last executing test programs: 5.573900694s ago: executing program 3 (id=4187): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff000000}, 0x48) 4.745500208s ago: executing program 2 (id=4182): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) (async) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) 4.601916663s ago: executing program 3 (id=4183): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_clone(0x21000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000006000000ab0a00000700000000000000", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000010000000000000000000000000000000000000000000000a678995f39d80df247"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)={[{0x2d, 'rlimit'}]}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x3829, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x22, 0x2, 0x21) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) 4.510790239s ago: executing program 2 (id=4184): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x10000, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000009e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x200) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0x13, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a884", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62a020000009f0ba1f848390000005e140602000000000e000a00feb20af3028000001294", 0x2e}], 0x1}, 0x0) 3.725409405s ago: executing program 0 (id=4186): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400aaac94e640000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850144622bf5238891a17a8be1c2c400"], 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xffffffff, 0x3, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) close(r5) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x10000000000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000080675d01c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.590631098s ago: executing program 3 (id=4189): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r3, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, 0x0, r5, 0x8, &(0x7f0000000b80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xb, 0xfffffffc, 0x6}, 0x10, 0x1cc9, r4, 0x8, &(0x7f0000001a40)=[r8, r5], &(0x7f0000001a80)=[{0x2, 0x2, 0x2, 0x1}, {0x3, 0x5, 0x0, 0x5}, {0x5, 0x2, 0x7}, {0x4, 0x3, 0x5, 0xf}, {0x3, 0x2, 0x3, 0x12}, {0x4, 0x4, 0x4, 0x4}, {0x4, 0x3, 0xb, 0xa}, {0x2, 0x2, 0x9, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x110161, 0x4, 0x0, 0x1, 0x40000000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r9, 0x58, &(0x7f0000000180)}, 0x10) 3.590403348s ago: executing program 2 (id=4190): socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x104, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x148}, 0xe900) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x6, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) 3.410445089s ago: executing program 0 (id=4191): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000000fc0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xf1, 0x0, 0x3}, @generic={0x7, 0x2}]}}}], 0x18, 0x8000000}, 0x0) 3.34811438s ago: executing program 1 (id=4192): socket$kcm(0x10, 0x4, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x2, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r2}, 0x18) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bfffffffd00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 3.238975989s ago: executing program 0 (id=4193): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d800ef00100081044e81f782db44b904021d08fc00000000e8fe55a1010115000600142603600e120800040000001101a8002e000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e43bf66f282ac027812cfbd3f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x400c850) 3.238498849s ago: executing program 2 (id=4194): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200008010000000000000040000008500000027000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.216744563s ago: executing program 3 (id=4195): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x403, 0xaaf04684de878bda, 0x4e3, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_clone(0x21000100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000006000000ab0a00000700000000000000", @ANYRES32, @ANYBLOB="0e00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="02000000010000000000000000000000000000000000000000000000a678995f39d80df247"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)={[{0x2d, 'rlimit'}]}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x3829, 0xffffffffffff0001}, 0x8000, 0x3, 0x9, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x2, 0x21) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r6) 3.169307951s ago: executing program 0 (id=4196): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000006000900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="8333eaecd574010b469b74089ba962ba180a67830187bb0fed5b3583bd3f8693931b76f029d52c4e516e5ececbda5f8965c2e3117387e37b84231ac213bda9f67d9aa1f7823dc29f9ac6c959c3c4ac09a83a73c0f8604a2a8e3d2f0ae304dbd6c78601d18ce76bef510c08add07af8733a1d5942fa29e8f0", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r2) sendmsg$unix(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4"], 0xfe33) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/191, 0xbf}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/200, 0xc8}, {&(0x7f0000003b00)=""/187, 0xbb}, {&(0x7f0000003c00)=""/62, 0x3e}], 0x7, &(0x7f0000003cc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}, 0x40010042) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x5, &(0x7f00000000c0), 0x3e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f00000003c0)}, 0x10) socket$kcm(0x10, 0x3, 0x10) 3.101006513s ago: executing program 1 (id=4197): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x4, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4788}, 0x0) 2.933450722s ago: executing program 1 (id=4198): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095", @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000085c200feffffff85000000cf000000950000000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0xfffffffffffffe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.805788984s ago: executing program 1 (id=4199): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400aaac94e640000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850144622bf5238891a17a8be1c2c400"], 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xffffffff, 0x3, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000300)={0x0, 0x0}) close(r5) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x10000000000) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000001800", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000080675d01c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.619277906s ago: executing program 0 (id=4200): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xf91, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x1ffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x801) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x18000, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x102) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.572247205s ago: executing program 1 (id=4201): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002b00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000040ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d3e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c47365e78c80854b2baf8eb320d8c34cfc81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6afd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d0504f1ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f415f6ac8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8f"], 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="b70200000a000040732ac0ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x37fb9f24, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028200000004006f8ce030000000a000002", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) 2.450394396s ago: executing program 3 (id=4202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x30002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) sendmsg$unix(r5, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r2, r4, r3, r2, r3, r2, r7]}}], 0x50, 0x4051}, 0x40010) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x7, 0x9, 0x3, 0x0, 0xfcd, 0x10900, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x100, 0x5, 0x1, 0x0, 0xfb, 0x447e, 0x5, 0x0, 0x4, 0x0, 0x9}, r6, 0x1, 0xffffffffffffffff, 0xa) 2.295252432s ago: executing program 2 (id=4203): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="14ffa60017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x40) 6.894619ms ago: executing program 1 (id=4204): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x6, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000340)="76671563d35712a6f2b62ea66c3308a0c88c7ac3b1a741f9dd2e8e4859126476c002e5befe3d01750016983c78864cd1f66990b40dca", &(0x7f0000000380), 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000009c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000900)={0x0, 0x80, 0x8e, 0x0, 0xc8, 0x7f, 0x0, 0x0, 0x600, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x54db0d3f, 0x4, @perf_config_ext={0xffffffffffffffff, 0xefb9}, 0x100000, 0x3, 0xffff, 0x9, 0x3, 0xe, 0x9, 0x0, 0x1, 0x0, 0x5}, r4, 0x0, r2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f00000007c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) close(r8) sendmsg$unix(r7, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r9, 0x8) socket$kcm(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000230000207b8af8ff0000c118ccd2a94cf0ede2d6bf340a14320000bfa200000000000007020000f8ffffffb703000008000000b704000002", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) r12 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 6.653159ms ago: executing program 3 (id=4205): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x6, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000340)="76671563d35712a6f2b62ea66c3308a0c88c7ac3b1a741f9dd2e8e4859126476c002e5befe3d01750016983c78864cd1f66990b40dca", &(0x7f0000000380), 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000009c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000900)={0x0, 0x80, 0x8e, 0x0, 0xc8, 0x7f, 0x0, 0x0, 0x600, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x54db0d3f, 0x4, @perf_config_ext={0xffffffffffffffff, 0xefb9}, 0x100000, 0x3, 0xffff, 0x9, 0x3, 0xe, 0x9, 0x0, 0x1, 0x0, 0x5}, r4, 0x0, r2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f00000007c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) close(r8) sendmsg$unix(r7, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r9, 0x8) socket$kcm(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000230000207b8af8ff0000c118ccd2a94cf0ede2d6bf340a14320000bfa200000000000007020000f8ffffffb703000008000000b704000002", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) r12 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000040)=0x1, 0x12) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 220.37µs ago: executing program 0 (id=4206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x1f00}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 0s ago: executing program 2 (id=4207): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000680), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async, rerun: 64) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) kernel console output (not intermixed with test programs): rrupt+0x1a/0x20 [ 812.692431][T16337] ? show_regs_print_info+0x20/0x20 [ 812.697844][T16337] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 812.704062][T16337] ? dump_stack+0x9/0x20 [ 812.708347][T16337] should_fail_ex+0x394/0x4c0 [ 812.713079][T16337] _copy_to_user+0x2f/0xa0 [ 812.717619][T16337] __htab_map_lookup_and_delete_batch+0x1061/0x1400 [ 812.724359][T16337] ? jhash+0x740/0x740 [ 812.728462][T16337] ? htab_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 812.735272][T16337] ? htab_percpu_map_lookup_and_delete_batch+0x17/0x40 [ 812.742332][T16337] ? htab_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 812.749128][T16337] bpf_map_do_batch+0x48c/0x600 [ 812.754025][T16337] ? bpf_lsm_key_free+0x10/0x10 [ 812.758920][T16337] __sys_bpf+0x78c/0x890 [ 812.763204][T16337] ? bpf_link_show_fdinfo+0x560/0x560 [ 812.768627][T16337] ? lock_chain_count+0x20/0x20 [ 812.773539][T16337] __x64_sys_bpf+0x7c/0x90 [ 812.778012][T16337] do_syscall_64+0x55/0xb0 [ 812.782470][T16337] ? clear_bhb_loop+0x40/0x90 [ 812.787191][T16337] ? clear_bhb_loop+0x40/0x90 [ 812.791910][T16337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 812.797843][T16337] RIP: 0033:0x7f2bf599e159 [ 812.802294][T16337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.822023][T16337] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 812.830573][T16337] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 812.838582][T16337] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 812.846588][T16337] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 812.854592][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.862587][T16337] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 812.870596][T16337] [ 813.740451][T16357] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3295'. [ 815.367315][T16371] netlink: 'syz.3.3301': attribute type 10 has an invalid length. [ 815.384064][T16371] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3301'. [ 816.613030][T16384] netlink: 'syz.2.3303': attribute type 10 has an invalid length. [ 816.621449][T16384] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3303'. [ 817.169448][T16398] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3306'. [ 818.827207][T16416] netlink: 'syz.3.3313': attribute type 10 has an invalid length. [ 818.835535][T16416] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3313'. [ 819.527037][T16434] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3326'. [ 819.617045][T16432] netlink: 'syz.3.3317': attribute type 10 has an invalid length. [ 819.635920][T16432] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3317'. [ 820.905148][T16455] netlink: 'syz.1.3327': attribute type 10 has an invalid length. [ 820.916321][T16455] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3327'. [ 821.724751][T16477] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3331'. [ 821.788326][T16479] FAULT_INJECTION: forcing a failure. [ 821.788326][T16479] name failslab, interval 1, probability 0, space 0, times 0 [ 821.846431][T16479] CPU: 1 PID: 16479 Comm: syz.2.3335 Not tainted syzkaller #0 [ 821.854190][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 821.864408][T16479] Call Trace: [ 821.867742][T16479] [ 821.870715][T16479] dump_stack_lvl+0x18c/0x250 [ 821.875445][T16479] ? show_regs_print_info+0x20/0x20 [ 821.880697][T16479] ? load_image+0x420/0x420 [ 821.885256][T16479] ? __lock_acquire+0x7d80/0x7d80 [ 821.890349][T16479] should_fail_ex+0x394/0x4c0 [ 821.895098][T16479] should_failslab+0x9/0x20 [ 821.899655][T16479] slab_pre_alloc_hook+0x59/0x300 [ 821.904737][T16479] ? sctp_transport_new+0x7e/0x630 [ 821.909897][T16479] __kmem_cache_alloc_node+0x53/0x250 [ 821.915326][T16479] ? sctp_transport_new+0x7e/0x630 [ 821.920481][T16479] kmalloc_trace+0x2a/0xe0 [ 821.925003][T16479] sctp_transport_new+0x7e/0x630 [ 821.930020][T16479] sctp_assoc_add_peer+0x2ae/0x1440 [ 821.935295][T16479] sctp_connect_new_asoc+0x323/0x6a0 [ 821.940654][T16479] ? __sctp_connect+0xd80/0xd80 [ 821.945545][T16479] ? __local_bh_enable_ip+0x13a/0x1c0 [ 821.950965][T16479] ? _local_bh_enable+0xa0/0xa0 [ 821.955863][T16479] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 821.961744][T16479] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 821.967607][T16479] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 821.973275][T16479] ? security_sctp_bind_connect+0x89/0xb0 [ 821.979044][T16479] sctp_sendmsg+0x1519/0x27b0 [ 821.984072][T16479] ? sctp_getsockopt+0xb60/0xb60 [ 821.989158][T16479] ? aa_af_perm+0x330/0x330 [ 821.993713][T16479] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 822.000346][T16479] ? sock_rps_record_flow+0x19/0x3f0 [ 822.005681][T16479] ? inet_sendmsg+0x7e/0x2a0 [ 822.010312][T16479] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 822.015650][T16479] ? inet_send_prepare+0x250/0x250 [ 822.020806][T16479] ____sys_sendmsg+0x61b/0x980 [ 822.025657][T16479] ? __asan_memset+0x22/0x40 [ 822.030299][T16479] ? __sys_sendmsg_sock+0x30/0x30 [ 822.035451][T16479] ? __import_iovec+0x5f2/0x850 [ 822.040386][T16479] ? import_iovec+0x73/0xa0 [ 822.044945][T16479] ___sys_sendmsg+0x2a6/0x360 [ 822.049678][T16479] ? __sys_sendmsg+0x2b0/0x2b0 [ 822.054532][T16479] ? __lock_acquire+0x7d80/0x7d80 [ 822.059641][T16479] __se_sys_sendmsg+0x1d0/0x2c0 [ 822.064546][T16479] ? __x64_sys_sendmsg+0x80/0x80 [ 822.069555][T16479] ? lockdep_hardirqs_on+0x98/0x150 [ 822.074800][T16479] do_syscall_64+0x55/0xb0 [ 822.079259][T16479] ? clear_bhb_loop+0x40/0x90 [ 822.084074][T16479] ? clear_bhb_loop+0x40/0x90 [ 822.088801][T16479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.094740][T16479] RIP: 0033:0x7f901fd9e159 [ 822.099196][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.118931][T16479] RSP: 002b:00007f9020d0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.127403][T16479] RAX: ffffffffffffffda RBX: 00007f9020026090 RCX: 00007f901fd9e159 [ 822.135415][T16479] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000006 [ 822.143427][T16479] RBP: 00007f9020d0b090 R08: 0000000000000000 R09: 0000000000000000 [ 822.151437][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.159441][T16479] R13: 00007f9020026128 R14: 00007f9020026090 R15: 00007ffe37f47548 [ 822.167477][T16479] [ 822.460129][T16483] netlink: 'syz.1.3336': attribute type 9 has an invalid length. [ 822.476494][T16483] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3336'. [ 823.523132][T16497] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3342'. [ 823.622544][T16497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 824.188839][T16515] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3344'. [ 824.695771][T16517] netlink: 'syz.0.3339': attribute type 10 has an invalid length. [ 824.807487][T16517] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3339'. [ 824.938953][T16517] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.946631][T16517] bridge0: port 1(L+߬) entered disabled state [ 825.463446][T16527] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3348'. [ 826.745433][T16549] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3355'. [ 827.767962][T16565] netlink: 'syz.1.3360': attribute type 10 has an invalid length. [ 827.798017][T16565] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3360'. [ 828.167297][T16575] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3362'. [ 828.740578][T16587] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3365'. [ 828.939447][T16590] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3366'. [ 829.908453][T16608] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 829.929638][T16608] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3373'. [ 830.815917][T16621] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3376'. [ 831.030178][T16628] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 831.107345][T16628] hsr0: entered promiscuous mode [ 831.449525][T16628] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 831.467746][T16628] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 831.524805][T16628] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 831.546775][T16628] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 831.695681][T16639] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3380'. [ 831.904858][T16645] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3384'. [ 832.897953][T16664] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3390'. [ 833.269569][T16662] netlink: 'syz.0.3385': attribute type 10 has an invalid length. [ 833.351986][T16662] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3385'. [ 833.454345][T16670] netlink: 'syz.2.3391': attribute type 10 has an invalid length. [ 833.473156][T16670] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3391'. [ 833.812722][T16301] syz.0.3275 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 833.885041][T16301] CPU: 1 PID: 16301 Comm: syz.0.3275 Not tainted syzkaller #0 [ 833.892596][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 833.902713][T16301] Call Trace: [ 833.906044][T16301] [ 833.909029][T16301] dump_stack_lvl+0x18c/0x250 [ 833.913782][T16301] ? show_regs_print_info+0x20/0x20 [ 833.919053][T16301] ? load_image+0x420/0x420 [ 833.923613][T16301] ? ___ratelimit+0x478/0x610 [ 833.928396][T16301] ? radix_tree_cpu_dead+0x160/0x160 [ 833.933809][T16301] dump_header+0xd8/0x820 [ 833.938535][T16301] oom_kill_process+0x390/0x580 [ 833.943466][T16301] out_of_memory+0xe0e/0x1200 [ 833.948316][T16301] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 833.954017][T16301] ? mutex_lock_nested+0x20/0x20 [ 833.959020][T16301] ? unregister_oom_notifier+0x20/0x20 [ 833.964552][T16301] mem_cgroup_out_of_memory+0x2c2/0x390 [ 833.970161][T16301] ? try_charge_memcg+0xc91/0x17c0 [ 833.975768][T16301] ? drain_local_stock+0x630/0x630 [ 833.980964][T16301] ? do_raw_spin_unlock+0x121/0x230 [ 833.986234][T16301] try_charge_memcg+0xca1/0x17c0 [ 833.991242][T16301] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 833.997118][T16301] ? folio_flags+0x120/0x120 [ 834.001768][T16301] ? shmem_alloc_folio+0x1f4/0x2a0 [ 834.006947][T16301] ? percpu_ref_tryget+0x15/0x180 [ 834.012037][T16301] ? get_mem_cgroup_from_mm+0x38/0x290 [ 834.017596][T16301] charge_memcg+0x11b/0x3b0 [ 834.022166][T16301] ? __mem_cgroup_charge+0x80/0x80 [ 834.027335][T16301] ? get_mem_cgroup_from_mm+0x38/0x290 [ 834.032860][T16301] ? get_mem_cgroup_from_mm+0x38/0x290 [ 834.038376][T16301] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 834.044074][T16301] __mem_cgroup_charge+0x25/0x80 [ 834.049104][T16301] shmem_add_to_page_cache+0x8d3/0x1b80 [ 834.054704][T16301] ? xas_load+0x12b/0x140 [ 834.059106][T16301] ? shmem_alloc_folio+0x2a0/0x2a0 [ 834.064330][T16301] shmem_get_folio_gfp+0x1037/0x2b40 [ 834.069719][T16301] shmem_write_begin+0xf2/0x430 [ 834.074632][T16301] generic_perform_write+0x2fe/0x5c0 [ 834.080013][T16301] ? generic_file_direct_write+0x3e0/0x3e0 [ 834.085894][T16301] ? down_write+0x16e/0x200 [ 834.090470][T16301] ? file_update_time+0x98/0x1a0 [ 834.095469][T16301] shmem_file_write_iter+0xfb/0x120 [ 834.100775][T16301] __kernel_write_iter+0x29f/0x6d0 [ 834.105964][T16301] ? vfs_read+0x990/0x990 [ 834.110384][T16301] ? get_dump_page+0x156/0x200 [ 834.115251][T16301] ? __asan_memset+0x22/0x40 [ 834.119900][T16301] ? iov_iter_bvec+0xd4/0x1b0 [ 834.124650][T16301] dump_user_range+0x418/0x840 [ 834.130351][T16301] ? dump_skip+0x40/0x40 [ 834.134642][T16301] ? dump_emit+0x78/0xe0 [ 834.138968][T16301] ? dump_emit+0xa6/0xe0 [ 834.143275][T16301] ? elf_core_dump+0x2dbb/0x37c0 [ 834.148286][T16301] elf_core_dump+0x320e/0x37c0 [ 834.153140][T16301] ? load_elf_binary+0x2850/0x2850 [ 834.158320][T16301] ? verify_lock_unused+0x140/0x140 [ 834.163579][T16301] ? __lock_acquire+0x7d80/0x7d80 [ 834.168839][T16301] ? mas_next_slot+0x94c/0x980 [ 834.173715][T16301] ? rcu_read_lock_any_held+0xb4/0x140 [ 834.179245][T16301] ? 0xffffffffff600000 [ 834.183465][T16301] do_coredump+0x1791/0x24a0 [ 834.188130][T16301] ? nfs_stat_to_errno+0x170/0x170 [ 834.193322][T16301] ? lock_chain_count+0x20/0x20 [ 834.198239][T16301] ? _raw_spin_unlock_irq+0x23/0x50 [ 834.203502][T16301] ? lockdep_hardirqs_on+0x98/0x150 [ 834.208787][T16301] get_signal+0x10da/0x1390 [ 834.213375][T16301] arch_do_signal_or_restart+0xc2/0x7b0 [ 834.219028][T16301] ? get_sigframe_size+0x20/0x20 [ 834.224027][T16301] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 834.230181][T16301] ? exit_to_user_mode_loop+0x3b/0x110 [ 834.235802][T16301] exit_to_user_mode_loop+0x70/0x110 [ 834.241161][T16301] exit_to_user_mode_prepare+0xee/0x180 [ 834.246797][T16301] irqentry_exit_to_user_mode+0x9/0x30 [ 834.252308][T16301] exc_page_fault+0x8c/0x100 [ 834.256956][T16301] asm_exc_page_fault+0x26/0x30 [ 834.261861][T16301] RIP: 0033:0x0 [ 834.265472][T16301] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 834.272885][T16301] RSP: 002b:00002000000004d8 EFLAGS: 00010217 [ 834.279033][T16301] RAX: 0000000000000000 RBX: 00007fe8ad825fa0 RCX: 00007fe8ad59e159 [ 834.287051][T16301] RDX: 0000000000000000 RSI: 00002000000004d0 RDI: 0000000000a88000 [ 834.295081][T16301] RBP: 00007fe8ad63506b R08: 0000000000000000 R09: 0000000000000000 [ 834.303543][T16301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 834.311558][T16301] R13: 00007fe8ad826038 R14: 00007fe8ad825fa0 R15: 00007fff284faf28 [ 834.319603][T16301] [ 834.428167][T16301] memory: usage 307200kB, limit 307200kB, failcnt 15047 [ 834.541294][T16688] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3395'. [ 834.576509][T16301] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 834.676248][T16301] kmem: usage 159692kB, limit 9007199254740988kB, failcnt 0 [ 834.683674][T16301] Memory cgroup stats for /syz0: [ 834.684065][T16301] cache 150376448 [ 834.692994][T16301] rss 671744 [ 834.700339][T16301] rss_huge 0 [ 834.703738][T16301] shmem 150241280 [ 834.707916][T16301] mapped_file 135168 [ 834.711862][T16301] dirty 135168 [ 834.715382][T16301] writeback 0 [ 834.719030][T16301] workingset_refault_anon 0 [ 834.723590][T16301] workingset_refault_file 32 [ 834.779173][T16301] swap 127995904 [ 834.782809][T16301] pgpgin 160704 [ 834.834283][T16301] pgpgout 123827 [ 834.850356][T16301] pgfault 140359 [ 834.853985][T16301] pgmajfault 11 [ 834.883619][T16301] inactive_anon 144302080 [ 834.893773][T16301] active_anon 6610944 [ 834.916376][T16301] inactive_file 135168 [ 834.932042][T16301] active_file 0 [ 834.942231][T16301] unevictable 0 [ 834.945764][T16301] hierarchical_memory_limit 314572800 [ 835.016028][T16301] hierarchical_memsw_limit 9223372036854771712 [ 835.022521][T16301] total_cache 150376448 [ 835.073417][T16301] total_rss 671744 [ 835.082211][T16301] total_rss_huge 0 [ 835.086598][T16301] total_shmem 150241280 [ 835.090851][T16301] total_mapped_file 135168 [ 835.095442][T16301] total_dirty 135168 [ 835.106454][T16301] total_writeback 0 [ 835.110332][T16301] total_workingset_refault_anon 0 [ 835.115711][T16301] total_workingset_refault_file 32 [ 835.124929][T16301] total_swap 127995904 [ 835.130649][T16301] total_pgpgin 160704 [ 835.135894][T16301] total_pgpgout 123827 [ 835.144649][T16301] total_pgfault 140359 [ 835.152710][T16301] total_pgmajfault 11 [ 835.174493][T16301] total_inactive_anon 144302080 [ 835.191875][T16301] total_active_anon 6610944 [ 835.210941][T16301] total_inactive_file 135168 [ 835.228249][T16301] total_active_file 0 [ 835.241475][T16301] total_unevictable 0 [ 835.253494][T16301] anon_cost 0 [ 835.270832][T16301] file_cost 0 [ 835.280932][T16301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3275,pid=16308,uid=0 [ 835.310299][T16301] Memory cgroup out of memory: Killed process 16308 (syz.0.3275) total-vm:98932kB, anon-rss:1384kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 835.821963][T16705] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3401'. [ 836.556026][T16711] netlink: 'syz.3.3403': attribute type 10 has an invalid length. [ 836.577552][T16711] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3403'. [ 836.597563][T16716] FAULT_INJECTION: forcing a failure. [ 836.597563][T16716] name failslab, interval 1, probability 0, space 0, times 0 [ 836.639842][T16716] CPU: 0 PID: 16716 Comm: syz.1.3405 Not tainted syzkaller #0 [ 836.647420][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 836.657536][T16716] Call Trace: [ 836.660867][T16716] [ 836.663846][T16716] dump_stack_lvl+0x18c/0x250 [ 836.668646][T16716] ? show_regs_print_info+0x20/0x20 [ 836.673913][T16716] ? load_image+0x420/0x420 [ 836.678483][T16716] ? __might_sleep+0xe0/0xe0 [ 836.683138][T16716] ? __lock_acquire+0x7d80/0x7d80 [ 836.688228][T16716] should_fail_ex+0x394/0x4c0 [ 836.692984][T16716] should_failslab+0x9/0x20 [ 836.697559][T16716] slab_pre_alloc_hook+0x59/0x300 [ 836.702672][T16716] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 836.708456][T16716] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 836.714279][T16716] __kmem_cache_alloc_node+0x53/0x250 [ 836.719726][T16716] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 836.725511][T16716] __kmalloc+0xa7/0x240 [ 836.729731][T16716] tomoyo_realpath_from_path+0xe6/0x5c0 [ 836.735426][T16716] ? tomoyo_domain+0xd6/0x120 [ 836.740170][T16716] tomoyo_path_number_perm+0x248/0x5e0 [ 836.745701][T16716] ? tomoyo_path_number_perm+0x217/0x5e0 [ 836.751396][T16716] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 836.756932][T16716] ? ksys_write+0x1d2/0x260 [ 836.761549][T16716] ? __fget_files+0x28/0x460 [ 836.766317][T16716] security_file_ioctl+0x70/0xa0 [ 836.771332][T16716] __se_sys_ioctl+0x48/0x170 [ 836.776082][T16716] do_syscall_64+0x55/0xb0 [ 836.780563][T16716] ? clear_bhb_loop+0x40/0x90 [ 836.785313][T16716] ? clear_bhb_loop+0x40/0x90 [ 836.790060][T16716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.796021][T16716] RIP: 0033:0x7f2bf599e159 [ 836.800490][T16716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.820154][T16716] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.828631][T16716] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 836.836660][T16716] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 836.844696][T16716] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 836.852738][T16716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.860770][T16716] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 836.868815][T16716] [ 836.878725][T16716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.227687][T16722] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3407'. [ 837.716621][T16726] netlink: 'syz.1.3408': attribute type 10 has an invalid length. [ 838.138715][T16734] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3411'. [ 838.417249][T16743] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3413'. [ 838.968591][T16751] FAULT_INJECTION: forcing a failure. [ 838.968591][T16751] name failslab, interval 1, probability 0, space 0, times 0 [ 839.025278][T16751] CPU: 1 PID: 16751 Comm: syz.1.3416 Not tainted syzkaller #0 [ 839.032834][T16751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 839.044078][T16751] Call Trace: [ 839.047496][T16751] [ 839.050842][T16751] dump_stack_lvl+0x18c/0x250 [ 839.055586][T16751] ? sctp_sendmsg+0x1519/0x27b0 [ 839.060530][T16751] ? ___sys_sendmsg+0x2a6/0x360 [ 839.065490][T16751] ? show_regs_print_info+0x20/0x20 [ 839.070945][T16751] ? load_image+0x420/0x420 [ 839.075702][T16751] should_fail_ex+0x394/0x4c0 [ 839.080453][T16751] should_failslab+0x9/0x20 [ 839.085114][T16751] slab_pre_alloc_hook+0x59/0x300 [ 839.090307][T16751] ? sctp_add_bind_addr+0x8c/0x360 [ 839.095494][T16751] __kmem_cache_alloc_node+0x53/0x250 [ 839.100954][T16751] ? sctp_add_bind_addr+0x8c/0x360 [ 839.106127][T16751] kmalloc_trace+0x2a/0xe0 [ 839.110612][T16751] sctp_add_bind_addr+0x8c/0x360 [ 839.115624][T16751] sctp_copy_local_addr_list+0x31b/0x4e0 [ 839.121326][T16751] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 839.127107][T16751] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 839.133237][T16751] ? sctp_v4_is_any+0x35/0x60 [ 839.137971][T16751] ? sctp_copy_one_addr+0x8c/0x350 [ 839.143163][T16751] sctp_bind_addr_copy+0xb3/0x3c0 [ 839.148260][T16751] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 839.154645][T16751] sctp_connect_new_asoc+0x2f9/0x6a0 [ 839.159997][T16751] ? __sctp_connect+0xd80/0xd80 [ 839.164900][T16751] ? __local_bh_enable_ip+0x13a/0x1c0 [ 839.170515][T16751] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 839.176124][T16751] ? security_sctp_bind_connect+0x89/0xb0 [ 839.181933][T16751] sctp_sendmsg+0x1519/0x27b0 [ 839.186695][T16751] ? sctp_getsockopt+0xb60/0xb60 [ 839.191712][T16751] ? aa_af_perm+0x330/0x330 [ 839.196424][T16751] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 839.202898][T16751] ? sock_rps_record_flow+0x19/0x3f0 [ 839.208275][T16751] ? inet_sendmsg+0xce/0x2a0 [ 839.212927][T16751] ? inet_send_prepare+0x250/0x250 [ 839.218097][T16751] ____sys_sendmsg+0x61b/0x980 [ 839.223048][T16751] ? __asan_memset+0x22/0x40 [ 839.227707][T16751] ? __sys_sendmsg_sock+0x30/0x30 [ 839.232792][T16751] ? __import_iovec+0x5f2/0x850 [ 839.237731][T16751] ? import_iovec+0x73/0xa0 [ 839.242301][T16751] ___sys_sendmsg+0x2a6/0x360 [ 839.247040][T16751] ? get_pid_task+0x20/0x1e0 [ 839.251704][T16751] ? __sys_sendmsg+0x2b0/0x2b0 [ 839.256553][T16751] ? __lock_acquire+0x7d80/0x7d80 [ 839.261677][T16751] __se_sys_sendmsg+0x1d0/0x2c0 [ 839.266672][T16751] ? __x64_sys_sendmsg+0x80/0x80 [ 839.271694][T16751] ? lockdep_hardirqs_on+0x98/0x150 [ 839.276952][T16751] do_syscall_64+0x55/0xb0 [ 839.281432][T16751] ? clear_bhb_loop+0x40/0x90 [ 839.286177][T16751] ? clear_bhb_loop+0x40/0x90 [ 839.290922][T16751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.296883][T16751] RIP: 0033:0x7f2bf599e159 [ 839.301363][T16751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.321377][T16751] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 839.329868][T16751] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 839.337906][T16751] RDX: 0000000004000044 RSI: 0000200000000300 RDI: 0000000000000003 [ 839.346028][T16751] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 839.354145][T16751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.362192][T16751] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 839.370246][T16751] [ 839.525505][T16759] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3418'. [ 