last executing test programs: 12.709624898s ago: executing program 3 (id=2437): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004081) sendmsg(r0, 0x0, 0x8080) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4008, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x9, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069108a000000000004000000000000009500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000002000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}]}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, @cgroup_sock=0xd, r3, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, &(0x7f0000000540)=[r4], &(0x7f0000000580), 0x10, 0x80000000}, 0x94) recvmsg(r0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b9040211080218000000040000a118000200e0009bbb54fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f5aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 12.198157519s ago: executing program 3 (id=2440): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='jbd2_run_stats\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='percpu_destroy_chunk\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xe3}, 0x0, 0xdf, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000680)='ns/cgroup\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="eb2e8c5c10f140166c520f97ba0d81f1e6127434ed2766eefab2588799675ee8cae67d6a7affd0a3824dc4", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa204000000000000000000f8ffffffb7ed053cd4df03000008000000b7040000000000008500000003000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) 11.058673551s ago: executing program 3 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x84, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="00000000000000006600ffffff80000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x3, &(0x7f0000000340)=""/206}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x11, 0xff, 0x4, 0x1000, r0, 0xffffff80, '\x00', r1, r2, 0x0, 0x0, 0x1}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x4, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) mkdirat$cgroup(r8, &(0x7f0000000500)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r4, 0x89a1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000000, 0x1}, 0x0, 0x401, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2a5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f3, &(0x7f0000000080)) 7.272902035s ago: executing program 3 (id=2457): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x7, 0x2, 0x8, 0x0, 0x3, 0x24, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x200, 0x8000, 0x3, 0x2, 0x8f68, 0x858, 0x101, 0x0, 0x9, 0x0, 0x8}, r0, 0x9, r0, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x995, '\x00', 0x0, r0, 0x1, 0x2, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x200, 0xd, 0x7ff, 0x0, r0, 0x7, '\x00', 0x0, r0, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x18, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x52, &(0x7f0000000200)=""/82, 0x41100, 0x69, '\x00', r2, @fallback=0x2, r0, 0x8, &(0x7f0000000580)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r0, r0, r0, r0, r0, r4, r0, r5], 0x0, 0x10, 0xffffff27}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x8}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @const={0x6, 0x0, 0x0, 0xa, 0x4}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @var={0x6, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x6f]}}, &(0x7f0000000840)=""/97, 0x7f, 0x61, 0x1, 0x4, 0x10000, @value=r0}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x12, &(0x7f0000000900)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @generic={0x0, 0x5, 0x4, 0x4, 0xfffffffa}, @alu={0x4, 0x0, 0x7, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit], &(0x7f00000009c0)='GPL\x00', 0x3, 0x97, &(0x7f0000000a00)=""/151, 0x40f00, 0x40, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x10, 0xe50c, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r0, r5, r0, r4], &(0x7f0000000b80)=[{0x3, 0x4, 0x3, 0x5}, {0x5, 0x5, 0x9, 0xb}, {0x0, 0x4, 0xb, 0x1}, {0x5, 0x2, 0x8, 0xb}, {0x3, 0x1, 0x9, 0xb}, {0x0, 0x1, 0xc, 0x1}, {0x5, 0x4, 0x3, 0x4}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001ec0)={&(0x7f0000000cc0), &(0x7f0000000d00)=""/4096, &(0x7f0000001d00)="2d4a55c749a4c6044e7c519c081299f66d9f5fb51063e14387d39deeac5cde3810c80443c5bec8c7a3c1c68faab23367d6979f244b868aa54d16db65dc87a555b78edb59e1dbdf69676c84710d055c857c91e1beaa598599ace6dad28fdd7bc7f7c0763d4bbb2a4073067d32b05d3148fc03dde32b8e14fad07b4ec8b138f8b71718228e540e0629c3c24631408a34acf8d9c7fddcd695ba4f76195e501dbf137d", &(0x7f0000001dc0)="bebfc37848e0c27b4b304a943d8184963b0a53e43c3ebd546adb63dc38135e8ec3bbaaca3be0bc14a7a1d62ae9b72f3afb928fd91553c2f052708934242bbf8c27e8b1e87dd772d8bb09d08bd63c4811d9ccf9f749f17b67b3d6de432252b67c298058a4c4d8c807bd8b1a1bc66b270f110e8c61a81e23c197f2fa52f5f636b7085787d08b97037f8c214df867ca562f0a76f634b2ab73be930722926e7157ddf7941d66e57a2746ca00385c1f0b67f92dcfe2604c618d42e40bcbd001e0b1adf7a2506c57ddd73aee15b38f599bb9d3cec33d302333b018aafd3d980677d3c20337bcf6afb41216a8900d", 