last executing test programs: 11.255671341s ago: executing program 1 (id=2762): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89fd, &(0x7f0000000340)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) close(r6) recvmsg$unix(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r9 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110a3000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r12, 0x10) 10.927845738s ago: executing program 1 (id=2766): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002bc0)="21a96dde38", 0x5}], 0x1}, 0x4) sendmsg$kcm(r3, &(0x7f0000006d00)={0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000005740)="303241d4", 0x4}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9.697313616s ago: executing program 1 (id=2770): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff00}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 9.537804479s ago: executing program 1 (id=2771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d290006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000500fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637288a8"], 0x16) 6.701736075s ago: executing program 1 (id=2780): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 5.827396955s ago: executing program 1 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000400000008000080e5bcfd0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="09000200000000cf8c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd8e, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x80) (async) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x1a, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000d000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000002ec1128e067ad74f000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018450000f9ffffff00000000000000008500000054000000180000000004000000000000000001008520000004000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000b40)='syzkaller\x00', 0x4, 0x2b, &(0x7f0000001180)=""/43, 0x40f00, 0x50, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000e00)=[{0x5, 0x6, 0xc, 0xa}], 0x10, 0x3}, 0x94) (async) syz_clone(0x81200000, &(0x7f0000000f00)="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", 0xfc, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="3b227393fd00d9acef0cfdfb0b9ff4a0ffafb87d2b529f58cae870037c725097b78015e40a38a88aa35361af5e4a2208491617c1dcd8f7c183f9e1ff5cefa05b6feba46b5b7bb04cfb2fd3efb6ce3b339e6501c120dcffaa43e9a5c94b4e366afea4d514bd3ef5587807a9a8ed2bfd74b0658f3112ff349cfafb6047838771cb727e5dca3501cfe3a16727e7651c74e2014bfd65e7735d15d4a7863554d37dd3c3d6725b58a69abce043399d47122a014e43b7c6f2901e34a7abeb8fe60e93ce1d3d5948c22cf3ef2f3ac551e0ae3ddaa6baa629bb08b2587bb66b0c35d1778826") r5 = socket$kcm(0x10, 0x2, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002380)={r1, 0xfffffffffffffd3e, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002640)={r4, 0x20, &(0x7f0000002600)={&(0x7f0000002440)=""/230, 0xe6, 0x0, &(0x7f0000002540)=""/153, 0x99}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_lsm={0x1d, 0x16, &(0x7f0000002800)=ANY=[@ANYBLOB="1800000009000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff18000000ff010000000000004b000000183500000200000000000000000000001895f4ff01000000bf91000000000000b7020000020000008500000084000000b70000000000000095000000000000003b553aff76bdc39a323b10d91579f3fe18eed5c67aa6b3ed6ac0d06499a05f41448db167257710fc83c4444f003f7376fba6ca749956557d5ea1f01710ad799093cbaee10a8d10db99374cc5496982f6aac94991b625fc91f2d7491f62ed565eb1eeb95f150c0ce5e994f88e4e074b746ccd8a4831bec1c1da5b26f1cefebfde713208f1fdecc9d7772ee55378b4f9"], &(0x7f0000000b80)='GPL\x00', 0xfffffff8, 0x30, &(0x7f0000001300)=""/48, 0x40f00, 0x3, '\x00', r7, 0x1b, r4, 0x8, &(0x7f00000023c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000002400)={0x5, 0x10, 0x101, 0x1}, 0x10, r8, 0x0, 0x5, &(0x7f0000002680)=[0x1, 0x1, r1, r1], &(0x7f00000026c0)=[{0x3, 0x5, 0xa, 0x4}, {0x4, 0x5, 0x3, 0x9}, {0x0, 0x1, 0xd, 0x6}, {0x5, 0x5, 0x3}, {0x0, 0x1, 0xa}], 0x10, 0x80}, 0x94) (async) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000b00)={&(0x7f0000000a80)=@hci={0x1f, 0x543, 0x6}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000013c0)="62031400d755af176510122f1eafbcf72be12b30087f5c582d26116642c4", 0x1e}, {&(0x7f0000001400)="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", 0xf4c}], 0x2}, 0x4041) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r10}, 0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000ff07f8ff00000000bfa200000000000007020700f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r10}, 0x20) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x2, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], &(0x7f0000000380)='GPL\x00', 0x8000, 0x55, &(0x7f0000000480)=""/85, 0x40f00, 0x2, '\x00', r12, 0x25, r13, 0x8, &(0x7f00000008c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x9, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[r14, r0, r15], &(0x7f0000000b00)=[{0x4, 0x2, 0x7, 0x3}, {0x3, 0x4, 0xf}], 0x10, 0x5}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r11}, 0x18) (async) r16 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r16, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.594518904s ago: executing program 2 (id=2795): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 4.593772304s ago: executing program 3 (id=2796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000fc0)={&(0x7f0000000a00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/255, 0xff}, {&(0x7f0000000c80)=""/177, 0xb1}, {&(0x7f0000000d40)=""/196, 0xc4}, {&(0x7f0000000e40)=""/70, 0x46}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/5, 0x5}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0xa}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8119, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000190081054e81f882db44b904021d005c06007c09e8fe55a10a0009400600142603600e1208600b", 0x2b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r9, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000000c0)) socketpair(0x2a, 0x5, 0xfffffffc, &(0x7f0000000000)) syz_clone(0x5824000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r7) 4.425975837s ago: executing program 4 (id=2798): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x65, 0x6}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/65, 0x2b, 0x41, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r0, r1, 0x3, 0x4, 0x3}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xb0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe36925867"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1410, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x84}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.919815557s ago: executing program 2 (id=2799): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000003680)=""/4110, 0x26, 0x100e, 0x1}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="d8000000180081034e81f783db4cb9040a1d020006007c1ee8fc55a10a0015000400142603600e120800140000000401a80009000900024004000000035c044dc1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e03a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4efef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r0, 0x20, &(0x7f0000000680)={&(0x7f0000002680)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 3.730496172s ago: executing program 2 (id=2800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x800, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.729975742s ago: executing program 3 (id=2801): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.562215796s ago: executing program 0 (id=2802): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) r3 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, 0x0, 0x24}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="26000000000000000000f2"], 0x20) setsockopt$sock_attach_bpf(r3, 0x29, 0x2f, &(0x7f0000000100), 0x120) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e", 0x19}], 0x1}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 3.220971833s ago: executing program 2 (id=2803): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0x6, 0x0, 0x8, 0xe2, 0x0, 0x9, 0x40022, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x840, 0x9, 0xfffffffd, 0x5, 0x3, 0x123, 0x4, 0x0, 0xfffffff8, 0x0, 0x9}, 0xffffffffffffffff, 0x4, r0, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000440)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="a7b9545dd30a1d31677b2d5a5091", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x27, 0xa, 0xfffffffc, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r1, 0x84, 0x79, &(0x7f0000000000)=r6, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) socket$kcm(0xa, 0x0, 0xfe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1, 0xb}, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffd, 0x5}, 0x1200, 0x5, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.159443718s ago: executing program 0 (id=2804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) (fail_nth: 4) 3.158333238s ago: executing program 4 (id=2805): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000540)={0x0, 0x80, 0x4, 0xf, 0x6, 0x3, 0x0, 0x1, 0x8000c, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7fff}, 0x0, 0x39dd, 0x7, 0x0, 0x0, 0x10, 0x200, 0x0, 0x4, 0x0, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b15dd7cf1c000004000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x17) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xf730, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f00000004c0)={'wlan1\x00', @random="f581168bedec"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) write$cgroup_int(r7, &(0x7f0000000600)=0xd, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80, 0x0, 0x0, 0x41000, 0x9, '\x00', r8, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) 3.067826235s ago: executing program 3 (id=2806): bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x2}, {0x3d}, {0x2, 0x0, 0xd, 0x7}, {0x6}]}) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@fallback=r0, 0x2b, 0x1, 0xb, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@cgroup, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value, @void, @void, r3}, 0x20) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001280)="16", 0x1}], 0x1}, 0x0) close(r10) r11 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000080)=r11, 0x12) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0xaaff4033c6be7163, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @jmp={0x5, 0x0, 0xa, 0x3, 0x8, 0xfffffffffffffffe, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x63, &(0x7f00000002c0)=""/99, 0x40f00, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000340)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x1, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000003c0)=[{0x5, 0x2, 0x3}, {0x2, 0x2, 0xd}, {0x2, 0x1, 0x0, 0xb}, {0x0, 0x3, 0xf, 0xa}, {0x2, 0x1, 0x1, 0x5}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map=r4, r15, 0xa, 0x0, 0x0, @void, @value=r0, @void, @void, r3}, 0x20) 3.053207326s ago: executing program 0 (id=2807): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x22082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40005) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x8, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f080100180000000000000006000000"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.956390954s ago: executing program 4 (id=2808): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcf, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x4, 0xdfd6feaff94f5e6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='(\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x555) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x6, 0x4, 0x26, 0x4, 0x0, 0x2, 0x8c000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98c, 0x0, @perf_config_ext={0x6, 0x3}, 0x100029, 0x3, 0x1, 0x4, 0x8, 0x1, 0xc457, 0x0, 0x2, 0x0, 0x1}, r0, 0x9, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61143c00000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 2.165258787s ago: executing program 0 (id=2809): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.163320297s ago: executing program 4 (id=2810): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 2.162988577s ago: executing program 3 (id=2811): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)="38363337d1d5", 0x6}], 0x1}, 0x400c0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r2}) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000001340)=@pppoe={0x18, 0x0, {0x2, @random="7b331389fbd9", 'pim6reg1\x00'}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="b8b2821400000081000000008100", 0xe}], 0x1}, 0x20000090) 1.773903878s ago: executing program 4 (id=2812): r0 = perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000fc0)={&(0x7f0000000a00)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a80)=""/165, 0xa5}, {&(0x7f0000000b40)=""/59, 0x3b}, {&(0x7f0000000b80)=""/255, 0xff}, {&(0x7f0000000c80)=""/177, 0xb1}, {&(0x7f0000000d40)=""/196, 0xc4}, {&(0x7f0000000e40)=""/70, 0x46}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/5, 0x5}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0xa}, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8119, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000190081054e81f882db44b904021d005c06007c09e8fe55a10a0009400600142603600e1208600b", 0x2b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r9, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r10 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000000c0)) socketpair(0x2a, 0x5, 0xfffffffc, &(0x7f0000000000)) syz_clone(0x5824000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0xc04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r7) 1.679774786s ago: executing program 0 (id=2813): getpid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x97, 0x3, 0x14, 0x4, 0x0, 0x40003, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0xa, 0xe4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)="845c", &(0x7f0000000000), 0x1, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000500), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0x12b) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="c00e020030000b02d21a04000a740100053582c105003e37024832bb72018000f01700d1bd00009ee606d4f3ab33d27db3d1bbcfef24ffffa78f9d6fd317acacaa9eb0a25e1c3da70d00e78c7b9dbc9fd851c9e1d3f4b65044e10a0d55cdaa5d5c2a38e96c688bf9a19b063f363e737f7f", 0x71}], 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 1.679412106s ago: executing program 3 (id=2814): socket$kcm(0x22, 0x2, 0x21) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) 1.610004781s ago: executing program 2 (id=2815): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x65, 0x6}]}, {0x0, [0x0]}}, &(0x7f0000000740)=""/65, 0x2b, 0x41, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r0, r1, 0x3, 0x4, 0x3}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xb0}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xf, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e386112192", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1410, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x84}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 945.367035ms ago: executing program 4 (id=2816): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a11800150006", 0x17}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18}, 0x2004fc10) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) syz_clone(0x2200c00, &(0x7f00000001c0)="b4fb0f2fa4741eda40209066cafea0ff9ecf718e701c2aa10cf889824ede5ec2e7b946dd7e5fc88b283cd8ec1f8a76b509d47834e255a30ae5bca21b6cac86d8656ed27623ac9c6b441a6be0303d3e68e9c65c5cd46cb0988d06d66eb8b509af3f24c1b5406f851ad88cb8b791dd76e690b48c9f820a", 0x76, &(0x7f0000000280), &(0x7f0000000380), &(0x7f00000006c0)="3f31433acb5f81351f1b9766529e3958d5023176a48938e549f1cba504848be5c88f28f4b519e5c88472baf6813ae31b2d44cfe6df81cc7d1b98fe10b9cf6fd927e2bd0fabd75b70bcac5b6dc0641960669b938cd11738867b1dd48fa3ae42065542efb660e449672a050882a1e50e31df22b61c9260b3e5d3c3d1f7c6488439c8e6fcc6b1") socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53b0711a55d47470a8da88ca", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc0189436, 0x2000141a) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x2}]}) 584.368983ms ago: executing program 3 (id=2817): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x11, 0x200000000000003, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xc58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 4) 29.709328ms ago: executing program 2 (id=2818): socket$kcm(0x10, 0x8, 0x0) (async) r0 = socket$kcm(0x10, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="cab4a7a90000000000000000000000000000a56b12cf9f98d3c12b620000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="cab4a7a90000000000000000000000000000a56b12cf9f98d3c12b620000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000002340)=ANY=[@ANYBLOB="1800000003120000000000000100010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006b4bf4fff0ffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x41dd3e43a71bc8fa) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000002c0), 0x161) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r2, 0x0, 0x99, 0x33, &(0x7f0000002440)="00c8c485b9dd20cfdce6381241fe62b783360f892503ac7247e5caf2666c4ec02c6437e7f479ef18bed35345bd663b7cd62b2e217fa8d2ab721a8600895cbe63222c311f9d946369a3fb657d210a16c73a2c50c7e24873af9c7b273440aa03f270409156ae85ce6dbcecab87b87abf61c2be76c83e81c5b2accfdba61018708685c8abed8293e29ae0017ca29659ccd5896f568c3a0680d62b", &(0x7f0000000040)=""/51, 0x80, 0x0, 0x15, 0xe5, &(0x7f0000000240)="a0905c0bb194cad4d575c80d095d480d8360a298ae", &(0x7f0000000500)="ba51710ebeea73ec42af8fdad4dcc072436272a622295203748a1b3c4165a05df5d053a49f2e7a76d461624bad7ae1573781f7d66bf3c7d627e8e70354e3242cdf9bfc9c4b0111614669f7439d87109751f020799b285e083e2a19d33764dde8bbf55c961f0ce05169977f520bc391aa04dba230940a6bb2a23efb308a1b3af45bd1040d5690df6751bac3377149e31744fbd796cdf609458aac7934efe0f850e8891f83f2e3dd347ef6c651fc9f2222b00219c866b35fde92203b2fb836d21b5165ece3e143bf0f1973a1c6ab31bd6e4478ba965890e5697ddc0fbacd7d0774893a33bccc", 0x4, 0x0, 0x5}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r2, 