840.957108][T16788] netlink: 'syz.3.3428': attribute type 2 has an invalid length. [ 841.040399][T16787] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 841.056884][T16787] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3429'. [ 841.134354][T16794] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3430'. [ 841.425982][T16308] syz.0.3275 (16308) used greatest stack depth: 17992 bytes left [ 841.828888][T16807] FAULT_INJECTION: forcing a failure. [ 841.828888][T16807] name failslab, interval 1, probability 0, space 0, times 0 [ 841.880499][T16807] CPU: 1 PID: 16807 Comm: syz.3.3434 Not tainted syzkaller #0 [ 841.888243][T16807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 841.898369][T16807] Call Trace: [ 841.901702][T16807] [ 841.904799][T16807] dump_stack_lvl+0x18c/0x250 [ 841.909550][T16807] ? show_regs_print_info+0x20/0x20 [ 841.914822][T16807] ? load_image+0x420/0x420 [ 841.919414][T16807] ? __might_sleep+0xe0/0xe0 [ 841.924067][T16807] ? __lock_acquire+0x7d80/0x7d80 [ 841.929172][T16807] should_fail_ex+0x394/0x4c0 [ 841.933926][T16807] should_failslab+0x9/0x20 [ 841.938502][T16807] slab_pre_alloc_hook+0x59/0x300 [ 841.943621][T16807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 841.949423][T16807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 841.955332][T16807] __kmem_cache_alloc_node+0x53/0x250 [ 841.960942][T16807] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 841.966744][T16807] __kmalloc+0xa7/0x240 [ 841.971080][T16807] tomoyo_realpath_from_path+0xe6/0x5c0 [ 841.976703][T16807] ? tomoyo_domain+0xd6/0x120 [ 841.981482][T16807] tomoyo_path_number_perm+0x248/0x5e0 [ 841.987216][T16807] ? tomoyo_path_number_perm+0x217/0x5e0 [ 841.992947][T16807] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 841.998485][T16807] ? ksys_write+0x1d2/0x260 [ 842.003104][T16807] ? __fget_files+0x28/0x460 [ 842.007789][T16807] security_file_ioctl+0x70/0xa0 [ 842.012806][T16807] __se_sys_ioctl+0x48/0x170 [ 842.017491][T16807] do_syscall_64+0x55/0xb0 [ 842.021974][T16807] ? clear_bhb_loop+0x40/0x90 [ 842.026713][T16807] ? clear_bhb_loop+0x40/0x90 [ 842.031462][T16807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.039075][T16807] RIP: 0033:0x7f01a459e159 [ 842.043558][T16807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.063227][T16807] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.071710][T16807] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 842.079751][T16807] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 842.087820][T16807] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 842.095935][T16807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.103964][T16807] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 842.112019][T16807] [ 842.153415][T16807] ERROR: Out of memory at tomoyo_realpath_from_path. [ 842.921886][T16821] netlink: 'syz.1.3439': attribute type 10 has an invalid length. [ 842.936201][T16821] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3439'. [ 842.997575][T16826] nr0: port 1(hsr0) entered blocking state [ 843.044564][T16826] nr0: port 1(hsr0) entered disabled state [ 843.060921][T16826] hsr0: entered allmulticast mode [ 843.075686][T16826] hsr_slave_0: entered allmulticast mode [ 843.102838][T16826] hsr_slave_1: entered allmulticast mode [ 843.137976][T16826] hsr0: entered promiscuous mode [ 843.145444][T16826] nr0: port 1(hsr0) entered blocking state [ 843.151862][T16826] nr0: port 1(hsr0) entered forwarding state [ 843.486547][T16836] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3442'. [ 844.518905][T16311] syz.0.3275 (16311) used greatest stack depth: 17512 bytes left [ 844.946508][T16301] syz.0.3275 (16301) used greatest stack depth: 17192 bytes left [ 845.969086][T16869] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3454'. [ 846.026744][T16858] netlink: 'syz.0.3452': attribute type 10 has an invalid length. [ 846.108390][T16858] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3452'. [ 846.724122][T16885] netlink: 'syz.2.3460': attribute type 9 has an invalid length. [ 846.817814][T16885] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3460'. [ 846.852589][T16889] netlink: 'syz.2.3460': attribute type 9 has an invalid length. [ 846.960924][T16889] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3460'. [ 847.244443][T16893] netlink: 'syz.3.3463': attribute type 10 has an invalid length. [ 847.253979][T16893] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3463'. [ 847.607786][T16906] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3466'. [ 847.856712][T16908] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 847.864896][T16908] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3469'. [ 848.203227][T16920] FAULT_INJECTION: forcing a failure. [ 848.203227][T16920] name failslab, interval 1, probability 0, space 0, times 0 [ 848.229749][T16920] CPU: 1 PID: 16920 Comm: syz.1.3474 Not tainted syzkaller #0 [ 848.237394][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 848.247519][T16920] Call Trace: [ 848.250861][T16920] [ 848.253848][T16920] dump_stack_lvl+0x18c/0x250 [ 848.258602][T16920] ? sctp_sendmsg+0x1519/0x27b0 [ 848.263533][T16920] ? ___sys_sendmsg+0x2a6/0x360 [ 848.268459][T16920] ? show_regs_print_info+0x20/0x20 [ 848.273745][T16920] ? load_image+0x420/0x420 [ 848.278353][T16920] should_fail_ex+0x394/0x4c0 [ 848.283123][T16920] should_failslab+0x9/0x20 [ 848.287697][T16920] slab_pre_alloc_hook+0x59/0x300 [ 848.292840][T16920] ? sctp_add_bind_addr+0x8c/0x360 [ 848.298030][T16920] __kmem_cache_alloc_node+0x53/0x250 [ 848.303488][T16920] ? sctp_add_bind_addr+0x8c/0x360 [ 848.308671][T16920] kmalloc_trace+0x2a/0xe0 [ 848.313167][T16920] sctp_add_bind_addr+0x8c/0x360 [ 848.318187][T16920] sctp_copy_local_addr_list+0x31b/0x4e0 [ 848.323894][T16920] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 848.329686][T16920] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 848.335865][T16920] ? sctp_v6_is_any+0x64/0x70 [ 848.340617][T16920] ? sctp_copy_one_addr+0x8c/0x350 [ 848.345843][T16920] sctp_bind_addr_copy+0xb3/0x3c0 [ 848.351193][T16920] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 848.357798][T16920] sctp_connect_new_asoc+0x2f9/0x6a0 [ 848.363266][T16920] ? __sctp_connect+0xd80/0xd80 [ 848.368189][T16920] ? __local_bh_enable_ip+0x13a/0x1c0 [ 848.373653][T16920] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 848.379281][T16920] ? security_sctp_bind_connect+0x89/0xb0 [ 848.385085][T16920] sctp_sendmsg+0x1519/0x27b0 [ 848.389878][T16920] ? sctp_getsockopt+0xb60/0xb60 [ 848.394900][T16920] ? aa_af_perm+0x330/0x330 [ 848.399489][T16920] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 848.405984][T16920] ? sock_rps_record_flow+0x19/0x3f0 [ 848.411386][T16920] ? inet_sendmsg+0xce/0x2a0 [ 848.416047][T16920] ? inet_send_prepare+0x250/0x250 [ 848.421230][T16920] ____sys_sendmsg+0x61b/0x980 [ 848.426099][T16920] ? __sys_sendmsg_sock+0x30/0x30 [ 848.431187][T16920] ? __import_iovec+0x5f2/0x850 [ 848.436130][T16920] ? import_iovec+0x73/0xa0 [ 848.440713][T16920] ___sys_sendmsg+0x2a6/0x360 [ 848.445479][T16920] ? __sys_sendmsg+0x2b0/0x2b0 [ 848.450362][T16920] ? __lock_acquire+0x7d80/0x7d80 [ 848.455521][T16920] __se_sys_sendmsg+0x1d0/0x2c0 [ 848.460467][T16920] ? __x64_sys_sendmsg+0x80/0x80 [ 848.465519][T16920] ? lockdep_hardirqs_on+0x98/0x150 [ 848.470808][T16920] do_syscall_64+0x55/0xb0 [ 848.475815][T16920] ? clear_bhb_loop+0x40/0x90 [ 848.480566][T16920] ? clear_bhb_loop+0x40/0x90 [ 848.485326][T16920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.491295][T16920] RIP: 0033:0x7f2bf599e159 [ 848.495784][T16920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.515632][T16920] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.524119][T16920] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 848.532159][T16920] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 848.540201][T16920] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 848.548242][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 848.556297][T16920] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 848.564371][T16920] [ 848.868515][T16926] netlink: 'syz.1.3476': attribute type 39 has an invalid length. [ 849.310629][T16941] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3478'. [ 850.143641][T16943] netlink: 'syz.2.3477': attribute type 10 has an invalid length. [ 850.151768][T16943] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3477'. [ 850.405463][T16956] FAULT_INJECTION: forcing a failure. [ 850.405463][T16956] name failslab, interval 1, probability 0, space 0, times 0 [ 850.457464][T16956] CPU: 1 PID: 16956 Comm: syz.2.3483 Not tainted syzkaller #0 [ 850.465042][T16956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 850.475167][T16956] Call Trace: [ 850.478485][T16956] [ 850.481443][T16956] dump_stack_lvl+0x18c/0x250 [ 850.486161][T16956] ? sctp_sendmsg+0x1519/0x27b0 [ 850.491052][T16956] ? ___sys_sendmsg+0x2a6/0x360 [ 850.495958][T16956] ? show_regs_print_info+0x20/0x20 [ 850.501191][T16956] ? load_image+0x420/0x420 [ 850.505738][T16956] should_fail_ex+0x394/0x4c0 [ 850.510468][T16956] should_failslab+0x9/0x20 [ 850.515005][T16956] slab_pre_alloc_hook+0x59/0x300 [ 850.520084][T16956] ? sctp_add_bind_addr+0x8c/0x360 [ 850.525232][T16956] __kmem_cache_alloc_node+0x53/0x250 [ 850.530661][T16956] ? sctp_add_bind_addr+0x8c/0x360 [ 850.535829][T16956] kmalloc_trace+0x2a/0xe0 [ 850.540319][T16956] sctp_add_bind_addr+0x8c/0x360 [ 850.545312][T16956] sctp_copy_local_addr_list+0x31b/0x4e0 [ 850.551010][T16956] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 850.556773][T16956] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 850.562893][T16956] ? sctp_v4_is_any+0x35/0x60 [ 850.567648][T16956] ? sctp_copy_one_addr+0x8c/0x350 [ 850.572898][T16956] sctp_bind_addr_copy+0xb3/0x3c0 [ 850.577955][T16956] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 850.584332][T16956] sctp_connect_new_asoc+0x2f9/0x6a0 [ 850.589735][T16956] ? __sctp_connect+0xd80/0xd80 [ 850.594609][T16956] ? __local_bh_enable_ip+0x13a/0x1c0 [ 850.600018][T16956] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 850.605599][T16956] ? security_sctp_bind_connect+0x89/0xb0 [ 850.611354][T16956] sctp_sendmsg+0x1519/0x27b0 [ 850.616086][T16956] ? sctp_getsockopt+0xb60/0xb60 [ 850.621081][T16956] ? aa_af_perm+0x330/0x330 [ 850.625738][T16956] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 850.632223][T16956] ? sock_rps_record_flow+0x19/0x3f0 [ 850.637588][T16956] ? inet_sendmsg+0xce/0x2a0 [ 850.642225][T16956] ? inet_send_prepare+0x250/0x250 [ 850.647391][T16956] ____sys_sendmsg+0x61b/0x980 [ 850.652218][T16956] ? __asan_memset+0x22/0x40 [ 850.656847][T16956] ? __sys_sendmsg_sock+0x30/0x30 [ 850.661942][T16956] ? __import_iovec+0x5f2/0x850 [ 850.666861][T16956] ? import_iovec+0x73/0xa0 [ 850.671422][T16956] ___sys_sendmsg+0x2a6/0x360 [ 850.676142][T16956] ? get_pid_task+0x20/0x1e0 [ 850.680855][T16956] ? __sys_sendmsg+0x2b0/0x2b0 [ 850.685669][T16956] ? __lock_acquire+0x7d80/0x7d80 [ 850.690866][T16956] __se_sys_sendmsg+0x1d0/0x2c0 [ 850.695759][T16956] ? __x64_sys_sendmsg+0x80/0x80 [ 850.700742][T16956] ? lockdep_hardirqs_on+0x98/0x150 [ 850.705980][T16956] do_syscall_64+0x55/0xb0 [ 850.710433][T16956] ? clear_bhb_loop+0x40/0x90 [ 850.715160][T16956] ? clear_bhb_loop+0x40/0x90 [ 850.719879][T16956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.725799][T16956] RIP: 0033:0x7f901fd9e159 [ 850.730236][T16956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.749969][T16956] RSP: 002b:00007f9020d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.758407][T16956] RAX: ffffffffffffffda RBX: 00007f9020025fa0 RCX: 00007f901fd9e159 [ 850.766403][T16956] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 850.774582][T16956] RBP: 00007f9020d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 850.782616][T16956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 850.790717][T16956] R13: 00007f9020026038 R14: 00007f9020025fa0 R15: 00007ffe37f47548 [ 850.798906][T16956] [ 850.814726][T16951] netlink: 'syz.0.3481': attribute type 10 has an invalid length. [ 850.833933][T16951] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3481'. [ 850.881144][T16960] FAULT_INJECTION: forcing a failure. [ 850.881144][T16960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.894807][T16960] CPU: 1 PID: 16960 Comm: syz.3.3488 Not tainted syzkaller #0 [ 850.902332][T16960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 850.912553][T16960] Call Trace: [ 850.915904][T16960] [ 850.918979][T16960] dump_stack_lvl+0x18c/0x250 [ 850.923741][T16960] ? show_regs_print_info+0x20/0x20 [ 850.929048][T16960] ? load_image+0x420/0x420 [ 850.933616][T16960] ? __might_fault+0xaa/0x120 [ 850.938367][T16960] ? __lock_acquire+0x7d80/0x7d80 [ 850.943456][T16960] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 850.949176][T16960] should_fail_ex+0x394/0x4c0 [ 850.953931][T16960] _copy_from_user+0x2f/0xe0 [ 850.958582][T16960] wext_handle_ioctl+0xc8/0x1e0 [ 850.963680][T16960] ? call_commit_handler+0xf0/0xf0 [ 850.968861][T16960] sock_ioctl+0x15d/0x7e0 [ 850.973243][T16960] ? sock_poll+0x3e0/0x3e0 [ 850.977716][T16960] ? bpf_lsm_file_ioctl+0x9/0x10 [ 850.982688][T16960] ? security_file_ioctl+0x80/0xa0 [ 850.987855][T16960] ? sock_poll+0x3e0/0x3e0 [ 850.992320][T16960] __se_sys_ioctl+0xfd/0x170 [ 850.996994][T16960] do_syscall_64+0x55/0xb0 [ 851.001559][T16960] ? clear_bhb_loop+0x40/0x90 [ 851.006285][T16960] ? clear_bhb_loop+0x40/0x90 [ 851.011033][T16960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.016973][T16960] RIP: 0033:0x7f01a459e159 [ 851.021428][T16960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.041080][T16960] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.049544][T16960] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 851.057584][T16960] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 851.065596][T16960] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 851.073606][T16960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.081618][T16960] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 851.089653][T16960] [ 851.407929][T16972] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3491'. [ 851.496515][T16974] netlink: 'syz.1.3493': attribute type 21 has an invalid length. [ 851.504483][T16974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3493'. [ 851.682373][T16980] FAULT_INJECTION: forcing a failure. [ 851.682373][T16980] name failslab, interval 1, probability 0, space 0, times 0 [ 851.736216][T16980] CPU: 0 PID: 16980 Comm: syz.1.3496 Not tainted syzkaller #0 [ 851.743801][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 851.753922][T16980] Call Trace: [ 851.757435][T16980] [ 851.760426][T16980] dump_stack_lvl+0x18c/0x250 [ 851.765199][T16980] ? sctp_sendmsg+0x1519/0x27b0 [ 851.770128][T16980] ? ___sys_sendmsg+0x2a6/0x360 [ 851.775050][T16980] ? show_regs_print_info+0x20/0x20 [ 851.780335][T16980] ? load_image+0x420/0x420 [ 851.784951][T16980] should_fail_ex+0x394/0x4c0 [ 851.789890][T16980] should_failslab+0x9/0x20 [ 851.794472][T16980] slab_pre_alloc_hook+0x59/0x300 [ 851.799581][T16980] ? sctp_add_bind_addr+0x8c/0x360 [ 851.804759][T16980] __kmem_cache_alloc_node+0x53/0x250 [ 851.810202][T16980] ? sctp_add_bind_addr+0x8c/0x360 [ 851.815384][T16980] kmalloc_trace+0x2a/0xe0 [ 851.819871][T16980] sctp_add_bind_addr+0x8c/0x360 [ 851.824886][T16980] sctp_copy_local_addr_list+0x31b/0x4e0 [ 851.830593][T16980] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 851.836475][T16980] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 851.842607][T16980] ? sctp_v6_is_any+0x64/0x70 [ 851.847381][T16980] ? sctp_copy_one_addr+0x8c/0x350 [ 851.852568][T16980] sctp_bind_addr_copy+0xb3/0x3c0 [ 851.857657][T16980] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 851.864062][T16980] sctp_connect_new_asoc+0x2f9/0x6a0 [ 851.869415][T16980] ? __sctp_connect+0xd80/0xd80 [ 851.874356][T16980] ? __local_bh_enable_ip+0x13a/0x1c0 [ 851.879795][T16980] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 851.885385][T16980] ? security_sctp_bind_connect+0x89/0xb0 [ 851.891166][T16980] sctp_sendmsg+0x1519/0x27b0 [ 851.895899][T16980] ? sctp_getsockopt+0xb60/0xb60 [ 851.900879][T16980] ? aa_af_perm+0x330/0x330 [ 851.905423][T16980] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 851.911958][T16980] ? sock_rps_record_flow+0x19/0x3f0 [ 851.917277][T16980] ? inet_sendmsg+0xce/0x2a0 [ 851.922328][T16980] ? inet_send_prepare+0x250/0x250 [ 851.927647][T16980] ____sys_sendmsg+0x61b/0x980 [ 851.932467][T16980] ? __sys_sendmsg_sock+0x30/0x30 [ 851.937560][T16980] ? __import_iovec+0x5f2/0x850 [ 851.942484][T16980] ? import_iovec+0x73/0xa0 [ 851.947034][T16980] ___sys_sendmsg+0x2a6/0x360 [ 851.951758][T16980] ? get_pid_task+0x20/0x1e0 [ 851.956394][T16980] ? __sys_sendmsg+0x2b0/0x2b0 [ 851.961231][T16980] ? __lock_acquire+0x7d80/0x7d80 [ 