0x1, r5}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002100)={r4, 0x58, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@base={0x11, 0x3, 0x2, 0xf, 0x40, r5, 0x7, '\x00', r2, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002280)={0x6, 0xe, &(0x7f0000001f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4b80, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000001f80)='syzkaller\x00', 0x2, 0x9a, &(0x7f0000001fc0)=""/154, 0x40f00, 0x0, '\x00', r9, 0x25, r6, 0x8, &(0x7f0000002140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002180)={0x0, 0x3, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002240)=[r0, r10], 0x0, 0x10, 0x3}, 0x94) r11 = socket$kcm(0x29, 0x5, 0x0) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000023c0)=r3, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@bloom_filter={0x1e, 0x8000000, 0xff, 0x8, 0x4880a, r0, 0x5, '\x00', 0x0, r0, 0x5, 0x0, 0x4, 0xa, @value=r12}, 0x50) write$cgroup_int(r0, &(0x7f0000002400)=0x5, 0x12) r14 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000002440)={r14}) sendmsg$sock(r14, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002480)="ed70d385878394b465f4c28434d1e4eed6aa05d1bd971f1564be70b4efb861f37b2c98bd9761184a671ede3afb6c93c74039962a897e4a63c976171e4f50a8c74e812714d91d831b7bebc74e96c08b07aa9c1c7cead2fae7e55c4fd6357cd1c3f0a908", 0x63}, {&(0x7f0000002500)="562797d80d1ad347e80bd91a22a45898a17229d4eaaac0f516890f921df064e0d3fcda3a28", 0x25}, {&(0x7f0000002540)="324726c59604108b94e6098dadf1e11164e0bd02891fe4b5c78769f052f3c0d85b1d10ec1f646e8414128f9bab279c9ccf8790c790662665ebb34a9818511f522fa133fb5ba0ab08dd748a3f68d46d1274b2b8c375ef61acabe04253469a40b80ed42f92a20663b63de1e0f7942430b3412fd929dbb07f66f34dff7b2411cae4a12c3a577cea797bdb09944a5bebbc57aaca903c5179a46e3614e8959a0fb2850ddef6b49cf9525972f1313f5ed306800260150492f408090fe2edaa6701e1aa1c862c61b2cdb1f96511f985f85268845ed9ed6ff1b96e3053570c39bdc5", 0xde}, {&(0x7f0000002640)="2d59cd8ebbb6653c08aef4fc3fbe86d4924868eacd20f824e866157323a88b0500aaac997870499fc91473", 0x2b}, {&(0x7f0000002680)="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", 0xff}, {&(0x7f0000002780)="5381d2c07396f3651ab4dbc155918abb25a4bd8636947b256c5794aa1efc95589163208480189f46343c4acb74319562f4822e1c4b818c9e5e252d1901e29dd71bf142d5d8212c035058a86a4e71d80bd44c", 0x52}], 0x6, &(0x7f0000002880)=[@timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x60}, 0x24000880) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ac0)={&(0x7f0000002a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x5, 0x0, 0x0, 0x2, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @volatile={0xc}]}, {0x0, [0x30, 0x20]}}, &(0x7f0000002a80)=""/50, 0x40, 0x32, 0x1, 0xfffffffa, 0x10000, @value=r0}, 0x28) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002b80)={r8, 0x6}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c40)=@bpf_ext={0x1c, 0x9, &(0x7f0000002940)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000029c0)='syzkaller\x00', 0x7, 0x12, &(0x7f0000002a00)=""/18, 0x41100, 0x21, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000002b00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002b40)={0x5, 0x10, 0xd, 0xcf11}, 0x10, 0x26364, 0xffffffffffffffff, 0x2, &(0x7f0000002bc0)=[r13, r5, r16, r5, r10], &(0x7f0000002c00)=[{0x4, 0x3, 0xe, 0x5}, {0x2, 0x5, 0xa, 0xe}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000002d40)={0x2, 0x80, 0xc0, 0x9, 0x3, 0x2, 0x0, 0x7, 0x18300, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000002d00), 0x6}, 0x80, 0x4b4, 0xf67, 0x2, 0x3, 0x6, 0x9, 0x0, 0x2, 0x0, 0x194475b9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003180)={r7, 0xe0, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000002f00)=[0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000002f80)=[{}], 0x8, 0x10, &(0x7f0000002fc0), &(0x7f0000003000), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000003040)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003240)={0x6, 0x14, &(0x7f0000002dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xf3c3}]}, &(0x7f0000002e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', r17, 0x25, r16, 0x8, &(0x7f00000031c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000003200)={0x3, 0x4, 0x4, 0x1a1b}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r18 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003300)=r3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003340)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', 0x0, r18, 