffea452d718 [ 320.016123][T10752] [ 320.268135][T10766] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1998'. [ 320.303402][T10767] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.1999'. [ 320.384648][T10770] netlink: 'syz.7.2000': attribute type 3 has an invalid length. [ 320.432286][T10770] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.2000'. [ 320.611360][T10779] netlink: 'syz.6.2002': attribute type 3 has an invalid length. [ 320.640818][T10780] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 320.763848][T10780] team0: Device ipvlan1 failed to register rx_handler [ 321.223297][T10790] device pim6reg1 entered promiscuous mode [ 321.430307][T10797] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 321.809548][T10797] team0: Port device geneve1 added [ 322.294251][T10817] netlink: 'syz.6.2010': attribute type 10 has an invalid length. [ 322.337242][T10813] delete_channel: no stack [ 322.377532][T10817] team0: Port device geneve1 added [ 322.728333][T10830] netlink: 'syz.6.2016': attribute type 3 has an invalid length. [ 322.747498][T10830] __nla_validate_parse: 2 callbacks suppressed [ 322.747522][T10830] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2016'. [ 322.970358][T10836] FAULT_INJECTION: forcing a failure. [ 322.970358][T10836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.002638][T10836] CPU: 1 PID: 10836 Comm: syz.6.2018 Not tainted 5.15.189-syzkaller #0 [ 323.010953][T10836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.021043][T10836] Call Trace: [ 323.024346][T10836] [ 323.027318][T10836] dump_stack_lvl+0x168/0x230 [ 323.032044][T10836] ? show_regs_print_info+0x20/0x20 [ 323.037392][T10836] ? load_image+0x3b0/0x3b0 [ 323.041938][T10836] ? __lock_acquire+0x7c60/0x7c60 [ 323.047003][T10836] should_fail+0x38c/0x4c0 [ 323.051458][T10836] _copy_to_user+0x2e/0x130 [ 323.056162][T10836] simple_read_from_buffer+0xe3/0x150 [ 323.061569][T10836] proc_fail_nth_read+0x19a/0x210 [ 323.066634][T10836] ? proc_fault_inject_write+0x2f0/0x2f0 [ 323.072306][T10836] ? fsnotify_perm+0x254/0x560 [ 323.077102][T10836] ? proc_fault_inject_write+0x2f0/0x2f0 [ 323.082928][T10836] vfs_read+0x2f6/0xcf0 [ 323.087407][T10836] ? kernel_read+0x1e0/0x1e0 [ 323.092040][T10836] ? __fget_files+0x40f/0x480 [ 323.096803][T10836] ? mutex_lock_nested+0x17/0x20 [ 323.101777][T10836] ? __fdget_pos+0x2bf/0x370 [ 323.106574][T10836] ? ksys_read+0x71/0x250 [ 323.110940][T10836] ksys_read+0x14d/0x250 [ 323.115218][T10836] ? vfs_write+0xd00/0xd00 [ 323.119752][T10836] ? lockdep_hardirqs_on+0x94/0x140 [ 323.124983][T10836] do_syscall_64+0x4c/0xa0 [ 323.129436][T10836] ? clear_bhb_loop+0x30/0x80 [ 323.134142][T10836] ? clear_bhb_loop+0x30/0x80 [ 323.138851][T10836] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.144782][T10836] RIP: 0033:0x7f92b1c465fc [ 323.149227][T10836] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 323.168871][T10836] RSP: 002b:00007f92afeaf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.177325][T10836] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c465fc [ 323.185325][T10836] RDX: 000000000000000f RSI: 00007f92afeaf0a0 RDI: 0000000000000003 [ 323.193318][T10836] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 323.201406][T10836] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 323.209401][T10836] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 323.217490][T10836] [ 323.465825][T10850] device pim6reg1 entered promiscuous mode [ 323.936778][T10875] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2033'. [ 324.460388][T10877] netlink: 'syz.3.2030': attribute type 28 has an invalid length. [ 324.469480][T10877] netlink: 'syz.3.2030': attribute type 29 has an invalid length. [ 324.549933][T10877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2030'. [ 325.043177][T10890] delete_channel: no stack [ 325.058320][T10897] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2039'. [ 325.108404][T10901] device pim6reg1 entered promiscuous mode [ 326.129258][T10923] netlink: 'syz.2.2046': attribute type 2 has an invalid length. [ 326.138260][T10923] netlink: 'syz.2.2046': attribute type 8 has an invalid length. [ 326.146699][T10923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2046'. [ 326.415970][T10934] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2051'. [ 326.572828][T10945] netlink: 'syz.7.2053': attribute type 28 has an invalid length. [ 326.580704][T10945] netlink: 'syz.7.2053': attribute type 29 has an invalid length. [ 326.734681][T10935] delete_channel: no stack [ 326.762436][T10945] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2053'. [ 327.340821][T10950] netlink: 'syz.5.2057': attribute type 10 has an invalid length. [ 327.768187][T10950] team0: Port device geneve1 added [ 328.161286][T10962] netlink: 'syz.5.2061': attribute type 1 has an invalid length. [ 328.173856][T10962] netlink: 'syz.5.2061': attribute type 4 has an invalid length. [ 328.203699][T10962] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2061'. [ 328.829347][T10979] delete_channel: no stack [ 329.328587][T11008] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2073'. [ 330.632875][T11034] delete_channel: no stack [ 331.002650][T11071] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2098'. [ 331.761154][T11078] delete_channel: no stack [ 331.801460][T11093] FAULT_INJECTION: forcing a failure. [ 331.801460][T11093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.969258][T11093] CPU: 1 PID: 11093 Comm: syz.2.2105 Not tainted 5.15.189-syzkaller #0 [ 331.977825][T11093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 331.987913][T11093] Call Trace: [ 331.991221][T11093] [ 331.994183][T11093] dump_stack_lvl+0x168/0x230 [ 331.998892][T11093] ? show_regs_print_info+0x20/0x20 [ 332.004115][T11093] ? load_image+0x3b0/0x3b0 [ 332.008646][T11093] ? __lock_acquire+0x7c60/0x7c60 [ 332.013700][T11093] ? unix_ioctl+0x250/0x650 [ 332.018234][T11093] should_fail+0x38c/0x4c0 [ 332.022679][T11093] _copy_from_user+0x2e/0x170 [ 332.027388][T11093] sock_do_ioctl+0x178/0x2f0 [ 332.032180][T11093] ? sock_show_fdinfo+0xb0/0xb0 [ 332.037415][T11093] sock_ioctl+0x4ed/0x6e0 [ 332.041766][T11093] ? sock_poll+0x3f0/0x3f0 [ 332.046227][T11093] ? bpf_lsm_file_ioctl+0x5/0x10 [ 332.051383][T11093] ? security_file_ioctl+0x7c/0xa0 [ 332.056517][T11093] ? sock_poll+0x3f0/0x3f0 [ 332.060958][T11093] __se_sys_ioctl+0xfa/0x170 [ 332.065580][T11093] do_syscall_64+0x4c/0xa0 [ 332.070019][T11093] ? clear_bhb_loop+0x30/0x80 [ 332.074712][T11093] ? clear_bhb_loop+0x30/0x80 [ 332.079411][T11093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.085334][T11093] RIP: 0033:0x7fc23b521be9 [ 332.089772][T11093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.109571][T11093] RSP: 002b:00007fc239768038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.118105][T11093] RAX: ffffffffffffffda RBX: 00007fc23b749090 RCX: 00007fc23b521be9 [ 332.126095][T11093] RDX: 0000200000000900 RSI: 0000000000008942 RDI: 0000000000000004 [ 332.134088][T11093] RBP: 00007fc239768090 R08: 0000000000000000 R09: 0000000000000000 [ 332.142108][T11093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.150197][T11093] R13: 00007fc23b749128 R14: 00007fc23b749090 R15: 00007ffea452d718 [ 332.158217][T11093] [ 332.301080][T11099] netlink: 'syz.5.2107': attribute type 28 has an invalid length. [ 332.309305][T11099] netlink: 'syz.5.2107': attribute type 29 has an invalid length. [ 332.357336][T11099] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2107'. [ 332.506317][T11112] netlink: 'syz.2.2112': attribute type 2 has an invalid length. [ 332.539432][T11112] netlink: 'syz.2.2112': attribute type 9 has an invalid length. [ 332.597252][T11112] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2112'. [ 333.007656][T11120] device pim6reg1 entered promiscuous mode [ 333.015045][T11128] delete_channel: no stack [ 333.145000][T11138] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2120'. [ 333.315746][T11149] device pim6reg1 entered promiscuous mode [ 333.800950][T11161] FAULT_INJECTION: forcing a failure. [ 333.800950][T11161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 333.993624][T11161] CPU: 1 PID: 11161 Comm: syz.3.2128 Not tainted 5.15.189-syzkaller #0 [ 334.001955][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.012056][T11161] Call Trace: [ 334.015387][T11161] [ 334.018389][T11161] dump_stack_lvl+0x168/0x230 [ 334.023231][T11161] ? show_regs_print_info+0x20/0x20 [ 334.028571][T11161] ? load_image+0x3b0/0x3b0 [ 334.033125][T11161] ? __lock_acquire+0x7c60/0x7c60 [ 334.038223][T11161] should_fail+0x38c/0x4c0 [ 334.042706][T11161] prepare_alloc_pages+0x1e4/0x5f0 [ 334.047930][T11161] __alloc_pages+0x10e/0x470 [ 334.052853][T11161] ? zone_statistics+0x170/0x170 [ 334.057905][T11161] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 334.063711][T11161] alloc_pages_vma+0x393/0x7c0 [ 334.068711][T11161] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 334.074598][T11161] shmem_alloc_and_acct_page+0x427/0xb70 [ 334.080306][T11161] ? shmem_swapin_page+0x2140/0x2140 [ 334.085743][T11161] ? __lock_acquire+0x7c60/0x7c60 [ 334.090867][T11161] ? xas_start+0x38d/0x770 [ 334.095448][T11161] ? xas_load+0x119/0x140 [ 334.099865][T11161] ? pagecache_get_page+0xbff/0xef0 [ 334.105235][T11161] ? page_cache_prev_miss+0x360/0x360 [ 334.110695][T11161] ? mark_lock+0x94/0x320 [ 334.115100][T11161] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 334.121153][T11161] ? lock_chain_count+0x20/0x20 [ 334.126049][T11161] ? do_user_addr_fault+0x694/0xc80 [ 334.131318][T11161] shmem_getpage_gfp+0x14f4/0x2d40 [ 334.136480][T11161] ? exc_page_fault+0x88/0x100 [ 334.141366][T11161] ? __get_user_nocheck_1+0x6/0x10 [ 334.146662][T11161] shmem_write_begin+0xcd/0x1a0 [ 334.151561][T11161] generic_perform_write+0x2aa/0x530 [ 334.156943][T11161] ? grab_cache_page_write_begin+0xa0/0xa0 [ 334.162810][T11161] ? file_remove_privs+0x590/0x590 [ 334.167962][T11161] ? read_lock_is_recursive+0x10/0x10 [ 334.173357][T11161] ? preempt_count_add+0x8d/0x190 [ 334.178407][T11161] ? rwsem_write_trylock+0x12f/0x1b0 [ 334.183719][T11161] ? clear_nonspinnable+0x60/0x60 [ 334.188785][T11161] __generic_file_write_iter+0x25f/0x4e0 [ 334.194549][T11161] generic_file_write_iter+0xa6/0x1b0 [ 334.200000][T11161] vfs_write+0x712/0xd00 [ 334.204366][T11161] ? file_end_write+0x250/0x250 [ 334.209348][T11161] ? __fget_files+0x40f/0x480 [ 334.214064][T11161] ? mutex_lock_nested+0x17/0x20 [ 334.219109][T11161] ? __fdget_pos+0x2bf/0x370 [ 334.223733][T11161] ? ksys_write+0x71/0x250 [ 334.228195][T11161] ksys_write+0x14d/0x250 [ 334.232660][T11161] ? __ia32_sys_read+0x80/0x80 [ 334.237471][T11161] ? lockdep_hardirqs_on+0x94/0x140 [ 334.242706][T11161] do_syscall_64+0x4c/0xa0 [ 334.247156][T11161] ? clear_bhb_loop+0x30/0x80 [ 334.251852][T11161] ? clear_bhb_loop+0x30/0x80 [ 334.256554][T11161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.262573][T11161] RIP: 0033:0x7f3a7676abe9 [ 334.267006][T11161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.286812][T11161] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 334.295533][T11161] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 334.303631][T11161] RDX: 00000000002a979d RSI: 0000200000000000 RDI: 0000000000000003 [ 334.311636][T11161] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 334.319712][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.327803][T11161] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 334.335943][T11161] [ 334.636423][T11181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2137'. [ 334.652820][T11176] delete_channel: no stack [ 334.751282][T11184] device pim6reg1 entered promiscuous mode [ 334.771064][T11190] netlink: 'syz.2.2140': attribute type 3 has an invalid length. [ 334.801842][T11190] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2140'. [ 335.304877][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2150'. [ 335.421803][T11208] delete_channel: no stack [ 335.586700][T11205] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2147'. [ 335.833955][T11228] netlink: 'syz.6.2155': attribute type 3 has an invalid length. [ 335.884446][T11228] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.2155'. [ 337.176085][T11241] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2160'. [ 337.776263][T11255] device syzkaller0 entered promiscuous mode [ 338.503422][T11260] netlink: 'syz.3.2167': attribute type 3 has an invalid length. [ 338.613223][T11260] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2167'. [ 339.733095][T11273] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2172'. [ 340.605137][T11285] delete_channel: no stack [ 340.755590][T11305] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2184'. [ 340.798694][T11302] netlink: 'syz.5.2183': attribute type 12 has an invalid length. [ 340.807147][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2183'. [ 341.962989][T11334] delete_channel: no stack [ 342.194853][T11344] netlink: 'syz.6.2199': attribute type 12 has an invalid length. [ 342.265326][T11344] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2199'. [ 342.530316][T11339] delete_channel: no stack [ 342.572285][T11358] netlink: 'syz.7.2202': attribute type 10 has an invalid length. [ 342.597165][T11358] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2202'. [ 342.648095][T11358] device team0 entered promiscuous mode [ 342.724345][T11358] device team_slave_0 entered promiscuous mode [ 342.738185][T11358] device team_slave_1 entered promiscuous mode [ 342.761878][T11358] bridge0: port 3(team0) entered blocking state [ 342.779668][T11358] bridge0: port 3(team0) entered disabled state [ 342.804788][T11358] bridge0: port 3(team0) entered blocking state [ 342.810242][T11364] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2203'. [ 342.811324][T11358] bridge0: port 3(team0) entered forwarding state [ 343.609604][T11376] delete_channel: no stack [ 343.787419][T11391] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2215'. [ 343.824079][T11391] openvswitch: netlink: Message has 20476 unknown bytes. [ 343.884044][T11392] netlink: 'syz.3.2216': attribute type 39 has an invalid length. [ 344.106590][T11405] netlink: 'syz.2.2218': attribute type 12 has an invalid length. [ 344.150835][T11405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2218'. [ 344.227035][T11414] netlink: 'syz.6.2220': attribute type 21 has an invalid length. [ 344.235497][T11414] netlink: 'syz.6.2220': attribute type 12 has an invalid length. [ 344.272393][T11414] netlink: 'syz.6.2220': attribute type 13 has an invalid length. [ 344.280483][T11414] netlink: 'syz.6.2220': attribute type 14 has an invalid length. [ 344.312175][T11414] netlink: 'syz.6.2220': attribute type 15 has an invalid length. [ 344.335529][T11414] netlink: 'syz.6.2220': attribute type 16 has an invalid length. [ 344.344102][T11414] netlink: 12914 bytes leftover after parsing attributes in process `syz.6.2220'. [ 344.417752][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2223'. [ 344.703833][T11424] delete_channel: no stack [ 344.752390][T11432] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2237'. [ 344.921392][T11441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2227'. [ 345.155761][T11438] delete_channel: no stack [ 345.481457][T11456] netlink: 'syz.7.2234': attribute type 39 has an invalid length. [ 345.802027][T11470] netlink: 'syz.6.2239': attribute type 10 has an invalid length. [ 345.830114][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2239'. [ 345.922967][T11470] device team0 entered promiscuous mode [ 345.954069][T11470] device team_slave_0 entered promiscuous mode [ 345.960461][T11470] device team_slave_1 entered promiscuous mode [ 346.028244][T11470] device geneve1 entered promiscuous mode [ 346.056896][T11470] bridge0: port 3(team0) entered blocking state [ 346.073922][T11470] bridge0: port 3(team0) entered disabled state [ 346.153790][T11471] delete_channel: no stack [ 346.182287][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2238'. [ 346.301909][T11482] device pim6reg1 entered promiscuous mode [ 346.612138][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2254'. [ 346.628162][T11505] device team0 entered promiscuous mode [ 346.636225][T11505] bond0: (slave team0): Releasing backup interface [ 346.651361][T11505] bridge0: port 3(team0) entered blocking state [ 346.658331][T11505] bridge0: port 3(team0) entered disabled state [ 346.667340][T11511] netlink: 183292 bytes leftover after parsing attributes in process `syz.7.2251'. [ 347.053815][T11517] delete_channel: no stack [ 347.336275][T11538] device pim6reg1 entered promiscuous mode [ 348.090168][T11558] delete_channel: no stack [ 348.430795][T11581] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2276'. [ 348.700464][T11588] device pim6reg1 entered promiscuous mode [ 349.070880][T11602] delete_channel: no stack [ 349.514119][T11635] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2292'. [ 349.629152][T11629] validate_nla: 4 callbacks suppressed [ 349.629169][T11629] netlink: 'syz.3.2292': attribute type 10 has an invalid length. [ 349.661248][T11629] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2292'. [ 349.716875][T11629] device team0 entered promiscuous mode [ 349.749007][T11629] device team_slave_0 entered promiscuous mode [ 349.763776][T11629] device team_slave_1 entered promiscuous mode [ 349.779556][T11629] device geneve1 entered promiscuous mode [ 349.795976][T11629] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.851845][T11629] bond0: (slave team0): Releasing backup interface [ 349.876989][T11629] bridge0: port 3(team0) entered blocking state [ 349.895195][T11629] bridge0: port 3(team0) entered disabled state [ 349.914907][T11632] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2292'. [ 350.095275][T11644] device pim6reg1 entered promiscuous mode [ 351.040649][T11698] device pim6reg1 entered promiscuous mode [ 351.200629][T11695] bridge0: port 3(team0) entered disabled state [ 351.207439][T11695] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.215820][T11695] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.759812][T11731] FAULT_INJECTION: forcing a failure. [ 351.759812][T11731] name failslab, interval 1, probability 0, space 0, times 0 [ 351.774427][T11731] CPU: 0 PID: 11731 Comm: syz.6.2329 Not tainted 5.15.189-syzkaller #0 [ 351.783311][T11731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.793730][T11731] Call Trace: [ 351.797252][T11731] [ 351.800252][T11731] dump_stack_lvl+0x168/0x230 [ 351.805130][T11731] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 351.811800][T11731] ? show_regs_print_info+0x20/0x20 [ 351.817169][T11731] ? load_image+0x3b0/0x3b0 [ 351.821782][T11731] should_fail+0x38c/0x4c0 [ 351.826278][T11731] should_failslab+0x5/0x20 [ 351.831031][T11731] slab_pre_alloc_hook+0x51/0xc0 [ 351.836039][T11731] ? skb_clone+0x1bd/0x350 [ 351.840620][T11731] kmem_cache_alloc+0x3d/0x290 [ 351.845467][T11731] skb_clone+0x1bd/0x350 [ 351.850029][T11731] ? dev_queue_xmit_nit+0x1df/0xb00 [ 351.855306][T11731] dev_queue_xmit_nit+0x2cc/0xb00 [ 351.860502][T11731] ? validate_xmit_skb+0x7b3/0xe30 [ 351.865692][T11731] ? __se_sys_sendmsg+0x190/0x250 [ 351.870784][T11731] dev_hard_start_xmit+0x13e/0x7e0 [ 351.876447][T11731] __dev_queue_xmit+0x19df/0x2ed0 [ 351.881840][T11731] ? dev_queue_xmit+0x20/0x20 [ 351.886746][T11731] ? memcpy+0x3c/0x60 [ 351.890788][T11731] ? __copy_skb_header+0x417/0x5a0 [ 351.896300][T11731] ? __skb_clone+0x480/0x790 [ 351.900988][T11731] ? skb_clone+0x1f1/0x350 [ 351.905451][T11731] __netlink_deliver_tap+0x53e/0x7c0 [ 351.910917][T11731] netlink_deliver_tap+0x16c/0x180 [ 351.916180][T11731] netlink_unicast+0x74f/0x920 [ 351.921096][T11731] netlink_sendmsg+0x8ab/0xbc0 [ 351.926013][T11731] ? netlink_getsockopt+0x560/0x560 [ 351.931435][T11731] ? aa_sock_msg_perm+0x94/0x150 [ 351.936515][T11731] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 351.941860][T11731] ? security_socket_sendmsg+0x7c/0xa0 [ 351.947822][T11731] ? netlink_getsockopt+0x560/0x560 [ 351.953058][T11731] ____sys_sendmsg+0x5a2/0x8c0 [ 351.957948][T11731] ? memset+0x1e/0x40 [ 351.961965][T11731] ? __sys_sendmsg_sock+0x30/0x30 [ 351.967128][T11731] ? import_iovec+0x6f/0xa0 [ 351.971668][T11731] ___sys_sendmsg+0x1f0/0x260 [ 351.976451][T11731] ? __sys_sendmsg+0x250/0x250 [ 351.981270][T11731] ? trace_event_raw_event_lock+0x250/0x250 [ 351.987187][T11731] ? vfs_write+0x84d/0xd00 [ 351.991660][T11731] ? __fdget+0x18b/0x210 [ 351.995937][T11731] __se_sys_sendmsg+0x190/0x250 [ 352.000812][T11731] ? __x64_sys_sendmsg+0x80/0x80 [ 352.005764][T11731] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 352.011828][T11731] ? lockdep_hardirqs_on+0x94/0x140 [ 352.017066][T11731] do_syscall_64+0x4c/0xa0 [ 352.021502][T11731] ? clear_bhb_loop+0x30/0x80 [ 352.026562][T11731] ? clear_bhb_loop+0x30/0x80 [ 352.031258][T11731] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 352.037172][T11731] RIP: 0033:0x7f92b1c47be9 [ 352.041612][T11731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.061776][T11731] RSP: 002b:00007f92afeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.070319][T11731] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c47be9 [ 352.078397][T11731] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 352.086595][T11731] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 352.094788][T11731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.102799][T11731] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 352.110832][T11731] [ 352.237237][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2330'. [ 352.382414][T11742] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2330'. [ 352.767130][T11765] delete_channel: no stack [ 352.771783][T11765] delete_channel: no stack [ 352.904167][T11765] netlink: 'syz.6.2338': attribute type 10 has an invalid length. [ 352.930628][T11765] device syz_tun entered promiscuous mode [ 352.979330][T11765] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 353.003674][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2341'. [ 353.084602][T11785] FAULT_INJECTION: forcing a failure. [ 353.084602][T11785] name failslab, interval 1, probability 0, space 0, times 0 [ 353.126439][T11785] CPU: 1 PID: 11785 Comm: syz.3.2345 Not tainted 5.15.189-syzkaller #0 [ 353.134937][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.145329][T11785] Call Trace: [ 353.148647][T11785] [ 353.151606][T11785] dump_stack_lvl+0x168/0x230 [ 353.156322][T11785] ? show_regs_print_info+0x20/0x20 [ 353.161570][T11785] ? load_image+0x3b0/0x3b0 [ 353.166132][T11785] ? __might_sleep+0xf0/0xf0 [ 353.170811][T11785] ? __lock_acquire+0x7c60/0x7c60 [ 353.175893][T11785] ? mark_lock+0x94/0x320 [ 353.180268][T11785] should_fail+0x38c/0x4c0 [ 353.184917][T11785] should_failslab+0x5/0x20 [ 353.189465][T11785] slab_pre_alloc_hook+0x51/0xc0 [ 353.194510][T11785] kmem_cache_alloc_node+0x47/0x2d0 [ 353.199876][T11785] ? __alloc_skb+0xf4/0x750 [ 353.204529][T11785] __alloc_skb+0xf4/0x750 [ 353.208908][T11785] alloc_skb_with_frags+0xa7/0x730 [ 353.214078][T11785] ? perf_trace_lock+0xdf/0x370 [ 353.219095][T11785] sock_alloc_send_pskb+0x853/0x980 [ 353.224643][T11785] ? sock_kzfree_s+0x50/0x50 [ 353.229489][T11785] ? aa_label_sk_perm+0x37e/0x490 [ 353.234583][T11785] ? verify_lock_unused+0x140/0x140 [ 353.239841][T11785] queue_oob+0xd8/0x800 [ 353.244042][T11785] ? bpf_iter_unix_seq_show+0x200/0x200 [ 353.249637][T11785] ? scm_stat_add+0xb0/0xb0 [ 353.254188][T11785] ? __lock_acquire+0x12d9/0x7c60 [ 353.259276][T11785] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 353.265582][T11785] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 353.271871][T11785] unix_stream_sendmsg+0xb5d/0xc80 [ 353.277037][T11785] ? aa_sk_perm+0x7b4/0x8f0 [ 353.281828][T11785] ? unix_show_fdinfo+0xa0/0xa0 [ 353.286728][T11785] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 353.293199][T11785] ? aa_sock_msg_perm+0x94/0x150 [ 353.298188][T11785] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 353.303517][T11785] ? security_socket_sendmsg+0x7c/0xa0 [ 353.309031][T11785] ? unix_show_fdinfo+0xa0/0xa0 [ 353.313917][T11785] ____sys_sendmsg+0x5a2/0x8c0 [ 353.319006][T11785] ? memset+0x1e/0x40 [ 353.323041][T11785] ? __sys_sendmsg_sock+0x30/0x30 [ 353.328119][T11785] ? import_iovec+0x6f/0xa0 [ 353.332677][T11785] ___sys_sendmsg+0x1f0/0x260 [ 353.337548][T11785] ? __sys_sendmsg+0x250/0x250 [ 353.342377][T11785] ? trace_event_raw_event_lock+0x250/0x250 [ 353.348327][T11785] ? vfs_write+0x84d/0xd00 [ 353.352814][T11785] ? __fdget+0x18b/0x210 [ 353.357101][T11785] __se_sys_sendmsg+0x190/0x250 [ 353.362143][T11785] ? __x64_sys_sendmsg+0x80/0x80 [ 353.367283][T11785] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 353.373337][T11785] ? lockdep_hardirqs_on+0x94/0x140 [ 353.378600][T11785] do_syscall_64+0x4c/0xa0 [ 353.383054][T11785] ? clear_bhb_loop+0x30/0x80 [ 353.387795][T11785] ? clear_bhb_loop+0x30/0x80 [ 353.392565][T11785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 353.398590][T11785] RIP: 0033:0x7f3a7676abe9 [ 353.403050][T11785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.423049][T11785] RSP: 002b:00007f3a749d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.431736][T11785] RAX: ffffffffffffffda RBX: 00007f3a76991fa0 RCX: 00007f3a7676abe9 [ 353.439881][T11785] RDX: 0000000004040005 RSI: 0000200000000580 RDI: 0000000000000004 [ 353.447900][T11785] RBP: 00007f3a749d2090 R08: 0000000000000000 R09: 0000000000000000 [ 353.456038][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.464037][T11785] R13: 00007f3a76992038 R14: 00007f3a76991fa0 R15: 00007ffe584b1ed8 [ 353.472245][T11785] [ 353.665547][T11800] netlink: 'syz.6.2349': attribute type 21 has an invalid length. [ 353.688981][T11804] netlink: 'syz.2.2353': attribute type 21 has an invalid length. [ 354.192932][T11810] delete_channel: no stack [ 354.472346][T11835] netlink: 'syz.7.2365': attribute type 9 has an invalid length. [ 354.480647][T11835] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2365'. [ 354.574624][T11844] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2368'. [ 355.050871][T11849] netlink: 'syz.5.2367': attribute type 28 has an invalid length. [ 355.091162][T11849] netlink: 'syz.5.2367': attribute type 29 has an invalid length. [ 355.151928][T11849] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2367'. [ 355.208511][T11834] delete_channel: no stack [ 356.074028][T11865] delete_channel: no stack [ 356.606220][T11888] delete_channel: no stack [ 356.784151][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2390'. [ 356.929749][T11916] netlink: 'syz.7.2389': attribute type 28 has an invalid length. [ 356.937941][T11916] netlink: 'syz.7.2389': attribute type 29 has an invalid length. [ 356.946435][T11916] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2389'. [ 357.133192][T11922] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2394'. [ 358.068025][T11942] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2403'. [ 358.361520][T11932] delete_channel: no stack [ 359.176977][T11977] netlink: 'syz.2.2416': attribute type 28 has an invalid length. [ 359.338012][T11977] netlink: 'syz.2.2416': attribute type 29 has an invalid length. [ 359.348005][T11977] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2416'. [ 359.358823][T11982] delete_channel: no stack [ 360.211290][T12020] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2432'. [ 360.282607][T12020] device bond_slave_0 left promiscuous mode [ 360.289072][T12020] device bond_slave_1 left promiscuous mode [ 360.358292][T12020] device bridge0 left promiscuous mode [ 360.412455][T12020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.423476][T12021] delete_channel: no stack [ 360.463634][T12020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.502180][T12020] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 360.516442][T12020] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.523959][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.555478][T12020] bond0 (unregistering): Released all slaves [ 360.644002][T12038] netlink: 'syz.6.2437': attribute type 28 has an invalid length. [ 360.684173][T12035] device pim6reg1 entered promiscuous mode [ 360.691317][T12038] netlink: 'syz.6.2437': attribute type 29 has an invalid length. [ 360.729759][T12038] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2437'. [ 361.147760][T12053] device pim6reg1 entered promiscuous mode [ 361.276731][T12061] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2446'. [ 361.354169][T12061] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.2446'. [ 361.618229][T12067] delete_channel: no stack [ 361.688852][T12074] netlink: 'syz.5.2451': attribute type 21 has an invalid length. [ 361.703046][T12071] delete_channel: no stack [ 361.711847][T12079] netlink: 'syz.3.2452': attribute type 29 has an invalid length. [ 361.763606][T12079] netlink: 'syz.3.2452': attribute type 29 has an invalid length. [ 362.114334][T12104] FAULT_INJECTION: forcing a failure. [ 362.114334][T12104] name failslab, interval 1, probability 0, space 0, times 0 [ 362.163359][T12104] CPU: 0 PID: 12104 Comm: syz.7.2461 Not tainted 5.15.189-syzkaller #0 [ 362.171680][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.181756][T12104] Call Trace: [ 362.185175][T12104] [ 362.188129][T12104] dump_stack_lvl+0x168/0x230 [ 362.192833][T12104] ? show_regs_print_info+0x20/0x20 [ 362.198338][T12104] ? load_image+0x3b0/0x3b0 [ 362.202954][T12104] ? __might_sleep+0xf0/0xf0 [ 362.207581][T12104] ? __lock_acquire+0x7c60/0x7c60 [ 362.212738][T12104] ? __local_bh_enable_ip+0x12a/0x1b0 [ 362.218140][T12104] should_fail+0x38c/0x4c0 [ 362.222687][T12104] should_failslab+0x5/0x20 [ 362.227218][T12104] slab_pre_alloc_hook+0x51/0xc0 [ 362.232277][T12104] kmem_cache_alloc_node_trace+0x4a/0x300 [ 362.238026][T12104] ? __get_vm_area_node+0x119/0x2d0 [ 362.243637][T12104] __get_vm_area_node+0x119/0x2d0 [ 362.248775][T12104] __vmalloc_node_range+0xef/0x8b0 [ 362.254035][T12104] ? netlink_sendmsg+0x5dd/0xbc0 [ 362.259010][T12104] ? netlink_data_ready+0x10/0x10 [ 362.264071][T12104] ? netlink_sendmsg+0x5dd/0xbc0 [ 362.269668][T12104] vmalloc+0x75/0x80 [ 362.273878][T12104] ? netlink_sendmsg+0x5dd/0xbc0 [ 362.278844][T12104] netlink_sendmsg+0x5dd/0xbc0 [ 362.283637][T12104] ? netlink_getsockopt+0x560/0x560 [ 362.288848][T12104] ? aa_sock_msg_perm+0x94/0x150 [ 362.293800][T12104] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.299763][T12104] ? security_socket_sendmsg+0x7c/0xa0 [ 362.305608][T12104] ? netlink_getsockopt+0x560/0x560 [ 362.311124][T12104] ____sys_sendmsg+0x5a2/0x8c0 [ 362.316019][T12104] ? memset+0x1e/0x40 [ 362.320930][T12104] ? __sys_sendmsg_sock+0x30/0x30 [ 362.326376][T12104] ? import_iovec+0x6f/0xa0 [ 362.331017][T12104] ___sys_sendmsg+0x1f0/0x260 [ 362.335726][T12104] ? __sys_sendmsg+0x250/0x250 [ 362.340641][T12104] ? __fdget+0x18b/0x210 [ 362.345005][T12104] __se_sys_sendmsg+0x190/0x250 [ 362.349878][T12104] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 362.356384][T12104] ? __x64_sys_sendmsg+0x80/0x80 [ 362.361342][T12104] ? syscall_enter_from_user_mode+0x2a/0x70 [ 362.367354][T12104] do_syscall_64+0x4c/0xa0 [ 362.371900][T12104] ? clear_bhb_loop+0x30/0x80 [ 362.376681][T12104] ? clear_bhb_loop+0x30/0x80 [ 362.381373][T12104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.387418][T12104] RIP: 0033:0x7f368f452be9 [ 362.392042][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.411781][T12104] RSP: 002b:00007f368d6ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.420214][T12104] RAX: ffffffffffffffda RBX: 00007f368f679fa0 RCX: 00007f368f452be9 [ 362.428200][T12104] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 362.436436][T12104] RBP: 00007f368d6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 362.444417][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.452409][T12104] R13: 00007f368f67a038 R14: 00007f368f679fa0 R15: 00007ffc661f8658 [ 362.460433][T12104] [ 362.593400][T12104] syz.7.2461: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1 [ 362.611652][T12104] CPU: 1 PID: 12104 Comm: syz.7.2461 Not tainted 5.15.189-syzkaller #0 [ 362.619955][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.630155][T12104] Call Trace: [ 362.633484][T12104] [ 362.636460][T12104] dump_stack_lvl+0x168/0x230 [ 362.641194][T12104] ? rcu_lock_release+0x5/0x20 [ 362.646370][T12104] ? show_regs_print_info+0x20/0x20 [ 362.651670][T12104] ? load_image+0x3b0/0x3b0 [ 362.656361][T12104] warn_alloc+0x20e/0x2f0 [ 362.660756][T12104] ? zone_watermark_ok_safe+0x240/0x240 [ 362.666481][T12104] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 362.672508][T12104] ? __get_vm_area_node+0x119/0x2d0 [ 362.676658][T12108] delete_channel: no stack [ 362.677801][T12104] __vmalloc_node_range+0x2b1/0x8b0 [ 362.687534][T12104] ? netlink_data_ready+0x10/0x10 [ 362.692640][T12104] ? netlink_sendmsg+0x5dd/0xbc0 [ 362.697625][T12104] vmalloc+0x75/0x80 [ 362.701561][T12104] ? netlink_sendmsg+0x5dd/0xbc0 [ 362.706548][T12104] netlink_sendmsg+0x5dd/0xbc0 [ 362.711488][T12104] ? netlink_getsockopt+0x560/0x560 [ 362.716748][T12104] ? aa_sock_msg_perm+0x94/0x150 [ 362.721756][T12104] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 362.727085][T12104] ? security_socket_sendmsg+0x7c/0xa0 [ 362.732589][T12104] ? netlink_getsockopt+0x560/0x560 [ 362.737842][T12104] ____sys_sendmsg+0x5a2/0x8c0 [ 362.742674][T12104] ? memset+0x1e/0x40 [ 362.746738][T12104] ? __sys_sendmsg_sock+0x30/0x30 [ 362.751851][T12104] ? import_iovec+0x6f/0xa0 [ 362.756420][T12104] ___sys_sendmsg+0x1f0/0x260 [ 362.761185][T12104] ? __sys_sendmsg+0x250/0x250 [ 362.766128][T12104] ? __fdget+0x18b/0x210 [ 362.770452][T12104] __se_sys_sendmsg+0x190/0x250 [ 362.775360][T12104] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 362.781662][T12104] ? __x64_sys_sendmsg+0x80/0x80 [ 362.786708][T12104] ? syscall_enter_from_user_mode+0x2a/0x70 [ 362.792937][T12104] do_syscall_64+0x4c/0xa0 [ 362.797409][T12104] ? clear_bhb_loop+0x30/0x80 [ 362.802170][T12104] ? clear_bhb_loop+0x30/0x80 [ 362.807073][T12104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 362.813015][T12104] RIP: 0033:0x7f368f452be9 [ 362.817475][T12104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.837241][T12104] RSP: 002b:00007f368d6ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.845730][T12104] RAX: ffffffffffffffda RBX: 00007f368f679fa0 RCX: 00007f368f452be9 [ 362.853741][T12104] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 362.861753][T12104] RBP: 00007f368d6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 362.869768][T12104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.877995][T12104] R13: 00007f368f67a038 R14: 00007f368f679fa0 R15: 00007ffc661f8658 [ 362.886172][T12104] [ 362.952759][T12104] Mem-Info: [ 362.956349][T12104] active_anon:310 inactive_anon:4609 isolated_anon:0 [ 362.956349][T12104] active_file:22930 inactive_file:38384 isolated_file:0 [ 362.956349][T12104] unevictable:768 dirty:302 writeback:0 [ 362.956349][T12104] slab_reclaimable:20714 slab_unreclaimable:96976 [ 362.956349][T12104] mapped:30017 shmem:1665 pagetables:491 bounce:0 [ 362.956349][T12104] kernel_misc_reclaimable:0 [ 362.956349][T12104] free:1370361 free_pcp:11738 free_cma:0 [ 363.009489][T12104] Node 0 active_anon:1208kB inactive_anon:17928kB active_file:91516kB inactive_file:153536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120068kB dirty:904kB writeback:300kB shmem:4584kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:1964kB all_unreclaimable? no [ 363.045519][T12104] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 363.080021][T12104] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.115582][T12104] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 363.122612][T12104] Node 0 DMA32 free:1550960kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1208kB inactive_anon:18108kB active_file:91516kB inactive_file:153536kB unevictable:1536kB writepending:504kB present:3129332kB managed:2609004kB mlocked:0kB bounce:0kB free_pcp:40260kB local_pcp:19468kB free_cma:0kB [ 363.162251][T12104] lowmem_reserve[]: 0 0 0 0 0 [ 363.182589][T12104] Node 0 Normal free:12kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 363.258509][T12104] lowmem_reserve[]: 0 0 0 0 0 [ 363.263530][T12104] Node 1 Normal free:3915176kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:7176kB local_pcp:7176kB free_cma:0kB [ 363.295279][T12104] lowmem_reserve[]: 0 0 0 0 0 [ 363.300384][T12104] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.314174][T12104] Node 0 DMA32: 3586*4kB (UME) 2155*8kB (UME) 983*16kB (UME) 680*32kB (UME) 669*64kB (UME) 339*128kB (UME) 83*256kB (UM) 30*512kB (UME) 19*1024kB (UM) 4*2048kB (UME) 325*4096kB (UM) = 1550736kB [ 363.352898][T12104] Node 0 Normal: 3*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 363.367471][T12104] Node 1 Normal: 112*4kB (UE) 23*8kB (UME) 17*16kB (UME) 145*32kB (UE) 60*64kB (UME) 18*128kB (UME) 10*256kB (UM) 5*512kB (UE) 1*1024kB (U) 3*2048kB (UME) 950*4096kB (M) = 3915176kB [ 363.386692][T12104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.397022][T12104] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.408101][T12104] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.418746][T12121] delete_channel: no stack [ 363.447768][T12104] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.468049][T12104] 