851.966307][T16980] __se_sys_sendmsg+0x1d0/0x2c0 [ 851.971208][T16980] ? __x64_sys_sendmsg+0x80/0x80 [ 851.976277][T16980] ? lockdep_hardirqs_on+0x98/0x150 [ 851.981606][T16980] do_syscall_64+0x55/0xb0 [ 851.986147][T16980] ? clear_bhb_loop+0x40/0x90 [ 851.991275][T16980] ? clear_bhb_loop+0x40/0x90 [ 851.996173][T16980] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.002102][T16980] RIP: 0033:0x7f2bf599e159 [ 852.006540][T16980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.026182][T16980] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.034632][T16980] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 852.042635][T16980] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 852.050652][T16980] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 852.058646][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.066638][T16980] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 852.074675][T16980] [ 852.152797][T16985] delete_channel: no stack [ 852.357404][T16990] netlink: 'syz.0.3502': attribute type 10 has an invalid length. [ 852.366019][T16990] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3502'. [ 852.461000][T16996] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3505'. [ 852.737641][T17008] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3506'. [ 855.706173][T17019] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3511'. [ 855.734248][T17021] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3513'. [ 855.760465][T17022] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3513'. [ 855.787603][T17021] : renamed from bond_slave_1 (while UP) [ 855.812370][T17022] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.3513'. [ 855.836938][T17021] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.3513'. [ 856.093407][T17037] netlink: 'syz.2.3516': attribute type 10 has an invalid length. [ 856.117072][T17037] bridge0: port 3(team0) entered blocking state [ 856.124118][T17037] bridge0: port 3(team0) entered disabled state [ 856.142971][T17037] team0: entered allmulticast mode [ 856.149017][T17037] team_slave_0: entered allmulticast mode [ 856.156991][T17037] team_slave_1: entered allmulticast mode [ 856.189080][T17037] team0: entered promiscuous mode [ 856.195740][T17037] team_slave_0: entered promiscuous mode [ 856.208909][T17037] team_slave_1: entered promiscuous mode [ 856.286276][T17041] netlink: 'syz.3.3517': attribute type 10 has an invalid length. [ 857.514766][T17051] __nla_validate_parse: 2 callbacks suppressed [ 857.514786][T17051] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3520'. [ 857.839643][T17056] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 857.865927][T17056] netlink: 'syz.3.3522': attribute type 2 has an invalid length. [ 857.900901][T17056] netlink: 'syz.3.3522': attribute type 2 has an invalid length. [ 857.926787][T17056] netlink: 'syz.3.3522': attribute type 3 has an invalid length. [ 857.951211][T17056] netlink: 'syz.3.3522': attribute type 4 has an invalid length. [ 858.000932][T17056] netlink: 'syz.3.3522': attribute type 5 has an invalid length. [ 858.026514][T17056] netlink: 'syz.3.3522': attribute type 6 has an invalid length. [ 858.046342][T17056] netlink: 'syz.3.3522': attribute type 7 has an invalid length. [ 858.065483][T17056] netlink: 'syz.3.3522': attribute type 9 has an invalid length. [ 858.095370][T17056] netlink: 'syz.3.3522': attribute type 10 has an invalid length. [ 858.114043][T17056] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.3522'. [ 858.762887][T17085] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.3529'. [ 859.266867][T17096] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3532'. [ 859.881168][T17106] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3542'. [ 860.339040][T17115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3538'. [ 860.367841][T17115] bridge0: port 3(team0) entered blocking state [ 860.374910][T17115] bridge0: port 3(team0) entered disabled state [ 860.400539][T17115] team0: entered allmulticast mode [ 860.417748][T17115] team_slave_0: entered allmulticast mode [ 860.424231][T17115] team_slave_1: entered allmulticast mode [ 860.434436][T17115] mac80211_hwsim hwsim22 wlan1: entered allmulticast mode [ 860.461782][T17115] team0: entered promiscuous mode [ 860.472423][T17115] team_slave_0: entered promiscuous mode [ 860.487949][T17115] team_slave_1: entered promiscuous mode [ 860.501346][T17115] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 860.672279][T17125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3540'. [ 860.904174][T17134] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3545'. [ 861.505447][T17147] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3547'. [ 862.261556][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3552'. [ 863.025815][T17184] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3559'. [ 863.480343][T17192] FAULT_INJECTION: forcing a failure. [ 863.480343][T17192] name failslab, interval 1, probability 0, space 0, times 0 [ 863.524009][T17192] CPU: 0 PID: 17192 Comm: syz.3.3564 Not tainted syzkaller #0 [ 863.531653][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 863.541777][T17192] Call Trace: [ 863.545104][T17192] [ 863.548085][T17192] dump_stack_lvl+0x18c/0x250 [ 863.552852][T17192] ? show_regs_print_info+0x20/0x20 [ 863.558116][T17192] ? load_image+0x420/0x420 [ 863.562803][T17192] ? __might_sleep+0xe0/0xe0 [ 863.567558][T17192] ? __lock_acquire+0x7d80/0x7d80 [ 863.572647][T17192] should_fail_ex+0x394/0x4c0 [ 863.577400][T17192] should_failslab+0x9/0x20 [ 863.582025][T17192] slab_pre_alloc_hook+0x59/0x300 [ 863.587128][T17192] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 863.592999][T17192] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 863.598789][T17192] __kmem_cache_alloc_node+0x53/0x250 [ 863.604249][T17192] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 863.610042][T17192] __kmalloc+0xa7/0x240 [ 863.614293][T17192] tomoyo_realpath_from_path+0xe6/0x5c0 [ 863.619906][T17192] ? tomoyo_domain+0xd6/0x120 [ 863.624661][T17192] tomoyo_path_number_perm+0x248/0x5e0 [ 863.630194][T17192] ? tomoyo_path_number_perm+0x217/0x5e0 [ 863.636175][T17192] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 863.641701][T17192] ? ksys_write+0x1d2/0x260 [ 863.646306][T17192] ? __fget_files+0x28/0x460 [ 863.650973][T17192] security_file_ioctl+0x70/0xa0 [ 863.655982][T17192] __se_sys_ioctl+0x48/0x170 [ 863.660636][T17192] do_syscall_64+0x55/0xb0 [ 863.665110][T17192] ? clear_bhb_loop+0x40/0x90 [ 863.669836][T17192] ? clear_bhb_loop+0x40/0x90 [ 863.674567][T17192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.681303][T17192] RIP: 0033:0x7f01a459e159 [ 863.685873][T17192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.706407][T17192] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 863.715138][T17192] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 863.723147][T17192] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 863.731162][T17192] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 863.739169][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.747345][T17192] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 863.755376][T17192] [ 863.881810][T17192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 864.185869][T17209] validate_nla: 7 callbacks suppressed [ 864.185887][T17209] netlink: 'syz.0.3568': attribute type 3 has an invalid length. [ 864.200572][T17209] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3568'. [ 864.217383][T17210] Q6\bY4: renamed from lo (while UP) [ 864.710491][T17225] netlink: 'syz.3.3575': attribute type 21 has an invalid length. [ 864.771363][T17226] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3574'. [ 864.783775][T17225] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.3575'. [ 865.002747][T17224] netlink: 'syz.3.3575': attribute type 29 has an invalid length. [ 865.382906][T17229] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3576'. [ 866.993561][T17262] netlink: 'syz.0.3586': attribute type 21 has an invalid length. [ 867.019768][T17262] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3586'. [ 867.254444][T17270] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3587'. [ 867.359580][T17268] netlink: 'syz.0.3586': attribute type 29 has an invalid length. [ 868.003773][T17282] netlink: 'syz.0.3590': attribute type 10 has an invalid length. [ 868.012975][T17282] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3590'. [ 868.572867][T17290] netlink: 'syz.2.3594': attribute type 2 has an invalid length. [ 868.604621][T17290] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.3594'. [ 869.048400][T17308] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3597'. [ 869.319061][T17315] netlink: 'syz.0.3601': attribute type 10 has an invalid length. [ 869.338713][T17315] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3601'. [ 869.965631][T17327] netlink: 'syz.0.3613': attribute type 10 has an invalid length. [ 869.986460][T17327] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3613'. [ 870.482479][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.502354][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.686264][T17344] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3611'. [ 870.813128][T17349] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3612'. [ 872.658559][T17361] netlink: 'syz.2.3617': attribute type 10 has an invalid length. [ 872.666768][T17361] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3617'. [ 872.712637][T17366] netlink: 'syz.3.3618': attribute type 2 has an invalid length. [ 872.726395][T17366] netlink: 'syz.3.3618': attribute type 11 has an invalid length. [ 872.737287][T17366] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3618'. [ 873.566116][T17382] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3625'. [ 874.127904][T17395] netlink: 'syz.1.3627': attribute type 3 has an invalid length. [ 874.142371][T17395] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3627'. [ 874.285133][T17399] netlink: 'syz.3.3629': attribute type 10 has an invalid length. [ 874.339158][T17399] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3629'. [ 874.443793][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3630'. [ 874.472780][T17410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3630'. [ 874.499141][T17405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3630'. [ 874.577344][T17405] netlink: 'syz.1.3630': attribute type 5 has an invalid length. [ 874.585156][T17405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3630'. [ 874.708664][T17412] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.364589][T17436] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3641'. [ 877.192564][T17441] delete_channel: no stack [ 877.541999][T17463] netlink: 'syz.1.3650': attribute type 10 has an invalid length. [ 877.562499][T17463] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3650'. [ 881.328310][T17490] delete_channel: no stack [ 881.339997][T17517] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3667'. [ 882.352333][T17532] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3672'. [ 885.674847][T17546] FAULT_INJECTION: forcing a failure. [ 885.674847][T17546] name failslab, interval 1, probability 0, space 0, times 0 [ 885.706355][T17546] CPU: 0 PID: 17546 Comm: syz.2.3677 Not tainted syzkaller #0 [ 885.713913][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 885.724020][T17546] Call Trace: [ 885.727327][T17546] [ 885.730289][T17546] dump_stack_lvl+0x18c/0x250 [ 885.735020][T17546] ? show_regs_print_info+0x20/0x20 [ 885.740255][T17546] ? load_image+0x420/0x420 [ 885.744789][T17546] ? __might_sleep+0xe0/0xe0 [ 885.749408][T17546] ? __lock_acquire+0x7d80/0x7d80 [ 885.754502][T17546] should_fail_ex+0x394/0x4c0 [ 885.759224][T17546] should_failslab+0x9/0x20 [ 885.763765][T17546] slab_pre_alloc_hook+0x59/0x300 [ 885.768826][T17546] ? __lock_acquire+0x7d80/0x7d80 [ 885.773888][T17546] kmem_cache_alloc_node+0x5e/0x310 [ 885.779122][T17546] ? __alloc_skb+0x103/0x2c0 [ 885.783752][T17546] __alloc_skb+0x103/0x2c0 [ 885.788222][T17546] netlink_sendmsg+0x66a/0xbf0 [ 885.793043][T17546] ? netlink_getsockopt+0x590/0x590 [ 885.798293][T17546] ? apparmor_socket_sendmsg+0x170/0x330 [ 885.803977][T17546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 885.809299][T17546] ? security_socket_sendmsg+0x80/0xa0 [ 885.814785][T17546] ? netlink_getsockopt+0x590/0x590 [ 885.820018][T17546] ____sys_sendmsg+0x61b/0x980 [ 885.824826][T17546] ? __asan_memset+0x22/0x40 [ 885.829452][T17546] ? __sys_sendmsg_sock+0x30/0x30 [ 885.834531][T17546] ? __import_iovec+0x5f2/0x850 [ 885.839452][T17546] ? import_iovec+0x73/0xa0 [ 885.844012][T17546] ___sys_sendmsg+0x2a6/0x360 [ 885.848756][T17546] ? __sys_sendmsg+0x2b0/0x2b0 [ 885.853597][T17546] ? __lock_acquire+0x7d80/0x7d80 [ 885.858689][T17546] __se_sys_sendmsg+0x1d0/0x2c0 [ 885.863670][T17546] ? __x64_sys_sendmsg+0x80/0x80 [ 885.868671][T17546] ? lockdep_hardirqs_on+0x98/0x150 [ 885.873926][T17546] do_syscall_64+0x55/0xb0 [ 885.878383][T17546] ? clear_bhb_loop+0x40/0x90 [ 885.883109][T17546] ? clear_bhb_loop+0x40/0x90 [ 885.887862][T17546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.893814][T17546] RIP: 0033:0x7f901fd9e159 [ 885.898256][T17546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.917891][T17546] RSP: 002b:00007f9020d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.926341][T17546] RAX: ffffffffffffffda RBX: 00007f9020025fa0 RCX: 00007f901fd9e159 [ 885.934340][T17546] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 885.942341][T17546] RBP: 00007f9020d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 885.950347][T17546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.958345][T17546] R13: 00007f9020026038 R14: 00007f9020025fa0 R15: 00007ffe37f47548 [ 885.966394][T17546] [ 886.084948][T17544] FAULT_INJECTION: forcing a failure. [ 886.084948][T17544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.099280][T17544] CPU: 0 PID: 17544 Comm: syz.1.3676 Not tainted syzkaller #0 [ 886.106800][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.116900][T17544] Call Trace: [ 886.120225][T17544] [ 886.123205][T17544] dump_stack_lvl+0x18c/0x250 [ 886.127956][T17544] ? show_regs_print_info+0x20/0x20 [ 886.133213][T17544] ? load_image+0x420/0x420 [ 886.137770][T17544] ? __lock_acquire+0x7d80/0x7d80 [ 886.142862][T17544] should_fail_ex+0x394/0x4c0 [ 886.147608][T17544] _copy_from_user+0x2f/0xe0 [ 886.152280][T17544] bpf_prog_test_run_skb+0x267/0x18f0 [ 886.157716][T17544] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.163933][T17544] ? lockdep_hardirqs_on+0x98/0x150 [ 886.169220][T17544] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 886.175452][T17544] ? cpu_online+0x60/0x60 [ 886.179844][T17544] bpf_prog_test_run+0x31f/0x390 [ 886.184856][T17544] __sys_bpf+0x49d/0x890 [ 886.189151][T17544] ? read_tsc+0x9/0x20 [ 886.193276][T17544] ? bpf_link_show_fdinfo+0x560/0x560 [ 886.198724][T17544] ? lock_chain_count+0x20/0x20 [ 886.201196][T17542] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3678'. [ 886.203607][T17544] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 886.203652][T17544] __x64_sys_bpf+0x7c/0x90 [ 886.203680][T17544] do_syscall_64+0x55/0xb0 [ 886.203711][T17544] ? clear_bhb_loop+0x40/0x90 [ 886.203742][T17544] ? clear_bhb_loop+0x40/0x90 [ 886.203775][T17544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.203806][T17544] RIP: 0033:0x7f2bf599e159 [ 886.203828][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.203848][T17544] RSP: 002b:00007f2bf3bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 886.203873][T17544] RAX: ffffffffffffffda RBX: 00007f2bf5c25fa0 RCX: 00007f2bf599e159 [ 886.203891][T17544] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 886.203905][T17544] RBP: 00007f2bf3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 886.203920][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.203934][T17544] R13: 00007f2bf5c26038 R14: 00007f2bf5c25fa0 R15: 00007ffebf273ed8 [ 886.203969][T17544] [ 886.819075][T17565] netlink: 'syz.0.3685': attribute type 10 has an invalid length. [ 886.840612][T17565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3685'. [ 886.860782][T17565] dummy0: entered promiscuous mode [ 886.865973][T17565] dummy0: entered allmulticast mode [ 886.889824][T17565] bridge0: port 4(dummy0) entered blocking state [ 886.918978][T17565] bridge0: port 4(dummy0) entered disabled state [ 887.064870][T17562] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3684'. [ 887.251120][T17574] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3686'. [ 888.067181][T17600] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3692'. [ 888.663780][T17613] FAULT_INJECTION: forcing a failure. [ 888.663780][T17613] name failslab, interval 1, probability 0, space 0, times 0 [ 888.676807][T17613] CPU: 0 PID: 17613 Comm: syz.2.3700 Not tainted syzkaller #0 [ 888.684333][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 888.694482][T17613] Call Trace: [ 888.697806][T17613] [ 888.700786][T17613] dump_stack_lvl+0x18c/0x250 [ 888.705529][T17613] ? show_regs_print_info+0x20/0x20 [ 888.710785][T17613] ? load_image+0x420/0x420 [ 888.715356][T17613] ? __might_sleep+0xe0/0xe0 [ 888.720001][T17613] ? __lock_acquire+0x7d80/0x7d80 [ 888.725088][T17613] should_fail_ex+0x394/0x4c0 [ 888.729835][T17613] should_failslab+0x9/0x20 [ 888.734405][T17613] slab_pre_alloc_hook+0x59/0x300 [ 888.739488][T17613] ? genl_family_rcv_msg_doit+0x268/0x310 [ 888.745267][T17613] kmem_cache_alloc_node+0x5e/0x310 [ 888.750529][T17613] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 888.756216][T17613] ? __alloc_skb+0x103/0x2c0 [ 888.760873][T17613] __alloc_skb+0x103/0x2c0 [ 888.765362][T17613] netlink_ack+0x377/0x1160 [ 888.769939][T17613] ? genl_rcv_msg+0x27a/0x7a0 [ 888.774687][T17613] ? genl_bind+0x360/0x360 [ 888.779159][T17613] ? netlink_dump+0xec0/0xec0 [ 888.783892][T17613] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 888.790538][T17613] ? ref_tracker_free+0x686/0x830 [ 888.795633][T17613] netlink_rcv_skb+0x2b3/0x4c0 [ 888.800455][T17613] ? genl_bind+0x360/0x360 [ 888.804938][T17613] ? netlink_ack+0x1160/0x1160 [ 888.809793][T17613] ? __lock_acquire+0x7d80/0x7d80 [ 888.814896][T17613] ? down_read+0x1ac/0x2e0 [ 888.819367][T17613] genl_rcv+0x28/0x40 [ 888.823408][T17613] netlink_unicast+0x7b1/0x930 [ 888.828235][T17613] netlink_sendmsg+0x8d0/0xbf0 [ 888.833092][T17613] ? netlink_getsockopt+0x590/0x590 [ 888.838356][T17613] ? apparmor_socket_sendmsg+0x170/0x330 [ 888.844139][T17613] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 888.849515][T17613] ? security_socket_sendmsg+0x80/0xa0 [ 888.855026][T17613] ? netlink_getsockopt+0x590/0x590 [ 888.860280][T17613] ____sys_sendmsg+0x61b/0x980 [ 888.865110][T17613] ? __asan_memset+0x22/0x40 [ 888.869759][T17613] ? __sys_sendmsg_sock+0x30/0x30 [ 888.874840][T17613] ? __import_iovec+0x5f2/0x850 [ 888.879773][T17613] ? import_iovec+0x73/0xa0 [ 888.884369][T17613] ___sys_sendmsg+0x2a6/0x360 [ 888.889109][T17613] ? get_pid_task+0x20/0x1e0 [ 888.893768][T17613] ? __sys_sendmsg+0x2b0/0x2b0 [ 888.898623][T17613] ? __lock_acquire+0x7d80/0x7d80 [ 888.903736][T17613] __se_sys_sendmsg+0x1d0/0x2c0 [ 888.908645][T17613] ? __x64_sys_sendmsg+0x80/0x80 [ 888.913679][T17613] ? lockdep_hardirqs_on+0x98/0x150 [ 888.918938][T17613] do_syscall_64+0x55/0xb0 [ 888.923414][T17613] ? clear_bhb_loop+0x40/0x90 [ 888.928243][T17613] ? clear_bhb_loop+0x40/0x90 [ 888.933020][T17613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.938983][T17613] RIP: 0033:0x7f901fd9e159 [ 888.943453][T17613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.963471][T17613] RSP: 002b:00007f9020d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.972032][T17613] RAX: ffffffffffffffda RBX: 00007f9020025fa0 RCX: 00007f901fd9e159 [ 888.980092][T17613] RDX: 000000002000d084 RSI: 0000200000000000 RDI: 0000000000000004 [ 888.988117][T17613] RBP: 00007f9020d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 888.996148][T17613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.004170][T17613] R13: 00007f9020026038 R14: 00007f9020025fa0 R15: 00007ffe37f47548 [ 889.012227][T17613] [ 889.030862][T17617] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3702'. [ 889.032598][T17598] delete_channel: no stack [ 889.124727][T17621] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3702'. [ 889.232918][T17618] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3701'. [ 889.623129][T17640] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3706'. [ 890.014147][T17650] netlink: 'syz.1.3711': attribute type 2 has an invalid length. [ 890.030779][T17650] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3711'. [ 890.341119][T17642] delete_channel: no stack [ 890.642104][T17658] netlink: 'syz.2.3712': attribute type 10 has an invalid length. [ 890.665395][T17658] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3712'. [ 890.862962][T17662] netlink: 'syz.3.3715': attribute type 10 has an invalid length. [ 892.548765][T17690] __nla_validate_parse: 1 callbacks suppressed [ 892.548787][T17690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3724'. [ 892.760077][T17693] netlink: 'syz.3.3726': attribute type 10 has an invalid length. [ 892.769303][T17693] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3726'. [ 892.985853][T17704] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3728'. [ 893.206002][T17711] FAULT_INJECTION: forcing a failure. [ 893.206002][T17711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.238029][T17711] CPU: 1 PID: 17711 Comm: syz.0.3733 Not tainted syzkaller #0 [ 893.245597][T17711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 893.255729][T17711] Call Trace: [ 893.259075][T17711] [ 893.262087][T17711] dump_stack_lvl+0x18c/0x250 [ 893.266896][T17711] ? show_regs_print_info+0x20/0x20 [ 893.272181][T17711] ? load_image+0x420/0x420 [ 893.276772][T17711] ? __might_fault+0xaa/0x120 [ 893.281539][T17711] ? __lock_acquire+0x7d80/0x7d80 [ 893.286635][T17711] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 893.292377][T17711] should_fail_ex+0x394/0x4c0 [ 893.297160][T17711] _copy_from_user+0x2f/0xe0 [ 893.301847][T17711] wext_handle_ioctl+0xc8/0x1e0 [ 893.306825][T17711] ? call_commit_handler+0xf0/0xf0 [ 893.312083][T17711] sock_ioctl+0x15d/0x7e0 [ 893.316510][T17711] ? sock_poll+0x3e0/0x3e0 [ 893.321070][T17711] ? bpf_lsm_file_ioctl+0x9/0x10 [ 893.326082][T17711] ? security_file_ioctl+0x80/0xa0 [ 893.331279][T17711] ? sock_poll+0x3e0/0x3e0 [ 893.335779][T17711] __se_sys_ioctl+0xfd/0x170 [ 893.340448][T17711] do_syscall_64+0x55/0xb0 [ 893.344913][T17711] ? clear_bhb_loop+0x40/0x90 [ 893.349637][T17711] ? clear_bhb_loop+0x40/0x90 [ 893.354375][T17711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 893.360318][T17711] RIP: 0033:0x7fe8ad59e159 [ 893.364786][T17711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.384440][T17711] RSP: 002b:00007fe8ae450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.392905][T17711] RAX: ffffffffffffffda RBX: 00007fe8ad825fa0 RCX: 00007fe8ad59e159 [ 893.400938][T17711] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005 [ 893.409001][T17711] RBP: 00007fe8ae450090 R08: 0000000000000000 R09: 0000000000000000 [ 893.417191][T17711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.425208][T17711] R13: 00007fe8ad826038 R14: 00007fe8ad825fa0 R15: 00007fff284faf28 [ 893.433265][T17711] [ 893.962529][T17726] mac80211_hwsim hwsim22 ..c: renamed from wlan1 (while UP) [ 894.107262][T17714] delete_channel: no stack [ 894.907827][T17737] netlink: 'syz.1.3740': attribute type 10 has an invalid length. [ 894.930178][T17737] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3740'. [ 895.164284][T17751] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3744'. [ 895.289751][T17734] delete_channel: no stack [ 895.620249][T17750] delete_channel: no stack [ 896.417174][T17778] netlink: 'syz.0.3754': attribute type 10 has an invalid length. [ 896.425657][T17778] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3754'. [ 896.455730][T17767] delete_channel: no stack [ 896.684897][T17774] delete_channel: no stack [ 897.721842][T17808] delete_channel: no stack [ 898.638869][T17827] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 898.666289][T17827] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3767'. [ 899.042212][T17825] delete_channel: no stack [ 899.298065][T17838] FAULT_INJECTION: forcing a failure. [ 899.298065][T17838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.324593][T17836] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 899.348413][T17836] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.3770'. [ 899.361533][T17838] CPU: 1 PID: 17838 Comm: syz.3.3771 Not tainted syzkaller #0 [ 899.369066][T17838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 899.379323][T17838] Call Trace: [ 899.382653][T17838] [ 899.385624][T17838] dump_stack_lvl+0x18c/0x250 [ 899.390356][T17838] ? show_regs_print_info+0x20/0x20 [ 899.395600][T17838] ? load_image+0x420/0x420 [ 899.400154][T17838] ? __lock_acquire+0x7d80/0x7d80 [ 899.405225][T17838] ? snprintf+0xe9/0x140 [ 899.409516][T17838] should_fail_ex+0x394/0x4c0 [ 899.414255][T17838] _copy_to_user+0x2f/0xa0 [ 899.418723][T17838] simple_read_from_buffer+0xe7/0x150 [ 899.424151][T17838] proc_fail_nth_read+0x1e8/0x260 [ 899.429256][T17838] ? proc_fault_inject_write+0x360/0x360 [ 899.434962][T17838] ? fsnotify_perm+0x271/0x5e0 [ 899.439785][T17838] ? proc_fault_inject_write+0x360/0x360 [ 899.445527][T17838] vfs_read+0x298/0x990 [ 899.449855][T17838] ? kernel_read+0x1e0/0x1e0 [ 899.454553][T17838] ? __fget_files+0x28/0x460 [ 899.459206][T17838] ? __fget_files+0x3fc/0x460 [ 899.463980][T17838] ? __fdget_pos+0x2a3/0x330 [ 899.468620][T17838] ? ksys_read+0x74/0x260 [ 899.473017][T17838] ksys_read+0x151/0x260 [ 899.477320][T17838] ? vfs_write+0x9a0/0x9a0 [ 899.481833][T17838] ? lockdep_hardirqs_on+0x98/0x150 [ 899.487086][T17838] do_syscall_64+0x55/0xb0 [ 899.491558][T17838] ? clear_bhb_loop+0x40/0x90 [ 899.496285][T17838] ? clear_bhb_loop+0x40/0x90 [ 899.501015][T17838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.506966][T17838] RIP: 0033:0x7f01a455e98e [ 899.511421][T17838] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 899.531106][T17838] RSP: 002b:00007f01a5512fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 899.539567][T17838] RAX: ffffffffffffffda RBX: 00007f01a55136c0 RCX: 00007f01a455e98e [ 899.547584][T17838] RDX: 000000000000000f RSI: 00007f01a55130a0 RDI: 0000000000000008 [ 899.555604][T17838] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 899.563626][T17838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.571640][T17838] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 899.579676][T17838] [ 900.304176][T17856] netlink: 'syz.3.3777': attribute type 10 has an invalid length. [ 900.314558][T17856] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3777'. [ 900.718402][T17867] netlink: 'syz.2.3782': attribute type 2 has an invalid length. [ 900.736892][T17867] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3782'. [ 902.432480][T17884] netlink: 'syz.1.3788': attribute type 10 has an invalid length. [ 902.496802][T17884] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3788'. [ 902.661286][T17891] FAULT_INJECTION: forcing a failure. [ 902.661286][T17891] name failslab, interval 1, probability 0, space 0, times 0 [ 902.696434][T17891] CPU: 0 PID: 17891 Comm: syz.3.3790 Not tainted syzkaller #0 [ 902.703982][T17891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 902.714091][T17891] Call Trace: [ 902.717418][T17891] [ 902.720419][T17891] dump_stack_lvl+0x18c/0x250 [ 902.725178][T17891] ? sctp_sendmsg+0x1519/0x27b0 [ 902.730092][T17891] ? ___sys_sendmsg+0x2a6/0x360 [ 902.734991][T17891] ? show_regs_print_info+0x20/0x20 [ 902.740239][T17891] ? load_image+0x420/0x420 [ 902.744812][T17891] should_fail_ex+0x394/0x4c0 [ 902.749558][T17891] should_failslab+0x9/0x20 [ 902.754161][T17891] slab_pre_alloc_hook+0x59/0x300 [ 902.759254][T17891] ? sctp_add_bind_addr+0x8c/0x360 [ 902.764428][T17891] __kmem_cache_alloc_node+0x53/0x250 [ 902.769869][T17891] ? sctp_add_bind_addr+0x8c/0x360 [ 902.775072][T17891] kmalloc_trace+0x2a/0xe0 [ 902.779545][T17891] sctp_add_bind_addr+0x8c/0x360 [ 902.784551][T17891] sctp_copy_local_addr_list+0x31b/0x4e0 [ 902.790272][T17891] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 902.796054][T17891] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 902.802188][T17891] ? sctp_v4_is_any+0x35/0x60 [ 902.806923][T17891] ? sctp_copy_one_addr+0x8c/0x350 [ 902.812102][T17891] sctp_bind_addr_copy+0xb3/0x3c0 [ 902.817192][T17891] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 902.823578][T17891] sctp_connect_new_asoc+0x2f9/0x6a0 [ 902.828921][T17891] ? __sctp_connect+0xd80/0xd80 [ 902.833814][T17891] ? __local_bh_enable_ip+0x13a/0x1c0 [ 902.839241][T17891] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 902.844839][T17891] ? security_sctp_bind_connect+0x89/0xb0 [ 902.850613][T17891] sctp_sendmsg+0x1519/0x27b0 [ 902.855369][T17891] ? sctp_getsockopt+0xb60/0xb60 [ 902.860372][T17891] ? aa_af_perm+0x330/0x330 [ 902.864941][T17891] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 902.871408][T17891] ? sock_rps_record_flow+0x19/0x3f0 [ 902.876735][T17891] ? inet_sendmsg+0xce/0x2a0 [ 902.881372][T17891] ? inet_send_prepare+0x250/0x250 [ 902.886529][T17891] ____sys_sendmsg+0x61b/0x980 [ 902.891356][T17891] ? __asan_memset+0x22/0x40 [ 902.896018][T17891] ? __sys_sendmsg_sock+0x30/0x30 [ 902.901104][T17891] ? __import_iovec+0x5f2/0x850 [ 902.906024][T17891] ? import_iovec+0x73/0xa0 [ 902.910606][T17891] ___sys_sendmsg+0x2a6/0x360 [ 902.915337][T17891] ? get_pid_task+0x20/0x1e0 [ 902.920004][T17891] ? __sys_sendmsg+0x2b0/0x2b0 [ 902.924856][T17891] ? __lock_acquire+0x7d80/0x7d80 [ 902.929965][T17891] __se_sys_sendmsg+0x1d0/0x2c0 [ 902.934898][T17891] ? __x64_sys_sendmsg+0x80/0x80 [ 902.939920][T17891] ? lockdep_hardirqs_on+0x98/0x150 [ 902.945209][T17891] do_syscall_64+0x55/0xb0 [ 902.949789][T17891] ? clear_bhb_loop+0x40/0x90 [ 902.954606][T17891] ? clear_bhb_loop+0x40/0x90 [ 902.959339][T17891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 902.965292][T17891] RIP: 0033:0x7f01a459e159 [ 902.969775][T17891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.989437][T17891] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.997901][T17891] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 903.005926][T17891] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 903.013960][T17891] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 903.021974][T17891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 903.029989][T17891] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 903.038021][T17891] [ 904.386678][T17932] FAULT_INJECTION: forcing a failure. [ 904.386678][T17932] name failslab, interval 1, probability 0, space 0, times 0 [ 904.399851][T17932] CPU: 0 PID: 17932 Comm: syz.0.3808 Not tainted syzkaller #0 [ 904.407378][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 904.417501][T17932] Call Trace: [ 904.420842][T17932] [ 904.423838][T17932] dump_stack_lvl+0x18c/0x250 [ 904.428761][T17932] ? sctp_sendmsg+0x1519/0x27b0 [ 904.433691][T17932] ? ___sys_sendmsg+0x2a6/0x360 [ 904.438626][T17932] ? show_regs_print_info+0x20/0x20 [ 904.443904][T17932] ? load_image+0x420/0x420 [ 904.445996][T17909] delete_channel: no stack [ 904.448530][T17932] should_fail_ex+0x394/0x4c0 [ 904.457745][T17932] should_failslab+0x9/0x20 [ 904.462408][T17932] slab_pre_alloc_hook+0x59/0x300 [ 904.467504][T17932] ? sctp_add_bind_addr+0x8c/0x360 [ 904.472712][T17932] __kmem_cache_alloc_node+0x53/0x250 [ 904.478168][T17932] ? sctp_add_bind_addr+0x8c/0x360 [ 904.483359][T17932] kmalloc_trace+0x2a/0xe0 [ 904.486183][T17930] netlink: 'syz.1.3807': attribute type 25 has an invalid length. [ 904.487829][T17932] sctp_add_bind_addr+0x8c/0x360 [ 904.496116][T17930] netlink: 'syz.1.3807': attribute type 10 has an invalid length. [ 904.500694][T17932] sctp_copy_local_addr_list+0x31b/0x4e0 [ 904.514241][T17932] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 904.520035][T17932] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 904.526190][T17932] ? sctp_v6_is_any+0x64/0x70 [ 904.530942][T17932] ? sctp_copy_one_addr+0x8c/0x350 [ 904.536128][T17932] sctp_bind_addr_copy+0xb3/0x3c0 [ 904.541186][T17932] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 904.547553][T17932] sctp_connect_new_asoc+0x2f9/0x6a0 [ 904.552865][T17932] ? __sctp_connect+0xd80/0xd80 [ 904.557753][T17932] ? __local_bh_enable_ip+0x13a/0x1c0 [ 904.563208][T17932] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 904.568831][T17932] ? security_sctp_bind_connect+0x89/0xb0 [ 904.574624][T17932] sctp_sendmsg+0x1519/0x27b0 [ 904.579410][T17932] ? sctp_getsockopt+0xb60/0xb60 [ 904.584395][T17932] ? aa_af_perm+0x330/0x330 [ 904.588938][T17932] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 904.595475][T17932] ? sock_rps_record_flow+0x19/0x3f0 [ 904.600801][T17932] ? inet_sendmsg+0xce/0x2a0 [ 904.605428][T17932] ? inet_send_prepare+0x250/0x250 [ 904.610598][T17932] ____sys_sendmsg+0x61b/0x980 [ 904.615494][T17932] ? __asan_memset+0x22/0x40 [ 904.620172][T17932] ? __sys_sendmsg_sock+0x30/0x30 [ 904.625267][T17932] ? __import_iovec+0x5f2/0x850 [ 904.630183][T17932] ? import_iovec+0x73/0xa0 [ 904.634739][T17932] ___sys_sendmsg+0x2a6/0x360 [ 904.639468][T17932] ? __sys_sendmsg+0x2b0/0x2b0 [ 904.644310][T17932] ? __lock_acquire+0x7d80/0x7d80 [ 904.649453][T17932] __se_sys_sendmsg+0x1d0/0x2c0 [ 904.654350][T17932] ? __x64_sys_sendmsg+0x80/0x80 [ 904.659394][T17932] ? lockdep_hardirqs_on+0x98/0x150 [ 904.664682][T17932] do_syscall_64+0x55/0xb0 [ 904.669225][T17932] ? clear_bhb_loop+0x40/0x90 [ 904.673980][T17932] ? clear_bhb_loop+0x40/0x90 [ 904.678727][T17932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.684658][T17932] RIP: 0033:0x7fe8ad59e159 [ 904.689188][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.708855][T17932] RSP: 002b:00007fe8ae450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.717353][T17932] RAX: ffffffffffffffda RBX: 00007fe8ad825fa0 RCX: 00007fe8ad59e159 [ 904.725372][T17932] RDX: 0000000030008041 RSI: 0000200000002dc0 RDI: 0000000000000006 [ 904.733381][T17932] RBP: 00007fe8ae450090 R08: 0000000000000000 R09: 0000000000000000 [ 904.741384][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.749398][T17932] R13: 00007fe8ad826038 R14: 00007fe8ad825fa0 R15: 00007fff284faf28 [ 904.757510][T17932] [ 905.047912][T17945] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3809'. [ 905.920761][T17962] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3815'. [ 906.082887][T17967] syzkaller0: entered promiscuous mode [ 906.093793][T17967] syzkaller0: entered allmulticast mode [ 906.487572][T17984] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3823'. [ 906.633538][T17987] netlink: 'syz.0.3825': attribute type 10 has an invalid length. [ 906.651619][T17987] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3825'. [ 906.841025][T17993] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3828'. [ 907.466492][T17999] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3830'. [ 908.397481][T18019] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3835'. [ 908.636550][T18030] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3836'. [ 909.064907][T18033] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 909.076496][T18033] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3840'. [ 910.742391][T18064] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3848'. [ 911.666979][T18069] syz.3.3852 (18069) used obsolete PPPIOCDETACH ioctl [ 911.847609][T18056] delete_channel: no stack [ 912.977275][T18094] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3859'. [ 913.227205][T18096] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3860'. [ 913.371705][T18084] delete_channel: no stack [ 913.981425][T18100] delete_channel: no stack [ 914.106284][T18113] netlink: 'syz.3.3867': attribute type 46 has an invalid length. [ 914.196574][T18113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3867'. [ 914.255538][T18113] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3867'. [ 914.302260][T18113] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 914.793417][T18108] delete_channel: no stack [ 915.087402][T18134] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3872'. [ 915.735986][T18153] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 915.745420][T18153] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3882'. [ 915.790510][T18151] netlink: 'syz.1.3881': attribute type 10 has an invalid length. [ 915.807238][T18151] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3881'. [ 916.789092][T18155] delete_channel: no stack [ 916.925722][T18179] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3890'. [ 916.976540][T18179] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 917.553660][T18178] delete_channel: no stack [ 917.563437][T18194] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3892'. [ 917.605768][T18195] netlink: 'syz.3.3894': attribute type 10 has an invalid length. [ 917.637240][T18195] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3894'. [ 917.865224][T18188] delete_channel: no stack [ 917.973139][T18200] FAULT_INJECTION: forcing a failure. [ 917.973139][T18200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.014428][T18200] CPU: 1 PID: 18200 Comm: syz.0.3897 Not tainted syzkaller #0 [ 918.021984][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 918.032097][T18200] Call Trace: [ 918.035519][T18200] [ 918.038500][T18200] dump_stack_lvl+0x18c/0x250 [ 918.043252][T18200] ? show_regs_print_info+0x20/0x20 [ 918.048537][T18200] ? load_image+0x420/0x420 [ 918.053101][T18200] ? __might_fault+0xaa/0x120 [ 918.057844][T18200] ? __lock_acquire+0x7d80/0x7d80 [ 918.062922][T18200] ? __virt_addr_valid+0x10c/0x380 [ 918.068093][T18200] should_fail_ex+0x394/0x4c0 [ 918.072839][T18200] _copy_to_user+0x2f/0xa0 [ 918.077313][T18200] __htab_map_lookup_and_delete_batch+0x10c8/0x1400 [ 918.084006][T18200] ? jhash+0x740/0x740 [ 918.088140][T18200] ? __fdget+0x180/0x210 [ 918.092441][T18200] ? htab_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 918.099267][T18200] bpf_map_do_batch+0x48c/0x600 [ 918.104178][T18200] ? bpf_lsm_key_free+0x10/0x10 [ 918.109101][T18200] __sys_bpf+0x78c/0x890 [ 918.113408][T18200] ? bpf_link_show_fdinfo+0x560/0x560 [ 918.118861][T18200] ? lock_chain_count+0x20/0x20 [ 918.123791][T18200] __x64_sys_bpf+0x7c/0x90 [ 918.128260][T18200] do_syscall_64+0x55/0xb0 [ 918.132736][T18200] ? clear_bhb_loop+0x40/0x90 [ 918.137474][T18200] ? clear_bhb_loop+0x40/0x90 [ 918.142200][T18200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.148142][T18200] RIP: 0033:0x7fe8ad59e159 [ 918.152612][T18200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.172280][T18200] RSP: 002b:00007fe8ae450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 918.180742][T18200] RAX: ffffffffffffffda RBX: 00007fe8ad825fa0 RCX: 00007fe8ad59e159 [ 918.188768][T18200] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 918.196794][T18200] RBP: 00007fe8ae450090 R08: 0000000000000000 R09: 0000000000000000 [ 918.204823][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.212839][T18200] R13: 00007fe8ad826038 R14: 00007fe8ad825fa0 R15: 00007fff284faf28 [ 918.220871][T18200] [ 918.855277][T18215] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3903'. [ 919.199463][T18210] delete_channel: no stack [ 919.328995][T18225] delete_channel: no stack [ 919.357312][T18236] netlink: 'syz.0.3906': attribute type 10 has an invalid length. [ 919.365303][T18236] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3906'. [ 919.715236][T18245] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3908'. [ 920.757603][T18265] netlink: 'syz.2.3918': attribute type 12 has an invalid length. [ 920.780569][T18246] delete_channel: no stack [ 920.833824][T18265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3918'. [ 921.896382][T18267] delete_channel: no stack [ 922.477337][T18300] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3924'. [ 922.618972][T18302] netlink: 'syz.3.3928': attribute type 21 has an invalid length. [ 922.651872][T18302] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3928'. [ 922.811627][T18307] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3927'. [ 924.249418][T18314] delete_channel: no stack [ 924.875762][T18326] syzkaller0: entered promiscuous mode [ 924.931867][T18326] syzkaller0: entered allmulticast mode [ 925.990460][T18360] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3939'. [ 926.042284][T18356] netlink: 'syz.1.3943': attribute type 4 has an invalid length. [ 926.068221][T18356] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3943'. [ 926.139825][T18355] delete_channel: no stack [ 926.339011][T18350] delete_channel: no stack [ 926.632783][T18373] FAULT_INJECTION: forcing a failure. [ 926.632783][T18373] name failslab, interval 1, probability 0, space 0, times 0 [ 926.677168][T18373] CPU: 1 PID: 18373 Comm: syz.1.3947 Not tainted syzkaller #0 [ 926.684774][T18373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 926.695012][T18373] Call Trace: [ 926.698383][T18373] [ 926.701406][T18373] dump_stack_lvl+0x18c/0x250 [ 926.706221][T18373] ? show_regs_print_info+0x20/0x20 [ 926.711562][T18373] ? load_image+0x420/0x420 [ 926.716198][T18373] ? __lock_acquire+0x7d80/0x7d80 [ 926.721397][T18373] should_fail_ex+0x394/0x4c0 [ 926.726215][T18373] should_failslab+0x9/0x20 [ 926.730818][T18373] slab_pre_alloc_hook+0x59/0x300 [ 926.735962][T18373] ? sctp_stream_init_ext+0x57/0x170 [ 926.741348][T18373] __kmem_cache_alloc_node+0x53/0x250 [ 926.746827][T18373] ? sctp_stream_init_ext+0x57/0x170 [ 926.752207][T18373] kmalloc_trace+0x2a/0xe0 [ 926.756719][T18373] sctp_stream_init_ext+0x57/0x170 [ 926.761937][T18373] sctp_sendmsg_to_asoc+0x12cc/0x17f0 [ 926.767418][T18373] ? sctp_assoc_set_primary+0x23b/0x330 [ 926.773163][T18373] ? sctp_assoc_add_peer+0xd82/0x1440 [ 926.778684][T18373] ? sctp_connect_new_asoc+0x404/0x6a0 [ 926.784229][T18373] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 926.790132][T18373] ? __sctp_connect+0xd80/0xd80 [ 926.795044][T18373] ? __local_bh_enable_ip+0x13a/0x1c0 [ 926.800612][T18373] ? _local_bh_enable+0xa0/0xa0 [ 926.805570][T18373] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 926.811480][T18373] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 926.817493][T18373] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 926.823182][T18373] ? security_sctp_bind_connect+0x89/0xb0 [ 926.829040][T18373] sctp_sendmsg+0x1afa/0x27b0 [ 926.833900][T18373] ? sctp_getsockopt+0xb60/0xb60 [ 926.838995][T18373] ? aa_af_perm+0x330/0x330 [ 926.843656][T18373] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 926.850237][T18373] ? sock_rps_record_flow+0x19/0x3f0 [ 926.855729][T18373] ? inet_sendmsg+0x7e/0x2a0 [ 926.860416][T18373] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 926.865861][T18373] ? inet_send_prepare+0x250/0x250 [ 926.871107][T18373] ____sys_sendmsg+0x61b/0x980 [ 926.875969][T18373] ? __asan_memset+0x22/0x40 [ 926.880633][T18373] ? __sys_sendmsg_sock+0x30/0x30 [ 926.885736][T18373] ? __import_iovec+0x5f2/0x850 [ 926.890720][T18373] ? import_iovec+0x73/0xa0 [ 926.895353][T18373] ___sys_sendmsg+0x2a6/0x360 [ 926.900170][T18373] ? __sys_sendmsg+0x2b0/0x2b0 [ 926.905095][T18373] ? __lock_acquire+0x7d80/0x7d80 [ 926.910301][T18373] __se_sys_sendmsg+0x1d0/0x2c0 [ 926.915267][T18373] ? __x64_sys_sendmsg+0x80/0x80 [ 926.920368][T18373] ? lockdep_hardirqs_on+0x98/0x150 [ 926.925672][T18373] do_syscall_64+0x55/0xb0 [ 926.930191][T18373] ? clear_bhb_loop+0x40/0x90 [ 926.934954][T18373] ? clear_bhb_loop+0x40/0x90 [ 926.939715][T18373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.945680][T18373] RIP: 0033:0x7f2bf599e159 [ 926.950183][T18373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.970049][T18373] RSP: 002b:00007f2bf3bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.978564][T18373] RAX: ffffffffffffffda RBX: 00007f2bf5c26090 RCX: 00007f2bf599e159 [ 926.986984][T18373] RDX: 00000000000080d1 RSI: 00002000000001c0 RDI: 0000000000000006 [ 926.995054][T18373] RBP: 00007f2bf3bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 927.003119][T18373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.011190][T18373] R13: 00007f2bf5c26128 R14: 00007f2bf5c26090 R15: 00007ffebf273ed8 [ 927.019353][T18373] [ 928.094668][T18399] netlink: 'syz.0.3955': attribute type 10 has an invalid length. [ 928.251367][T18399] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 928.297710][T18399] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 928.306954][T18399] team0: Port device netdevsim0 added [ 928.336879][T18414] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3957'. [ 928.686106][T18424] netlink: 'syz.0.3960': attribute type 21 has an invalid length. [ 928.694167][T18424] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3960'. [ 928.751160][T18411] delete_channel: no stack [ 928.920090][T18427] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.3961'. [ 929.198120][T18440] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3962'. [ 929.235871][T18440] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 929.316972][T18440] CPU: 0 PID: 18440 Comm: syz.2.3962 Not tainted syzkaller #0 [ 929.324571][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 929.334728][T18440] Call Trace: [ 929.338085][T18440] [ 929.341091][T18440] dump_stack_lvl+0x18c/0x250 [ 929.345887][T18440] ? show_regs_print_info+0x20/0x20 [ 929.351198][T18440] ? load_image+0x420/0x420 [ 929.355959][T18440] sysfs_warn_dup+0x8e/0xa0 [ 929.360573][T18440] sysfs_do_create_link_sd+0xc0/0x110 [ 929.366074][T18440] device_add_class_symlinks+0x1cf/0x240 [ 929.371921][T18440] device_add+0x4f9/0xc40 [ 929.376380][T18440] wiphy_register+0x1d99/0x2ac0 [ 929.381490][T18440] ? cfg80211_event_work+0x40/0x40 [ 929.386672][T18440] ? minstrel_ht_alloc+0x88a/0x990 [ 929.391986][T18440] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 929.398165][T18440] ieee80211_register_hw+0x2dd8/0x3b30 [ 929.403725][T18440] ? ieee80211_register_hw+0xfb1/0x3b30 [ 929.409362][T18440] ? ieee80211_tasklet_handler+0x20/0x20 [ 929.415096][T18440] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 929.421074][T18440] ? __debug_object_init+0xec/0x450 [ 929.426357][T18440] ? __asan_memset+0x22/0x40 [ 929.431037][T18440] ? __hrtimer_init+0x189/0x270 [ 929.436001][T18440] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 929.442011][T18440] ? mac80211_hwsim_free+0x220/0x220 [ 929.447385][T18440] ? rcu_is_watching+0x15/0xb0 [ 929.452269][T18440] ? kstrndup+0xbd/0x140 [ 929.457045][T18440] hwsim_new_radio_nl+0xdad/0x1a70 [ 929.462238][T18440] ? __nla_validate+0x50/0x50 [ 929.467052][T18440] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 929.473514][T18440] ? __nla_parse+0x40/0x50 [ 929.478033][T18440] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 929.484490][T18440] genl_family_rcv_msg_doit+0x21a/0x310 [ 929.490134][T18440] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 929.496160][T18440] ? bpf_lsm_capable+0x9/0x10 [ 929.500898][T18440] ? security_capable+0x89/0xb0 [ 929.505873][T18440] genl_rcv_msg+0x611/0x7a0 [ 929.510465][T18440] ? genl_bind+0x360/0x360 [ 929.514939][T18440] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 929.521334][T18440] ? perf_trace_lock+0x303/0x3b0 [ 929.526586][T18440] ? __kasan_kmalloc_large+0x8b/0xa0 [ 929.532048][T18440] netlink_rcv_skb+0x235/0x4c0 [ 929.536969][T18440] ? genl_bind+0x360/0x360 [ 929.541475][T18440] ? netlink_ack+0x1160/0x1160 [ 929.546356][T18440] ? __lock_acquire+0x7d80/0x7d80 [ 929.551469][T18440] ? down_read+0x1ac/0x2e0 [ 929.555968][T18440] genl_rcv+0x28/0x40 [ 929.560049][T18440] netlink_unicast+0x7b1/0x930 [ 929.564930][T18440] netlink_sendmsg+0x8d0/0xbf0 [ 929.569804][T18440] ? netlink_getsockopt+0x590/0x590 [ 929.575089][T18440] ? apparmor_socket_sendmsg+0x8e/0x330 [ 929.580797][T18440] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 929.586152][T18440] ? security_socket_sendmsg+0x80/0xa0 [ 929.591664][T18440] ? netlink_getsockopt+0x590/0x590 [ 929.596927][T18440] ____sys_sendmsg+0x61b/0x980 [ 929.601779][T18440] ? __asan_memset+0x22/0x40 [ 929.606452][T18440] ? __sys_sendmsg_sock+0x30/0x30 [ 929.611535][T18440] ? __import_iovec+0x5f2/0x850 [ 929.616496][T18440] ? import_iovec+0x73/0xa0 [ 929.621160][T18440] ___sys_sendmsg+0x2a6/0x360 [ 929.625917][T18440] ? __sys_sendmsg+0x2b0/0x2b0 [ 929.630887][T18440] __se_sys_sendmsg+0x1d0/0x2c0 [ 929.635836][T18440] ? __x64_sys_sendmsg+0x80/0x80 [ 929.640915][T18440] ? lockdep_hardirqs_on+0x98/0x150 [ 929.646202][T18440] do_syscall_64+0x55/0xb0 [ 929.650692][T18440] ? clear_bhb_loop+0x40/0x90 [ 929.655429][T18440] ? clear_bhb_loop+0x40/0x90 [ 929.660187][T18440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.666155][T18440] RIP: 0033:0x7f901fd9e159 [ 929.670651][T18440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.690397][T18440] RSP: 002b:00007f9020cea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.698876][T18440] RAX: ffffffffffffffda RBX: 00007f9020026180 RCX: 00007f901fd9e159 [ 929.706987][T18440] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 929.715108][T18440] RBP: 00007f901fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 929.723245][T18440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.731269][T18440] R13: 00007f9020026218 R14: 00007f9020026180 R15: 00007ffe37f47548 [ 929.739367][T18440] [ 930.299557][T18458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 930.331453][T18451] delete_channel: no stack [ 930.364375][T18458] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 930.385389][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 930.401811][T18460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3971'. [ 930.722640][T18473] netlink: 'syz.2.3973': attribute type 21 has an invalid length. [ 931.159010][T18488] __nla_validate_parse: 2 callbacks suppressed [ 931.159031][T18488] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3979'. [ 931.188882][T18488] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 931.589990][T18503] netlink: 'syz.1.3984': attribute type 2 has an invalid length. [ 931.621450][T18503] netlink: 'syz.1.3984': attribute type 9 has an invalid length. [ 931.643234][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.683697][T18503] netlink: 'syz.1.3984': attribute type 2 has an invalid length. [ 931.717332][T18503] netlink: 'syz.1.3984': attribute type 9 has an invalid length. [ 931.731335][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.749951][T18503] netlink: 