0x1, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000045c0)={&(0x7f00000033c0)="914f45f1ba06d201a2b00c537e270d2282bc6bac412c7d2e3f1c6a520a1bc16922579a5bac2cc60555aaf5992170e6b0a3ac4b0cc487660eb6f12113ad3103e0376fd9ac67747595de69fac0380583b1ba38a33e4b10cd168deab03180812c55f0c20504039db955172d9f4354c6fe36f9ca5d87d857f61acc120cb0b47c91970b8257ac4a27fde95aad8d1c1f7c1a1d33e4ee4bfe36344b265cd265c0be1585ca60b6c23aa387afeceec075a24662bf6cad3f", &(0x7f0000003480)=""/116, &(0x7f0000003500)="f098fce55e716593e6d9c6335d9831037388ff69d7ed037b89b323b3281d3bf382d836d3bcb24be1f3bc42e51940819c3b80e4589cbf0dcd72a1be0beaf9488de206b6e1f3b8c09a8f91b6e6bcfc1035c4f8ffc191a3c5e785b48d48e61961c83837d7cc5a79f0af2a9ff958747edcb99ec05f3b36b5c427edac83ba9f80bbffbff8347e9dc80661eaa9a2756aa34667edf440edcd027a71da59c2db7f002d979bee544a", &(0x7f00000035c0)="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", 0x7, r13}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004600)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x1bbde6f, '\x00', r9, r6, 0x0, 0x4, 0x4}, 0x50) 7.052530733s ago: executing program 3 (id=2458): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.887303116s ago: executing program 3 (id=2460): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x14, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc109, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000ec510000000000000000"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000280)="b6"}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000001c0)=[{0x35, 0x0, 0x3, 0x40000000}, {0x74, 0x0, 0x42, 0xffffffff}, {}, {0x733b, 0x0, 0x0, 0x20000000}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x8, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040220080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8101600200004400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0xffffffffffffffae, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141683089f034d2f87e5830c04ab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x701080, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f00000004c0)=r8) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 6.245865598s ago: executing program 0 (id=2462): r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 5.902250935s ago: executing program 0 (id=2463): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x65, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffff, 0x7}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000001b00009500008000000000"], &(0x7f0000000140)='GPL\x00', 0x5}, 0x94) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20000000000000000c010000070028b4db0a790000db8f3edb6ff28518ad74a2eded415e0010000000000000000600000007000000"], 0x30}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x1010, 0x2, 0x2, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1c0000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x8841) 3.894116607s ago: executing program 1 (id=2470): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, 0x48) 3.329243072s ago: executing program 1 (id=2471): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="1400000076007f27c8fdc6000000000000000000", 0x14}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYBLOB="3e050b"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x48) 3.079081302s ago: executing program 1 (id=2472): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r4) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500)=r5, 0x4) 2.901273507s ago: executing program 1 (id=2473): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x14, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc109, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000ec510000000000000000"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000280)="b6"}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000001c0)=[{0x35, 0x0, 0x3, 0x40000000}, {0x74, 0x0, 0x42, 0xffffffff}, {}, {0x733b, 0x0, 0x0, 0x20000000}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x8, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040220080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8101600200004400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0xffffffffffffffae, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.257410949s ago: executing program 2 (id=2476): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x48084) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000180)}, 0x10880, 0xc8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 2.065349534s ago: executing program 2 (id=2477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x8080) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x9df6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40107447, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) 1.36753162s ago: executing program 2 (id=2478): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x14, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc109, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000ec510000000000000000"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000280)="b6"}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000001c0)=[{0x35, 0x0, 0x3, 0x40000000}, {0x74, 0x0, 0x42, 0xffffffff}, {}, {0x733b, 0x0, 0x0, 0x20000000}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x8, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040220080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8101600200004400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0xffffffffffffffae, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000ec510000000000000000"]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000280)="b6"}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000001c0)=[{0x35, 0x0, 0x3, 0x40000000}, {0x74, 0x0, 0x42, 0xffffffff}, {}, {0x733b, 0x0, 0x0, 0x20000000}, {0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x8, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x3}}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9040220080006007c09e8fe55a10a0005000400142603600e1208001e0000000401a8101600200004400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0xffffffffffffffae, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="efffffff000200000000000000000000000000290000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4, 0x20d}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$sock(r5, &(0x7f0000000940)={&(0x7f0000000680)=@l2={0x1f, 0x1ff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0x80, 0x0}, 0x30004080) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 154.412768ms ago: executing program 1 (id=2481): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040)=r1, 0x4) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x69, 0x0, 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x5b, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xfffffffc, '\x00', r5, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4, 0x0, 0xe0ed, 0x128, r1, 0x200, '\x00', r5, r1, 0x0, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x4}, {0x0, 0x4, 0x10004}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f00000004c0)="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"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r8, &(0x7f0000000040)}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 62.392795ms ago: executing program 0 (id=2482): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 8) 0s ago: executing program 2 (id=2483): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): AX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 441.214055][T11370] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 441.222142][T11370] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 441.230204][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.238273][T11370] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 441.246435][T11370] [ 441.558673][T11378] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1802'. [ 441.601092][T11378] netlink: zone id is out of range [ 441.618794][T11378] netlink: zone id is out of range [ 441.642904][T11381] syzkaller0: entered allmulticast mode [ 441.646709][T11378] netlink: zone id is out of range [ 441.653733][T11378] netlink: zone id is out of range [ 441.684110][T11378] netlink: zone id is out of range [ 441.705314][T11378] netlink: zone id is out of range [ 441.731990][T11378] netlink: zone id is out of range [ 441.749898][T11378] netlink: zone id is out of range [ 441.755113][T11378] netlink: zone id is out of range [ 441.785664][T11378] netlink: zone id is out of range [ 441.908709][T11386] lo: left promiscuous mode [ 441.934004][T11386] lo: entered allmulticast mode [ 442.092961][T11385] netlink: 'syz.0.1804': attribute type 5 has an invalid length. [ 442.102927][T11385] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1804'. [ 442.197191][T11386] lo: entered promiscuous mode [ 442.202073][T11386] lo: left allmulticast mode [ 442.439419][T11402] netlink: 'syz.2.1810': attribute type 2 has an invalid length. [ 442.447821][T11402] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1810'. [ 443.523104][T11417] netlink: 'syz.3.1816': attribute type 39 has an invalid length. [ 443.894413][T11430] netlink: 'syz.2.1819': attribute type 12 has an invalid length. [ 443.903391][T11430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1819'. [ 443.969246][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 443.978574][T11434] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 443.990676][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1820'. [ 444.193304][T11439] lo: left promiscuous mode [ 444.211051][T11439] lo: entered allmulticast mode [ 444.609777][T11436] netlink: 'syz.2.1821': attribute type 5 has an invalid length. [ 444.618740][T11436] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1821'. [ 444.633861][T11436] lo: entered promiscuous mode [ 444.639773][T11436] lo: left allmulticast mode [ 445.861140][T11472] FAULT_INJECTION: forcing a failure. [ 445.861140][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 445.879811][T11472] CPU: 0 PID: 11472 Comm: syz.2.1833 Not tainted 6.6.102-syzkaller #0 [ 445.888060][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.898165][T11472] Call Trace: [ 445.901523][T11472] [ 445.904492][T11472] dump_stack_lvl+0x16c/0x230 [ 445.909266][T11472] ? show_regs_print_info+0x20/0x20 [ 445.914537][T11472] ? load_image+0x3b0/0x3b0 [ 445.919111][T11472] ? __might_sleep+0xe0/0xe0 [ 445.923849][T11472] ? __lock_acquire+0x7c80/0x7c80 [ 445.929024][T11472] should_fail_ex+0x39d/0x4d0 [ 445.933767][T11472] should_failslab+0x9/0x20 [ 445.938326][T11472] slab_pre_alloc_hook+0x59/0x310 [ 445.943474][T11472] ? tomoyo_encode+0x28b/0x540 [ 445.948341][T11472] ? tomoyo_encode+0x28b/0x540 [ 445.953300][T11472] __kmem_cache_alloc_node+0x53/0x260 [ 445.958844][T11472] ? tomoyo_encode+0x28b/0x540 [ 445.963680][T11472] __kmalloc+0xa4/0x240 [ 445.967910][T11472] tomoyo_encode+0x28b/0x540 [ 445.972734][T11472] tomoyo_realpath_from_path+0x592/0x5d0 [ 445.978443][T11472] tomoyo_path_number_perm+0x1ea/0x590 [ 445.983983][T11472] ? tomoyo_path_number_perm+0x1ba/0x590 [ 445.989674][T11472] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 445.995171][T11472] ? ksys_write+0x1c1/0x250 [ 445.999820][T11472] ? __fget_files+0x28/0x4d0 [ 446.004455][T11472] security_file_ioctl+0x70/0xa0 [ 446.009422][T11472] __se_sys_ioctl+0x48/0x170 [ 446.014069][T11472] do_syscall_64+0x55/0xb0 [ 446.018615][T11472] ? clear_bhb_loop+0x40/0x90 [ 446.023319][T11472] ? clear_bhb_loop+0x40/0x90 [ 446.028016][T11472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.033938][T11472] RIP: 0033:0x7f206cf8ebe9 [ 446.038459][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.058200][T11472] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 446.066903][T11472] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 446.074898][T11472] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000003 [ 446.083075][T11472] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 446.091066][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.099060][T11472] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 446.107333][T11472] [ 446.145363][T11472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.291366][T11481] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 446.540511][T11481] syz_tun: entered promiscuous mode [ 446.681072][T11481] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 446.783601][T11483] lo: left promiscuous mode [ 446.816181][T11483] lo: entered allmulticast mode [ 446.934952][T11489] netlink: 'syz.0.1836': attribute type 5 has an invalid length. [ 446.982696][T11489] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1836'. [ 447.091857][T11479] lo: entered promiscuous mode [ 447.114352][T11479] lo: left allmulticast mode [ 448.346634][ T58] wlan1: Trigger new scan to find an IBSS to join [ 448.356998][T11516] lo: left promiscuous mode [ 448.394880][T11516] lo: entered allmulticast mode [ 448.694269][T11514] netlink: 'syz.2.1846': attribute type 5 has an invalid length. [ 448.711074][T11514] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1846'. [ 449.004234][T11514] lo: entered promiscuous mode [ 449.011778][T11514] lo: left allmulticast mode [ 449.402230][T11530] lo: left promiscuous mode [ 449.418803][T11530] lo: entered allmulticast mode [ 449.785736][T11524] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 450.285813][T11536] lo: entered promiscuous mode [ 450.290725][T11536] lo: left allmulticast mode [ 450.407960][T11530] netlink: 'syz.2.1851': attribute type 5 has an invalid length. [ 450.429078][T11530] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1851'. [ 450.594265][T11537] lo: left promiscuous mode [ 450.601282][T11537] lo: entered allmulticast mode [ 450.903271][T11537] netlink: 'syz.0.1852': attribute type 5 has an invalid length. [ 450.914307][T11537] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1852'. [ 451.087215][T11535] lo: entered promiscuous mode [ 451.092388][T11535] lo: left allmulticast mode [ 451.941807][T11559] netlink: 'syz.1.1858': attribute type 2 has an invalid length. [ 451.950446][T11559] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1858'. [ 452.163035][T11564] lo: left promiscuous mode [ 452.174552][T11564] lo: entered allmulticast mode [ 452.316078][T11564] netlink: 'syz.3.1859': attribute type 5 has an invalid length. [ 