0x0, 0x99, 0x33, &(0x7f0000002440)="00c8c485b9dd20cfdce6381241fe62b783360f892503ac7247e5caf2666c4ec02c6437e7f479ef18bed35345bd663b7cd62b2e217fa8d2ab721a8600895cbe63222c311f9d946369a3fb657d210a16c73a2c50c7e24873af9c7b273440aa03f270409156ae85ce6dbcecab87b87abf61c2be76c83e81c5b2accfdba61018708685c8abed8293e29ae0017ca29659ccd5896f568c3a0680d62b", &(0x7f0000000040)=""/51, 0x80, 0x0, 0x15, 0xe5, &(0x7f0000000240)="a0905c0bb194cad4d575c80d095d480d8360a298ae", &(0x7f0000000500)="ba51710ebeea73ec42af8fdad4dcc072436272a622295203748a1b3c4165a05df5d053a49f2e7a76d461624bad7ae1573781f7d66bf3c7d627e8e70354e3242cdf9bfc9c4b0111614669f7439d87109751f020799b285e083e2a19d33764dde8bbf55c961f0ce05169977f520bc391aa04dba230940a6bb2a23efb308a1b3af45bd1040d5690df6751bac3377149e31744fbd796cdf609458aac7934efe0f850e8891f83f2e3dd347ef6c651fc9f2222b00219c866b35fde92203b2fb836d21b5165ece3e143bf0f1973a1c6ab31bd6e4478ba965890e5697ddc0fbacd7d0774893a33bccc", 0x4, 0x0, 0x5}, 0x50) sendmsg$inet(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x5) sendmsg$kcm(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) (async) sendmsg$kcm(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)) syz_clone(0x40000400, &(0x7f0000000900)="ebed014e644dc5908e34dcd9e3baebd3b33d38ddf58c8f9bf9f4226afc6793c046b03f0cbf892f31436b73622a14b11fc1f27fa39019b26c89518f95406298d5229c16c5329d01a47b7506a9791adeb59a1d1202ef3f9153e44f6a318b7402fdd6310d8b6bb1c2fa9bea12bb4d371818d9cc40605815eef8e8e8219dd238dce5160dd8c678b1e9097fc0ba715c127b5bea96ac750023b747ad9b71b825079017a76867d10420ce5702e22113bbcab7136880d7937cbb4ab3a36b895ceb16090e29a1e267460c2b82b8ab2b057e24538bde331a0286", 0xd5, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="b557447b2ad39fac4260f7baaf0c562b5b638b5f63fa778a1dc29ec9401744e3239973cd810c9fe7a3c944eb11e993b5d8cce05e2d23554fe79216130534852fd5399e2848d7f19d7390c821dca026fb791153444d5fa7c291f937c951472e5f9c3f67860ebd92601b70f9d2256ae109fac04604a030dedc3cf359bd68b32d5f3f760fce141c17df3cf526") (async) syz_clone(0x40000400, &(0x7f0000000900)="ebed014e644dc5908e34dcd9e3baebd3b33d38ddf58c8f9bf9f4226afc6793c046b03f0cbf892f31436b73622a14b11fc1f27fa39019b26c89518f95406298d5229c16c5329d01a47b7506a9791adeb59a1d1202ef3f9153e44f6a318b7402fdd6310d8b6bb1c2fa9bea12bb4d371818d9cc40605815eef8e8e8219dd238dce5160dd8c678b1e9097fc0ba715c127b5bea96ac750023b747ad9b71b825079017a76867d10420ce5702e22113bbcab7136880d7937cbb4ab3a36b895ceb16090e29a1e267460c2b82b8ab2b057e24538bde331a0286", 0xd5, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)="b557447b2ad39fac4260f7baaf0c562b5b638b5f63fa778a1dc29ec9401744e3239973cd810c9fe7a3c944eb11e993b5d8cce05e2d23554fe79216130534852fd5399e2848d7f19d7390c821dca026fb791153444d5fa7c291f937c951472e5f9c3f67860ebd92601b70f9d2256ae109fac04604a030dedc3cf359bd68b32d5f3f760fce141c17df3cf526") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x1, &(0x7f0000000b80)=@raw=[@ldst={0x2, 0x2, 0x2, 0x8, 0x3, 0x4, 0x8}], &(0x7f0000000bc0)='GPL\x00', 0xffff, 0xf6, &(0x7f0000000c00)=""/246, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d40)=[0xffffffffffffffff, 0x1, 0x1, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x2, 0x3, 0xe, 0x5}, {0x2, 0x4, 0x5, 0x8}, {0x0, 0x5, 0xf, 0x1}, {0x3, 0x4, 0x1, 0x8}, {0x2, 0x5, 0x6, 0x2}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)) syz_clone(0x220800, &(0x7f0000000f00)="09d3e9f4749484304c9ebdaf7c94cf8af64141cb0807e34cba769ba4358c11f5aba0a7ab9fc9219ced8ee7530f8861629c2990b1dbf3b6378f0baec9f946634e6907b4ff72a178be370b4c37b111d0dcb93ef6a67119c258c65802c717288ad1cb89eebba63f5035f1e7dcc7ec3cd5c5998eb3267d418c75a30d5668e0366bef7fdebb9c0b4ec0277fd700f2daf9a604b8b017f4ffa6d1f491a8e3b332ce6a6b210f4c134ce1d99985053c5ba5cd61d9cf8704fa3644bbc86bc384cedfdfff7b75adaebb255a643ec50e1706f47365ee09f0ab", 0xd3, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="62ed8fbcf6558f5b9ae7ff828c5f375dba8326efa608c7e84bf6cdb5311b18831344c7f14a5ac7d2ec6aec44d3bc15c3dd44d84973b1d17590a56d71d5a5e14379da23daa3a3917b711b37f137f95889f987f2910a474763cc98baccf27426bb400a0090fec75bd1ba7ebf1d46a393272b2404f0886ee502ef3d91e340a5") 0s ago: executing program 0 (id=2819): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x22082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0xd, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40005) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x8, &(0x7f0000000100), 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9f0801001800000000000000060000000000000604000000"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): . [ 330.800784][ T9000] netlink: 'syz.4.1577': attribute type 9 has an invalid length. [ 330.832912][ T9000] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.1577'. [ 331.747453][ T9026] netlink: 'syz.0.1580': attribute type 9 has an invalid length. [ 331.834085][ T9026] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.1580'. [ 333.042049][ T9051] netlink: 'syz.4.1591': attribute type 9 has an invalid length. [ 333.069406][ T9051] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.1591'. [ 335.043850][ T9075] netlink: 'syz.3.1597': attribute type 4 has an invalid length. [ 335.077448][ T9075] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1597'. [ 335.490810][ T9075] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 335.870253][ T9099] FAULT_INJECTION: forcing a failure. [ 335.870253][ T9099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.901126][ T9099] CPU: 1 PID: 9099 Comm: syz.2.1604 Not tainted 6.1.147-syzkaller #0 [ 335.909258][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.919331][ T9099] Call Trace: [ 335.922617][ T9099] [ 335.925646][ T9099] dump_stack_lvl+0x168/0x22e [ 335.930358][ T9099] ? show_regs_print_info+0x12/0x12 [ 335.935576][ T9099] ? load_image+0x3b0/0x3b0 [ 335.940108][ T9099] ? __lock_acquire+0x7c50/0x7c50 [ 335.945157][ T9099] ? snprintf+0xd7/0x120 [ 335.949420][ T9099] should_fail_ex+0x399/0x4d0 [ 335.954117][ T9099] _copy_to_user+0x2c/0x130 [ 335.958644][ T9099] simple_read_from_buffer+0xe3/0x150 [ 335.964049][ T9099] proc_fail_nth_read+0x19a/0x210 [ 335.969100][ T9099] ? proc_fault_inject_write+0x2f0/0x2f0 [ 335.974752][ T9099] ? fsnotify_perm+0x248/0x550 [ 335.979535][ T9099] ? proc_fault_inject_write+0x2f0/0x2f0 [ 335.985176][ T9099] vfs_read+0x2c0/0x920 [ 335.989461][ T9099] ? kernel_read+0x1e0/0x1e0 [ 335.994060][ T9099] ? __fget_files+0x28/0x4d0 [ 335.998681][ T9099] ? __fget_files+0x44a/0x4d0 [ 336.003357][ T9099] ? __fdget_pos+0x2ae/0x360 [ 336.007939][ T9099] ? ksys_read+0x71/0x240 [ 336.012298][ T9099] ksys_read+0x143/0x240 [ 336.016532][ T9099] ? vfs_write+0x960/0x960 [ 336.020952][ T9099] ? lockdep_hardirqs_on+0x94/0x140 [ 336.026140][ T9099] do_syscall_64+0x4c/0xa0 [ 336.030544][ T9099] ? clear_bhb_loop+0x60/0xb0 [ 336.035211][ T9099] ? clear_bhb_loop+0x60/0xb0 [ 336.039905][ T9099] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.045796][ T9099] RIP: 0033:0x7f335a58d57c [ 336.050217][ T9099] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.069821][ T9099] RSP: 002b:00007f335b343030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.078227][ T9099] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58d57c [ 336.086187][ T9099] RDX: 000000000000000f RSI: 00007f335b3430a0 RDI: 0000000000000004 [ 336.094146][ T9099] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 336.102108][ T9099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.110081][ T9099] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 336.118080][ T9099] [ 336.555372][ T9119] netlink: 'syz.4.1605': attribute type 153 has an invalid length. [ 336.575930][ T9119] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.1605'. [ 337.618099][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1615'. [ 337.637332][ T9143] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1615'. [ 338.449583][ T9166] netlink: 64851 bytes leftover after parsing attributes in process `syz.3.1623'. [ 338.956160][ T9172] netlink: 'syz.4.1626': attribute type 10 has an invalid length. [ 338.969261][ T9174] FAULT_INJECTION: forcing a failure. [ 338.969261][ T9174] name failslab, interval 1, probability 0, space 0, times 0 [ 339.014814][ T9172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'. [ 339.053546][ T9174] CPU: 1 PID: 9174 Comm: syz.0.1627 Not tainted 6.1.147-syzkaller #0 [ 339.061712][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.071778][ T9174] Call Trace: [ 339.075064][ T9174] [ 339.078000][ T9174] dump_stack_lvl+0x168/0x22e [ 339.082693][ T9174] ? show_regs_print_info+0x12/0x12 [ 339.087904][ T9174] ? load_image+0x3b0/0x3b0 [ 339.092421][ T9174] ? __might_sleep+0xd0/0xd0 [ 339.097117][ T9174] ? __lock_acquire+0x7c50/0x7c50 [ 339.102158][ T9174] ? perf_trace_buf_update+0x9c/0x220 [ 339.107549][ T9174] should_fail_ex+0x399/0x4d0 [ 339.112335][ T9174] should_failslab+0x5/0x20 [ 339.116860][ T9174] slab_pre_alloc_hook+0x59/0x310 [ 339.121899][ T9174] ? perf_tp_event+0xa4a/0xb60 [ 339.126680][ T9174] kmem_cache_alloc_node+0x5a/0x320 [ 339.131890][ T9174] ? __alloc_skb+0xfc/0x7e0 [ 339.136409][ T9174] __alloc_skb+0xfc/0x7e0 [ 339.140765][ T9174] alloc_skb_with_frags+0xa7/0x710 [ 339.145897][ T9174] sock_alloc_send_pskb+0x853/0x980 [ 339.151122][ T9174] ? sock_kzfree_s+0x50/0x50 [ 339.155722][ T9174] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 339.161549][ T9174] ? ct_nmi_exit+0x145/0x1c0 [ 339.166152][ T9174] __ip_append_data+0x253c/0x3760 [ 339.171200][ T9174] ? __local_bh_enable_ip+0x12a/0x1b0 [ 339.176601][ T9174] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 339.181460][ T9174] ? ip_route_output_key_hash+0x12b/0x340 [ 339.187187][ T9174] ? ip_setup_cork+0x850/0x850 [ 339.191963][ T9174] ? ipv4_mtu+0x2c8/0x3e0 [ 339.196302][ T9174] ? ip_setup_cork+0x532/0x850 [ 339.201081][ T9174] ip_make_skb+0x1d6/0x3f0 [ 339.205510][ T9174] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 339.210368][ T9174] ? ip_flush_pending_frames+0x250/0x250 [ 339.216024][ T9174] udp_sendmsg+0x1abc/0x2390 [ 339.220648][ T9174] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 339.225509][ T9174] ? udp_cmsg_send+0x350/0x350 [ 339.230291][ T9174] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 339.236293][ T9174] ? lock_chain_count+0x20/0x20 [ 339.241184][ T9174] ? __local_bh_enable_ip+0x12a/0x1b0 [ 339.246573][ T9174] ? _local_bh_enable+0xa0/0xa0 [ 339.251455][ T9174] ? inet_sendmsg+0x147/0x2f0 [ 339.256147][ T9174] ? inet_sendmsg+0x147/0x2f0 [ 339.260833][ T9174] ? inet_send_prepare+0x260/0x260 [ 339.265950][ T9174] ____sys_sendmsg+0x59b/0x970 [ 339.270724][ T9174] ? __lock_acquire+0x7c50/0x7c50 [ 339.275767][ T9174] ? __sys_sendmsg_sock+0x30/0x30 [ 339.280797][ T9174] ? __import_iovec+0x315/0x500 [ 339.285665][ T9174] ? import_iovec+0x6f/0xa0 [ 339.290181][ T9174] ___sys_sendmsg+0x21c/0x290 [ 339.294878][ T9174] ? __sys_sendmsg+0x270/0x270 [ 339.299684][ T9174] ? __lock_acquire+0x7c50/0x7c50 [ 339.304742][ T9174] ? __fdget+0x17c/0x200 [ 339.309009][ T9174] __se_sys_sendmsg+0x19e/0x270 [ 339.313873][ T9174] ? perf_trace_preemptirq_template+0x287/0x330 [ 339.320125][ T9174] ? __x64_sys_sendmsg+0x80/0x80 [ 339.325088][ T9174] ? lockdep_hardirqs_on+0x94/0x140 [ 339.330302][ T9174] do_syscall_64+0x4c/0xa0 [ 339.334736][ T9174] ? clear_bhb_loop+0x60/0xb0 [ 339.339430][ T9174] ? clear_bhb_loop+0x60/0xb0 [ 339.344122][ T9174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.350035][ T9174] RIP: 0033:0x7f78e9f8eb69 [ 339.354460][ T9174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.374088][ T9174] RSP: 002b:00007f78eadea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.382535][ T9174] RAX: ffffffffffffffda RBX: 00007f78ea1b5fa0 RCX: 00007f78e9f8eb69 [ 339.390523][ T9174] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000003a [ 339.398509][ T9174] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 339.406493][ T9174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.414475][ T9174] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 339.422477][ T9174] [ 339.472402][ T9172] bridge0: port 3(team0) entered blocking state [ 339.488763][ T9172] bridge0: port 3(team0) entered disabled state [ 339.522888][ T9172] bridge0: port 3(team0) entered blocking state [ 339.529778][ T9172] bridge0: port 3(team0) entered forwarding state [ 340.596071][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 340.607443][ T9215] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1640'. [ 340.849942][ T9229] netlink: 'syz.2.1644': attribute type 10 has an invalid length. [ 340.877973][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1644'. [ 340.910569][ T9229] device team0 entered promiscuous mode [ 340.945394][ T9229] device team_slave_0 entered promiscuous mode [ 340.973882][ T9229] device team_slave_1 entered promiscuous mode [ 341.011981][ T9229] bridge0: port 3(team0) entered blocking state [ 341.049759][ T9229] bridge0: port 3(team0) entered disabled state [ 341.093062][ T9229] bridge0: port 3(team0) entered blocking state [ 341.099835][ T9229] bridge0: port 3(team0) entered forwarding state [ 342.631824][ T9258] netlink: 'syz.1.1654': attribute type 10 has an invalid length. [ 342.654681][ T9258] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1654'. [ 343.765378][ T9285] netlink: 'syz.0.1662': attribute type 9 has an invalid length. [ 343.789350][ T9285] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.1662'. [ 343.816019][ T9289] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 343.834399][ T9289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 343.882175][ T9289] batman_adv: batadv0: Interface deactivated: team0 [ 343.904428][ T9289] batman_adv: batadv0: Removing interface: team0 [ 345.423058][ T9289] bridge0: port 3(team0) entered blocking state [ 345.431066][ T9289] bridge0: port 3(team0) entered disabled state [ 345.440625][ T9287] netlink: 'syz.4.1665': attribute type 9 has an invalid length. [ 345.454592][ T9287] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.1665'. [ 346.225298][ T9329] device syzkaller0 entered promiscuous mode [ 348.328705][ T9360] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1684'. [ 349.815397][ T9339] netlink: 'syz.0.1678': attribute type 17 has an invalid length. [ 349.826665][ T9339] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1678'. [ 349.842161][ T9367] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1687'. [ 350.092375][ T9381] sctp: [Deprecated]: syz.1.1691 (pid 9381) Use of int in maxseg socket option. [ 350.092375][ T9381] Use struct sctp_assoc_value instead [ 350.267313][ T9386] FAULT_INJECTION: forcing a failure. [ 350.267313][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 350.402875][ T9386] CPU: 1 PID: 9386 Comm: syz.3.1694 Not tainted 6.1.147-syzkaller #0 [ 350.411022][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.421100][ T9386] Call Trace: [ 350.424403][ T9386] [ 350.427347][ T9386] dump_stack_lvl+0x168/0x22e [ 350.432048][ T9386] ? show_regs_print_info+0x12/0x12 [ 350.437272][ T9386] ? load_image+0x3b0/0x3b0 [ 350.441808][ T9386] ? verify_lock_unused+0x140/0x140 [ 350.447122][ T9386] ? perf_trace_lock+0x2ec/0x370 [ 350.452085][ T9386] ? perf_trace_lock+0x2ec/0x370 [ 350.457045][ T9386] should_fail_ex+0x399/0x4d0 [ 350.461752][ T9386] should_failslab+0x5/0x20 [ 350.466282][ T9386] slab_pre_alloc_hook+0x59/0x310 [ 350.471367][ T9386] kmem_cache_alloc+0x56/0x2f0 [ 350.476147][ T9386] ? skb_clone+0x1e7/0x370 [ 350.480594][ T9386] skb_clone+0x1e7/0x370 [ 350.484863][ T9386] __netlink_deliver_tap+0x3ed/0x800 [ 350.490192][ T9386] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.495415][ T9386] netlink_deliver_tap+0x19c/0x1b0 [ 350.500552][ T9386] netlink_unicast+0x728/0x8d0 [ 350.505373][ T9386] netlink_sendmsg+0x89e/0xbc0 [ 350.510188][ T9386] ? netlink_getsockopt+0x540/0x540 [ 350.515434][ T9386] ? aa_sock_msg_perm+0x94/0x150 [ 350.520403][ T9386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 350.525712][ T9386] ? security_socket_sendmsg+0x7c/0xa0 [ 350.531201][ T9386] ? netlink_getsockopt+0x540/0x540 [ 350.537035][ T9386] ____sys_sendmsg+0x59b/0x970 [ 350.541837][ T9386] ? __sys_sendmsg_sock+0x30/0x30 [ 350.546879][ T9386] ? __import_iovec+0x315/0x500 [ 350.551770][ T9386] ? import_iovec+0x6f/0xa0 [ 350.556322][ T9386] ___sys_sendmsg+0x21c/0x290 [ 350.561029][ T9386] ? __sys_sendmsg+0x270/0x270 [ 350.565850][ T9386] ? __lock_acquire+0x7c50/0x7c50 [ 350.570956][ T9386] ? __fdget+0x17c/0x200 [ 350.575230][ T9386] __se_sys_sendmsg+0x19e/0x270 [ 350.580096][ T9386] ? ct_nmi_exit+0x145/0x1c0 [ 350.584712][ T9386] ? __x64_sys_sendmsg+0x80/0x80 [ 350.589699][ T9386] ? lockdep_hardirqs_on+0x94/0x140 [ 350.594919][ T9386] do_syscall_64+0x4c/0xa0 [ 350.599350][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 350.604041][ T9386] ? clear_bhb_loop+0x60/0xb0 [ 350.608738][ T9386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.614654][ T9386] RIP: 0033:0x7f0c5a78eb69 [ 350.619089][ T9386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.638820][ T9386] RSP: 002b:00007f0c5b64e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.647959][ T9386] RAX: ffffffffffffffda RBX: 00007f0c5a9b5fa0 RCX: 00007f0c5a78eb69 [ 350.655951][ T9386] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 350.663946][ T9386] RBP: 00007f0c5b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 350.671937][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.679930][ T9386] R13: 0000000000000000 R14: 00007f0c5a9b5fa0 R15: 00007ffe18c94a08 [ 350.687953][ T9386] [ 350.707523][ T9386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1694'. [ 351.259572][ T9389] netlink: 'syz.0.1695': attribute type 10 has an invalid length. [ 351.306914][ T9389] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1695'. [ 351.340032][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.347324][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.390706][ T9398] sctp: [Deprecated]: syz.1.1706 (pid 9398) Use of int in maxseg socket option. [ 351.390706][ T9398] Use struct sctp_assoc_value instead [ 351.726874][ T9408] device syzkaller0 entered promiscuous mode [ 351.941802][ T9416] FAULT_INJECTION: forcing a failure. [ 351.941802][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 351.955075][ T9416] CPU: 1 PID: 9416 Comm: syz.4.1702 