'syz.1.3984': attribute type 2 has an invalid length. [ 931.758103][T18503] netlink: 'syz.1.3984': attribute type 9 has an invalid length. [ 931.784096][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.795167][T18491] delete_channel: no stack [ 931.827064][T18503] netlink: 'syz.1.3984': attribute type 2 has an invalid length. [ 931.851002][T18503] netlink: 'syz.1.3984': attribute type 9 has an invalid length. [ 931.880775][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.902990][T18503] netlink: 'syz.1.3984': attribute type 2 has an invalid length. [ 931.911082][T18503] netlink: 'syz.1.3984': attribute type 9 has an invalid length. [ 931.925119][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.940111][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.946639][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.955276][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 931.983938][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 932.026473][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3984'. [ 932.053985][T18510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3986'. [ 932.215867][T18514] : renamed from caif0 [ 932.246725][T18514] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 933.710767][T18522] delete_channel: no stack [ 933.837662][T18538] delete_channel: no stack [ 933.943712][T18546] delete_channel: no stack [ 935.482455][T18586] delete_channel: no stack [ 937.005461][T18627] delete_channel: no stack [ 937.337076][T18638] syzkaller0: entered promiscuous mode [ 937.352917][T18638] syzkaller0: entered allmulticast mode [ 938.500580][T18659] delete_channel: no stack [ 938.792378][T18668] delete_channel: no stack [ 939.860588][T18680] FAULT_INJECTION: forcing a failure. [ 939.860588][T18680] name failslab, interval 1, probability 0, space 0, times 0 [ 939.889409][T18680] CPU: 1 PID: 18680 Comm: syz.3.4042 Not tainted syzkaller #0 [ 939.896975][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 939.907080][T18680] Call Trace: [ 939.910404][T18680] [ 939.913387][T18680] dump_stack_lvl+0x18c/0x250 [ 939.918221][T18680] ? show_regs_print_info+0x20/0x20 [ 939.923485][T18680] ? load_image+0x420/0x420 [ 939.928081][T18680] ? __might_sleep+0xe0/0xe0 [ 939.932740][T18680] ? __lock_acquire+0x7d80/0x7d80 [ 939.937825][T18680] should_fail_ex+0x394/0x4c0 [ 939.942567][T18680] should_failslab+0x9/0x20 [ 939.947144][T18680] slab_pre_alloc_hook+0x59/0x300 [ 939.952262][T18680] ? tomoyo_encode+0x2ad/0x570 [ 939.957074][T18680] ? tomoyo_encode+0x2ad/0x570 [ 939.961893][T18680] __kmem_cache_alloc_node+0x53/0x250 [ 939.967338][T18680] ? tomoyo_encode+0x2ad/0x570 [ 939.972147][T18680] __kmalloc+0xa7/0x240 [ 939.976364][T18680] tomoyo_encode+0x2ad/0x570 [ 939.981015][T18680] tomoyo_realpath_from_path+0x57c/0x5c0 [ 939.986725][T18680] ? tomoyo_domain+0xd6/0x120 [ 939.991469][T18680] tomoyo_path_number_perm+0x248/0x5e0 [ 939.996992][T18680] ? tomoyo_path_number_perm+0x217/0x5e0 [ 940.002692][T18680] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 940.008212][T18680] ? ksys_write+0x1d2/0x260 [ 940.012820][T18680] ? __fget_files+0x28/0x460 [ 940.017487][T18680] security_file_ioctl+0x70/0xa0 [ 940.022498][T18680] __se_sys_ioctl+0x48/0x170 [ 940.027155][T18680] do_syscall_64+0x55/0xb0 [ 940.031635][T18680] ? clear_bhb_loop+0x40/0x90 [ 940.036372][T18680] ? clear_bhb_loop+0x40/0x90 [ 940.041142][T18680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.047102][T18680] RIP: 0033:0x7f01a459e159 [ 940.051598][T18680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.071258][T18680] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 940.079727][T18680] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 940.087749][T18680] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 940.095779][T18680] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 940.103804][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.111833][T18680] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 940.119877][T18680] [ 940.201293][T18680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 941.360841][T18709] __nla_validate_parse: 61 callbacks suppressed [ 941.360861][T18709] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4050'. [ 941.587277][T18716] FAULT_INJECTION: forcing a failure. [ 941.587277][T18716] name failslab, interval 1, probability 0, space 0, times 0 [ 941.626598][T18716] CPU: 1 PID: 18716 Comm: syz.2.4054 Not tainted syzkaller #0 [ 941.634147][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 941.644259][T18716] Call Trace: [ 941.647587][T18716] [ 941.650559][T18716] dump_stack_lvl+0x18c/0x250 [ 941.655304][T18716] ? show_regs_print_info+0x20/0x20 [ 941.660561][T18716] ? load_image+0x420/0x420 [ 941.665128][T18716] ? __might_sleep+0xe0/0xe0 [ 941.669774][T18716] ? __lock_acquire+0x7d80/0x7d80 [ 941.674869][T18716] should_fail_ex+0x394/0x4c0 [ 941.679609][T18716] should_failslab+0x9/0x20 [ 941.684177][T18716] slab_pre_alloc_hook+0x59/0x300 [ 941.689284][T18716] ? tomoyo_encode+0x2ad/0x570 [ 941.694094][T18716] ? tomoyo_encode+0x2ad/0x570 [ 941.698899][T18716] __kmem_cache_alloc_node+0x53/0x250 [ 941.704334][T18716] ? tomoyo_encode+0x2ad/0x570 [ 941.709147][T18716] __kmalloc+0xa7/0x240 [ 941.713361][T18716] tomoyo_encode+0x2ad/0x570 [ 941.718012][T18716] tomoyo_realpath_from_path+0x57c/0x5c0 [ 941.723706][T18716] ? tomoyo_domain+0xd6/0x120 [ 941.728451][T18716] tomoyo_path_number_perm+0x248/0x5e0 [ 941.733968][T18716] ? tomoyo_path_number_perm+0x217/0x5e0 [ 941.739659][T18716] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 941.745186][T18716] ? ksys_write+0x1d2/0x260 [ 941.749821][T18716] ? __fget_files+0x28/0x460 [ 941.754489][T18716] security_file_ioctl+0x70/0xa0 [ 941.759497][T18716] __se_sys_ioctl+0x48/0x170 [ 941.764156][T18716] do_syscall_64+0x55/0xb0 [ 941.768659][T18716] ? clear_bhb_loop+0x40/0x90 [ 941.773395][T18716] ? clear_bhb_loop+0x40/0x90 [ 941.778142][T18716] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.784098][T18716] RIP: 0033:0x7f901fd9e159 [ 941.788678][T18716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.808371][T18716] RSP: 002b:00007f9020d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 941.816845][T18716] RAX: ffffffffffffffda RBX: 00007f9020025fa0 RCX: 00007f901fd9e159 [ 941.824905][T18716] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000003 [ 941.832931][T18716] RBP: 00007f9020d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 941.840956][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.848983][T18716] R13: 00007f9020026038 R14: 00007f9020025fa0 R15: 00007ffe37f47548 [ 941.857047][T18716] [ 941.896197][T18716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.257524][T18753] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4060'. [ 944.895040][T18769] FAULT_INJECTION: forcing a failure. [ 944.895040][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 944.930407][T18769] CPU: 1 PID: 18769 Comm: syz.0.4067 Not tainted syzkaller #0 [ 944.937976][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 944.948096][T18769] Call Trace: [ 944.951427][T18769] [ 944.954416][T18769] dump_stack_lvl+0x18c/0x250 [ 944.959166][T18769] ? sctp_sendmsg+0x1519/0x27b0 [ 944.964092][T18769] ? ___sys_sendmsg+0x2a6/0x360 [ 944.969076][T18769] ? show_regs_print_info+0x20/0x20 [ 944.974360][T18769] ? load_image+0x420/0x420 [ 944.978991][T18769] should_fail_ex+0x394/0x4c0 [ 944.983752][T18769] should_failslab+0x9/0x20 [ 944.988340][T18769] slab_pre_alloc_hook+0x59/0x300 [ 944.993457][T18769] ? sctp_add_bind_addr+0x8c/0x360 [ 944.998655][T18769] __kmem_cache_alloc_node+0x53/0x250 [ 945.004128][T18769] ? sctp_add_bind_addr+0x8c/0x360 [ 945.009356][T18769] kmalloc_trace+0x2a/0xe0 [ 945.013854][T18769] sctp_add_bind_addr+0x8c/0x360 [ 945.018882][T18769] sctp_copy_local_addr_list+0x31b/0x4e0 [ 945.024597][T18769] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 945.030746][T18769] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 945.036900][T18769] ? sctp_v6_is_any+0x64/0x70 [ 945.041652][T18769] ? sctp_copy_one_addr+0x8c/0x350 [ 945.046878][T18769] sctp_bind_addr_copy+0xb3/0x3c0 [ 945.051979][T18769] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 945.058479][T18769] sctp_connect_new_asoc+0x2f9/0x6a0 [ 945.063889][T18769] ? __sctp_connect+0xd80/0xd80 [ 945.068812][T18769] ? __local_bh_enable_ip+0x13a/0x1c0 [ 945.074264][T18769] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 945.079920][T18769] ? security_sctp_bind_connect+0x89/0xb0 [ 945.085724][T18769] sctp_sendmsg+0x1519/0x27b0 [ 945.090509][T18769] ? sctp_getsockopt+0xb60/0xb60 [ 945.095543][T18769] ? aa_af_perm+0x330/0x330 [ 945.100145][T18769] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 945.106655][T18769] ? sock_rps_record_flow+0x19/0x3f0 [ 945.112039][T18769] ? inet_sendmsg+0xce/0x2a0 [ 945.116710][T18769] ? inet_send_prepare+0x250/0x250 [ 945.121903][T18769] ____sys_sendmsg+0x61b/0x980 [ 945.126791][T18769] ? __sys_sendmsg_sock+0x30/0x30 [ 945.131911][T18769] ? __import_iovec+0x5f2/0x850 [ 945.136856][T18769] ? import_iovec+0x73/0xa0 [ 945.141445][T18769] ___sys_sendmsg+0x2a6/0x360 [ 945.146222][T18769] ? __sys_sendmsg+0x2b0/0x2b0 [ 945.151130][T18769] ? __lock_acquire+0x7d80/0x7d80 [ 945.156296][T18769] __se_sys_sendmsg+0x1d0/0x2c0 [ 945.161233][T18769] ? __x64_sys_sendmsg+0x80/0x80 [ 945.166302][T18769] ? lockdep_hardirqs_on+0x98/0x150 [ 945.171588][T18769] do_syscall_64+0x55/0xb0 [ 945.176116][T18769] ? clear_bhb_loop+0x40/0x90 [ 945.180874][T18769] ? clear_bhb_loop+0x40/0x90 [ 945.185638][T18769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.191608][T18769] RIP: 0033:0x7fe8ad59e159 [ 945.196088][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.215768][T18769] RSP: 002b:00007fe8ae450028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.224245][T18769] RAX: ffffffffffffffda RBX: 00007fe8ad825fa0 RCX: 00007fe8ad59e159 [ 945.232263][T18769] RDX: 00000000000480c4 RSI: 00002000000017c0 RDI: 0000000000000004 [ 945.240282][T18769] RBP: 00007fe8ae450090 R08: 0000000000000000 R09: 0000000000000000 [ 945.248309][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 945.256356][T18769] R13: 00007fe8ad826038 R14: 00007fe8ad825fa0 R15: 00007fff284faf28 [ 945.264401][T18769] [ 946.089522][T18788] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.4074'. [ 946.695737][T18790] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4075'. [ 946.846974][T18790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.565976][T18790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.655531][T18790] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 947.680769][T18790] bond0 (unregistering): Released all slaves [ 948.174601][T18816] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4084'. [ 948.590232][T18807] delete_channel: no stack [ 949.353854][T18833] validate_nla: 122 callbacks suppressed [ 949.353874][T18833] netlink: 'syz.2.4090': attribute type 21 has an invalid length. [ 949.382893][T18833] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4090'. [ 950.588597][T18849] FAULT_INJECTION: forcing a failure. [ 950.588597][T18849] name failslab, interval 1, probability 0, space 0, times 0 [ 950.625840][T18849] CPU: 1 PID: 18849 Comm: syz.3.4097 Not tainted syzkaller #0 [ 950.633395][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 950.643779][T18849] Call Trace: [ 950.647109][T18849] [ 950.650088][T18849] dump_stack_lvl+0x18c/0x250 [ 950.654843][T18849] ? sctp_sendmsg+0x1519/0x27b0 [ 950.659848][T18849] ? ___sys_sendmsg+0x2a6/0x360 [ 950.664760][T18849] ? show_regs_print_info+0x20/0x20 [ 950.670031][T18849] ? load_image+0x420/0x420 [ 950.674608][T18849] should_fail_ex+0x394/0x4c0 [ 950.679376][T18849] should_failslab+0x9/0x20 [ 950.683938][T18849] slab_pre_alloc_hook+0x59/0x300 [ 950.689040][T18849] ? sctp_add_bind_addr+0x8c/0x360 [ 950.694225][T18849] __kmem_cache_alloc_node+0x53/0x250 [ 950.699674][T18849] ? sctp_add_bind_addr+0x8c/0x360 [ 950.704851][T18849] kmalloc_trace+0x2a/0xe0 [ 950.709343][T18849] sctp_add_bind_addr+0x8c/0x360 [ 950.714359][T18849] sctp_copy_local_addr_list+0x31b/0x4e0 [ 950.720071][T18849] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 950.725853][T18849] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 950.731985][T18849] ? sctp_v4_is_any+0x35/0x60 [ 950.736727][T18849] ? sctp_copy_one_addr+0x8c/0x350 [ 950.741991][T18849] sctp_bind_addr_copy+0xb3/0x3c0 [ 950.747102][T18849] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 950.753571][T18849] sctp_connect_new_asoc+0x2f9/0x6a0 [ 950.758922][T18849] ? __sctp_connect+0xd80/0xd80 [ 950.763816][T18849] ? __local_bh_enable_ip+0x13a/0x1c0 [ 950.769258][T18849] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 950.774887][T18849] ? security_sctp_bind_connect+0x89/0xb0 [ 950.780674][T18849] sctp_sendmsg+0x1519/0x27b0 [ 950.785425][T18849] ? sctp_getsockopt+0xb60/0xb60 [ 950.790434][T18849] ? aa_af_perm+0x330/0x330 [ 950.795010][T18849] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 950.801491][T18849] ? sock_rps_record_flow+0x19/0x3f0 [ 950.806837][T18849] ? inet_sendmsg+0xce/0x2a0 [ 950.811492][T18849] ? inet_send_prepare+0x250/0x250 [ 950.816687][T18849] ____sys_sendmsg+0x61b/0x980 [ 950.821522][T18849] ? __asan_memset+0x22/0x40 [ 950.826172][T18849] ? __sys_sendmsg_sock+0x30/0x30 [ 950.831269][T18849] ? __import_iovec+0x5f2/0x850 [ 950.836219][T18849] ? import_iovec+0x73/0xa0 [ 950.840790][T18849] ___sys_sendmsg+0x2a6/0x360 [ 950.845549][T18849] ? get_pid_task+0x20/0x1e0 [ 950.850206][T18849] ? __sys_sendmsg+0x2b0/0x2b0 [ 950.855057][T18849] ? __lock_acquire+0x7d80/0x7d80 [ 950.860160][T18849] __se_sys_sendmsg+0x1d0/0x2c0 [ 950.865260][T18849] ? __x64_sys_sendmsg+0x80/0x80 [ 950.870289][T18849] ? lockdep_hardirqs_on+0x98/0x150 [ 950.875566][T18849] do_syscall_64+0x55/0xb0 [ 950.880045][T18849] ? clear_bhb_loop+0x40/0x90 [ 950.884792][T18849] ? clear_bhb_loop+0x40/0x90 [ 950.889541][T18849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.895499][T18849] RIP: 0033:0x7f01a459e159 [ 950.899965][T18849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.919718][T18849] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.928192][T18849] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 950.936221][T18849] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 950.944257][T18849] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 950.952287][T18849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.960305][T18849] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 950.968348][T18849] [ 951.029369][T18854] delete_channel: no stack [ 951.239270][T18846] delete_channel: no stack [ 952.524592][T18878] delete_channel: no stack [ 952.621922][T18890] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4110'. [ 953.260252][T18893] netlink: 'syz.2.4111': attribute type 10 has an invalid length. [ 953.280706][T18893] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4111'. [ 953.646613][T18901] netlink: 'syz.1.4115': attribute type 1 has an invalid length. [ 953.766161][T18901] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4115'. [ 954.237498][T18895] delete_channel: no stack [ 954.284912][T18915] hsr0: entered promiscuous mode [ 954.295377][T18915] hsr0: entered allmulticast mode [ 954.304220][T18915] hsr_slave_0: entered allmulticast mode [ 954.317189][T18915] hsr_slave_1: entered allmulticast mode [ 954.358162][T18917] delete_channel: no stack [ 954.433923][T18924] netlink: 'syz.2.4122': attribute type 10 has an invalid length. [ 954.543659][T18926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 954.551364][T18926] IPv6: NLM_F_CREATE should be set when creating new route [ 954.559360][T18926] IPv6: NLM_F_CREATE should be set when creating new route [ 954.567017][T18926] IPv6: NLM_F_CREATE should be set when creating new route [ 954.942906][T18940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4128'. [ 955.783281][T18955] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.4132'. [ 955.804280][T18955] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.4132'. [ 956.095325][T18962] delete_channel: no stack [ 956.208980][T18971] netlink: 'syz.3.4136': attribute type 10 has an invalid length. [ 956.439441][T18971] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 956.789777][T18982] syzkaller0: entered promiscuous mode [ 956.804515][T18982] syzkaller0: entered allmulticast mode [ 957.248265][T18994] FAULT_INJECTION: forcing a failure. [ 957.248265][T18994] name failslab, interval 1, probability 0, space 0, times 0 [ 957.280021][T18994] CPU: 0 PID: 18994 Comm: syz.3.4144 Not tainted syzkaller #0 [ 957.287570][T18994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 957.297673][T18994] Call Trace: [ 957.301084][T18994] [ 957.304057][T18994] dump_stack_lvl+0x18c/0x250 [ 957.308802][T18994] ? show_regs_print_info+0x20/0x20 [ 957.314067][T18994] ? load_image+0x420/0x420 [ 957.318599][T18994] ? __might_sleep+0xe0/0xe0 [ 957.323231][T18994] ? __lock_acquire+0x7d80/0x7d80 [ 957.328294][T18994] should_fail_ex+0x394/0x4c0 [ 957.333024][T18994] should_failslab+0x9/0x20 [ 957.337596][T18994] slab_pre_alloc_hook+0x59/0x300 [ 957.342663][T18994] ? tomoyo_encode+0x2ad/0x570 [ 957.347462][T18994] ? tomoyo_encode+0x2ad/0x570 [ 957.352268][T18994] __kmem_cache_alloc_node+0x53/0x250 [ 957.357703][T18994] ? tomoyo_encode+0x2ad/0x570 [ 957.362499][T18994] __kmalloc+0xa7/0x240 [ 957.366694][T18994] tomoyo_encode+0x2ad/0x570 [ 957.371337][T18994] tomoyo_realpath_from_path+0x57c/0x5c0 [ 957.377003][T18994] ? tomoyo_domain+0xd6/0x120 [ 957.381714][T18994] tomoyo_path_number_perm+0x248/0x5e0 [ 957.387232][T18994] ? tomoyo_path_number_perm+0x217/0x5e0 [ 957.392901][T18994] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 957.398400][T18994] ? ksys_write+0x1d2/0x260 [ 957.402990][T18994] ? __fget_files+0x28/0x460 [ 957.407634][T18994] security_file_ioctl+0x70/0xa0 [ 957.412615][T18994] __se_sys_ioctl+0x48/0x170 [ 957.417247][T18994] do_syscall_64+0x55/0xb0 [ 957.421702][T18994] ? clear_bhb_loop+0x40/0x90 [ 957.426432][T18994] ? clear_bhb_loop+0x40/0x90 [ 957.431153][T18994] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 957.437088][T18994] RIP: 0033:0x7f01a459e159 [ 957.441532][T18994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.461167][T18994] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 957.469627][T18994] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 957.477629][T18994] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 957.485632][T18994] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 957.493629][T18994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.501632][T18994] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 957.509660][T18994] [ 957.767519][T18994] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.856901][T19001] delete_channel: no stack [ 960.103921][T19008] Q6\bY4: renamed from lo (while UP) [ 960.122378][T19009] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4146'. [ 960.534238][T19022] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4152'. [ 960.627988][T19029] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4151'. [ 960.683152][ T5807] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 962.230113][T19048] FAULT_INJECTION: forcing a failure. [ 962.230113][T19048] name failslab, interval 1, probability 0, space 0, times 0 [ 962.246225][T19048] CPU: 1 PID: 19048 Comm: syz.3.4158 Not tainted syzkaller #0 [ 962.253765][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 962.263869][T19048] Call Trace: [ 962.267195][T19048] [ 962.270173][T19048] dump_stack_lvl+0x18c/0x250 [ 962.274960][T19048] ? show_regs_print_info+0x20/0x20 [ 962.280228][T19048] ? load_image+0x420/0x420 [ 962.284801][T19048] ? __might_sleep+0xe0/0xe0 [ 962.289477][T19048] ? __lock_acquire+0x7d80/0x7d80 [ 962.294557][T19048] should_fail_ex+0x394/0x4c0 [ 962.299312][T19048] should_failslab+0x9/0x20 [ 962.303879][T19048] slab_pre_alloc_hook+0x59/0x300 [ 962.308979][T19048] kmem_cache_alloc_node+0x5e/0x310 [ 962.314248][T19048] ? perf_trace_buf_alloc+0x290/0x290 [ 962.319678][T19048] ? __alloc_skb+0x103/0x2c0 [ 962.324325][T19048] __alloc_skb+0x103/0x2c0 [ 962.328803][T19048] alloc_skb_with_frags+0xcd/0x7a0 [ 962.333968][T19048] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 962.339836][T19048] sock_alloc_send_pskb+0x883/0x9a0 [ 962.345097][T19048] ? sock_kzfree_s+0x50/0x50 [ 962.349779][T19048] tun_get_user+0xa44/0x3d30 [ 962.354482][T19048] ? perf_trace_preemptirq_template+0x269/0x330 [ 962.360825][T19048] ? rcu_read_unlock+0xa0/0xa0 [ 962.365661][T19048] ? tun_get+0x1c/0x2e0 [ 962.369875][T19048] ? __lock_acquire+0x7d80/0x7d80 [ 962.374992][T19048] ? tun_get+0x1c/0x2e0 [ 962.379211][T19048] tun_chr_write_iter+0x119/0x200 [ 962.384304][T19048] vfs_write+0x474/0x9a0 [ 962.388616][T19048] ? file_end_write+0x250/0x250 [ 962.393526][T19048] ? __fget_files+0x3fc/0x460 [ 962.398270][T19048] ? __fdget_pos+0x1d8/0x330 [ 962.402924][T19048] ? ksys_write+0x74/0x260 [ 962.407404][T19048] ksys_write+0x151/0x260 [ 962.411800][T19048] ? __ia32_sys_read+0x90/0x90 [ 962.416629][T19048] ? lockdep_hardirqs_on+0x98/0x150 [ 962.421901][T19048] do_syscall_64+0x55/0xb0 [ 962.426375][T19048] ? clear_bhb_loop+0x40/0x90 [ 962.431138][T19048] ? clear_bhb_loop+0x40/0x90 [ 962.435890][T19048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.441839][T19048] RIP: 0033:0x7f01a459e159 [ 962.446297][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.465977][T19048] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 962.474444][T19048] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 962.482461][T19048] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 962.490484][T19048] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 962.498497][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.506513][T19048] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 962.514592][T19048] [ 962.739388][T19058] netlink: 'syz.1.4166': attribute type 1 has an invalid length. [ 962.799943][T19058] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.4166'. [ 963.384995][T19073] FAULT_INJECTION: forcing a failure. [ 963.384995][T19073] name failslab, interval 1, probability 0, space 0, times 0 [ 963.424694][T19073] CPU: 1 PID: 19073 Comm: syz.3.4165 Not tainted syzkaller #0 [ 963.432266][T19073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 963.442375][T19073] Call Trace: [ 963.445714][T19073] [ 963.448694][T19073] dump_stack_lvl+0x18c/0x250 [ 963.453434][T19073] ? sctp_sendmsg+0x1519/0x27b0 [ 963.458348][T19073] ? ___sys_sendmsg+0x2a6/0x360 [ 963.463263][T19073] ? show_regs_print_info+0x20/0x20 [ 963.468521][T19073] ? load_image+0x420/0x420 [ 963.473095][T19073] should_fail_ex+0x394/0x4c0 [ 963.477840][T19073] should_failslab+0x9/0x20 [ 963.482409][T19073] slab_pre_alloc_hook+0x59/0x300 [ 963.487502][T19073] ? sctp_add_bind_addr+0x8c/0x360 [ 963.492703][T19073] __kmem_cache_alloc_node+0x53/0x250 [ 963.498136][T19073] ? sctp_add_bind_addr+0x8c/0x360 [ 963.503320][T19073] kmalloc_trace+0x2a/0xe0 [ 963.507775][T19073] sctp_add_bind_addr+0x8c/0x360 [ 963.512748][T19073] sctp_copy_local_addr_list+0x31b/0x4e0 [ 963.518413][T19073] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 963.524190][T19073] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 963.530318][T19073] ? sctp_v4_is_any+0x35/0x60 [ 963.535055][T19073] ? sctp_copy_one_addr+0x8c/0x350 [ 963.540203][T19073] sctp_bind_addr_copy+0xb3/0x3c0 [ 963.545267][T19073] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 963.551631][T19073] sctp_connect_new_asoc+0x2f9/0x6a0 [ 963.556951][T19073] ? __sctp_connect+0xd80/0xd80 [ 963.561831][T19073] ? __local_bh_enable_ip+0x13a/0x1c0 [ 963.567231][T19073] ? _local_bh_enable+0xa0/0xa0 [ 963.572111][T19073] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 963.577979][T19073] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 963.583822][T19073] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 963.589435][T19073] ? security_sctp_bind_connect+0x89/0xb0 [ 963.595187][T19073] sctp_sendmsg+0x1519/0x27b0 [ 963.599905][T19073] ? sctp_getsockopt+0xb60/0xb60 [ 963.604880][T19073] ? aa_af_perm+0x330/0x330 [ 963.609433][T19073] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 963.615890][T19073] ? sock_rps_record_flow+0x19/0x3f0 [ 963.621214][T19073] ? inet_sendmsg+0x7e/0x2a0 [ 963.625857][T19073] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 963.631183][T19073] ? inet_send_prepare+0x250/0x250 [ 963.636347][T19073] ____sys_sendmsg+0x61b/0x980 [ 963.641151][T19073] ? __asan_memset+0x22/0x40 [ 963.645780][T19073] ? __sys_sendmsg_sock+0x30/0x30 [ 963.650852][T19073] ? __import_iovec+0x5f2/0x850 [ 963.655752][T19073] ? import_iovec+0x73/0xa0 [ 963.660292][T19073] ___sys_sendmsg+0x2a6/0x360 [ 963.665003][T19073] ? get_pid_task+0x20/0x1e0 [ 963.669659][T19073] ? __sys_sendmsg+0x2b0/0x2b0 [ 963.674475][T19073] ? __lock_acquire+0x7d80/0x7d80 [ 963.679551][T19073] __se_sys_sendmsg+0x1d0/0x2c0 [ 963.684437][T19073] ? __x64_sys_sendmsg+0x80/0x80 [ 963.689419][T19073] ? lockdep_hardirqs_on+0x98/0x150 [ 963.694652][T19073] do_syscall_64+0x55/0xb0 [ 963.699121][T19073] ? clear_bhb_loop+0x40/0x90 [ 963.703833][T19073] ? clear_bhb_loop+0x40/0x90 [ 963.708566][T19073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.714497][T19073] RIP: 0033:0x7f01a459e159 [ 963.718946][T19073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.738593][T19073] RSP: 002b:00007f01a5513028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.747047][T19073] RAX: ffffffffffffffda RBX: 00007f01a4825fa0 RCX: 00007f01a459e159 [ 963.755059][T19073] RDX: 00000000000080d1 RSI: 0000200000000080 RDI: 0000000000000003 [ 963.763067][T19073] RBP: 00007f01a5513090 R08: 0000000000000000 R09: 0000000000000000 [ 963.771080][T19073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.779111][T19073] R13: 00007f01a4826038 R14: 00007f01a4825fa0 R15: 00007ffe16da3bb8 [ 963.787131][T19073] [ 963.799829][T19049] delete_channel: no stack [ 964.623049][T19078] delete_channel: no stack [ 964.717200][T19090] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4172'. [ 965.075403][T19102] netlink: 'syz.1.4176': attribute type 2 has an invalid length. [ 965.104143][T19102] netlink: 'syz.1.4176': attribute type 11 has an invalid length. [ 965.143508][T19102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4176'. [ 966.547130][T19111] delete_channel: no stack [ 966.844633][T19127] netlink: 'syz.2.4184': attribute type 10 has an invalid length. [ 966.982780][T19112] delete_channel: no stack [ 967.149520][T19123] delete_channel: no stack [ 967.550056][T19146] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 967.882461][T19162] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4196'. [ 968.269117][T19154] delete_channel: no stack [ 971.031649][ C0] [ 971.031659][ C0] ================================ [ 971.031665][ C0] WARNING: inconsistent lock state [ 971.031686][ C0] syzkaller #0 Not tainted [ 971.031696][ C0] -------------------------------- [ 971.031702][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 971.031711][ C0] syz.2.4207/19191 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 971.031732][ C0] ffff888031461a18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 971.031789][ C0] {INITIAL USE} state was registered at: [ 971.031797][ C0] lock_acquire+0x19e/0x420 [ 971.031821][ C0] _raw_spin_lock+0x2e/0x40 [ 971.031845][ C0] htab_lock_bucket+0x17d/0x300 [ 971.031866][ C0] htab_lru_map_update_elem+0x2be/0x990 [ 971.031887][ C0] bpf_map_update_value+0x64b/0x710 [ 971.031905][ C0] generic_map_update_batch+0x5de/0x800 [ 971.031923][ C0] bpf_map_do_batch+0x3f2/0x600 [ 971.031945][ C0] __sys_bpf+0x381/0x890 [ 971.031963][ C0] __x64_sys_bpf+0x7c/0x90 [ 971.031982][ C0] do_syscall_64+0x55/0xb0 [ 971.032009][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.032042][ C0] irq event stamp: 2544 [ 971.032049][ C0] hardirqs last enabled at (2543): [] ___slab_alloc+0x10e9/0x12f0 [ 971.032076][ C0] hardirqs last disabled at (2544): [] exc_debug+0x73/0x140 [ 971.032108][ C0] softirqs last enabled at (2416): [] netlink_insert+0x1094/0x1390 [ 971.032138][ C0] softirqs last disabled at (2414): [] release_sock+0x2f/0x1c0 [ 971.032173][ C0] [ 971.032173][ C0] other info that might help us debug this: [ 971.032179][ C0] Possible unsafe locking scenario: [ 971.032179][ C0] [ 971.032185][ C0] CPU0 [ 971.032189][ C0] ---- [ 971.032192][ C0] lock(&htab->lockdep_key); [ 971.032205][ C0] [ 971.032209][ C0] lock(&htab->lockdep_key); [ 971.032221][ C0] [ 971.032221][ C0] *** DEADLOCK *** [ 971.032221][ C0] [ 971.032225][ C0] no locks held by syz.2.4207/19191. [ 971.032234][ C0] [ 971.032234][ C0] stack backtrace: [ 971.032240][ C0] CPU: 0 PID: 19191 Comm: syz.2.4207 Not tainted syzkaller #0 [ 971.032259][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 971.032271][ C0] Call Trace: [ 971.032278][ C0] <#DB> [ 971.032286][ C0] dump_stack_lvl+0x18c/0x250 [ 971.032316][ C0] ? show_regs_print_info+0x20/0x20 [ 971.032347][ C0] ? print_usage_bug+0x43d/0x6a0 [ 971.032372][ C0] ? verify_lock_unused+0x15/0x140 [ 971.032406][ C0] lock_acquire+0x2c2/0x420 [ 971.032429][ C0] ? look_up_lock_class+0x75/0x140 [ 971.032452][ C0] ? htab_lock_bucket+0x17d/0x300 [ 971.032479][ C0] ? read_lock_is_recursive+0x20/0x20 [ 971.032511][ C0] _raw_spin_lock+0x2e/0x40 [ 971.032534][ C0] ? htab_lock_bucket+0x17d/0x300 [ 971.032557][ C0] htab_lock_bucket+0x17d/0x300 [ 971.032583][ C0] ? htab_lru_map_delete_node+0x770/0x770 [ 971.032608][ C0] ? look_up_lock_class+0x75/0x140 [ 971.032629][ C0] ? verify_lock_unused+0x15/0x140 [ 971.032653][ C0] ? jhash+0x2e8/0x740 [ 971.032678][ C0] htab_lru_map_delete_elem+0x19f/0x640 [ 971.032704][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 971.032728][ C0] ? perf_callchain+0x220/0x220 [ 971.032755][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 971.032777][ C0] bpf_overflow_handler+0x1fc/0x510 [ 971.032808][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 971.032831][ C0] ? bpf_overflow_handler+0xde/0x510 [ 971.032861][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 971.032895][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 971.032922][ C0] __perf_event_overflow+0x461/0x660 [ 971.032951][ C0] perf_swevent_event+0x319/0x570 [ 971.032978][ C0] ? perf_tp_event+0x1550/0x1550 [ 971.033009][ C0] perf_bp_event+0x319/0x430 [ 971.033037][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 971.033078][ C0] ? lock_acquire+0x2c2/0x420 [ 971.033106][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 971.033137][ C0] notifier_call_chain+0x18f/0x380 [ 971.033166][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 971.033194][ C0] atomic_notifier_call_chain+0xda/0x180 [ 971.033227][ C0] notify_die+0x145/0x1a0 [ 971.033255][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 971.033289][ C0] ? rcu_is_watching+0x15/0xb0 [ 971.033318][ C0] notify_debug+0x2e/0x50 [ 971.033338][ C0] exc_debug+0xde/0x140 [ 971.033368][ C0] asm_exc_debug+0x1e/0x40 [ 971.033401][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 971.033432][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 971.033449][ C0] RSP: 0018:ffffc900037df7b8 EFLAGS: 00050206 [ 971.033466][ C0] RAX: ffffffff8431f201 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 971.033480][ C0] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffffc900038c9300 [ 971.033495][ C0] RBP: ffffc900037df8f0 R08: ffffc900038fcfdf R09: 1ffff9200071f9fb [ 971.033510][ C0] R10: dffffc0000000000 R11: fffff5200071f9fc R12: ffffc900038c9000 [ 971.033525][ C0] R13: 0000200000000040 R14: ffffc900037dfe38 R15: 1ffff920006fbfc7 [ 971.033545][ C0] ? _copy_from_iter+0x131/0x1290 [ 971.033580][ C0] [ 971.033585][ C0] [ 971.033591][ C0] _copy_from_iter+0x242/0x1290 [ 971.033622][ C0] ? __rwlock_init+0x150/0x150 [ 971.033651][ C0] ? copyout_mc+0x70/0x70 [ 971.033678][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 971.033706][ C0] ? _raw_spin_unlock+0x28/0x40 [ 971.033730][ C0] ? find_vmap_area+0xfc/0x110 [ 971.033758][ C0] ? __check_object_size+0x4fc/0xa40 [ 971.033780][ C0] netlink_sendmsg+0x76b/0xbf0 [ 971.033809][ C0] ? netlink_getsockopt+0x590/0x590 [ 971.033835][ C0] ? apparmor_socket_sendmsg+0x8e/0x330 [ 971.033861][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 971.033888][ C0] ? security_socket_sendmsg+0x80/0xa0 [ 971.033909][ C0] ? netlink_getsockopt+0x590/0x590 [ 971.033934][ C0] ____sys_sendmsg+0x61b/0x980 [ 971.033964][ C0] ? __asan_memset+0x22/0x40 [ 971.033993][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 971.034017][ C0] ? __import_iovec+0x5f2/0x850 [ 971.034051][ C0] ? import_iovec+0x73/0xa0 [ 971.034082][ C0] ___sys_sendmsg+0x2a6/0x360 [ 971.034110][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 971.034162][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 971.034189][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 971.034224][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 971.034247][ C0] do_syscall_64+0x55/0xb0 [ 971.034273][ C0] ? clear_bhb_loop+0x40/0x90 [ 971.034301][ C0] ? clear_bhb_loop+0x40/0x90 [ 971.034330][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 971.034358][ C0] RIP: 0033:0x7f901fd9e159 [ 971.034373][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.034389][ C0] RSP: 002b:00007f9020d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.034415][ C0] RAX: ffffffffffffffda RBX: 00007f9020025fa0 RCX: 00007f901fd9e159 [ 971.034430][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 971.034443][ C0] RBP: 00007f901fe3506b R08: 0000000000000000 R09: 0000000000000000 [ 971.034456][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.034469][ C0] R13: 00007f9020026038 R14: 00007f9020025fa0 R15: 00007ffe37f47548 [ 971.034492][ C0] [ 971.997957][T19202] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4208'.