62979 total pagecache pages [ 363.484344][T12104] 0 pages in swap cache [ 363.489254][T12104] Swap cache stats: add 0, delete 0, find 0/0 [ 363.496446][T12104] Free swap = 124996kB [ 363.500814][T12104] Total swap = 124996kB [ 363.516473][T12104] 2097051 pages RAM [ 363.531758][T12104] 0 pages HighMem/MovableOnly [ 363.537011][T12104] 410813 pages reserved [ 363.541410][T12104] 0 pages cma reserved [ 363.713639][T12139] netlink: 387 bytes leftover after parsing attributes in process `syz.5.2471'. [ 363.878588][T12144] device pim6reg1 entered promiscuous mode [ 363.923906][T12143] netlink: 'syz.6.2474': attribute type 9 has an invalid length. [ 363.951263][T12143] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2474'. [ 364.499717][T12167] netlink: 'syz.3.2483': attribute type 21 has an invalid length. [ 364.515932][T12141] delete_channel: no stack [ 364.520536][T12167] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.547712][T12167] IPv6: Can't replace route, no match found [ 364.761122][T12184] device pim6reg1 entered promiscuous mode [ 364.898611][T12185] delete_channel: no stack [ 364.947674][T12191] netlink: 'syz.5.2491': attribute type 21 has an invalid length. [ 364.993837][T12191] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.043883][T12191] IPv6: Can't replace route, no match found [ 365.954033][T12223] device pim6reg1 entered promiscuous mode [ 366.250715][T12234] FAULT_INJECTION: forcing a failure. [ 366.250715][T12234] name failslab, interval 1, probability 0, space 0, times 0 [ 366.294892][T12234] CPU: 0 PID: 12234 Comm: syz.5.2506 Not tainted 5.15.189-syzkaller #0 [ 366.303329][T12234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.313469][T12234] Call Trace: [ 366.316781][T12234] [ 366.320119][T12234] dump_stack_lvl+0x168/0x230 [ 366.324918][T12234] ? show_regs_print_info+0x20/0x20 [ 366.330126][T12234] ? load_image+0x3b0/0x3b0 [ 366.334650][T12234] should_fail+0x38c/0x4c0 [ 366.339089][T12234] should_failslab+0x5/0x20 [ 366.343692][T12234] slab_pre_alloc_hook+0x51/0xc0 [ 366.348659][T12234] kmem_cache_alloc_trace+0x47/0x2a0 [ 366.354003][T12234] ? sctp_add_bind_addr+0x89/0x350 [ 366.359161][T12234] sctp_add_bind_addr+0x89/0x350 [ 366.364129][T12234] sctp_copy_local_addr_list+0x2d4/0x490 [ 366.369935][T12234] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 366.376320][T12234] ? sctp_v4_is_any+0x31/0x50 [ 366.381541][T12234] ? sctp_copy_one_addr+0x93/0x660 [ 366.386788][T12234] sctp_bind_addr_copy+0xaf/0x3c0 [ 366.392035][T12234] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 366.398649][T12234] sctp_connect_new_asoc+0x2d6/0x690 [ 366.404218][T12234] ? __sctp_connect+0xd20/0xd20 [ 366.409102][T12234] ? __local_bh_enable_ip+0x12a/0x1b0 [ 366.414789][T12234] ? _local_bh_enable+0xa0/0xa0 [ 366.419902][T12234] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 366.425466][T12234] ? security_sctp_bind_connect+0x85/0xb0 [ 366.431288][T12234] sctp_sendmsg+0x15e0/0x2950 [ 366.436243][T12234] ? aa_sk_perm+0x7b4/0x8f0 [ 366.440792][T12234] ? sctp_getsockopt+0x8a0/0x8a0 [ 366.445762][T12234] ? aa_af_perm+0x2b0/0x2b0 [ 366.450394][T12234] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 366.456845][T12234] ? sock_rps_record_flow+0x17/0x3b0 [ 366.462257][T12234] ? inet_send_prepare+0x260/0x260 [ 366.467382][T12234] ? inet_sendmsg+0x78/0x2f0 [ 366.471978][T12234] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 366.477303][T12234] ? security_socket_sendmsg+0x7c/0xa0 [ 366.482989][T12234] ? inet_send_prepare+0x260/0x260 [ 366.488501][T12234] ____sys_sendmsg+0x5a2/0x8c0 [ 366.493492][T12234] ? memset+0x1e/0x40 [ 366.497496][T12234] ? __sys_sendmsg_sock+0x30/0x30 [ 366.502673][T12234] ? import_iovec+0x6f/0xa0 [ 366.507202][T12234] ___sys_sendmsg+0x1f0/0x260 [ 366.511905][T12234] ? __sys_sendmsg+0x250/0x250 [ 366.516694][T12234] ? vfs_write+0x84d/0xd00 [ 366.521279][T12234] ? __fdget+0x18b/0x210 [ 366.525545][T12234] __se_sys_sendmsg+0x190/0x250 [ 366.530543][T12234] ? __x64_sys_sendmsg+0x80/0x80 [ 366.535502][T12234] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 366.541596][T12234] ? lockdep_hardirqs_on+0x94/0x140 [ 366.546816][T12234] do_syscall_64+0x4c/0xa0 [ 366.551399][T12234] ? clear_bhb_loop+0x30/0x80 [ 366.556090][T12234] ? clear_bhb_loop+0x30/0x80 [ 366.560781][T12234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.567278][T12234] RIP: 0033:0x7f3566b44be9 [ 366.571713][T12234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.591334][T12234] RSP: 002b:00007f3564dac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.599980][T12234] RAX: ffffffffffffffda RBX: 00007f3566d6bfa0 RCX: 00007f3566b44be9 [ 366.607978][T12234] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 366.616059][T12234] RBP: 00007f3564dac090 R08: 0000000000000000 R09: 0000000000000000 [ 366.624269][T12234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 366.632267][T12234] R13: 00007f3566d6c038 R14: 00007f3566d6bfa0 R15: 00007ffdd9128a48 [ 366.640478][T12234] [ 366.698277][T12238] netlink: 'syz.6.2508': attribute type 28 has an invalid length. [ 366.734385][T12238] netlink: 'syz.6.2508': attribute type 29 has an invalid length. [ 366.797330][T12238] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2508'. [ 366.812942][T12231] delete_channel: no stack [ 367.031121][T12243] device pim6reg1 entered promiscuous mode [ 367.164937][T12259] device pim6reg1 entered promiscuous mode [ 367.375232][T12274] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 367.597231][T12275] netlink: 'syz.5.2523': attribute type 2 has an invalid length. [ 367.869531][T12279] delete_channel: no stack [ 368.293419][T12296] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2532'. [ 368.479396][T12302] device pim6reg1 entered promiscuous mode [ 368.992887][T12322] delete_channel: no stack [ 369.043728][T12333] netlink: 'syz.6.2543': attribute type 28 has an invalid length. [ 369.091406][T12333] netlink: 'syz.6.2543': attribute type 29 has an invalid length. [ 369.123652][T12333] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2543'. [ 369.914559][T12369] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2556'. [ 370.169025][T12370] delete_channel: no stack [ 370.234213][T12384] netlink: 'syz.3.2561': attribute type 28 has an invalid length. [ 370.256785][T12384] netlink: 'syz.3.2561': attribute type 29 has an invalid length. [ 370.270866][T12384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2561'. [ 370.530003][T12385] device pim6reg1 entered promiscuous mode [ 370.586850][T12393] delete_channel: no stack [ 370.737583][ T4188] Bluetooth: hci5: command 0x0406 tx timeout [ 371.410751][T12413] delete_channel: no stack [ 371.611035][T12428] FAULT_INJECTION: forcing a failure. [ 371.611035][T12428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.732476][T12428] CPU: 1 PID: 12428 Comm: syz.6.2577 Not tainted 5.15.189-syzkaller #0 [ 371.740962][T12428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.751041][T12428] Call Trace: [ 371.754337][T12428] [ 371.757399][T12428] dump_stack_lvl+0x168/0x230 [ 371.762430][T12428] ? show_regs_print_info+0x20/0x20 [ 371.767752][T12428] ? load_image+0x3b0/0x3b0 [ 371.772809][T12428] ? __lock_acquire+0x7c60/0x7c60 [ 371.777906][T12428] should_fail+0x38c/0x4c0 [ 371.782357][T12428] _copy_from_iter+0x22a/0x1150 [ 371.787983][T12428] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 371.794001][T12428] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.800374][T12428] ? packet_sendmsg+0x453e/0x5110 [ 371.805656][T12428] packet_sendmsg+0x31eb/0x5110 [ 371.810562][T12428] ? aa_sk_perm+0x8f0/0x8f0 [ 371.815105][T12428] ? lock_chain_count+0x20/0x20 [ 371.819982][T12428] ? __might_sleep+0xf0/0xf0 [ 371.824617][T12428] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.830782][T12428] ? lockdep_hardirqs_on+0x94/0x140 [ 371.835992][T12428] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.842183][T12428] ? aa_sk_perm+0x7b4/0x8f0 [ 371.846704][T12428] ? packet_getsockopt+0x950/0x950 [ 371.851857][T12428] ? aa_sock_msg_perm+0x94/0x150 [ 371.856808][T12428] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 371.862108][T12428] ? security_socket_sendmsg+0x7c/0xa0 [ 371.867673][T12428] ? packet_getsockopt+0x950/0x950 [ 371.872892][T12428] ____sys_sendmsg+0x5a2/0x8c0 [ 371.877692][T12428] ? memset+0x1e/0x40 [ 371.881717][T12428] ? __sys_sendmsg_sock+0x30/0x30 [ 371.886787][T12428] ? import_iovec+0x6f/0xa0 [ 371.891318][T12428] ___sys_sendmsg+0x1f0/0x260 [ 371.896017][T12428] ? __sys_sendmsg+0x250/0x250 [ 371.900948][T12428] ? ktime_get_real_ts64+0x420/0x420 [ 371.906298][T12428] ? __fdget+0x18b/0x210 [ 371.910574][T12428] __se_sys_sendmsg+0x190/0x250 [ 371.915456][T12428] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 371.921633][T12428] ? __x64_sys_sendmsg+0x80/0x80 [ 371.926605][T12428] ? syscall_enter_from_user_mode+0x2a/0x70 [ 371.932646][T12428] do_syscall_64+0x4c/0xa0 [ 371.937095][T12428] ? clear_bhb_loop+0x30/0x80 [ 371.941796][T12428] ? clear_bhb_loop+0x30/0x80 [ 371.946486][T12428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.952393][T12428] RIP: 0033:0x7f92b1c47be9 [ 371.956827][T12428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.976875][T12428] RSP: 002b:00007f92afeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.985303][T12428] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c47be9 [ 371.993285][T12428] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000004 [ 372.001274][T12428] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 372.009434][T12428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.017524][T12428] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 372.025529][T12428] [ 372.137985][T12438] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2581'. [ 372.235854][T12441] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2583'. [ 374.203580][T12447] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.599975][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2587'. [ 374.698991][T12470] FAULT_INJECTION: forcing a failure. [ 374.698991][T12470] name failslab, interval 1, probability 0, space 0, times 0 [ 374.713208][T12457] delete_channel: no stack [ 374.742474][T12470] CPU: 1 PID: 12470 Comm: syz.7.2590 Not tainted 5.15.189-syzkaller #0 [ 374.750779][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.761212][T12470] Call Trace: [ 374.764611][T12470] [ 374.767578][T12470] dump_stack_lvl+0x168/0x230 [ 374.772399][T12470] ? show_regs_print_info+0x20/0x20 [ 374.777773][T12470] ? load_image+0x3b0/0x3b0 [ 374.782505][T12470] ? __might_sleep+0xf0/0xf0 [ 374.787125][T12470] ? __lock_acquire+0x7c60/0x7c60 [ 374.792176][T12470] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 374.798551][T12470] should_fail+0x38c/0x4c0 [ 374.803007][T12470] should_failslab+0x5/0x20 [ 374.807542][T12470] slab_pre_alloc_hook+0x51/0xc0 [ 374.812522][T12470] __kmalloc+0x6b/0x330 [ 374.816710][T12470] ? tomoyo_encode+0x27e/0x540 [ 374.821508][T12470] tomoyo_encode+0x27e/0x540 [ 374.826127][T12470] tomoyo_realpath_from_path+0x5cd/0x610 [ 374.831812][T12470] tomoyo_path_number_perm+0x1d5/0x5d0 [ 374.837311][T12470] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 374.842788][T12470] ? perf_trace_lock+0xdf/0x370 [ 374.847726][T12470] security_file_ioctl+0x6c/0xa0 [ 374.852776][T12470] __se_sys_ioctl+0x48/0x170 [ 374.857401][T12470] do_syscall_64+0x4c/0xa0 [ 374.861888][T12470] ? clear_bhb_loop+0x30/0x80 [ 374.866611][T12470] ? clear_bhb_loop+0x30/0x80 [ 374.871325][T12470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.877251][T12470] RIP: 0033:0x7f368f452be9 [ 374.881689][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.901677][T12470] RSP: 002b:00007f368d699038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.910227][T12470] RAX: ffffffffffffffda RBX: 00007f368f67a090 RCX: 00007f368f452be9 [ 374.918238][T12470] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 0000000000000005 [ 374.926228][T12470] RBP: 00007f368d699090 R08: 0000000000000000 R09: 0000000000000000 [ 374.934214][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.942197][T12470] R13: 00007f368f67a128 R14: 00007f368f67a090 R15: 00007ffc661f8658 [ 374.950218][T12470] [ 375.023184][T12470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.134413][T12476] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2593'. [ 375.553889][T12496] netlink: 'syz.2.2600': attribute type 10 has an invalid length. [ 375.685778][T12496] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2600'. [ 375.797699][T12493] delete_channel: no stack [ 375.822670][T11672] Bluetooth: hci7: command 0x0406 tx timeout [ 375.831787][T11672] Bluetooth: hci6: command 0x0406 tx timeout [ 375.843357][T12502] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2599'. [ 376.546360][T12509] device pim6reg1 entered promiscuous mode [ 376.859532][T12520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2607'. [ 377.213604][T12529] delete_channel: no stack [ 377.419088][T12536] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2612'. [ 377.939163][T12559] netlink: 'syz.5.2619': attribute type 28 has an invalid length. [ 377.947736][T12559] netlink: 'syz.5.2619': attribute type 29 has an invalid length. [ 377.956563][T12559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2619'. [ 378.139832][T12562] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2620'. [ 378.608757][T12579] netlink: 16182 bytes leftover after parsing attributes in process `syz.7.2626'. [ 378.639528][T12577] netlink: 'syz.7.2626': attribute type 10 has an invalid length. [ 378.746040][T12579] netlink: 'syz.7.2626': attribute type 11 has an invalid length. [ 378.838064][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.844823][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.872255][T12581] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2627'. [ 379.157323][T12584] device veth1_macvtap left promiscuous mode [ 379.386730][T12600] netlink: 'syz.6.2632': attribute type 15 has an invalid length. [ 379.408826][T12601] delete_channel: no stack [ 379.483319][T12605] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.2634'. [ 379.638878][T12609] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2636'. [ 379.938124][T12616] device pim6reg1 entered promiscuous mode [ 379.945277][T12618] netlink: 'syz.7.2640': attribute type 28 has an invalid length. [ 379.954665][T12618] netlink: 'syz.7.2640': attribute type 29 has an invalid length. [ 379.964232][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2640'. [ 380.245864][T12626] netlink: 'syz.6.2641': attribute type 2 has an invalid length. [ 380.286931][T12632] device pim6reg1 entered promiscuous mode [ 380.429390][T12635] netlink: 'syz.2.2644': attribute type 10 has an invalid length. [ 380.683205][T12640] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2646'. [ 380.737530][T12646] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2648'. [ 380.915273][T12646] netlink: 'syz.2.2648': attribute type 15 has an invalid length. [ 380.925241][T12646] netlink: 'syz.2.2648': attribute type 7 has an invalid length. [ 381.302701][T12666] device pim6reg1 entered promiscuous mode [ 381.573910][T12674] delete_channel: no stack [ 381.801320][T12685] netlink: 'syz.3.2664': attribute type 1 has an invalid length. [ 381.835046][T12685] netlink: 'syz.3.2664': attribute type 4 has an invalid length. [ 382.086244][T12691] netlink: 'syz.3.2664': attribute type 1 has an invalid length. [ 382.099407][T12691] netlink: 'syz.3.2664': attribute type 4 has an invalid length. [ 382.234421][T12702] FAULT_INJECTION: forcing a failure. [ 382.234421][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.402214][T12702] CPU: 0 PID: 12702 Comm: syz.6.2669 Not tainted 5.15.189-syzkaller #0 [ 382.410935][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.421300][T12702] Call Trace: [ 382.424611][T12702] [ 382.427656][T12702] dump_stack_lvl+0x168/0x230 [ 382.433107][T12702] ? show_regs_print_info+0x20/0x20 [ 382.438466][T12702] ? load_image+0x3b0/0x3b0 [ 382.443025][T12702] ? __lock_acquire+0x7c60/0x7c60 [ 382.448088][T12702] ? __alloc_skb+0x473/0x750 [ 382.452708][T12702] should_fail+0x38c/0x4c0 [ 382.457156][T12702] _copy_from_iter+0x22a/0x1150 [ 382.462031][T12702] ? __lock_acquire+0x7c60/0x7c60 [ 382.467087][T12702] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 382.472491][T12702] ? __virt_addr_valid+0x3c6/0x470 [ 382.477629][T12702] ? __phys_addr+0xb6/0x170 [ 382.482273][T12702] ? __phys_addr_symbol+0x2b/0x70 [ 382.487678][T12702] ? __check_object_size+0x30c/0x410 [ 382.493021][T12702] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 382.498792][T12702] ? skb_put+0x117/0x210 [ 382.503088][T12702] packet_sendmsg+0x385d/0x5110 [ 382.508002][T12702] ? __might_sleep+0xf0/0xf0 [ 382.512647][T12702] ? aa_sk_perm+0x7b4/0x8f0 [ 382.517350][T12702] ? packet_getsockopt+0x950/0x950 [ 382.522601][T12702] ? aa_sock_msg_perm+0x94/0x150 [ 382.527573][T12702] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.532890][T12702] ? security_socket_sendmsg+0x7c/0xa0 [ 382.538449][T12702] ? packet_getsockopt+0x950/0x950 [ 382.543592][T12702] ____sys_sendmsg+0x5a2/0x8c0 [ 382.548392][T12702] ? memset+0x1e/0x40 [ 382.552409][T12702] ? __sys_sendmsg_sock+0x30/0x30 [ 382.557474][T12702] ? import_iovec+0x6f/0xa0 [ 382.562020][T12702] ___sys_sendmsg+0x1f0/0x260 [ 382.566735][T12702] ? __sys_sendmsg+0x250/0x250 [ 382.571543][T12702] ? trace_event_raw_event_lock+0x250/0x250 [ 382.577495][T12702] ? __fdget+0x18b/0x210 [ 382.581772][T12702] __se_sys_sendmsg+0x190/0x250 [ 382.586667][T12702] ? __x64_sys_sendmsg+0x80/0x80 [ 382.591642][T12702] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 382.597675][T12702] ? lockdep_hardirqs_on+0x94/0x140 [ 382.602909][T12702] do_syscall_64+0x4c/0xa0 [ 382.607457][T12702] ? clear_bhb_loop+0x30/0x80 [ 382.612158][T12702] ? clear_bhb_loop+0x30/0x80 [ 382.616870][T12702] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.622807][T12702] RIP: 0033:0x7f92b1c47be9 [ 382.627244][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.646963][T12702] RSP: 002b:00007f92afeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.655406][T12702] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c47be9 [ 382.663402][T12702] RDX: 0000000000044000 RSI: 0000200000000140 RDI: 0000000000000003 [ 382.671392][T12702] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 382.679384][T12702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.687387][T12702] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 382.695398][T12702] [ 382.761990][T12706] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 382.768970][T12706] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 383.161601][T12716] netlink: 