Not tainted 6.1.147-syzkaller #0 [ 351.963175][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.973287][ T9416] Call Trace: [ 351.976577][ T9416] [ 351.979518][ T9416] dump_stack_lvl+0x168/0x22e [ 351.984220][ T9416] ? show_regs_print_info+0x12/0x12 [ 351.989438][ T9416] ? load_image+0x3b0/0x3b0 [ 351.993967][ T9416] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 351.999885][ T9416] ? lockdep_hardirqs_on+0x94/0x140 [ 352.005108][ T9416] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 352.011041][ T9416] should_fail_ex+0x399/0x4d0 [ 352.015750][ T9416] should_failslab+0x5/0x20 [ 352.020286][ T9416] slab_pre_alloc_hook+0x59/0x310 [ 352.025334][ T9416] ? __mod_timer+0x8ee/0xd20 [ 352.029963][ T9416] kmem_cache_alloc+0x56/0x2f0 [ 352.034750][ T9416] ? skb_clone+0x1e7/0x370 [ 352.039193][ T9416] skb_clone+0x1e7/0x370 [ 352.043459][ T9416] ? __neigh_event_send+0xee0/0x1670 [ 352.048778][ T9416] __neigh_event_send+0xeed/0x1670 [ 352.053927][ T9416] neigh_resolve_output+0x197/0x730 [ 352.059158][ T9416] ? ip_finish_output2+0x11b0/0x11b0 [ 352.064475][ T9416] ? ip_finish_output2+0x3e8/0x11b0 [ 352.069695][ T9416] ip_finish_output2+0xd05/0x11b0 [ 352.074741][ T9416] ? ip_finish_output2+0x3e8/0x11b0 [ 352.079954][ T9416] ? ip_mc_finish_output+0x250/0x250 [ 352.085234][ T9416] ? nf_hook+0x370/0x370 [ 352.089466][ T9416] ? ip_fragment+0x210/0x210 [ 352.094047][ T9416] ? ip_skb_dst_mtu+0x587/0x9c0 [ 352.098887][ T9416] ? ip_finish_output+0x3eb/0x4c0 [ 352.103902][ T9416] ip_send_skb+0x129/0x1c0 [ 352.108307][ T9416] udp_send_skb+0xa88/0x1580 [ 352.112901][ T9416] udp_sendmsg+0x1b0c/0x2390 [ 352.117488][ T9416] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 352.122325][ T9416] ? udp_cmsg_send+0x350/0x350 [ 352.127087][ T9416] ? verify_lock_unused+0x140/0x140 [ 352.132296][ T9416] ? release_sock+0x2b/0x1b0 [ 352.136874][ T9416] ? reacquire_held_locks+0x2f9/0x590 [ 352.142245][ T9416] udpv6_sendmsg+0xa26/0x2370 [ 352.146927][ T9416] ? udp_v6_early_demux+0xf50/0xf50 [ 352.152114][ T9416] ? ct_irq_exit_irqson+0xfa/0x160 [ 352.157216][ T9416] ? lock_chain_count+0x20/0x20 [ 352.162065][ T9416] ? _local_bh_enable+0xa0/0xa0 [ 352.166916][ T9416] ? ip6_datagram_release_cb+0x3b6/0x540 [ 352.172539][ T9416] ? release_sock+0xa9/0x1b0 [ 352.177121][ T9416] ? inet_send_prepare+0x1af/0x260 [ 352.182230][ T9416] ? inet_send_prepare+0x1af/0x260 [ 352.187330][ T9416] ? inet6_sendmsg+0x5b/0xd0 [ 352.191910][ T9416] ? inet6_compat_ioctl+0x380/0x380 [ 352.197096][ T9416] ____sys_sendmsg+0x59b/0x970 [ 352.201853][ T9416] ? __lock_acquire+0x7c50/0x7c50 [ 352.206872][ T9416] ? __sys_sendmsg_sock+0x30/0x30 [ 352.211884][ T9416] ? __import_iovec+0x315/0x500 [ 352.216732][ T9416] ? import_iovec+0x6f/0xa0 [ 352.221231][ T9416] ___sys_sendmsg+0x21c/0x290 [ 352.225900][ T9416] ? __sys_sendmsg+0x270/0x270 [ 352.230669][ T9416] ? __lock_acquire+0x7c50/0x7c50 [ 352.235697][ T9416] ? __fdget+0x17c/0x200 [ 352.239934][ T9416] __se_sys_sendmsg+0x19e/0x270 [ 352.244775][ T9416] ? ct_nmi_exit+0x145/0x1c0 [ 352.249359][ T9416] ? __x64_sys_sendmsg+0x80/0x80 [ 352.254296][ T9416] ? lockdep_hardirqs_on+0x94/0x140 [ 352.259487][ T9416] do_syscall_64+0x4c/0xa0 [ 352.263897][ T9416] ? clear_bhb_loop+0x60/0xb0 [ 352.268572][ T9416] ? clear_bhb_loop+0x60/0xb0 [ 352.273236][ T9416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 352.279121][ T9416] RIP: 0033:0x7f63e0b8eb69 [ 352.283525][ T9416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.303127][ T9416] RSP: 002b:00007f63e1a1d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.311539][ T9416] RAX: ffffffffffffffda RBX: 00007f63e0db5fa0 RCX: 00007f63e0b8eb69 [ 352.319498][ T9416] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 352.327460][ T9416] RBP: 00007f63e1a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 352.335419][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.343381][ T9416] R13: 0000000000000000 R14: 00007f63e0db5fa0 R15: 00007ffc3d9af488 [ 352.351351][ T9416] [ 354.663045][ T9441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.670348][ T9441] IPv6: NLM_F_CREATE should be set when creating new route [ 354.677611][ T9441] IPv6: NLM_F_CREATE should be set when creating new route [ 354.684903][ T9441] IPv6: NLM_F_CREATE should be set when creating new route [ 354.710793][ T9440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.893619][ T9449] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.1714'. [ 355.050746][ T9458] sctp: [Deprecated]: syz.2.1717 (pid 9458) Use of int in maxseg socket option. [ 355.050746][ T9458] Use struct sctp_assoc_value instead [ 355.741008][ T9480] netlink: 'syz.0.1724': attribute type 5 has an invalid length. [ 356.136686][ T9489] device syzkaller0 entered promiscuous mode [ 356.781654][ T9514] netlink: 'syz.1.1734': attribute type 27 has an invalid length. [ 356.796777][ T9514] netlink: 'syz.1.1734': attribute type 3 has an invalid length. [ 356.805346][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1734'. [ 357.027022][ T9514] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1734'. [ 358.919451][ T9528] sctp: [Deprecated]: syz.3.1736 (pid 9528) Use of int in maxseg socket option. [ 358.919451][ T9528] Use struct sctp_assoc_value instead [ 358.952093][ T9527] netlink: 'syz.1.1738': attribute type 9 has an invalid length. [ 358.977384][ T9527] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.1738'. [ 359.375318][ T9539] netlink: 'syz.4.1741': attribute type 2 has an invalid length. [ 359.401606][ T9539] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1741'. [ 360.000332][ T9557] device syzkaller0 entered promiscuous mode [ 362.061637][ T9586] netlink: 'syz.2.1755': attribute type 9 has an invalid length. [ 362.077351][ T9588] netlink: 'syz.3.1758': attribute type 3 has an invalid length. [ 362.086091][ T9586] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.1755'. [ 362.120613][ T9588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1758'. [ 363.909549][ T9620] device syzkaller0 entered promiscuous mode [ 365.806867][ T9640] netlink: 'syz.4.1774': attribute type 9 has an invalid length. [ 365.841124][ T9640] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.1774'. [ 366.003686][ T9654] netlink: 'syz.0.1777': attribute type 3 has an invalid length. [ 366.014431][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1777'. [ 366.099697][ T9657] netlink: 'syz.1.1779': attribute type 3 has an invalid length. [ 366.138029][ T9657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1779'. [ 367.720421][ T9684] device syzkaller0 entered promiscuous mode [ 368.829605][ T9705] netlink: 'syz.2.1796': attribute type 3 has an invalid length. [ 368.840125][ T9705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1796'. [ 371.041354][ T9733] FAULT_INJECTION: forcing a failure. [ 371.041354][ T9733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.098608][ T9733] CPU: 1 PID: 9733 Comm: syz.2.1804 Not tainted 6.1.147-syzkaller #0 [ 371.106739][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.116796][ T9733] Call Trace: [ 371.120072][ T9733] [ 371.123002][ T9733] dump_stack_lvl+0x168/0x22e [ 371.127680][ T9733] ? show_regs_print_info+0x12/0x12 [ 371.132876][ T9733] ? load_image+0x3b0/0x3b0 [ 371.137381][ T9733] ? __lock_acquire+0x7c50/0x7c50 [ 371.142413][ T9733] ? snprintf+0xd7/0x120 [ 371.146662][ T9733] should_fail_ex+0x399/0x4d0 [ 371.151347][ T9733] _copy_to_user+0x2c/0x130 [ 371.155890][ T9733] simple_read_from_buffer+0xe3/0x150 [ 371.161274][ T9733] proc_fail_nth_read+0x19a/0x210 [ 371.166300][ T9733] ? proc_fault_inject_write+0x2f0/0x2f0 [ 371.171958][ T9733] ? fsnotify_perm+0x248/0x550 [ 371.176721][ T9733] ? proc_fault_inject_write+0x2f0/0x2f0 [ 371.182352][ T9733] vfs_read+0x2c0/0x920 [ 371.186517][ T9733] ? kernel_read+0x1e0/0x1e0 [ 371.191113][ T9733] ? __fget_files+0x28/0x4d0 [ 371.195702][ T9733] ? __fget_files+0x44a/0x4d0 [ 371.200396][ T9733] ? __fdget_pos+0x2ae/0x360 [ 371.204980][ T9733] ? ksys_read+0x71/0x240 [ 371.209313][ T9733] ksys_read+0x143/0x240 [ 371.213559][ T9733] ? vfs_write+0x960/0x960 [ 371.217979][ T9733] ? lockdep_hardirqs_on+0x94/0x140 [ 371.223180][ T9733] do_syscall_64+0x4c/0xa0 [ 371.227604][ T9733] ? clear_bhb_loop+0x60/0xb0 [ 371.232276][ T9733] ? clear_bhb_loop+0x60/0xb0 [ 371.236954][ T9733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.242854][ T9733] RIP: 0033:0x7f335a58d57c [ 371.247264][ T9733] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 371.266892][ T9733] RSP: 002b:00007f335b343030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.275415][ T9733] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58d57c [ 371.283392][ T9733] RDX: 000000000000000f RSI: 00007f335b3430a0 RDI: 0000000000000005 [ 371.291370][ T9733] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 371.299342][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.307308][ T9733] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 371.315296][ T9733] [ 371.440748][ T9737] netlink: 'syz.3.1807': attribute type 9 has an invalid length. [ 371.484732][ T9737] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.1807'. [ 371.920562][ T9750] device syzkaller0 entered promiscuous mode [ 373.487884][ T9763] netlink: 'syz.1.1813': attribute type 3 has an invalid length. [ 373.532458][ T9763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1813'. [ 374.622246][ T9780] delete_channel: no stack [ 375.142577][ T9797] device syzkaller0 entered promiscuous mode [ 377.112998][ T9831] FAULT_INJECTION: forcing a failure. [ 377.112998][ T9831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.194754][ T9831] CPU: 0 PID: 9831 Comm: syz.0.1837 Not tainted 6.1.147-syzkaller #0 [ 377.202883][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.212947][ T9831] Call Trace: [ 377.216231][ T9831] [ 377.219265][ T9831] dump_stack_lvl+0x168/0x22e [ 377.223971][ T9831] ? show_regs_print_info+0x12/0x12 [ 377.229186][ T9831] ? load_image+0x3b0/0x3b0 [ 377.233707][ T9831] ? __lock_acquire+0x7c50/0x7c50 [ 377.238756][ T9831] should_fail_ex+0x399/0x4d0 [ 377.243456][ T9831] _copy_from_user+0x2c/0x170 [ 377.248154][ T9831] kstrtouint_from_user+0xbe/0x150 [ 377.253287][ T9831] ? kstrtol_from_user+0x150/0x150 [ 377.258415][ T9831] proc_fail_nth_write+0x85/0x1f0 [ 377.263430][ T9831] ? proc_fail_nth_read+0x210/0x210 [ 377.268623][ T9831] ? common_file_perm+0x171/0x1c0 [ 377.273654][ T9831] ? proc_fail_nth_read+0x210/0x210 [ 377.278837][ T9831] vfs_write+0x2c4/0x960 [ 377.283077][ T9831] ? file_end_write+0x250/0x250 [ 377.287926][ T9831] ? __fget_files+0x28/0x4d0 [ 377.292524][ T9831] ? __fget_files+0x44a/0x4d0 [ 377.297198][ T9831] ? __fdget_pos+0x2ae/0x360 [ 377.301793][ T9831] ? ksys_write+0x71/0x240 [ 377.306206][ T9831] ksys_write+0x143/0x240 [ 377.310532][ T9831] ? __ia32_sys_read+0x80/0x80 [ 377.315375][ T9831] ? lockdep_hardirqs_on+0x94/0x140 [ 377.320581][ T9831] do_syscall_64+0x4c/0xa0 [ 377.324995][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 377.329658][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 377.334334][ T9831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.340218][ T9831] RIP: 0033:0x7f78e9f8d61f [ 377.344680][ T9831] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 377.364280][ T9831] RSP: 002b:00007f78eadea030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 377.372687][ T9831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78e9f8d61f [ 377.380677][ T9831] RDX: 0000000000000001 RSI: 00007f78eadea0a0 RDI: 0000000000000004 [ 377.388642][ T9831] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 377.396610][ T9831] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 377.404596][ T9831] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 377.412633][ T9831] [ 378.540856][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.547276][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.643360][ T9871] FAULT_INJECTION: forcing a failure. [ 378.643360][ T9871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.759275][ T9871] CPU: 1 PID: 9871 Comm: syz.3.1848 Not tainted 6.1.147-syzkaller #0 [ 378.767414][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.777492][ T9871] Call Trace: [ 378.780784][ T9871] [ 378.783811][ T9871] dump_stack_lvl+0x168/0x22e [ 378.788507][ T9871] ? show_regs_print_info+0x12/0x12 [ 378.793722][ T9871] ? load_image+0x3b0/0x3b0 [ 378.798256][ T9871] ? __lock_acquire+0x7c50/0x7c50 [ 378.803349][ T9871] ? snprintf+0xd7/0x120 [ 378.807619][ T9871] should_fail_ex+0x399/0x4d0 [ 378.812327][ T9871] _copy_to_user+0x2c/0x130 [ 378.816848][ T9871] simple_read_from_buffer+0xe3/0x150 [ 378.822249][ T9871] proc_fail_nth_read+0x19a/0x210 [ 378.827294][ T9871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 378.832943][ T9871] ? fsnotify_perm+0x248/0x550 [ 378.837721][ T9871] ? proc_fault_inject_write+0x2f0/0x2f0 [ 378.843379][ T9871] vfs_read+0x2c0/0x920 [ 378.847570][ T9871] ? kernel_read+0x1e0/0x1e0 [ 378.852176][ T9871] ? __fget_files+0x28/0x4d0 [ 378.856794][ T9871] ? __fget_files+0x44a/0x4d0 [ 378.861505][ T9871] ? __fdget_pos+0x2ae/0x360 [ 378.866108][ T9871] ? ksys_read+0x71/0x240 [ 378.870476][ T9871] ksys_read+0x143/0x240 [ 378.874747][ T9871] ? vfs_write+0x960/0x960 [ 378.879236][ T9871] ? lockdep_hardirqs_on+0x94/0x140 [ 378.884469][ T9871] do_syscall_64+0x4c/0xa0 [ 378.888900][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 378.893596][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 378.898284][ T9871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.904278][ T9871] RIP: 0033:0x7f0c5a78d57c [ 378.908711][ T9871] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 378.928331][ T9871] RSP: 002b:00007f0c5b64e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.936781][ T9871] RAX: ffffffffffffffda RBX: 00007f0c5a9b5fa0 RCX: 00007f0c5a78d57c [ 378.944773][ T9871] RDX: 000000000000000f RSI: 00007f0c5b64e0a0 RDI: 0000000000000005 [ 378.952757][ T9871] RBP: 00007f0c5b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 378.960741][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 378.968725][ T9871] R13: 0000000000000000 R14: 00007f0c5a9b5fa0 R15: 00007ffe18c94a08 [ 378.976727][ T9871] [ 383.273805][ T9923] device syzkaller0 entered promiscuous mode [ 385.567799][ T9938] netlink: 'syz.0.1867': attribute type 28 has an invalid length. [ 385.661919][ T9951] netlink: 'syz.3.1872': attribute type 2 has an invalid length. [ 385.712310][ T9954] netlink: 'syz.1.1874': attribute type 6 has an invalid length. [ 386.002560][ T9965] netlink: 'syz.2.1877': attribute type 29 has an invalid length. [ 386.019730][ T9968] netlink: 'syz.2.1877': attribute type 29 has an invalid length. [ 386.346104][ T9975] device syzkaller0 entered promiscuous mode [ 386.375382][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1881'. [ 388.850567][T10003] IPv6: Can't replace route, no match found [ 390.740594][T10045] device syzkaller0 entered promiscuous mode [ 393.019617][T10056] device syzkaller0 entered promiscuous mode [ 393.414243][T10089] FAULT_INJECTION: forcing a failure. [ 393.414243][T10089] name failslab, interval 1, probability 0, space 0, times 0 [ 393.447605][T10089] CPU: 0 PID: 10089 Comm: syz.3.1917 Not tainted 6.1.147-syzkaller #0 [ 393.455830][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.465910][T10089] Call Trace: [ 393.469207][T10089] [ 393.472148][T10089] dump_stack_lvl+0x168/0x22e [ 393.476935][T10089] ? show_regs_print_info+0x12/0x12 [ 393.482158][T10089] ? load_image+0x3b0/0x3b0 [ 393.486684][T10089] ? __lock_acquire+0x12e5/0x7c50 [ 393.491747][T10089] should_fail_ex+0x399/0x4d0 [ 393.496453][T10089] should_failslab+0x5/0x20 [ 393.500976][T10089] slab_pre_alloc_hook+0x59/0x310 [ 393.506022][T10089] ? ___neigh_create+0x6ce/0x24c0 [ 393.511100][T10089] __kmem_cache_alloc_node+0x4f/0x260 [ 393.516495][T10089] ? lockdep_hardirqs_on+0x94/0x140 [ 393.521723][T10089] ? ___neigh_create+0x6ce/0x24c0 [ 393.526784][T10089] __kmalloc+0xa0/0x240 [ 393.530966][T10089] ___neigh_create+0x6ce/0x24c0 [ 393.535856][T10089] ip_neigh_gw4+0x356/0x4d0 [ 393.540388][T10089] ? ip_finish_output2+0x11b0/0x11b0 [ 393.545702][T10089] ip_finish_output2+0xf05/0x11b0 [ 393.550840][T10089] ? ip_finish_output2+0x3e8/0x11b0 [ 393.556054][T10089] ? ip_mc_finish_output+0x250/0x250 [ 393.561356][T10089] ? nf_hook+0x370/0x370 [ 393.565611][T10089] ? ip_fragment+0x210/0x210 [ 393.570227][T10089] ? ip_skb_dst_mtu+0x587/0x9c0 [ 393.575108][T10089] ? ip_finish_output+0x3eb/0x4c0 [ 393.580158][T10089] ip_send_skb+0x129/0x1c0 [ 393.584598][T10089] udp_send_skb+0xa88/0x1580 [ 393.589223][T10089] udp_sendmsg+0x1b0c/0x2390 [ 393.593865][T10089] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 393.598730][T10089] ? udp_cmsg_send+0x350/0x350 [ 393.603518][T10089] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 393.609517][T10089] ? lock_chain_count+0x20/0x20 [ 393.614399][T10089] ? __local_bh_enable_ip+0x12a/0x1b0 [ 393.619795][T10089] ? _local_bh_enable+0xa0/0xa0 [ 393.624668][T10089] ? inet_sendmsg+0x147/0x2f0 [ 393.629360][T10089] ? inet_sendmsg+0x147/0x2f0 [ 393.634051][T10089] ? inet_send_prepare+0x260/0x260 [ 393.639187][T10089] ____sys_sendmsg+0x59b/0x970 [ 393.643967][T10089] ? __lock_acquire+0x7c50/0x7c50 [ 393.649014][T10089] ? __sys_sendmsg_sock+0x30/0x30 [ 393.654053][T10089] ? __import_iovec+0x315/0x500 [ 393.658926][T10089] ? import_iovec+0x6f/0xa0 [ 393.663454][T10089] ___sys_sendmsg+0x21c/0x290 [ 393.668156][T10089] ? __sys_sendmsg+0x270/0x270 [ 393.672952][T10089] ? __lock_acquire+0x7c50/0x7c50 [ 393.678011][T10089] ? __fdget+0x17c/0x200 [ 393.682291][T10089] __se_sys_sendmsg+0x19e/0x270 [ 393.687160][T10089] ? ct_nmi_exit+0x145/0x1c0 [ 393.691770][T10089] ? __x64_sys_sendmsg+0x80/0x80 [ 393.696739][T10089] ? lockdep_hardirqs_on+0x94/0x140 [ 393.701971][T10089] do_syscall_64+0x4c/0xa0 [ 393.706399][T10089] ? clear_bhb_loop+0x60/0xb0 [ 393.711127][T10089] ? clear_bhb_loop+0x60/0xb0 [ 393.715826][T10089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.721741][T10089] RIP: 0033:0x7f0c5a78eb69 [ 393.726173][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.745805][T10089] RSP: 002b:00007f0c5b64e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.754257][T10089] RAX: ffffffffffffffda RBX: 00007f0c5a9b5fa0 RCX: 00007f0c5a78eb69 [ 393.762253][T10089] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 393.770241][T10089] RBP: 00007f0c5b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 393.778235][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.786229][T10089] R13: 0000000000000000 R14: 00007f0c5a9b5fa0 R15: 00007ffe18c94a08 [ 393.794258][T10089] [ 396.219020][T10116] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 396.227154][T10116] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1925'. [ 396.934860][T10144] device syzkaller0 entered promiscuous mode [ 400.850680][T10206] device syzkaller0 entered promiscuous mode [ 401.504173][T10226] delete_channel: no stack [ 401.633792][T10225] delete_channel: no stack [ 403.617195][T10246] netlink: 'syz.1.1971': attribute type 11 has an invalid length. [ 403.656373][T10246] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.1971'. [ 403.694881][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.452178][T10262] netlink: 'syz.4.1976': attribute type 9 has an invalid length. [ 404.473714][T10262] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1976'. [ 404.555938][T10273] FAULT_INJECTION: forcing a failure. [ 404.555938][T10273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.643076][T10273] CPU: 1 PID: 10273 Comm: syz.2.1978 Not tainted 6.1.147-syzkaller #0 [ 404.651295][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 404.661372][T10273] Call Trace: [ 404.664674][T10273] [ 404.667618][T10273] dump_stack_lvl+0x168/0x22e [ 404.672390][T10273] ? show_regs_print_info+0x12/0x12 [ 404.677611][T10273] ? load_image+0x3b0/0x3b0 [ 404.682137][T10273] ? __lock_acquire+0x7c50/0x7c50 [ 404.687181][T10273] should_fail_ex+0x399/0x4d0 [ 404.691881][T10273] prepare_alloc_pages+0x1e2/0x5f0 [ 404.697031][T10273] __alloc_pages+0x123/0x4e0 [ 404.701636][T10273] ? __kmem_cache_alloc_node+0x140/0x260 [ 404.707292][T10273] ? zone_statistics+0x170/0x170 [ 404.712243][T10273] ? alloc_skb_with_frags+0xa7/0x710 [ 404.717553][T10273] ? __kmalloc_node_track_caller+0xdf/0x230 [ 404.723475][T10273] ? alloc_pages+0x4d8/0x740 [ 404.728093][T10273] alloc_skb_with_frags+0x20c/0x710 [ 404.733313][T10273] sock_alloc_send_pskb+0x853/0x980 [ 404.738538][T10273] ? sock_kzfree_s+0x50/0x50 [ 404.743144][T10273] ? dev_get_by_index+0x1e/0x2d0 [ 404.748097][T10273] ? dev_get_by_index+0x1e/0x2d0 [ 404.753042][T10273] packet_sendmsg+0x32e2/0x4ea0 [ 404.757905][T10273] ? __might_sleep+0xd0/0xd0 [ 404.762536][T10273] ? irqentry_enter+0x33/0x50 [ 404.767209][T10273] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 404.773183][T10273] ? aa_sk_perm+0x7e5/0x920 [ 404.777678][T10273] ? packet_getsockopt+0x950/0x950 [ 404.782789][T10273] ? aa_sock_msg_perm+0x94/0x150 [ 404.787720][T10273] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 404.792997][T10273] ? security_socket_sendmsg+0x7c/0xa0 [ 404.798450][T10273] ? packet_getsockopt+0x950/0x950 [ 404.803552][T10273] ____sys_sendmsg+0x59b/0x970 [ 404.808312][T10273] ? __sys_sendmsg_sock+0x30/0x30 [ 404.813321][T10273] ? __import_iovec+0x315/0x500 [ 404.818169][T10273] ? import_iovec+0x6f/0xa0 [ 404.822669][T10273] ___sys_sendmsg+0x21c/0x290 [ 404.827338][T10273] ? __sys_sendmsg+0x270/0x270 [ 404.832106][T10273] ? __lock_acquire+0x7c50/0x7c50 [ 404.837137][T10273] ? __fdget+0x17c/0x200 [ 404.841371][T10273] __se_sys_sendmsg+0x19e/0x270 [ 404.846211][T10273] ? perf_trace_preemptirq_template+0x287/0x330 [ 404.852446][T10273] ? __x64_sys_sendmsg+0x80/0x80 [ 404.857389][T10273] ? lockdep_hardirqs_on+0x94/0x140 [ 404.862581][T10273] do_syscall_64+0x4c/0xa0 [ 404.866990][T10273] ? clear_bhb_loop+0x60/0xb0 [ 404.871652][T10273] ? clear_bhb_loop+0x60/0xb0 [ 404.876315][T10273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.882201][T10273] RIP: 0033:0x7f335a58eb69 [ 404.886606][T10273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.906286][T10273] RSP: 002b:00007f335b343038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.914691][T10273] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58eb69 [ 404.922670][T10273] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 404.930629][T10273] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 404.938588][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.946552][T10273] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 404.954525][T10273] [ 405.284228][T10291] netlink: 'syz.3.1985': attribute type 29 has an invalid length. [ 405.318550][T10291] netlink: 'syz.3.1985': attribute type 29 has an invalid length. [ 405.882077][T10314] netlink: 'syz.1.1993': attribute type 9 has an invalid length. [ 405.904167][T10314] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.1993'. [ 406.181022][T10318] netlink: 'syz.0.1994': attribute type 9 has an invalid length. [ 406.228133][T10318] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.1994'. [ 406.767208][T10332] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1998'. [ 406.907337][T10327] netlink: 'syz.3.1997': attribute type 9 has an invalid length. [ 406.934492][T10327] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1997'. [ 409.452814][T10388] netlink: 'syz.3.2016': attribute type 2 has an invalid length. [ 409.469088][T10389] netlink: 'syz.2.2013': attribute type 9 has an invalid length. [ 409.476871][T10389] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2013'. [ 410.293768][T10398] netlink: 'syz.1.2018': attribute type 9 has an invalid length. [ 410.318907][T10398] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2018'. [ 413.191610][T10462] netlink: 'syz.4.2035': attribute type 9 has an invalid length. [ 413.211574][T10462] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2035'. [ 413.551059][T10477] FAULT_INJECTION: forcing a failure. [ 413.551059][T10477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.656497][T10477] CPU: 0 PID: 10477 Comm: syz.0.2040 Not tainted 6.1.147-syzkaller #0 [ 413.664726][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.674811][T10477] Call Trace: [ 413.678111][T10477] [ 413.681069][T10477] dump_stack_lvl+0x168/0x22e [ 413.685766][T10477] ? show_regs_print_info+0x12/0x12 [ 413.690980][T10477] ? load_image+0x3b0/0x3b0 [ 413.695496][T10477] ? __lock_acquire+0x7c50/0x7c50 [ 413.700539][T10477] ? snprintf+0xd7/0x120 [ 413.704798][T10477] should_fail_ex+0x399/0x4d0 [ 413.709498][T10477] _copy_to_user+0x2c/0x130 [ 413.714021][T10477] simple_read_from_buffer+0xe3/0x150 [ 413.719415][T10477] proc_fail_nth_read+0x19a/0x210 [ 413.724454][T10477] ? proc_fault_inject_write+0x2f0/0x2f0 [ 413.730100][T10477] ? fsnotify_perm+0x248/0x550 [ 413.734878][T10477] ? proc_fault_inject_write+0x2f0/0x2f0 [ 413.740525][T10477] vfs_read+0x2c0/0x920 [ 413.744725][T10477] ? kernel_read+0x1e0/0x1e0 [ 413.749338][T10477] ? __fget_files+0x28/0x4d0 [ 413.753939][T10477] ? __fget_files+0x44a/0x4d0 [ 413.758643][T10477] ? __fdget_pos+0x2ae/0x360 [ 413.763244][T10477] ? ksys_read+0x71/0x240 [ 413.767588][T10477] ksys_read+0x143/0x240 [ 413.771848][T10477] ? vfs_write+0x960/0x960 [ 413.776285][T10477] ? lockdep_hardirqs_on+0x94/0x140 [ 413.781509][T10477] do_syscall_64+0x4c/0xa0 [ 413.785939][T10477] ? clear_bhb_loop+0x60/0xb0 [ 413.790625][T10477] ? clear_bhb_loop+0x60/0xb0 [ 413.795327][T10477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.801241][T10477] RIP: 0033:0x7f78e9f8d57c [ 413.805670][T10477] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 413.825298][T10477] RSP: 002b:00007f78eadea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.833746][T10477] RAX: ffffffffffffffda RBX: 00007f78ea1b5fa0 RCX: 00007f78e9f8d57c [ 413.841909][T10477] RDX: 000000000000000f RSI: 00007f78eadea0a0 RDI: 0000000000000005 [ 413.849900][T10477] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 413.857895][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.865884][T10477] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 413.873892][T10477] [ 415.146164][T10494] device syzkaller0 entered promiscuous mode [ 419.479109][T10518] netlink: 'syz.3.2052': attribute type 9 has an invalid length. [ 419.486907][T10518] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2052'. [ 419.980648][T10555] FAULT_INJECTION: forcing a failure. [ 419.980648][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 420.028938][T10555] CPU: 1 PID: 10555 Comm: syz.1.2060 Not tainted 6.1.147-syzkaller #0 [ 420.037166][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.047244][T10555] Call Trace: [ 420.050545][T10555] [ 420.053489][T10555] dump_stack_lvl+0x168/0x22e [ 420.058193][T10555] ? show_regs_print_info+0x12/0x12 [ 420.063412][T10555] ? load_image+0x3b0/0x3b0 [ 420.067946][T10555] ? __might_sleep+0xd0/0xd0 [ 420.072564][T10555] ? __lock_acquire+0x7c50/0x7c50 [ 420.077621][T10555] should_fail_ex+0x399/0x4d0 [ 420.082328][T10555] should_failslab+0x5/0x20 [ 420.086834][T10555] slab_pre_alloc_hook+0x59/0x310 [ 420.091858][T10555] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 420.097581][T10555] __kmem_cache_alloc_node+0x4f/0x260 [ 420.102955][T10555] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 420.108669][T10555] __kmalloc+0xa0/0x240 [ 420.112823][T10555] tomoyo_realpath_from_path+0xdf/0x5d0 [ 420.118379][T10555] tomoyo_path_number_perm+0x1e3/0x600 [ 420.123833][T10555] ? tomoyo_path_number_perm+0x1b6/0x600 [ 420.129462][T10555] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 420.134924][T10555] ? perf_trace_preemptirq_template+0x287/0x330 [ 420.141166][T10555] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 420.147162][T10555] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 420.153324][T10555] security_file_ioctl+0x6c/0xa0 [ 420.158258][T10555] __se_sys_ioctl+0x48/0x170 [ 420.162855][T10555] do_syscall_64+0x4c/0xa0 [ 420.167263][T10555] ? clear_bhb_loop+0x60/0xb0 [ 420.171934][T10555] ? clear_bhb_loop+0x60/0xb0 [ 420.176608][T10555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.182496][T10555] RIP: 0033:0x7f48d9b8eb69 [ 420.186906][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.206517][T10555] RSP: 002b:00007f48d99ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.214930][T10555] RAX: ffffffffffffffda RBX: 00007f48d9db5fa0 RCX: 00007f48d9b8eb69 [ 420.222896][T10555] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000007 [ 420.230862][T10555] RBP: 00007f48d99ff090 R08: 0000000000000000 R09: 0000000000000000 [ 420.238824][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.246789][T10555] R13: 0000000000000000 R14: 00007f48d9db5fa0 R15: 00007ffe9f984a98 [ 420.254773][T10555] [ 420.294780][T10555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 420.791034][T10574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2065'. [ 421.301583][T10593] device syzkaller0 entered promiscuous mode [ 421.318748][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2069'. [ 421.348309][T10591] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2069'. [ 424.891344][T10594] netlink: 'syz.3.2069': attribute type 41 has an invalid length. [ 425.069621][T10622] FAULT_INJECTION: forcing a failure. [ 425.069621][T10622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.101055][T10622] CPU: 1 PID: 10622 Comm: syz.0.2080 Not tainted 6.1.147-syzkaller #0 [ 425.109295][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.119368][T10622] Call Trace: [ 425.122653][T10622] [ 425.125585][T10622] dump_stack_lvl+0x168/0x22e [ 425.130357][T10622] ? show_regs_print_info+0x12/0x12 [ 425.135550][T10622] ? load_image+0x3b0/0x3b0 [ 425.140082][T10622] ? __lock_acquire+0x7c50/0x7c50 [ 425.145140][T10622] should_fail_ex+0x399/0x4d0 [ 425.149823][T10622] _copy_from_user+0x2c/0x170 [ 425.154500][T10622] __sys_bpf+0x265/0x6d0 [ 425.158745][T10622] ? bpf_link_show_fdinfo+0x340/0x340 [ 425.164130][T10622] ? lock_chain_count+0x20/0x20 [ 425.169000][T10622] __x64_sys_bpf+0x78/0x90 [ 425.173416][T10622] do_syscall_64+0x4c/0xa0 [ 425.177844][T10622] ? clear_bhb_loop+0x60/0xb0 [ 425.182513][T10622] ? clear_bhb_loop+0x60/0xb0 [ 425.187183][T10622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.193106][T10622] RIP: 0033:0x7f78e9f8eb69 [ 425.197518][T10622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.217124][T10622] RSP: 002b:00007f78eadea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.225573][T10622] RAX: ffffffffffffffda RBX: 00007f78ea1b5fa0 RCX: 00007f78e9f8eb69 [ 425.233545][T10622] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 425.241514][T10622] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 425.249481][T10622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.257455][T10622] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 425.265437][T10622] [ 425.315993][T10632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2083'. [ 426.331425][T10669] FAULT_INJECTION: forcing a failure. [ 426.331425][T10669] name failslab, interval 1, probability 0, space 0, times 0 [ 426.381834][T10669] CPU: 1 PID: 10669 Comm: syz.1.2095 Not tainted 6.1.147-syzkaller #0 [ 426.390074][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.400164][T10669] Call Trace: [ 426.403465][T10669] [ 426.406399][T10669] dump_stack_lvl+0x168/0x22e [ 426.411083][T10669] ? trace_event_raw_event_lock+0x230/0x230 [ 426.417085][T10669] ? show_regs_print_info+0x12/0x12 [ 426.422286][T10669] ? load_image+0x3b0/0x3b0 [ 426.426816][T10669] should_fail_ex+0x399/0x4d0 [ 426.431504][T10669] should_failslab+0x5/0x20 [ 426.436006][T10669] slab_pre_alloc_hook+0x59/0x310 [ 426.441037][T10669] kmem_cache_alloc+0x56/0x2f0 [ 426.445800][T10669] ? __nf_conntrack_alloc+0x99/0x380 [ 426.451094][T10669] __nf_conntrack_alloc+0x99/0x380 [ 426.456216][T10669] init_conntrack+0x22d/0x1140 [ 426.460988][T10669] ? early_drop+0x850/0x850 [ 426.465510][T10669] ? nf_conntrack_find_get+0x600/0x600 [ 426.471061][T10669] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 426.477131][T10669] ? __siphash_unaligned+0x25f/0x3a0 [ 426.482426][T10669] nf_conntrack_in+0xcf5/0x1770 [ 426.487280][T10669] ? lockdep_hardirqs_on+0x94/0x140 [ 426.492508][T10669] ? nf_ct_pernet+0x270/0x270 [ 426.497207][T10669] ? ipt_do_table+0x2ae/0x15a0 [ 426.501980][T10669] ? read_lock_is_recursive+0x10/0x10 [ 426.507353][T10669] ? ipv4_conntrack_defrag+0x284/0x5b0 [ 426.512812][T10669] ? ipv4_conntrack_local+0x11f/0x200 [ 426.518202][T10669] ? ipv4_conntrack_in+0x20/0x20 [ 426.523148][T10669] nf_hook_slow+0xb9/0x200 [ 426.527578][T10669] nf_hook+0x211/0x370 [ 426.531683][T10669] ? nf_hook+0x9a/0x370 [ 426.535857][T10669] ? __ip_local_out+0x5d0/0x5d0 [ 426.540724][T10669] ? nf_hook+0x370/0x370 [ 426.544978][T10669] ? ip_fast_csum+0x1ea/0x2b0 [ 426.549665][T10669] __ip_local_out+0x49c/0x5d0 [ 426.554340][T10669] ? nf_hook+0x370/0x370 [ 426.558585][T10669] ip_send_skb+0x48/0x1c0 [ 426.562919][T10669] udp_send_skb+0xa88/0x1580 [ 426.567534][T10669] udp_sendmsg+0x1b0c/0x2390 [ 426.572141][T10669] ? perf_trace_lock+0x2ec/0x370 [ 426.577090][T10669] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 426.581947][T10669] ? udp_cmsg_send+0x350/0x350 [ 426.586725][T10669] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 426.592722][T10669] ? lock_chain_count+0x20/0x20 [ 426.597598][T10669] ? __local_bh_enable_ip+0x12a/0x1b0 [ 426.602976][T10669] ? _local_bh_enable+0xa0/0xa0 [ 426.607836][T10669] ? inet_sendmsg+0x147/0x2f0 [ 426.612521][T10669] ? inet_sendmsg+0x147/0x2f0 [ 426.617203][T10669] ? inet_send_prepare+0x260/0x260 [ 426.622316][T10669] ____sys_sendmsg+0x59b/0x970 [ 426.627100][T10669] ? __sys_sendmsg_sock+0x30/0x30 [ 426.632135][T10669] ? __import_iovec+0x315/0x500 [ 426.637010][T10669] ? import_iovec+0x6f/0xa0 [ 426.641526][T10669] ___sys_sendmsg+0x21c/0x290 [ 426.646224][T10669] ? __sys_sendmsg+0x270/0x270 [ 426.651018][T10669] ? __lock_acquire+0x7c50/0x7c50 [ 426.656162][T10669] ? __fdget+0x17c/0x200 [ 426.660410][T10669] __se_sys_sendmsg+0x19e/0x270 [ 426.665266][T10669] ? __x64_sys_sendmsg+0x80/0x80 [ 426.670225][T10669] ? lockdep_hardirqs_on+0x94/0x140 [ 426.675437][T10669] do_syscall_64+0x4c/0xa0 [ 426.679877][T10669] ? clear_bhb_loop+0x60/0xb0 [ 426.684551][T10669] ? clear_bhb_loop+0x60/0xb0 [ 426.689245][T10669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.695147][T10669] RIP: 0033:0x7f48d9b8eb69 [ 426.699567][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.719175][T10669] RSP: 002b:00007f48d99ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.727592][T10669] RAX: ffffffffffffffda RBX: 00007f48d9db5fa0 RCX: 00007f48d9b8eb69 [ 426.735564][T10669] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000004 [ 426.743538][T10669] RBP: 00007f48d99ff090 R08: 0000000000000000 R09: 0000000000000000 [ 426.751509][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 426.759557][T10669] R13: 0000000000000000 R14: 00007f48d9db5fa0 R15: 00007ffe9f984a98 [ 426.767550][T10669] [ 427.687100][T10700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2105'. [ 429.794096][T10730] netlink: 'syz.1.2114': attribute type 39 has an invalid length. [ 430.631435][T10748] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2119'. [ 431.160396][T10752] netlink: 'syz.2.2118': attribute type 11 has an invalid length. [ 431.309199][T10752] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2118'. [ 431.404229][T10752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.631717][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.674708][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.683909][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.693032][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.702134][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.711263][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.720396][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.729557][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.738685][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 433.747841][T10786] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 434.343961][T10796] netlink: 'syz.2.2133': attribute type 21 has an invalid length. [ 434.366154][T10796] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.424813][T10796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 434.432131][T10796] IPv6: NLM_F_CREATE should be set when creating new route [ 434.439508][T10796] IPv6: NLM_F_CREATE