'syz.7.2675': attribute type 28 has an invalid length. [ 383.203374][T12716] netlink: 'syz.7.2675': attribute type 29 has an invalid length. [ 383.229110][T12711] delete_channel: no stack [ 383.254973][T12716] __nla_validate_parse: 6 callbacks suppressed [ 383.254993][T12716] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2675'. [ 383.325670][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.576813][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.744102][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.895815][T12738] device pim6reg1 entered promiscuous mode [ 383.973566][T12720] chnl_net:caif_netlink_parms(): no params data found [ 384.003614][T12742] netlink: 'syz.6.2684': attribute type 2 has an invalid length. [ 384.015601][T12742] netlink: 119 bytes leftover after parsing attributes in process `syz.6.2684'. [ 384.071326][T12747] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2686'. [ 384.435385][T12748] device pim6reg1 entered promiscuous mode [ 384.512649][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.520783][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.531163][T12720] device bridge_slave_0 entered promiscuous mode [ 384.541419][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.549285][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.558455][T12720] device bridge_slave_1 entered promiscuous mode [ 384.681298][T12758] delete_channel: no stack [ 384.739761][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.958510][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.089135][T12720] team0: Port device team_slave_0 added [ 385.151642][T12720] team0: Port device team_slave_1 added [ 385.198771][T12782] netlink: 'syz.2.2695': attribute type 28 has an invalid length. [ 385.219076][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2695'. [ 385.232725][T11676] Bluetooth: hci0: command 0x0409 tx timeout [ 385.298660][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.310764][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.381401][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.488896][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.496577][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.614993][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.720302][T12791] device pim6reg1 entered promiscuous mode [ 385.773287][T12792] delete_channel: no stack [ 385.869645][T12795] device pim6reg1 entered promiscuous mode [ 386.001112][T12801] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2702'. [ 386.071541][T12720] device hsr_slave_0 entered promiscuous mode [ 386.081867][T12720] device hsr_slave_1 entered promiscuous mode [ 386.807433][ T154] team0: Port device wlan1 removed [ 386.847469][T12816] delete_channel: no stack [ 387.046906][T12830] validate_nla: 1 callbacks suppressed [ 387.046924][T12830] netlink: 'syz.2.2712': attribute type 28 has an invalid length. [ 387.169952][T12830] netlink: 'syz.2.2712': attribute type 29 has an invalid length. [ 387.215120][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2712'. [ 387.301812][ T154] device hsr_slave_0 left promiscuous mode [ 387.312226][T11678] Bluetooth: hci0: command 0x041b tx timeout [ 387.328011][T12826] delete_channel: no stack [ 387.333911][ T154] device hsr_slave_1 left promiscuous mode [ 387.341765][ T154] bridge0: port 3(team0) entered disabled state [ 387.367460][ T154] device bridge_slave_1 left promiscuous mode [ 387.386019][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.421100][ T154] device bridge_slave_0 left promiscuous mode [ 387.470578][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.526263][ T154] device veth0_macvtap left promiscuous mode [ 387.556612][ T154] device veth1_vlan left promiscuous mode [ 387.565065][ T154] device veth0_vlan left promiscuous mode [ 387.825439][ T154] device geneve1 left promiscuous mode [ 387.845231][ T154] team0 (unregistering): Port device geneve1 removed [ 388.044173][ T154] device team_slave_1 left promiscuous mode [ 388.051600][ T154] team0 (unregistering): Port device team_slave_1 removed [ 388.072690][ T154] device team_slave_0 left promiscuous mode [ 388.079929][ T154] team0 (unregistering): Port device team_slave_0 removed [ 388.095469][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.112702][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.214485][ T154] bond0 (unregistering): Released all slaves [ 388.295800][T12836] device pim6reg1 entered promiscuous mode [ 388.448597][T12854] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2718'. [ 388.646604][T12861] device pim6reg1 entered promiscuous mode [ 388.695012][T12862] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2720'. [ 388.947301][T12860] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2720'. [ 389.071331][T12863] delete_channel: no stack [ 389.392363][T11671] Bluetooth: hci0: command 0x040f tx timeout [ 390.138043][T12720] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.209331][T12720] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.246327][T12720] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.296100][T12720] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.487027][T12877] delete_channel: no stack [ 390.826032][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.112219][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.131033][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 391.149649][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 391.173381][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 391.202882][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 391.222720][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.229877][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.244199][T12906] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2732'. [ 391.273900][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 391.317035][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 391.354057][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 391.404117][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.411309][ T8145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.473790][T11676] Bluetooth: hci0: command 0x0419 tx timeout [ 391.515561][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 391.541818][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.571734][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 391.605113][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 391.629867][T12910] device pim6reg1 entered promiscuous mode [ 391.657515][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 391.676224][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 391.705890][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 392.165634][T12919] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2736'. [ 392.587892][T12924] netlink: 'syz.5.2738': attribute type 2 has an invalid length. [ 392.663851][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 392.713017][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 392.773849][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 392.813448][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 392.849287][T12720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 393.638975][T12939] netlink: 'syz.5.2741': attribute type 10 has an invalid length. [ 394.112945][T12939] team0: Device hsr_slave_0 failed to register rx_handler [ 394.293760][T12950] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.2742'. [ 394.514437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 394.522983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 394.537569][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.624348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 394.650823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 394.740709][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 394.785994][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 394.878018][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 394.922936][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 395.033656][T12720] device veth0_vlan entered promiscuous mode [ 395.179985][T12720] device veth1_vlan entered promiscuous mode [ 395.298226][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 395.359643][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 395.604048][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 395.649142][ T5447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 395.707081][T12720] device veth0_macvtap entered promiscuous mode [ 395.966745][T12980] delete_channel: no stack [ 396.056049][T12720] device veth1_macvtap entered promiscuous mode [ 396.285272][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.311541][T12996] netlink: 'syz.2.2750': attribute type 2 has an invalid length. [ 396.408050][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 396.435747][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 396.484548][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 396.528783][T12999] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2751'. [ 396.550828][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 396.614859][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.799896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 396.834160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 