should be set when creating new route [ 434.446762][T10796] IPv6: NLM_F_CREATE should be set when creating new route [ 434.498528][T10806] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2134'. [ 435.578620][T10847] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 435.587122][T10847] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2143'. [ 436.016550][T10861] netlink: 'syz.1.2150': attribute type 9 has an invalid length. [ 436.037871][T10861] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2150'. [ 436.679505][T10887] FAULT_INJECTION: forcing a failure. [ 436.679505][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 436.717545][T10887] CPU: 1 PID: 10887 Comm: syz.1.2157 Not tainted 6.1.147-syzkaller #0 [ 436.725772][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.735851][T10887] Call Trace: [ 436.739149][T10887] [ 436.742092][T10887] dump_stack_lvl+0x168/0x22e [ 436.746793][T10887] ? show_regs_print_info+0x12/0x12 [ 436.752019][T10887] ? load_image+0x3b0/0x3b0 [ 436.756557][T10887] ? __might_sleep+0xd0/0xd0 [ 436.761180][T10887] ? __lock_acquire+0x7c50/0x7c50 [ 436.766236][T10887] should_fail_ex+0x399/0x4d0 [ 436.770946][T10887] should_failslab+0x5/0x20 [ 436.775469][T10887] slab_pre_alloc_hook+0x59/0x310 [ 436.780512][T10887] kmem_cache_alloc_node+0x5a/0x320 [ 436.785725][T10887] ? __alloc_skb+0xfc/0x7e0 [ 436.790254][T10887] __alloc_skb+0xfc/0x7e0 [ 436.794605][T10887] ? netlink_autobind+0xda/0x300 [ 436.799565][T10887] netlink_sendmsg+0x645/0xbc0 [ 436.804354][T10887] ? netlink_getsockopt+0x540/0x540 [ 436.809635][T10887] ? aa_sock_msg_perm+0x94/0x150 [ 436.814597][T10887] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.819886][T10887] ? security_socket_sendmsg+0x7c/0xa0 [ 436.825345][T10887] ? netlink_getsockopt+0x540/0x540 [ 436.830536][T10887] ____sys_sendmsg+0x59b/0x970 [ 436.835301][T10887] ? __sys_sendmsg_sock+0x30/0x30 [ 436.840318][T10887] ? __import_iovec+0x315/0x500 [ 436.845168][T10887] ? import_iovec+0x6f/0xa0 [ 436.849690][T10887] ___sys_sendmsg+0x21c/0x290 [ 436.854362][T10887] ? __sys_sendmsg+0x270/0x270 [ 436.859132][T10887] ? __lock_acquire+0x7c50/0x7c50 [ 436.864165][T10887] ? __fdget+0x17c/0x200 [ 436.868401][T10887] __se_sys_sendmsg+0x19e/0x270 [ 436.873265][T10887] ? __x64_sys_sendmsg+0x80/0x80 [ 436.878202][T10887] ? lockdep_hardirqs_on+0x94/0x140 [ 436.883394][T10887] do_syscall_64+0x4c/0xa0 [ 436.887822][T10887] ? clear_bhb_loop+0x60/0xb0 [ 436.892486][T10887] ? clear_bhb_loop+0x60/0xb0 [ 436.897153][T10887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.903083][T10887] RIP: 0033:0x7f48d9b8eb69 [ 436.907493][T10887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.927097][T10887] RSP: 002b:00007f48d99ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.935504][T10887] RAX: ffffffffffffffda RBX: 00007f48d9db5fa0 RCX: 00007f48d9b8eb69 [ 436.943471][T10887] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 436.951528][T10887] RBP: 00007f48d99ff090 R08: 0000000000000000 R09: 0000000000000000 [ 436.959492][T10887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.967461][T10887] R13: 0000000000000000 R14: 00007f48d9db5fa0 R15: 00007ffe9f984a98 [ 436.975441][T10887] [ 437.562951][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 437.810956][T10911] netlink: 'syz.1.2165': attribute type 9 has an invalid length. [ 437.819104][T10911] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2165'. [ 437.845923][T10913] netlink: 'syz.4.2166': attribute type 11 has an invalid length. [ 438.393728][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2169'. [ 438.532232][T10928] bond0: (slave erspan0): Error: Slave device does not support XDP [ 438.557550][T10928] netlink: 'syz.0.2169': attribute type 10 has an invalid length. [ 438.624023][T10928] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 438.650424][T10931] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 438.663850][T10931] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2170'. [ 439.069267][T10950] netlink: 'syz.2.2176': attribute type 10 has an invalid length. [ 439.113179][T10950] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2176'. [ 439.177986][T10950] device bond0 entered promiscuous mode [ 439.183845][T10950] device bond_slave_0 entered promiscuous mode [ 439.241654][T10950] device bond_slave_1 entered promiscuous mode [ 439.284113][T10950] bridge0: port 4(bond0) entered blocking state [ 439.302339][T10950] bridge0: port 4(bond0) entered disabled state [ 439.333567][T10950] bridge0: port 4(bond0) entered blocking state [ 439.340021][T10950] bridge0: port 4(bond0) entered forwarding state [ 439.477251][T10960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2178'. [ 439.980693][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.987086][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.104042][T10976] netlink: 'syz.2.2183': attribute type 9 has an invalid length. [ 440.136531][T10976] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2183'. [ 441.928668][T11003] netlink: 'syz.3.2192': attribute type 11 has an invalid length. [ 442.003215][T11003] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2192'. [ 442.023479][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.559223][T11053] netlink: 'syz.3.2206': attribute type 11 has an invalid length. [ 443.590660][T11053] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2206'. [ 443.634103][T11053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.767420][T11060] device bond0 entered promiscuous mode [ 443.804302][T11060] device bond_slave_1 entered promiscuous mode [ 443.844431][T11060] device dummy0 entered promiscuous mode [ 446.095016][T11105] netlink: 'syz.1.2221': attribute type 11 has an invalid length. [ 446.134947][T11105] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2221'. [ 446.156585][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.345067][T11117] FAULT_INJECTION: forcing a failure. [ 446.345067][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 446.388245][T11117] CPU: 1 PID: 11117 Comm: syz.0.2225 Not tainted 6.1.147-syzkaller #0 [ 446.396466][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.406540][T11117] Call Trace: [ 446.409833][T11117] [ 446.412778][T11117] dump_stack_lvl+0x168/0x22e [ 446.417477][T11117] ? show_regs_print_info+0x12/0x12 [ 446.422689][T11117] ? load_image+0x3b0/0x3b0 [ 446.427204][T11117] ? rtnl_fill_statsinfo+0x1586/0x2630 [ 446.432674][T11117] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.438774][T11117] should_fail_ex+0x399/0x4d0 [ 446.443504][T11117] should_failslab+0x5/0x20 [ 446.448040][T11117] slab_pre_alloc_hook+0x59/0x310 [ 446.453088][T11117] kmem_cache_alloc+0x56/0x2f0 [ 446.457881][T11117] ? skb_clone+0x1e7/0x370 [ 446.462315][T11117] skb_clone+0x1e7/0x370 [ 446.466572][T11117] __netlink_deliver_tap+0x3ed/0x800 [ 446.471888][T11117] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.477105][T11117] netlink_deliver_tap+0x19c/0x1b0 [ 446.482230][T11117] netlink_dump+0x804/0xcd0 [ 446.486751][T11117] ? netlink_lookup+0x200/0x200 [ 446.491613][T11117] ? netlink_lookup+0x30/0x200 [ 446.496394][T11117] ? netlink_lookup+0x30/0x200 [ 446.501187][T11117] __netlink_dump_start+0x537/0x6f0 [ 446.506425][T11117] rtnetlink_rcv_msg+0xb92/0xed0 [ 446.511385][T11117] ? rtnl_stats_get+0x6b0/0x6b0 [ 446.516249][T11117] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 446.521377][T11117] ? rtnetlink_bind+0x80/0x80 [ 446.526067][T11117] ? __local_bh_enable_ip+0x12a/0x1b0 [ 446.531458][T11117] ? lockdep_hardirqs_on+0x94/0x140 [ 446.536670][T11117] ? __local_bh_enable_ip+0x12a/0x1b0 [ 446.542059][T11117] ? _local_bh_enable+0xa0/0xa0 [ 446.546932][T11117] ? __dev_queue_xmit+0x26f/0x3760 [ 446.552058][T11117] ? __dev_queue_xmit+0x26f/0x3760 [ 446.557186][T11117] ? __dev_queue_xmit+0x15c9/0x3760 [ 446.562433][T11117] ? __dev_queue_xmit+0x26f/0x3760 [ 446.567591][T11117] ? netdev_core_pick_tx+0x340/0x340 [ 446.572896][T11117] ? ref_tracker_free+0x630/0x7c0 [ 446.577933][T11117] ? refcount_inc+0x70/0x70 [ 446.582434][T11117] ? rtnl_stats_get+0x6b0/0x6b0 [ 446.587298][T11117] ? __skb_clone+0x480/0x790 [ 446.591901][T11117] netlink_rcv_skb+0x1de/0x420 [ 446.596690][T11117] ? rtnetlink_bind+0x80/0x80 [ 446.601365][T11117] ? netlink_ack+0x1100/0x1100 [ 446.606135][T11117] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.611351][T11117] netlink_unicast+0x74d/0x8d0 [ 446.616155][T11117] netlink_sendmsg+0x89e/0xbc0 [ 446.620936][T11117] ? netlink_getsockopt+0x540/0x540 [ 446.626179][T11117] ? aa_sock_msg_perm+0x94/0x150 [ 446.631131][T11117] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 446.636408][T11117] ? security_socket_sendmsg+0x7c/0xa0 [ 446.641863][T11117] ? netlink_getsockopt+0x540/0x540 [ 446.647057][T11117] ____sys_sendmsg+0x59b/0x970 [ 446.651839][T11117] ? __sys_sendmsg_sock+0x30/0x30 [ 446.656854][T11117] ? __import_iovec+0x315/0x500 [ 446.661716][T11117] ? import_iovec+0x6f/0xa0 [ 446.666216][T11117] ___sys_sendmsg+0x21c/0x290 [ 446.670884][T11117] ? __sys_sendmsg+0x270/0x270 [ 446.675650][T11117] ? __lock_acquire+0x7c50/0x7c50 [ 446.680678][T11117] ? __fdget+0x17c/0x200 [ 446.684924][T11117] __se_sys_sendmsg+0x19e/0x270 [ 446.689774][T11117] ? ct_nmi_exit+0x145/0x1c0 [ 446.694359][T11117] ? __x64_sys_sendmsg+0x80/0x80 [ 446.699294][T11117] ? lockdep_hardirqs_on+0x94/0x140 [ 446.704484][T11117] do_syscall_64+0x4c/0xa0 [ 446.708887][T11117] ? clear_bhb_loop+0x60/0xb0 [ 446.713547][T11117] ? clear_bhb_loop+0x60/0xb0 [ 446.718211][T11117] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.724099][T11117] RIP: 0033:0x7f78e9f8eb69 [ 446.728503][T11117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.748105][T11117] RSP: 002b:00007f78eadea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.756514][T11117] RAX: ffffffffffffffda RBX: 00007f78ea1b5fa0 RCX: 00007f78e9f8eb69 [ 446.764476][T11117] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 446.772440][T11117] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 446.780403][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.788369][T11117] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 446.796340][T11117] [ 448.455641][T11152] netlink: 'syz.2.2236': attribute type 11 has an invalid length. [ 448.464836][T11151] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2234'. [ 448.480734][T11152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2236'. [ 448.526662][T11154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.732648][T11156] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.2237'. [ 448.755856][T11156] net_ratelimit: 3256 callbacks suppressed [ 448.755901][T11156] openvswitch: netlink: Key type 386 is out of range max 32 [ 452.472205][T11235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 452.479568][T11235] IPv6: NLM_F_CREATE should be set when creating new route [ 452.486871][T11235] IPv6: NLM_F_CREATE should be set when creating new route [ 452.494158][T11235] IPv6: NLM_F_CREATE should be set when creating new route [ 454.788590][T11287] netlink: 'syz.3.2275': attribute type 11 has an invalid length. [ 454.821858][T11287] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2275'. [ 454.890906][T11287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.584051][T11297] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2277'. [ 455.702510][T11299] netlink: 'syz.4.2279': attribute type 39 has an invalid length. [ 456.895280][T11330] netlink: 'syz.3.2289': attribute type 9 has an invalid length. [ 456.949433][T11330] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2289'. [ 457.274473][T11341] netlink: 'syz.0.2293': attribute type 33 has an invalid length. [ 457.299784][T11341] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2293'. [ 457.352993][T11344] netlink: 'syz.4.2291': attribute type 11 has an invalid length. [ 457.361280][T11344] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2291'. [ 457.387627][T11344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.284857][T11367] netlink: 'syz.0.2300': attribute type 29 has an invalid length. [ 458.341729][T11367] netlink: 'syz.0.2300': attribute type 29 has an invalid length. [ 458.368359][T11373] netlink: 'syz.0.2300': attribute type 29 has an invalid length. [ 459.338173][T11393] netlink: 'syz.2.2308': attribute type 9 has an invalid length. [ 459.346318][T11393] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2308'. [ 459.574665][T11399] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2310'. [ 459.592298][T11399] device batadv_slave_1 entered promiscuous mode [ 459.614689][T11401] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2311'. [ 459.703247][T11408] netlink: 'syz.4.2313': attribute type 39 has an invalid length. [ 459.891555][T11409] delete_channel: no stack [ 460.130701][T11422] netlink: 'syz.0.2318': attribute type 11 has an invalid length. [ 460.154870][T11422] netlink: 191644 bytes leftover after parsing attributes in process `syz.0.2318'. [ 460.192641][T11425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.349987][T11427] FAULT_INJECTION: forcing a failure. [ 460.349987][T11427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.421243][T11427] CPU: 1 PID: 11427 Comm: syz.1.2320 Not tainted 6.1.147-syzkaller #0 [ 460.429466][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.439539][T11427] Call Trace: [ 460.442971][T11427] [ 460.446009][T11427] dump_stack_lvl+0x168/0x22e [ 460.450821][T11427] ? show_regs_print_info+0x12/0x12 [ 460.456042][T11427] ? load_image+0x3b0/0x3b0 [ 460.460568][T11427] ? __lock_acquire+0x7c50/0x7c50 [ 460.465609][T11427] should_fail_ex+0x399/0x4d0 [ 460.470303][T11427] _copy_from_user+0x2c/0x170 [ 460.474988][T11427] iovec_from_user+0x143/0x360 [ 460.479766][T11427] __import_iovec+0x6d/0x500 [ 460.484371][T11427] ? __might_fault+0xa6/0x120 [ 460.489059][T11427] import_iovec+0x6f/0xa0 [ 460.493399][T11427] ___sys_sendmsg+0x1e4/0x290 [ 460.498082][T11427] ? __sys_sendmsg+0x270/0x270 [ 460.502864][T11427] ? __lock_acquire+0x7c50/0x7c50 [ 460.507906][T11427] ? __fdget+0x17c/0x200 [ 460.512169][T11427] __se_sys_sendmsg+0x19e/0x270 [ 460.517040][T11427] ? ct_nmi_exit+0x145/0x1c0 [ 460.521646][T11427] ? __x64_sys_sendmsg+0x80/0x80 [ 460.526599][T11427] ? lockdep_hardirqs_on+0x94/0x140 [ 460.531802][T11427] do_syscall_64+0x4c/0xa0 [ 460.536222][T11427] ? clear_bhb_loop+0x60/0xb0 [ 460.540899][T11427] ? clear_bhb_loop+0x60/0xb0 [ 460.545577][T11427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.551479][T11427] RIP: 0033:0x7f48d9b8eb69 [ 460.555944][T11427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.575590][T11427] RSP: 002b:00007f48d99ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.584010][T11427] RAX: ffffffffffffffda RBX: 00007f48d9db5fa0 RCX: 00007f48d9b8eb69 [ 460.591993][T11427] RDX: 000000000400c040 RSI: 00002000000001c0 RDI: 0000000000000004 [ 460.600400][T11427] RBP: 00007f48d99ff090 R08: 0000000000000000 R09: 0000000000000000 [ 460.608385][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.616357][T11427] R13: 0000000000000000 R14: 00007f48d9db5fa0 R15: 00007ffe9f984a98 [ 460.624345][T11427] [ 461.294771][T11438] netlink: 'syz.1.2324': attribute type 4 has an invalid length. [ 461.318505][T11438] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2324'. [ 461.349126][T11438] wlan1: mtu less than device minimum [ 461.370858][T11440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2325'. [ 461.398013][T11437] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 461.436583][T11442] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2323'. [ 461.491611][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.504118][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.548041][T11442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.572115][T11442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.586130][T11442] device batadv_slave_1 entered promiscuous mode [ 461.602201][T11448] netlink: 'syz.0.2327': attribute type 9 has an invalid length. [ 461.622019][T11448] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2327'. [ 462.348487][T11449] delete_channel: no stack [ 462.536383][T11470] netlink: 'syz.1.2333': attribute type 11 has an invalid length. [ 462.551092][T11470] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2333'. [ 462.581426][T11470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.878776][T11484] netlink: 'syz.2.2338': attribute type 11 has an invalid length. [ 463.938858][T11484] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2338'. [ 463.990875][T11493] netlink: 'syz.0.2341': attribute type 3 has an invalid length. [ 464.000867][T11484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.019610][T11493] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2341'. [ 464.057145][T11498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2340'. [ 464.087047][T11498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2340'. [ 465.379143][T11504] delete_channel: no stack [ 465.898246][T11526] delete_channel: no stack [ 466.438700][T11520] delete_channel: no stack [ 467.302301][T11554] netlink: 'syz.0.2356': attribute type 9 has an invalid length. [ 467.320463][T11554] __nla_validate_parse: 2 callbacks suppressed [ 467.320481][T11554] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2356'. [ 467.445557][T11557] netlink: 'syz.4.2357': attribute type 11 has an invalid length. [ 467.502970][T11557] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2357'. [ 467.661811][T11557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.456952][T11559] delete_channel: no stack [ 470.942222][T11612] netlink: 'syz.1.2376': attribute type 11 has an invalid length. [ 470.974352][T11612] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2376'. [ 471.018220][T11609] delete_channel: no stack [ 471.032275][T11612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.906383][T11629] netlink: 'syz.3.2379': attribute type 9 has an invalid length. [ 472.925518][T11629] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2379'. [ 473.381025][T11651] netlink: 'syz.2.2386': attribute type 9 has an invalid length. [ 473.496873][T11651] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2386'. [ 473.588764][T11652] delete_channel: no stack [ 475.061327][T11693] netlink: 'syz.3.2398': attribute type 9 has an invalid length. [ 475.073682][T11693] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2398'. [ 475.516123][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2403'. [ 475.531461][T11700] delete_channel: no stack [ 475.661723][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2403'. [ 475.708660][T11707] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2403'. [ 475.755095][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2403'. [ 475.868620][T11714] netlink: 'syz.3.2406': attribute type 9 has an invalid length. [ 475.885523][T11714] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2406'. [ 476.135919][T11725] FAULT_INJECTION: forcing a failure. [ 476.135919][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 476.150213][T11725] CPU: 0 PID: 11725 Comm: syz.2.2408 Not tainted 6.1.147-syzkaller #0 [ 476.158395][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.168455][T11725] Call Trace: [ 476.171736][T11725] [ 476.174661][T11725] dump_stack_lvl+0x168/0x22e [ 476.179346][T11725] ? show_regs_print_info+0x12/0x12 [ 476.184559][T11725] ? load_image+0x3b0/0x3b0 [ 476.189091][T11725] ? __might_sleep+0xd0/0xd0 [ 476.193795][T11725] ? __lock_acquire+0x7c50/0x7c50 [ 476.198842][T11725] should_fail_ex+0x399/0x4d0 [ 476.203516][T11725] should_failslab+0x5/0x20 [ 476.208022][T11725] slab_pre_alloc_hook+0x59/0x310 [ 476.213057][T11725] ? tomoyo_encode+0x27e/0x540 [ 476.217824][T11725] __kmem_cache_alloc_node+0x4f/0x260 [ 476.223214][T11725] ? tomoyo_encode+0x27e/0x540 [ 476.227997][T11725] __kmalloc+0xa0/0x240 [ 476.232173][T11725] tomoyo_encode+0x27e/0x540 [ 476.236762][T11725] tomoyo_realpath_from_path+0x58e/0x5d0 [ 476.242594][T11725] tomoyo_path_number_perm+0x1e3/0x600 [ 476.248075][T11725] ? tomoyo_path_number_perm+0x1b6/0x600 [ 476.253747][T11725] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 476.259239][T11725] ? ktime_get+0x7b/0x270 [ 476.263643][T11725] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 476.269953][T11725] ? __fget_files+0x28/0x4d0 [ 476.274591][T11725] security_file_ioctl+0x6c/0xa0 [ 476.279575][T11725] __se_sys_ioctl+0x48/0x170 [ 476.284199][T11725] do_syscall_64+0x4c/0xa0 [ 476.288643][T11725] ? clear_bhb_loop+0x60/0xb0 [ 476.293347][T11725] ? clear_bhb_loop+0x60/0xb0 [ 476.298054][T11725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 476.303975][T11725] RIP: 0033:0x7f335a58eb69 [ 476.308411][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.328056][T11725] RSP: 002b:00007f335b343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.336529][T11725] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58eb69 [ 476.344532][T11725] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000009 [ 476.352536][T11725] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 476.360535][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.368541][T11725] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 476.376551][T11725] [ 476.381237][T11725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.548954][T11738] netlink: 'syz.3.2410': attribute type 10 has an invalid length. [ 476.573684][T11738] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2410'. [ 477.239109][T11761] netlink: 'syz.2.2416': attribute type 9 has an invalid length. [ 477.303663][T11761] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2416'. [ 477.317979][T11756] delete_channel: no stack [ 477.493847][T11770] FAULT_INJECTION: forcing a failure. [ 477.493847][T11770] name failslab, interval 1, probability 0, space 0, times 0 [ 477.536526][T11771] netlink: 'syz.0.2421': attribute type 9 has an invalid length. [ 477.557859][T11770] CPU: 1 PID: 11770 Comm: syz.3.2422 Not tainted 6.1.147-syzkaller #0 [ 477.566089][T11770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.576171][T11770] Call Trace: [ 477.579467][T11770] [ 477.582414][T11770] dump_stack_lvl+0x168/0x22e [ 477.587121][T11770] ? show_regs_print_info+0x12/0x12 [ 477.592343][T11770] ? load_image+0x3b0/0x3b0 [ 477.596884][T11770] ? __might_sleep+0xd0/0xd0 [ 477.601524][T11770] ? __lock_acquire+0x7c50/0x7c50 [ 477.606586][T11770] should_fail_ex+0x399/0x4d0 [ 477.611310][T11770] should_failslab+0x5/0x20 [ 477.615842][T11770] slab_pre_alloc_hook+0x59/0x310 [ 477.620895][T11770] ? sk_prot_alloc+0xe7/0x210 [ 477.625589][T11770] __kmem_cache_alloc_node+0x4f/0x260 [ 477.630983][T11770] ? sk_prot_alloc+0xe7/0x210 [ 477.635678][T11770] __kmalloc+0xa0/0x240 [ 477.639870][T11770] sk_prot_alloc+0xe7/0x210 [ 477.644398][T11770] ? sk_alloc+0x20/0x340 [ 477.648673][T11770] sk_alloc+0x36/0x340 [ 477.652788][T11770] pppoe_create+0x2e/0x2a0 [ 477.657235][T11770] pppox_create+0x127/0x1a0 [ 477.661770][T11770] __sock_create+0x4a2/0x940 [ 477.666388][T11770] __sys_socketpair+0x1bd/0x540 [ 477.671270][T11770] __x64_sys_socketpair+0x97/0xb0 [ 477.676319][T11770] do_syscall_64+0x4c/0xa0 [ 477.680754][T11770] ? clear_bhb_loop+0x60/0xb0 [ 477.685449][T11770] ? clear_bhb_loop+0x60/0xb0 [ 477.690147][T11770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.696161][T11770] RIP: 0033:0x7f0c5a78eb69 [ 477.700594][T11770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.720226][T11770] RSP: 002b:00007f0c5b64e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 477.728671][T11770] RAX: ffffffffffffffda RBX: 00007f0c5a9b5fa0 RCX: 00007f0c5a78eb69 [ 477.736689][T11770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000018 [ 477.744685][T11770] RBP: 00007f0c5b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 477.752678][T11770] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 477.760674][T11770] R13: 0000000000000000 R14: 00007f0c5a9b5fa0 R15: 00007ffe18c94a08 [ 477.768776][T11770] [ 478.397090][T11790] netlink: 'syz.3.2426': attribute type 11 has an invalid length. [ 478.414042][T11790] __nla_validate_parse: 1 callbacks suppressed [ 478.414082][T11790] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2426'. [ 478.456990][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.255364][T11812] sctp: [Deprecated]: syz.2.2433 (pid 11812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.255364][T11812] Use struct sctp_sack_info instead [ 479.592211][T11805] delete_channel: no stack [ 479.823177][T11816] netlink: 'syz.3.2435': attribute type 9 has an invalid length. [ 479.847969][T11816] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2435'. [ 481.223097][T11845] netlink: 'syz.1.2446': attribute type 11 has an invalid length. [ 481.238615][T11847] netlink: 'syz.4.2447': attribute type 9 has an invalid length. [ 481.258181][T11845] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2446'. [ 481.269979][T11847] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2447'. [ 481.339301][T11845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.775490][T11872] FAULT_INJECTION: forcing a failure. [ 484.775490][T11872] name failslab, interval 1, probability 0, space 0, times 0 [ 484.788575][T11872] CPU: 1 PID: 11872 Comm: syz.3.2452 Not tainted 6.1.147-syzkaller #0 [ 484.796737][T11872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 484.806801][T11872] Call Trace: [ 484.810086][T11872] [ 484.813026][T11872] dump_stack_lvl+0x168/0x22e [ 484.817725][T11872] ? show_regs_print_info+0x12/0x12 [ 484.822936][T11872] ? load_image+0x3b0/0x3b0 [ 484.827472][T11872] should_fail_ex+0x399/0x4d0 [ 484.832172][T11872] should_failslab+0x5/0x20 [ 484.836692][T11872] slab_pre_alloc_hook+0x59/0x310 [ 484.841731][T11872] ? ida_alloc_range+0x64e/0x830 [ 484.846679][T11872] __kmem_cache_alloc_node+0x4f/0x260 [ 484.852063][T11872] ? ida_alloc_range+0x64e/0x830 [ 484.857020][T11872] kmalloc_trace+0x26/0xe0 [ 484.861554][T11872] ida_alloc_range+0x64e/0x830 [ 484.866359][T11872] ? __xdp_reg_mem_model+0x1eb/0x5a0 [ 484.871729][T11872] ? idr_replace+0x190/0x190 [ 484.876358][T11872] __xdp_reg_mem_model+0x207/0x5a0 [ 484.881500][T11872] ? kvmalloc_node+0x6c/0x180 [ 484.886191][T11872] ? xdp_reg_mem_model+0x30/0x30 [ 484.891160][T11872] xdp_reg_mem_model+0x1e/0x30 [ 484.895939][T11872] bpf_test_run_xdp_live+0x20e/0x1970 [ 484.901327][T11872] ? text_poke_copy+0x79/0x90 [ 484.906013][T11872] ? 0xffffffffa0004440 [ 484.910185][T11872] ? xdp_convert_md_to_buff+0x330/0x330 [ 484.916027][T11872] ? rcu_is_watching+0x11/0xa0 [ 484.920807][T11872] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 484.927494][T11872] ? lockdep_hardirqs_on+0x94/0x140 [ 484.932797][T11872] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 484.939065][T11872] ? bpf_prog_test_run_xdp+0x6cf/0xe50 [ 484.944545][T11872] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 484.949863][T11872] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 484.956032][T11872] ? dev_put+0x80/0x80 [ 484.960124][T11872] ? bpf_prog_test_run+0x253/0x390 [ 484.965258][T11872] ? dev_put+0x80/0x80 [ 484.969444][T11872] bpf_prog_test_run+0x31e/0x390 [ 484.974416][T11872] __sys_bpf+0x593/0x6d0 [ 484.978676][T11872] ? bpf_link_show_fdinfo+0x340/0x340 [ 484.984076][T11872] ? lock_chain_count+0x20/0x20 [ 484.988936][T11872] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 484.994935][T11872] __x64_sys_bpf+0x78/0x90 [ 484.999366][T11872] do_syscall_64+0x4c/0xa0 [ 485.003799][T11872] ? clear_bhb_loop+0x60/0xb0 [ 485.008484][T11872] ? clear_bhb_loop+0x60/0xb0 [ 485.013172][T11872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.019258][T11872] RIP: 0033:0x7f0c5a78eb69 [ 485.023683][T11872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.043432][T11872] RSP: 002b:00007f0c5b64e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.051967][T11872] RAX: ffffffffffffffda RBX: 00007f0c5a9b5fa0 RCX: 00007f0c5a78eb69 [ 485.059949][T11872] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 485.067932][T11872] RBP: 00007f0c5b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 485.075913][T11872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.083896][T11872] R13: 0000000000000000 R14: 00007f0c5a9b5fa0 R15: 00007ffe18c94a08 [ 485.091895][T11872] [ 487.935391][T11896] netlink: 'syz.0.2459': attribute type 9 has an invalid length. [ 487.975511][T11896] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2459'. [ 488.071378][T11890] delete_channel: no stack [ 488.214305][T11903] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2462'. [ 490.683995][T11927] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2468'. [ 491.547130][T11943] netlink: 'syz.4.2472': attribute type 10 has an invalid length. [ 491.623777][T11943] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2472'. [ 492.140818][T11949] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 492.387987][T11938] delete_channel: no stack [ 492.392221][T11949] bond0: (slave bond_slave_0): Releasing backup interface [ 492.414407][T11949] device bond_slave_0 left promiscuous mode [ 492.449171][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2475'. [ 492.582329][T11957] netlink: 'syz.3.2477': attribute type 11 has an invalid length. [ 492.593709][T11959] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 492.598662][T11957] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2477'. [ 492.642645][T11957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.747315][T11959] team0: Device veth1_vlan failed to register rx_handler [ 494.080571][T11992] delete_channel: no stack [ 494.386719][T12005] netlink: 'syz.3.2491': attribute type 9 has an invalid length. [ 494.421469][T12005] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2491'. [ 496.647566][T12030] netlink: 'syz.0.2498': attribute type 10 has an invalid length. [ 496.770400][T12030] team0: Device veth1_vlan failed to register rx_handler [ 496.898083][T12035] delete_channel: no stack [ 497.141799][T12048] netlink: 'syz.1.2504': attribute type 11 has an invalid length. [ 497.153960][T12048] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2504'. [ 497.177334][T12048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.235709][T12055] netlink: 'syz.4.2507': attribute type 10 has an invalid length. [ 497.245141][T12055] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2507'. [ 498.270091][T12070] delete_channel: no stack [ 498.411788][T12075] netlink: 'syz.2.2514': attribute type 10 has an invalid length. [ 498.498918][T12075] team0: Device veth1_vlan failed to register rx_handler [ 498.599820][T12088] netlink: 'syz.3.2518': attribute type 10 has an invalid length. [ 498.619552][T12088] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2518'. [ 498.804128][T12096] netlink: 'syz.4.2521': attribute type 11 has an invalid length. [ 498.820345][T12096] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2521'. [ 498.850379][T12099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.227939][T12108] delete_channel: no stack [ 500.926761][T12134] FAULT_INJECTION: forcing a failure. [ 500.926761][T12134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.965826][T12134] CPU: 1 PID: 12134 Comm: syz.4.2536 Not tainted 6.1.147-syzkaller #0 [ 500.974057][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.984124][T12134] Call Trace: [ 500.987411][T12134] [ 500.990347][T12134] dump_stack_lvl+0x168/0x22e [ 500.995040][T12134] ? show_regs_print_info+0x12/0x12 [ 501.000247][T12134] ? load_image+0x3b0/0x3b0 [ 501.004764][T12134] ? __lock_acquire+0x7c50/0x7c50 [ 501.009814][T12134] ? snprintf+0xd7/0x120 [ 501.014070][T12134] should_fail_ex+0x399/0x4d0 [ 501.018766][T12134] _copy_to_user+0x2c/0x130 [ 501.023290][T12134] simple_read_from_buffer+0xe3/0x150 [ 501.028827][T12134] proc_fail_nth_read+0x19a/0x210 [ 501.033869][T12134] ? proc_fault_inject_write+0x2f0/0x2f0 [ 501.039518][T12134] ? fsnotify_perm+0x248/0x550 [ 501.044290][T12134] ? proc_fault_inject_write+0x2f0/0x2f0 [ 501.049931][T12134] vfs_read+0x2c0/0x920 [ 501.054106][T12134] ? kernel_read+0x1e0/0x1e0 [ 501.058724][T12134] ? __fget_files+0x28/0x4d0 [ 501.063340][T12134] ? __fget_files+0x44a/0x4d0 [ 501.068035][T12134] ? __fdget_pos+0x2ae/0x360 [ 501.072635][T12134] ? ksys_read+0x71/0x240 [ 501.076976][T12134] ksys_read+0x143/0x240 [ 501.081232][T12134] ? vfs_write+0x960/0x960 [ 501.085683][T12134] ? lockdep_hardirqs_on+0x94/0x140 [ 501.090912][T12134] do_syscall_64+0x4c/0xa0 [ 501.095350][T12134] ? clear_bhb_loop+0x60/0xb0 [ 501.100061][T12134] ? clear_bhb_loop+0x60/0xb0 [ 501.104755][T12134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.110675][T12134] RIP: 0033:0x7f63e0b8d57c [ 501.115101][T12134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 501.134728][T12134] RSP: 002b:00007f63e1a1d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 501.143223][T12134] RAX: ffffffffffffffda RBX: 00007f63e0db5fa0 RCX: 00007f63e0b8d57c [ 501.151228][T12134] RDX: 000000000000000f RSI: 00007f63e1a1d0a0 RDI: 0000000000000005 [ 501.159227][T12134] RBP: 00007f63e1a1d090 R08: 0000000000000000 R09: 0000000000000000 [ 501.167213][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.175201][T12134] R13: 0000000000000000 R14: 00007f63e0db5fa0 R15: 00007ffc3d9af488 [ 501.183210][T12134] [ 501.420842][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.427266][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.192381][T12136] netlink: 'syz.3.2535': attribute type 10 has an invalid length. [ 502.206376][T12136] team0: Device veth1_vlan failed to register rx_handler [ 502.222214][T12146] device lo entered promiscuous mode [ 502.232113][T12146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 502.263493][T12143] delete_channel: no stack [ 502.404376][T12158] FAULT_INJECTION: forcing a failure. [ 502.404376][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.468125][T12158] CPU: 0 PID: 12158 Comm: syz.0.2541 Not tainted 6.1.147-syzkaller #0 [ 502.476455][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.486533][T12158] Call Trace: [ 502.489829][T12158] [ 502.492776][T12158] dump_stack_lvl+0x168/0x22e [ 502.497483][T12158] ? show_regs_print_info+0x12/0x12 [ 502.502713][T12158] ? load_image+0x3b0/0x3b0 [ 502.507253][T12158] ? __lock_acquire+0x7c50/0x7c50 [ 502.512304][T12158] ? unix_ioctl+0x250/0x650 [ 502.516831][T12158] should_fail_ex+0x399/0x4d0 [ 502.521528][T12158] _copy_from_user+0x2c/0x170 [ 502.526208][T12158] sock_do_ioctl+0x178/0x2f0 [ 502.530795][T12158] ? sock_show_fdinfo+0xb0/0xb0 [ 502.535648][T12158] sock_ioctl+0x4ed/0x6e0 [ 502.539972][T12158] ? sock_poll+0x3f0/0x3f0 [ 502.544455][T12158] ? bpf_lsm_file_ioctl+0x5/0x10 [ 502.549405][T12158] ? security_file_ioctl+0x7c/0xa0 [ 502.554507][T12158] ? sock_poll+0x3f0/0x3f0 [ 502.558917][T12158] __se_sys_ioctl+0xfa/0x170 [ 502.563501][T12158] do_syscall_64+0x4c/0xa0 [ 502.567915][T12158] ? clear_bhb_loop+0x60/0xb0 [ 502.572581][T12158] ? clear_bhb_loop+0x60/0xb0 [ 502.577248][T12158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.583137][T12158] RIP: 0033:0x7f78e9f8eb69 [ 502.587542][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.607140][T12158] RSP: 002b:00007f78eadea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 502.615550][T12158] RAX: ffffffffffffffda RBX: 00007f78ea1b5fa0 RCX: 00007f78e9f8eb69 [ 502.623621][T12158] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 502.631598][T12158] RBP: 00007f78eadea090 R08: 0000000000000000 R09: 0000000000000000 [ 502.639585][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.647549][T12158] R13: 0000000000000000 R14: 00007f78ea1b5fa0 R15: 00007fffab374538 [ 502.655524][T12158] [ 503.178064][T12175] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2550'. [ 503.893658][T12194] delete_channel: no stack [ 503.922293][T12200] netlink: 'syz.2.2556': attribute type 11 has an invalid length. [ 503.947764][T12200] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2556'. [ 504.036297][T12200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.095663][T12209] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 504.124017][T12209] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2558'. [ 504.178833][T12206] delete_channel: no stack [ 504.468848][T12223] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2561'. [ 505.279357][T12253] netlink: 'syz.1.2582': attribute type 9 has an invalid length. [ 505.320596][T12253] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2582'. [ 508.243052][T12254] delete_channel: no stack [ 508.464794][T12280] netlink: 'syz.3.2579': attribute