396.865997][T12720] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.907018][T12720] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.930479][T12720] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.961754][T12720] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.337812][ T8156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.345730][T13010] netlink: 'syz.7.2754': attribute type 10 has an invalid length. [ 397.400952][ T8156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.764307][T13010] team0: Device hsr_slave_0 failed to register rx_handler [ 398.091877][ T8145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 398.240577][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.265035][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.298945][ T8156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 398.453613][T13037] device pim6reg1 entered promiscuous mode [ 398.626631][T13031] delete_channel: no stack [ 398.638166][T13042] netlink: 'syz.3.2670': attribute type 10 has an invalid length. [ 398.808242][T13042] team0 (unregistering): Port device team_slave_0 removed [ 398.909219][T13042] team0 (unregistering): Port device team_slave_1 removed [ 399.092408][T13044] netlink: 'syz.3.2670': attribute type 46 has an invalid length. [ 399.101524][T13050] netlink: 'syz.6.2765': attribute type 39 has an invalid length. [ 399.171059][T13050] bond0: (slave syz_tun): Releasing backup interface [ 399.572522][T13053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2766'. [ 399.589663][T13064] netlink: 'syz.2.2766': attribute type 12 has an invalid length. [ 399.611202][T13064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2766'. [ 399.637585][T13061] netlink: 'syz.3.2769': attribute type 10 has an invalid length. [ 399.735297][T13075] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2773'. [ 399.745914][T13075] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2773'. [ 400.544837][T13107] netlink: 'syz.6.2785': attribute type 10 has an invalid length. [ 400.584634][T13107] team0: Device hsr_slave_0 failed to register rx_handler [ 401.027529][T13130] netlink: 'syz.6.2789': attribute type 19 has an invalid length. [ 401.151772][T13130] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2789'. [ 401.513137][T13138] syz.7.2792[13138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.531677][T13136] netlink: set zone limit has 8 unknown bytes [ 401.624246][T13142] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2793'. [ 401.694497][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2792'. [ 401.904782][T13139] delete_channel: no stack [ 402.562375][T13174] IPv6: NLM_F_CREATE should be specified when creating new route [ 402.689043][T13179] netlink: 'syz.5.2806': attribute type 5 has an invalid length. [ 403.178364][T13186] netlink: 'syz.7.2808': attribute type 28 has an invalid length. [ 403.220600][T13186] netlink: 'syz.7.2808': attribute type 29 has an invalid length. [ 403.229336][T13186] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2808'. [ 403.383267][T13191] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.2811'. [ 403.450764][T11672] syzkaller0: tun_net_xmit 76 [ 403.457037][T11672] syzkaller0: tun_net_xmit 48 [ 403.494292][T11676] syzkaller0: tun_net_xmit 76 [ 403.835292][T13208] netlink: 'syz.7.2815': attribute type 39 has an invalid length. [ 403.973750][T13213] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2817'. [ 403.995149][T13213] netlink: zone id is out of range [ 404.002436][T13213] netlink: zone id is out of range [ 404.019412][T13213] netlink: zone id is out of range [ 404.037137][T13213] netlink: zone id is out of range [ 404.057200][T13213] netlink: zone id is out of range [ 404.074842][T13213] netlink: zone id is out of range [ 404.098899][T13213] netlink: zone id is out of range [ 404.115961][T13213] netlink: zone id is out of range [ 404.130522][T13213] netlink: zone id is out of range [ 405.169273][T13238] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.2825'. [ 405.443354][T13241] netlink: 'syz.6.2821': attribute type 28 has an invalid length. [ 405.451596][T13241] netlink: 'syz.6.2821': attribute type 29 has an invalid length. [ 405.502847][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2821'. [ 406.065919][T13252] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 406.376961][T13256] delete_channel: no stack [ 406.454890][T13266] Â: renamed from pim6reg1 [ 406.737726][T13275] device pim6reg1 entered promiscuous mode [ 407.016629][T13280] FAULT_INJECTION: forcing a failure. [ 407.016629][T13280] name failslab, interval 1, probability 0, space 0, times 0 [ 407.102647][T13280] CPU: 1 PID: 13280 Comm: syz.6.2837 Not tainted 5.15.189-syzkaller #0 [ 407.111249][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.121536][T13280] Call Trace: [ 407.124864][T13280] [ 407.127828][T13280] dump_stack_lvl+0x168/0x230 [ 407.132547][T13280] ? show_regs_print_info+0x20/0x20 [ 407.137869][T13280] ? load_image+0x3b0/0x3b0 [ 407.142509][T13280] ? rcu_lock_release+0x5/0x20 [ 407.147939][T13280] should_fail+0x38c/0x4c0 [ 407.152400][T13280] should_failslab+0x5/0x20 [ 407.156938][T13280] slab_pre_alloc_hook+0x51/0xc0 [ 407.161928][T13280] ? __nf_conntrack_alloc+0x99/0x380 [ 407.167269][T13280] kmem_cache_alloc+0x3d/0x290 [ 407.172130][T13280] __nf_conntrack_alloc+0x99/0x380 [ 407.177448][T13280] init_conntrack+0x240/0x14b0 [ 407.182436][T13280] ? __nf_conntrack_find_get+0x54c/0x620 [ 407.188446][T13280] ? early_drop+0x810/0x810 [ 407.193011][T13280] ? nf_conntrack_find_get+0x600/0x600 [ 407.198638][T13280] ? __siphash_unaligned+0x25c/0x3a0 [ 407.203991][T13280] nf_conntrack_in+0xce9/0x16f0 [ 407.208922][T13280] ? nf_ct_pernet+0x240/0x240 [ 407.213668][T13280] ? ip6t_alloc_initial_table+0x640/0x640 [ 407.219909][T13280] ? __ip6_make_skb+0x16a3/0x1d80 [ 407.225082][T13280] ? ipv6_defrag+0x2d2/0x3a0 [ 407.230250][T13280] ? ipv6_conntrack_in+0x20/0x20 [ 407.235351][T13280] nf_hook_slow+0xb9/0x200 [ 407.240433][T13280] __ip6_local_out+0x726/0x830 [ 407.245909][T13280] ? ip6_dst_hoplimit+0x310/0x310 [ 407.250987][T13280] ? __ip6_local_out+0x830/0x830 [ 407.256054][T13280] ? read_lock_is_recursive+0x10/0x10 [ 407.261578][T13280] ? ip6_append_data+0x1d4/0x310 [ 407.266570][T13280] ip6_local_out+0x26/0x120 [ 407.271122][T13280] ip6_send_skb+0x1b9/0x360 [ 407.275758][T13280] l2tp_ip6_sendmsg+0x13bc/0x1770 [ 407.280838][T13280] ? __might_sleep+0xf0/0xf0 [ 407.285499][T13280] ? l2tp_ip6_destroy_sock+0x50/0x50 [ 407.290855][T13280] ? aa_af_perm+0x2b0/0x2b0 [ 407.295602][T13280] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 407.302267][T13280] ? sock_rps_record_flow+0x17/0x3b0 [ 407.307678][T13280] ? inet_send_prepare+0x260/0x260 [ 407.312983][T13280] ? inet_sendmsg+0x78/0x2f0 [ 407.317807][T13280] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 407.323435][T13280] ? security_socket_sendmsg+0x7c/0xa0 [ 407.329464][T13280] ? inet_send_prepare+0x260/0x260 [ 407.334707][T13280] ____sys_sendmsg+0x5a2/0x8c0 [ 407.339630][T13280] ? __sys_sendmsg_sock+0x30/0x30 [ 407.344738][T13280] ? import_iovec+0x6f/0xa0 [ 407.349288][T13280] ___sys_sendmsg+0x1f0/0x260 [ 407.354118][T13280] ? __sys_sendmsg+0x250/0x250 [ 407.358949][T13280] ? trace_event_raw_event_lock+0x250/0x250 [ 407.365007][T13280] ? vfs_write+0x84d/0xd00 [ 407.369513][T13280] ? __fdget+0x18b/0x210 [ 407.373937][T13280] __se_sys_sendmsg+0x190/0x250 [ 407.379018][T13280] ? __x64_sys_sendmsg+0x80/0x80 [ 407.384002][T13280] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 407.390053][T13280] ? lockdep_hardirqs_on+0x94/0x140 [ 407.395398][T13280] do_syscall_64+0x4c/0xa0 [ 407.399866][T13280] ? clear_bhb_loop+0x30/0x80 [ 407.404580][T13280] ? clear_bhb_loop+0x30/0x80 [ 407.409925][T13280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.415997][T13280] RIP: 0033:0x7f92b1c47be9 [ 407.420456][T13280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.440100][T13280] RSP: 002b:00007f92afeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.448583][T13280] RAX: ffffffffffffffda RBX: 00007f92b1e6efa0 RCX: 00007f92b1c47be9 [ 407.456607][T13280] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 407.464888][T13280] RBP: 00007f92afeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 407.472906][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.481025][T13280] R13: 00007f92b1e6f038 R14: 00007f92b1e6efa0 R15: 00007ffccd2cca78 [ 407.489345][T13280] [ 407.569237][T13282] mac80211_hwsim hwsim16 O3ãc¤±: renamed from wlan1 [ 407.831519][T13293] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2842'. [ 408.042790][T13296] device pim6reg1 entered promiscuous mode [ 408.354316][T13298] netlink: 'syz.6.2841': attribute type 28 has an invalid length. [ 408.406867][T13298] netlink: 'syz.6.2841': attribute type 29 has an invalid length. [ 408.425436][T13298] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2841'. [ 409.574779][T13376] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2879'. [ 409.850501][T13385] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2884'. [ 410.388258][T13393] netlink: 'syz.5.2886': attribute type 39 has an invalid length. [ 412.452276][T13436] netlink: 'syz.6.2901': attribute type 39 has an invalid length. [ 412.693523][T13446] netlink: 'syz.5.2903': attribute type 28 has an invalid length. [ 412.700468][T13440] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2902'.