type 2 has an invalid length. [ 508.524341][T12279] netlink: 'syz.4.2577': attribute type 11 has an invalid length. [ 508.576759][T12279] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2577'. [ 508.595416][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.723345][T12285] netlink: 'syz.2.2581': attribute type 27 has an invalid length. [ 508.780474][T12285] netlink: 'syz.2.2581': attribute type 3 has an invalid length. [ 508.816489][T12285] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'. [ 508.963096][T12294] netlink: 'syz.0.2584': attribute type 9 has an invalid length. [ 509.017994][T12294] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2584'. [ 509.930448][T12311] delete_channel: no stack [ 510.079984][T12320] netlink: 'syz.4.2591': attribute type 9 has an invalid length. [ 510.107426][T12320] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2591'. [ 510.473478][T12324] netlink: 'syz.0.2593': attribute type 21 has an invalid length. [ 510.874044][T12346] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2600'. [ 510.897085][T12346] FAULT_INJECTION: forcing a failure. [ 510.897085][T12346] name failslab, interval 1, probability 0, space 0, times 0 [ 510.936708][T12346] CPU: 0 PID: 12346 Comm: syz.2.2600 Not tainted 6.1.147-syzkaller #0 [ 510.944923][T12346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.954978][T12346] Call Trace: [ 510.958295][T12346] [ 510.961216][T12346] dump_stack_lvl+0x168/0x22e [ 510.965918][T12346] ? show_regs_print_info+0x12/0x12 [ 510.971112][T12346] ? load_image+0x3b0/0x3b0 [ 510.975611][T12346] ? __might_sleep+0xd0/0xd0 [ 510.980203][T12346] ? __lock_acquire+0x7c50/0x7c50 [ 510.985247][T12346] should_fail_ex+0x399/0x4d0 [ 510.989923][T12346] should_failslab+0x5/0x20 [ 510.994421][T12346] slab_pre_alloc_hook+0x59/0x310 [ 510.999436][T12346] ? fib_nl2rule+0x358/0x1b10 [ 511.004126][T12346] __kmem_cache_alloc_node+0x4f/0x260 [ 511.009517][T12346] ? fib_nl2rule+0x358/0x1b10 [ 511.014210][T12346] __kmalloc+0xa0/0x240 [ 511.018367][T12346] fib_nl2rule+0x358/0x1b10 [ 511.022867][T12346] ? __lock_acquire+0x7c50/0x7c50 [ 511.027890][T12346] ? mark_lock+0x94/0x320 [ 511.032219][T12346] ? fib_nl_newrule+0x1d40/0x1d40 [ 511.037238][T12346] ? __nla_parse+0x3c/0x50 [ 511.041654][T12346] fib_nl_delrule+0x30b/0x1d10 [ 511.046421][T12346] ? do_syscall_64+0x4c/0xa0 [ 511.051006][T12346] ? notify_rule_change+0x210/0x210 [ 511.056194][T12346] ? rcu_is_watching+0x11/0xa0 [ 511.060951][T12346] ? trace_contention_end+0x5f/0x170 [ 511.066260][T12346] ? notify_rule_change+0x210/0x210 [ 511.071450][T12346] ? rtnetlink_rcv_msg+0x1d8/0xed0 [ 511.076555][T12346] rtnetlink_rcv_msg+0x79b/0xed0 [ 511.081489][T12346] ? rtnetlink_bind+0x80/0x80 [ 511.086154][T12346] ? __local_bh_enable_ip+0x12a/0x1b0 [ 511.091520][T12346] ? lockdep_hardirqs_on+0x94/0x140 [ 511.096723][T12346] ? __local_bh_enable_ip+0x12a/0x1b0 [ 511.102090][T12346] ? _local_bh_enable+0xa0/0xa0 [ 511.106942][T12346] ? __dev_queue_xmit+0x26f/0x3760 [ 511.112156][T12346] ? __dev_queue_xmit+0x26f/0x3760 [ 511.117261][T12346] ? __dev_queue_xmit+0x15c9/0x3760 [ 511.122456][T12346] ? __dev_queue_xmit+0x26f/0x3760 [ 511.127585][T12346] ? netdev_core_pick_tx+0x340/0x340 [ 511.132865][T12346] ? ref_tracker_free+0x630/0x7c0 [ 511.137887][T12346] ? refcount_inc+0x70/0x70 [ 511.142383][T12346] ? __copy_skb_header+0x417/0x5a0 [ 511.147486][T12346] ? __skb_clone+0x480/0x790 [ 511.152074][T12346] netlink_rcv_skb+0x1de/0x420 [ 511.156838][T12346] ? rtnetlink_bind+0x80/0x80 [ 511.161510][T12346] ? netlink_ack+0x1100/0x1100 [ 511.166270][T12346] ? netlink_deliver_tap+0x2e/0x1b0 [ 511.171462][T12346] netlink_unicast+0x74d/0x8d0 [ 511.176238][T12346] netlink_sendmsg+0x89e/0xbc0 [ 511.181001][T12346] ? netlink_getsockopt+0x540/0x540 [ 511.186195][T12346] ? aa_sock_msg_perm+0x94/0x150 [ 511.191131][T12346] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 511.196406][T12346] ? security_socket_sendmsg+0x7c/0xa0 [ 511.201862][T12346] ? netlink_getsockopt+0x540/0x540 [ 511.207055][T12346] ____sys_sendmsg+0x59b/0x970 [ 511.211820][T12346] ? __sys_sendmsg_sock+0x30/0x30 [ 511.216923][T12346] ? __import_iovec+0x315/0x500 [ 511.221780][T12346] ? import_iovec+0x6f/0xa0 [ 511.226280][T12346] ___sys_sendmsg+0x21c/0x290 [ 511.230953][T12346] ? __sys_sendmsg+0x270/0x270 [ 511.235725][T12346] ? __lock_acquire+0x7c50/0x7c50 [ 511.240759][T12346] ? __fdget+0x17c/0x200 [ 511.245002][T12346] __se_sys_sendmsg+0x19e/0x270 [ 511.249875][T12346] ? __x64_sys_sendmsg+0x80/0x80 [ 511.254820][T12346] ? lockdep_hardirqs_on+0x94/0x140 [ 511.260034][T12346] do_syscall_64+0x4c/0xa0 [ 511.264466][T12346] ? clear_bhb_loop+0x60/0xb0 [ 511.269144][T12346] ? clear_bhb_loop+0x60/0xb0 [ 511.273814][T12346] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.279710][T12346] RIP: 0033:0x7f335a58eb69 [ 511.284119][T12346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.303749][T12346] RSP: 002b:00007f335b343038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.312159][T12346] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58eb69 [ 511.320130][T12346] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 511.328125][T12346] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 511.336097][T12346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.344061][T12346] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 511.352043][T12346] [ 511.663621][T12350] netlink: 'syz.1.2603': attribute type 9 has an invalid length. [ 511.679034][T12351] delete_channel: no stack [ 511.716739][T12350] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2603'. [ 511.736062][T12357] netlink: 'syz.2.2605': attribute type 11 has an invalid length. [ 511.781483][T12357] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2605'. [ 511.814853][T12357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.516336][T12383] netlink: 'syz.1.2612': attribute type 9 has an invalid length. [ 512.556932][T12383] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2612'. [ 513.438068][T12405] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2619'. [ 514.073422][T12396] delete_channel: no stack [ 514.613535][T12424] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2627'. [ 514.678892][T12427] netlink: 'syz.3.2626': attribute type 27 has an invalid length. [ 514.686859][T12427] netlink: 'syz.3.2626': attribute type 3 has an invalid length. [ 514.698548][T12427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2626'. [ 514.730510][T12418] netlink: 'syz.2.2623': attribute type 9 has an invalid length. [ 514.778183][T12418] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2623'. [ 515.159675][T12438] netlink: 'syz.4.2629': attribute type 9 has an invalid length. [ 515.181431][T12438] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2629'. [ 517.786236][T12459] netlink: 'syz.1.2641': attribute type 27 has an invalid length. [ 517.807994][T12459] netlink: 'syz.1.2641': attribute type 3 has an invalid length. [ 517.840729][T12459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2641'. [ 518.706221][T12481] netlink: 'syz.2.2648': attribute type 2 has an invalid length. [ 518.756308][T12481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2648'. [ 521.356492][T12518] FAULT_INJECTION: forcing a failure. [ 521.356492][T12518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.417828][T12518] CPU: 0 PID: 12518 Comm: syz.1.2660 Not tainted 6.1.147-syzkaller #0 [ 521.422200][T12520] netlink: 'syz.3.2670': attribute type 11 has an invalid length. [ 521.426023][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.426039][T12518] Call Trace: [ 521.426045][T12518] [ 521.426052][T12518] dump_stack_lvl+0x168/0x22e [ 521.426078][T12518] ? show_regs_print_info+0x12/0x12 [ 521.426095][T12518] ? load_image+0x3b0/0x3b0 [ 521.426117][T12518] ? __lock_acquire+0x7c50/0x7c50 [ 521.426144][T12518] should_fail_ex+0x399/0x4d0 [ 521.426170][T12518] _copy_from_user+0x2c/0x170 [ 521.426190][T12518] do_vfs_ioctl+0xa11/0x1d10 [ 521.483420][T12518] ? __ia32_compat_sys_ioctl+0x780/0x780 [ 521.489056][T12518] ? tomoyo_path_number_perm+0x1b6/0x600 [ 521.494686][T12518] ? __lock_acquire+0x7c50/0x7c50 [ 521.499722][T12518] ? slab_free_freelist_hook+0x131/0x1a0 [ 521.505369][T12518] ? tomoyo_path_number_perm+0x4ae/0x600 [ 521.511001][T12518] ? __kmem_cache_free+0xb6/0x1f0 [ 521.516023][T12518] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 521.521492][T12518] ? __fget_files+0x28/0x4d0 [ 521.526081][T12518] ? bpf_lsm_file_ioctl+0x5/0x10 [ 521.531010][T12518] ? security_file_ioctl+0x7c/0xa0 [ 521.536115][T12518] __se_sys_ioctl+0x83/0x170 [ 521.540707][T12518] do_syscall_64+0x4c/0xa0 [ 521.545112][T12518] ? clear_bhb_loop+0x60/0xb0 [ 521.549777][T12518] ? clear_bhb_loop+0x60/0xb0 [ 521.554464][T12518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.560354][T12518] RIP: 0033:0x7f48d9b8eb69 [ 521.564760][T12518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.584619][T12518] RSP: 002b:00007f48d99ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.593025][T12518] RAX: ffffffffffffffda RBX: 00007f48d9db5fa0 RCX: 00007f48d9b8eb69 [ 521.600988][T12518] RDX: 00002000000005c0 RSI: 00000000401c5820 RDI: 0000000000000004 [ 521.608962][T12518] RBP: 00007f48d99ff090 R08: 0000000000000000 R09: 0000000000000000 [ 521.616933][T12518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.624899][T12518] R13: 0000000000000000 R14: 00007f48d9db5fa0 R15: 00007ffe9f984a98 [ 521.632868][T12518] [ 521.697952][T12520] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2670'. [ 521.778987][T12520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.080590][T12534] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.500510][T12547] netlink: 'syz.1.2668': attribute type 9 has an invalid length. [ 522.530916][T12547] netlink: 40451 bytes leftover after parsing attributes in process `syz.1.2668'. [ 524.274422][T12562] netlink: 'syz.0.2674': attribute type 25 has an invalid length. [ 524.300348][T12562] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2674'. [ 524.711766][T12584] netlink: 'syz.4.2679': attribute type 11 has an invalid length. [ 524.741365][T12584] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2679'. [ 524.784679][T12588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.409931][T12607] netlink: 'syz.3.2687': attribute type 9 has an invalid length. [ 527.426150][T12607] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2687'. [ 527.484067][T12609] netlink: 'syz.0.2688': attribute type 10 has an invalid length. [ 529.145372][T12642] netlink: 'syz.2.2696': attribute type 11 has an invalid length. [ 529.255815][T12645] bridge0: port 3(team0) entered disabled state [ 529.262419][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.269853][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.428062][T12642] netlink: 191644 bytes leftover after parsing attributes in process `syz.2.2696'. [ 529.785298][T12642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.246530][T12657] netlink: 'syz.4.2701': attribute type 11 has an invalid length. [ 530.264197][T12657] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2701'. [ 530.369887][T12658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.535495][T12684] netlink: 'syz.4.2709': attribute type 21 has an invalid length. [ 533.566471][T12684] netlink: 'syz.4.2709': attribute type 5 has an invalid length. [ 534.783641][T12694] bridge0: port 4(bond0) entered disabled state [ 534.790332][T12694] bridge0: port 3(team0) entered disabled state [ 534.796863][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.805257][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.864633][T12706] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2717'. [ 535.578649][T12710] netlink: 'syz.1.2719': attribute type 11 has an invalid length. [ 535.608006][T12710] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2719'. [ 535.624377][T12713] FAULT_INJECTION: forcing a failure. [ 535.624377][T12713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.638502][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.652784][T12713] CPU: 1 PID: 12713 Comm: syz.2.2720 Not tainted 6.1.147-syzkaller #0 [ 535.660996][T12713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.671053][T12713] Call Trace: [ 535.674324][T12713] [ 535.677335][T12713] dump_stack_lvl+0x168/0x22e [ 535.682010][T12713] ? show_regs_print_info+0x12/0x12 [ 535.687210][T12713] ? load_image+0x3b0/0x3b0 [ 535.691711][T12713] ? __might_fault+0xa6/0x120 [ 535.696392][T12713] should_fail_ex+0x399/0x4d0 [ 535.701070][T12713] copyin+0x1b/0x120 [ 535.704964][T12713] _copy_from_iter+0x45a/0x10c0 [ 535.709911][T12713] ? copyout_mc+0x110/0x110 [ 535.714583][T12713] ? __virt_addr_valid+0x188/0x540 [ 535.719705][T12713] ? __virt_addr_valid+0x188/0x540 [ 535.724860][T12713] ? __virt_addr_valid+0x465/0x540 [ 535.729974][T12713] ? __check_object_size+0x500/0xa40 [ 535.735258][T12713] netlink_sendmsg+0x746/0xbc0 [ 535.740201][T12713] ? netlink_getsockopt+0x540/0x540 [ 535.745399][T12713] ? aa_sock_msg_perm+0x94/0x150 [ 535.750334][T12713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 535.755618][T12713] ? security_socket_sendmsg+0x7c/0xa0 [ 535.761079][T12713] ? netlink_getsockopt+0x540/0x540 [ 535.766279][T12713] ____sys_sendmsg+0x59b/0x970 [ 535.771042][T12713] ? __sys_sendmsg_sock+0x30/0x30 [ 535.776060][T12713] ? __import_iovec+0x315/0x500 [ 535.780909][T12713] ? import_iovec+0x6f/0xa0 [ 535.785412][T12713] ___sys_sendmsg+0x21c/0x290 [ 535.790088][T12713] ? __sys_sendmsg+0x270/0x270 [ 535.794857][T12713] ? lockdep_hardirqs_on+0x94/0x140 [ 535.800147][T12713] ? __fdget+0x17c/0x200 [ 535.804492][T12713] __se_sys_sendmsg+0x19e/0x270 [ 535.809445][T12713] ? __x64_sys_sendmsg+0x80/0x80 [ 535.814386][T12713] ? syscall_enter_from_user_mode+0x2a/0x80 [ 535.820277][T12713] do_syscall_64+0x4c/0xa0 [ 535.824685][T12713] ? clear_bhb_loop+0x60/0xb0 [ 535.829357][T12713] ? clear_bhb_loop+0x60/0xb0 [ 535.834024][T12713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.839911][T12713] RIP: 0033:0x7f335a58eb69 [ 535.844319][T12713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.863922][T12713] RSP: 002b:00007f335b343038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.872331][T12713] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58eb69 [ 535.880296][T12713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 535.888261][T12713] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 535.896228][T12713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.904198][T12713] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 535.912210][T12713] [ 537.014971][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2724'. [ 537.082519][T12738] tc_dump_action: action bad kind [ 538.604485][T12779] netlink: 'syz.4.2738': attribute type 11 has an invalid length. [ 538.690967][T12779] netlink: 191644 bytes leftover after parsing attributes in process `syz.4.2738'. [ 538.776071][T12779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.039642][T12787] netlink: 'syz.0.2740': attribute type 9 has an invalid length. [ 540.063016][T12791] FAULT_INJECTION: forcing a failure. [ 540.063016][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.081572][T12787] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2740'. [ 540.122978][T12791] CPU: 0 PID: 12791 Comm: syz.2.2742 Not tainted 6.1.147-syzkaller #0 [ 540.131199][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.141296][T12791] Call Trace: [ 540.144585][T12791] [ 540.147523][T12791] dump_stack_lvl+0x168/0x22e [ 540.152222][T12791] ? show_regs_print_info+0x12/0x12 [ 540.157436][T12791] ? load_image+0x3b0/0x3b0 [ 540.161960][T12791] ? __lock_acquire+0x7c50/0x7c50 [ 540.167005][T12791] ? snprintf+0xd7/0x120 [ 540.171272][T12791] should_fail_ex+0x399/0x4d0 [ 540.175970][T12791] _copy_to_user+0x2c/0x130 [ 540.180523][T12791] simple_read_from_buffer+0xe3/0x150 [ 540.185929][T12791] proc_fail_nth_read+0x19a/0x210 [ 540.190998][T12791] ? proc_fault_inject_write+0x2f0/0x2f0 [ 540.196648][T12791] ? fsnotify_perm+0x248/0x550 [ 540.201429][T12791] ? proc_fault_inject_write+0x2f0/0x2f0 [ 540.207073][T12791] vfs_read+0x2c0/0x920 [ 540.211256][T12791] ? kernel_read+0x1e0/0x1e0 [ 540.215873][T12791] ? __fget_files+0x28/0x4d0 [ 540.220482][T12791] ? __fget_files+0x44a/0x4d0 [ 540.225182][T12791] ? __fdget_pos+0x2ae/0x360 [ 540.229786][T12791] ? ksys_read+0x71/0x240 [ 540.234135][T12791] ksys_read+0x143/0x240 [ 540.238396][T12791] ? vfs_write+0x960/0x960 [ 540.242828][T12791] ? lockdep_hardirqs_on+0x94/0x140 [ 540.248144][T12791] do_syscall_64+0x4c/0xa0 [ 540.252665][T12791] ? clear_bhb_loop+0x60/0xb0 [ 540.257352][T12791] ? clear_bhb_loop+0x60/0xb0 [ 540.262041][T12791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.267955][T12791] RIP: 0033:0x7f335a58d57c [ 540.272379][T12791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 540.291999][T12791] RSP: 002b:00007f335b343030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.300425][T12791] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58d57c [ 540.308409][T12791] RDX: 000000000000000f RSI: 00007f335b3430a0 RDI: 0000000000000005 [ 540.316392][T12791] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 540.324376][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.332355][T12791] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 540.340350][T12791] [ 541.378693][T12822] FAULT_INJECTION: forcing a failure. [ 541.378693][T12822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.417890][T12822] CPU: 1 PID: 12822 Comm: syz.1.2751 Not tainted 6.1.147-syzkaller #0 [ 541.426090][T12822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.436150][T12822] Call Trace: [ 541.439435][T12822] [ 541.442363][T12822] dump_stack_lvl+0x168/0x22e [ 541.447041][T12822] ? show_regs_print_info+0x12/0x12 [ 541.452230][T12822] ? load_image+0x3b0/0x3b0 [ 541.456725][T12822] ? __lock_acquire+0x7c50/0x7c50 [ 541.461767][T12822] ? verify_lock_unused+0x140/0x140 [ 541.466973][T12822] should_fail_ex+0x399/0x4d0 [ 541.471696][T12822] _copy_from_user+0x2c/0x170 [ 541.476370][T12822] ___sys_sendmsg+0x155/0x290 [ 541.481050][T12822] ? __sys_sendmsg+0x270/0x270 [ 541.485822][T12822] ? __lock_acquire+0x7c50/0x7c50 [ 541.490849][T12822] ? __fdget+0x17c/0x200 [ 541.495106][T12822] __se_sys_sendmsg+0x19e/0x270 [ 541.499948][T12822] ? ct_nmi_exit+0x145/0x1c0 [ 541.504526][T12822] ? __x64_sys_sendmsg+0x80/0x80 [ 541.509551][T12822] ? lockdep_hardirqs_on+0x94/0x140 [ 541.514743][T12822] do_syscall_64+0x4c/0xa0 [ 541.519143][T12822] ? clear_bhb_loop+0x60/0xb0 [ 541.523805][T12822] ? clear_bhb_loop+0x60/0xb0 [ 541.528474][T12822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.534373][T12822] RIP: 0033:0x7f48d9b8eb69 [ 541.538777][T12822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.558374][T12822] RSP: 002b:00007f48d99de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.566778][T12822] RAX: ffffffffffffffda RBX: 00007f48d9db6080 RCX: 00007f48d9b8eb69 [ 541.574740][T12822] RDX: 00000000240400c0 RSI: 0000200000000240 RDI: 0000000000000004 [ 541.582703][T12822] RBP: 00007f48d99de090 R08: 0000000000000000 R09: 0000000000000000 [ 541.590668][T12822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.598627][T12822] R13: 0000000000000001 R14: 00007f48d9db6080 R15: 00007ffe9f984a98 [ 541.606596][T12822] [ 541.956190][T12837] tap0: tun_chr_ioctl cmd 2147767520 [ 542.004523][T12836] netlink: 'syz.2.2755': attribute type 9 has an invalid length. [ 542.037829][T12836] netlink: 40451 bytes leftover after parsing attributes in process `syz.2.2755'. [ 542.327499][T12850] netlink: 'syz.4.2760': attribute type 10 has an invalid length. [ 542.372683][T12850] team0: Device hsr_slave_0 failed to register rx_handler [ 542.545965][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2763'. [ 542.576293][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2763'. [ 542.621813][T12861] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2763'. [ 543.918314][T12874] device syzkaller0 entered promiscuous mode [ 544.430470][T12890] FAULT_INJECTION: forcing a failure. [ 544.430470][T12890] name failslab, interval 1, probability 0, space 0, times 0 [ 544.469193][T12890] CPU: 1 PID: 12890 Comm: syz.2.2773 Not tainted 6.1.147-syzkaller #0 [ 544.477427][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.487513][T12890] Call Trace: [ 544.490811][T12890] [ 544.493755][T12890] dump_stack_lvl+0x168/0x22e [ 544.498454][T12890] ? show_regs_print_info+0x12/0x12 [ 544.503674][T12890] ? load_image+0x3b0/0x3b0 [ 544.508199][T12890] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 544.514207][T12890] ? lock_chain_count+0x20/0x20 [ 544.519078][T12890] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 544.524497][T12890] should_fail_ex+0x399/0x4d0 [ 544.529203][T12890] should_failslab+0x5/0x20 [ 544.533735][T12890] slab_pre_alloc_hook+0x59/0x310 [ 544.538800][T12890] kmem_cache_alloc+0x56/0x2f0 [ 544.543600][T12890] ? __build_skb+0x2a/0x3c0 [ 544.548139][T12890] __build_skb+0x2a/0x3c0 [ 544.552502][T12890] build_skb+0x1e/0x230 [ 544.556694][T12890] bpf_prog_test_run_skb+0x372/0x11b0 [ 544.562099][T12890] ? __fget_files+0x28/0x4d0 [ 544.566714][T12890] ? __fget_files+0x44a/0x4d0 [ 544.571426][T12890] ? cpu_online+0xa0/0xa0 [ 544.575783][T12890] bpf_prog_test_run+0x31e/0x390 [ 544.580759][T12890] __sys_bpf+0x593/0x6d0 [ 544.585035][T12890] ? bpf_link_show_fdinfo+0x340/0x340 [ 544.590449][T12890] ? lock_chain_count+0x20/0x20 [ 544.595330][T12890] __x64_sys_bpf+0x78/0x90 [ 544.599778][T12890] do_syscall_64+0x4c/0xa0 [ 544.604216][T12890] ? clear_bhb_loop+0x60/0xb0 [ 544.608910][T12890] ? clear_bhb_loop+0x60/0xb0 [ 544.613608][T12890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.619538][T12890] RIP: 0033:0x7f335a58eb69 [ 544.623974][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.643605][T12890] RSP: 002b:00007f335b343038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 544.652034][T12890] RAX: ffffffffffffffda RBX: 00007f335a7b5fa0 RCX: 00007f335a58eb69 [ 544.660021][T12890] RDX: 0000000000000019 RSI: 0000200000000640 RDI: 000000000000000a [ 544.668008][T12890] RBP: 00007f335b343090 R08: 0000000000000000 R09: 0000000000000000 [ 544.675996][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.683980][T12890] R13: 0000000000000000 R14: 00007f335a7b5fa0 R15: 00007ffda6e7a588 [ 544.692006][T12890] [ 546.715477][T12883] netlink: 'syz.1.2771': attribute type 21 has an invalid length. [ 546.725325][T12893] netlink: 'syz.3.2774': attribute type 21 has an invalid length. [ 546.896705][T12909] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 546.914621][T12909] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 547.065808][T12919] netlink: 'syz.0.2778': attribute type 9 has an invalid length. [ 547.123873][T12919] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2778'. [ 547.249180][T12929] FAULT_INJECTION: forcing a failure. [ 547.249180][T12929] name failslab, interval 1, probability 0, space 0, times 0 [ 547.303171][T12929] CPU: 0 PID: 12929 Comm: syz.2.2782 Not tainted 6.1.147-syzkaller #0 [ 547.311404][T12929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.321478][T12929] Call Trace: [ 547.324753][T12929] [ 547.327697][T12929] dump_stack_lvl+0x168/0x22e [ 547.332379][T12929] ? show_regs_print_info+0x12/0x12 [ 547.337593][T12929] ? load_image+0x3b0/0x3b0 [ 547.342093][T12929] ? __might_sleep+0xd0/0xd0 [ 547.346683][T12929] ? __lock_acquire+0x7c50/0x7c50 [ 547.351734][T12929] should_fail_ex+0x399/0x4d0 [ 547.356534][T12929] should_failslab+0x5/0x20 [ 547.361154][T12929] slab_pre_alloc_hook+0x59/0x310 [ 547.366181][T12929] ? prepend_path+0xa6b/0xc20 [ 547.370862][T12929] ? tomoyo_encode+0x27e/0x540 [ 547.375627][T12929] __kmem_cache_alloc_node+0x4f/0x260 [ 547.381000][T12929] ? tomoyo_encode+0x27e/0x540 [ 547.385770][T12929] __kmalloc+0xa0/0x240 [ 547.389934][T12929] tomoyo_encode+0x27e/0x540 [ 547.394525][T12929] tomoyo_realpath_from_path+0x58e/0x5d0 [ 547.400166][T12929] tomoyo_path_number_perm+0x1e3/0x600 [ 547.405618][T12929] ? tomoyo_path_number_perm+0x1b6/0x600 [ 547.411248][T12929] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 547.416797][T12929] ? ksys_write+0x1bd/0x240 [ 547.421308][T12929] ? common_file_perm+0x171/0x1c0 [ 547.426358][T12929] ? __fget_files+0x28/0x4d0 [ 547.430954][T12929] security_file_ioctl+0x6c/0xa0 [ 547.435893][T12929] __se_sys_ioctl+0x48/0x170 [ 547.440480][T12929] do_syscall_64+0x4c/0xa0 [ 547.444892][T12929] ? clear_bhb_loop+0x60/0xb0 [ 547.449562][T12929] ? clear_bhb_loop+0x60/0xb0 [ 547.454235][T12929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.460152][T12929] RIP: 0033:0x7f335a58eb69 [ 547.464563][T12929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.484188][T12929] RSP: 002b:00007f335b322038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.492610][T12929] RAX: ffffffffffffffda RBX: 00007f335a7b6080 RCX: 00007f335a58eb69 [ 547.500579][T12929] RDX: 0000200000000180 RSI: 00000000401054d5 RDI: 0000000000000003 [ 547.508567][T12929] RBP: 00007f335b322090 R08: 0000000000000000 R09: 0000000000000000 [ 547.516537][T12929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.524501][T12929] R13: 0000000000000001 R14: 00007f335a7b6080 R15: 00007ffda6e7a588 [ 547.532479][T12929] [ 547.645916][T12929] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.689291][T12952] netlink: 'syz.4.2790': attribute type 10 has an invalid length. [ 548.756062][T12952] device veth0_vlan left promiscuous mode [ 548.784170][T12952] device veth0_vlan entered promiscuous mode [ 548.803123][T12952] team0: Device veth0_vlan failed to register rx_handler [ 548.829972][T12958] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 548.842676][T12958] netlink: 'syz.3.2791': attribute type 8 has an invalid length. [ 548.870115][T12958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'. [ 549.156104][T12972] netlink: 'syz.3.2796': attribute type 9 has an invalid length. [ 549.198458][T12972] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.2796'. [ 549.209998][T12973] netlink: 'syz.0.2797': attribute type 9 has an invalid length. [ 549.219065][T12973] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2797'. [ 551.972580][T13020] validate_nla: 3 callbacks suppressed [ 551.972599][T13020] netlink: 'syz.4.2812': attribute type 9 has an invalid length. [ 552.011536][T13020] netlink: 40451 bytes leftover after parsing attributes in process `syz.4.2812'. [ 552.939635][T13023] delete_channel: no stack [ 553.143245][T13039] FAULT_INJECTION: forcing a failure. [ 553.143245][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 553.160734][T13039] CPU: 0 PID: 13039 Comm: syz.3.2817 Not tainted 6.1.147-syzkaller #0 [ 553.168939][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.179010][T13039] Call Trace: [ 553.182336][T13039] [ 553.185281][T13039] dump_stack_lvl+0x168/0x22e [ 553.189978][T13039] ? show_regs_print_info+0x12/0x12 [ 553.195187][T13039] ? load_image+0x3b0/0x3b0 [ 553.199710][T13039] ? __might_sleep+0xd0/0xd0 [ 553.204313][T13039] ? __lock_acquire+0x7c50/0x7c50 [ 553.209360][T13039] ? trace_event_raw_event_lock+0x230/0x230 [ 553.215267][T13039] should_fail_ex+0x399/0x4d0 [ 553.219965][T13039] should_failslab+0x5/0x20 [ 553.224479][T13039] slab_pre_alloc_hook+0x59/0x310 [ 553.229516][T13039] ? sk_prot_alloc+0xe7/0x210 [ 553.234205][T13039] __kmem_cache_alloc_node+0x4f/0x260 [ 553.239594][T13039] ? sk_prot_alloc+0xe7/0x210 [ 553.244296][T13039] __kmalloc+0xa0/0x240 [ 553.248474][T13039] sk_prot_alloc+0xe7/0x210 [ 553.252994][T13039] ? sk_alloc+0x20/0x340 [ 553.257253][T13039] sk_alloc+0x36/0x340 [ 553.261337][T13039] ? bpf_ctx_init+0x163/0x1a0 [ 553.266027][T13039] ? bpf_prog_test_run_skb+0x267/0x11b0 [ 553.271593][T13039] bpf_prog_test_run_skb+0x350/0x11b0 [ 553.276982][T13039] ? __fget_files+0x28/0x4d0 [ 553.281590][T13039] ? __fget_files+0x44a/0x4d0 [ 553.286292][T13039] ? cpu_online+0xa0/0xa0 [ 553.290691][T13039] bpf_prog_test_run+0x31e/0x390 [ 553.295648][T13039] __sys_bpf+0x593/0x6d0 [ 553.299907][T13039] ? bpf_link_show_fdinfo+0x340/0x340 [ 553.305308][T13039] ? lock_chain_count+0x20/0x20 [ 553.310180][T13039] __x64_sys_bpf+0x78/0x90 [ 553.314609][T13039] do_syscall_64+0x4c/0xa0 [ 553.319036][T13039] ? clear_bhb_loop+0x60/0xb0 [ 553.323721][T13039] ? clear_bhb_loop+0x60/0xb0 [ 553.328408][T13039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.334323][T13039] RIP: 0033:0x7f0c5a78eb69 [ 553.338744][T13039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.358375][T13039] RSP: 002b:00007f0c5b60c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.366815][T13039] RAX: ffffffffffffffda RBX: 00007f0c5a9b6160 RCX: 00007f0c5a78eb69 [ 553.374799][T13039] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 553.382786][T13039] RBP: 00007f0c5b60c090 R08: 0000000000000000 R09: 0000000000000000 [ 553.390774][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.398758][T13039] R13: 0000000000000000 R14: 00007f0c5a9b6160 R15: 00007ffe18c94a08 [ 553.406788][T13039] [ 556.593536][T13041] ------------[ cut here ]------------ [ 556.599152][T13041] WARNING: CPU: 1 PID: 13041 at kernel/events/core.c:6578 perf_pending_task+0x358/0x470 [ 556.608987][T13041] Modules linked in: [ 556.612899][T13041] CPU: 1 PID: 13041 Comm: syz.2.2818 Not tainted 6.1.147-syzkaller #0 [ 556.621201][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.631335][T13041] RIP: 0010:perf_pending_task+0x358/0x470 [ 556.637320][T13041] Code: ff 84 db 75 14 e8 18 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 d6 da ff e8 d7 8f 5a ff eb e5 e8 f8 d5 da ff <0f> 0b e9 f3 fe ff ff e8 ec d5 da ff 48 c7 c7 b0 03 bc 8c 4c 89 f6 [ 556.657064][T13041] RSP: 0018:ffffc90006327920 EFLAGS: 00010293 [ 556.663287][T13041] RAX: ffffffff81a5f0e8 RBX: ffff88801cbdf658 RCX: ffff8880790e3b80 [ 556.671341][T13041] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 556.679396][T13041] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100f21c8b1 [ 556.687412][T13041] R10: ffffed100f21c8b1 R11: 1ffff1100f21c8b0 R12: ffff8880790e3b80 [ 556.695467][T13041] R13: ffff888058657560 R14: ffff88801cbdf420 R15: 1ffff1100397be84 [ 556.703507][T13041] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 556.712511][T13041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.719145][T13041] CR2: 00007f335b343990 CR3: 000000001ff12000 CR4: 00000000003506e0 [ 556.727139][T13041] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.735206][T13041] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 556.743326][T13041] Call Trace: [ 556.746622][T13041] [ 556.749613][T13041] task_work_run+0x1ca/0x250 [ 556.754223][T13041] ? task_work_cancel+0x230/0x230 [ 556.759333][T13041] ? do_raw_spin_unlock+0x11d/0x230 [ 556.764562][T13041] do_exit+0x93e/0x2400 [ 556.768877][T13041] ? lock_chain_count+0x20/0x20 [ 556.773742][T13041] ? put_task_struct+0x80/0x80 [ 556.778578][T13041] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 556.784751][T13041] ? lockdep_hardirqs_on+0x94/0x140 [ 556.790033][T13041] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 556.796211][T13041] do_group_exit+0x217/0x2d0 [ 556.800877][T13041] ? _raw_spin_unlock_irq+0x25/0x40 [ 556.806100][T13041] get_signal+0x1272/0x1350 [ 556.810696][T13041] arch_do_signal_or_restart+0xb0/0x1230 [ 556.816350][T13041] ? perf_trace_preemptirq_template+0x287/0x330 [ 556.822686][T13041] ? irqentry_enter+0x33/0x50 [ 556.827395][T13041] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 556.833637][T13041] ? get_sigframe_size+0x10/0x10 [ 556.838629][T13041] ? rcu_is_watching+0x11/0xa0 [ 556.843445][T13041] exit_to_user_mode_loop+0x70/0x110 [ 556.848806][T13041] exit_to_user_mode_prepare+0xb1/0x140 [ 556.854389][T13041] syscall_exit_to_user_mode+0x16/0x40 [ 556.859923][T13041] do_syscall_64+0x58/0xa0 [ 556.864346][T13041] ? clear_bhb_loop+0x60/0xb0 [ 556.869089][T13041] ? clear_bhb_loop+0x60/0xb0 [ 556.873783][T13041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.879764][T13041] RIP: 0033:0x7f335a44f860 [ 556.884197][T13041] Code: Unable to access opcode bytes at 0x7f335a44f836. [ 556.891283][T13041] RSP: 002b:00007f335b342238 EFLAGS: 00000283 [ 556.897371][T13041] RAX: 0000000000000000 RBX: 00007f335b342d30 RCX: 00007f335a778120 [ 556.905410][T13041] RDX: 00007f335b342240 RSI: 00007f335b342370 RDI: 000000000000000b [ 556.913446][T13041] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 556.921496][T13041] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 556.929511][T13041] R13: 00007f335b342eb0 R14: 9999999999999999 R15: 0000000000000000 [ 556.937510][T13041] [ 556.940619][T13041] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 556.947904][T13041] CPU: 1 PID: 13041 Comm: syz.2.2818 Not tainted 6.1.147-syzkaller #0 [ 556.956058][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.966106][T13041] Call Trace: [ 556.969381][T13041] [ 556.972298][T13041] dump_stack_lvl+0x168/0x22e [ 556.976976][T13041] ? memcpy+0x3c/0x60 [ 556.980956][T13041] ? show_regs_print_info+0x12/0x12 [ 556.986142][T13041] ? load_image+0x3b0/0x3b0 [ 556.990649][T13041] panic+0x2c9/0x710 [ 556.994536][T13041] ? bpf_jit_dump+0xd0/0xd0 [ 556.999040][T13041] __warn+0x2f8/0x4f0 [ 557.003013][T13041] ? perf_pending_task+0x358/0x470 [ 557.008120][T13041] ? perf_pending_task+0x358/0x470 [ 557.013307][T13041] report_bug+0x2ba/0x4f0 [ 557.017625][T13041] ? perf_pending_task+0x358/0x470 [ 557.022724][T13041] handle_bug+0x3a/0x70 [ 557.026867][T13041] exc_invalid_op+0x16/0x40 [ 557.031358][T13041] asm_exc_invalid_op+0x16/0x20 [ 557.036202][T13041] RIP: 0010:perf_pending_task+0x358/0x470 [ 557.041909][T13041] Code: ff 84 db 75 14 e8 18 d6 da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 04 d6 da ff e8 d7 8f 5a ff eb e5 e8 f8 d5 da ff <0f> 0b e9 f3 fe ff ff e8 ec d5 da ff 48 c7 c7 b0 03 bc 8c 4c 89 f6 [ 557.061508][T13041] RSP: 0018:ffffc90006327920 EFLAGS: 00010293 [ 557.067564][T13041] RAX: ffffffff81a5f0e8 RBX: ffff88801cbdf658 RCX: ffff8880790e3b80 [ 557.075523][T13041] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 557.083481][T13041] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed100f21c8b1 [ 557.091440][T13041] R10: ffffed100f21c8b1 R11: 1ffff1100f21c8b0 R12: ffff8880790e3b80 [ 557.099404][T13041] R13: ffff888058657560 R14: ffff88801cbdf420 R15: 1ffff1100397be84 [ 557.107376][T13041] ? perf_pending_task+0x358/0x470 [ 557.112482][T13041] task_work_run+0x1ca/0x250 [ 557.117061][T13041] ? task_work_cancel+0x230/0x230 [ 557.122074][T13041] ? do_raw_spin_unlock+0x11d/0x230 [ 557.127277][T13041] do_exit+0x93e/0x2400 [ 557.131428][T13041] ? lock_chain_count+0x20/0x20 [ 557.136310][T13041] ? put_task_struct+0x80/0x80 [ 557.141064][T13041] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 557.147213][T13041] ? lockdep_hardirqs_on+0x94/0x140 [ 557.152400][T13041] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 557.158543][T13041] do_group_exit+0x217/0x2d0 [ 557.163127][T13041] ? _raw_spin_unlock_irq+0x25/0x40 [ 557.168317][T13041] get_signal+0x1272/0x1350 [ 557.172916][T13041] arch_do_signal_or_restart+0xb0/0x1230 [ 557.178537][T13041] ? perf_trace_preemptirq_template+0x287/0x330 [ 557.184768][T13041] ? irqentry_enter+0x33/0x50 [ 557.189436][T13041] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 557.195407][T13041] ? get_sigframe_size+0x10/0x10 [ 557.200339][T13041] ? rcu_is_watching+0x11/0xa0 [ 557.205156][T13041] exit_to_user_mode_loop+0x70/0x110 [ 557.210431][T13041] exit_to_user_mode_prepare+0xb1/0x140 [ 557.215966][T13041] syscall_exit_to_user_mode+0x16/0x40 [ 557.221434][T13041] do_syscall_64+0x58/0xa0 [ 557.225836][T13041] ? clear_bhb_loop+0x60/0xb0 [ 557.230501][T13041] ? clear_bhb_loop+0x60/0xb0 [ 557.235168][T13041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.241144][T13041] RIP: 0033:0x7f335a44f860 [ 557.245542][T13041] Code: Unable to access opcode bytes at 0x7f335a44f836. [ 557.252544][T13041] RSP: 002b:00007f335b342238 EFLAGS: 00000283 [ 557.258600][T13041] RAX: 0000000000000000 RBX: 00007f335b342d30 RCX: 00007f335a778120 [ 557.266569][T13041] RDX: 00007f335b342240 RSI: 00007f335b342370 RDI: 000000000000000b [ 557.274529][T13041] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 557.282485][T13041] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000073 [ 557.290441][T13041] R13: 00007f335b342eb0 R14: 9999999999999999 R15: 0000000000000000 [ 557.298408][T13041] [ 557.301727][T13041] Kernel Offset: disabled [ 557.306038][T13041] Rebooting in 86400 seconds..