452.351464][T11564] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1859'. [ 452.453793][T11569] lo: left promiscuous mode [ 452.478924][T11569] lo: entered allmulticast mode [ 452.955807][T11572] lo: left promiscuous mode [ 452.975899][T11572] lo: entered allmulticast mode [ 453.204403][T11567] lo: entered promiscuous mode [ 453.222249][T11567] lo: left allmulticast mode [ 453.284708][T11574] netlink: 'syz.1.1861': attribute type 5 has an invalid length. [ 453.354715][T11574] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1861'. [ 453.367766][ T1013] wlan1: Trigger new scan to find an IBSS to join [ 453.432254][T11576] netlink: 'syz.2.1862': attribute type 5 has an invalid length. [ 453.455702][T11576] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1862'. [ 453.804307][T11580] lo: left promiscuous mode [ 453.810021][T11580] lo: entered allmulticast mode [ 453.820929][T11569] lo: entered promiscuous mode [ 453.826145][T11569] lo: left allmulticast mode [ 453.845064][T11583] netlink: 'syz.0.1863': attribute type 5 has an invalid length. [ 453.856053][T11583] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1863'. [ 453.865514][T11573] lo: entered promiscuous mode [ 453.871509][T11573] lo: left allmulticast mode [ 453.911618][T11585] lo: entered promiscuous mode [ 453.919338][T11585] lo: left allmulticast mode [ 454.229417][T11595] netlink: 'syz.0.1868': attribute type 2 has an invalid length. [ 454.237481][T11595] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1868'. [ 454.341447][ T11] wlan1: Creating new IBSS network, BSSID 12:f8:d3:79:ff:1f [ 455.371453][T11614] lo: left promiscuous mode [ 455.390461][T11614] lo: entered allmulticast mode [ 455.565927][T11613] netlink: 'syz.2.1872': attribute type 5 has an invalid length. [ 455.573973][T11613] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1872'. [ 455.686878][T11614] lo: entered promiscuous mode [ 455.691756][T11614] lo: left allmulticast mode [ 456.346055][T11623] lo: left promiscuous mode [ 456.371992][T11623] lo: entered allmulticast mode [ 456.520088][T11628] lo: left promiscuous mode [ 456.524682][T11628] lo: entered allmulticast mode [ 456.667289][T11621] netlink: 'syz.2.1875': attribute type 5 has an invalid length. [ 456.675217][T11621] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1875'. [ 456.786188][T11628] netlink: 'syz.3.1876': attribute type 5 has an invalid length. [ 456.794028][T11628] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1876'. [ 457.027784][T11631] lo: entered promiscuous mode [ 457.069441][T11631] lo: left allmulticast mode [ 457.403931][T11628] lo: entered promiscuous mode [ 457.433506][T11628] lo: left allmulticast mode [ 457.781993][T11635] netlink: 'syz.2.1879': attribute type 2 has an invalid length. [ 457.792155][T11635] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1879'. [ 458.152309][T11642] lo: left promiscuous mode [ 458.171731][T11642] lo: entered allmulticast mode [ 458.505987][T11640] netlink: 'syz.3.1881': attribute type 5 has an invalid length. [ 458.519683][T11640] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1881'. [ 458.567838][T11640] lo: entered promiscuous mode [ 458.573281][T11640] lo: left allmulticast mode [ 459.631448][T11659] lo: left promiscuous mode [ 459.644967][T11659] lo: entered allmulticast mode [ 459.723003][T11659] netlink: 'syz.2.1884': attribute type 5 has an invalid length. [ 459.742552][T11659] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1884'. [ 459.883793][T11663] lo: entered promiscuous mode [ 459.892228][T11663] lo: left allmulticast mode [ 460.405949][T11673] lo: left promiscuous mode [ 460.432596][T11673] lo: entered allmulticast mode [ 460.664076][T11672] netlink: 'syz.2.1888': attribute type 5 has an invalid length. [ 460.679673][T11672] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1888'. [ 460.779903][T11673] lo: entered promiscuous mode [ 460.784796][T11673] lo: left allmulticast mode [ 460.907650][T11677] netlink: 'syz.0.1890': attribute type 2 has an invalid length. [ 460.924705][T11677] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1890'. [ 462.827380][T11698] lo: left promiscuous mode [ 462.835820][T11698] lo: entered allmulticast mode [ 463.259334][T11698] netlink: 'syz.0.1898': attribute type 5 has an invalid length. [ 463.302007][T11698] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1898'. [ 463.476209][T11698] lo: entered promiscuous mode [ 463.481087][T11698] lo: left allmulticast mode [ 464.272006][T11703] netlink: 'syz.0.1900': attribute type 2 has an invalid length. [ 464.343301][T11703] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1900'. [ 464.555737][T11707] lo: left promiscuous mode [ 464.560338][T11707] lo: entered allmulticast mode [ 464.742333][T11707] netlink: 'syz.3.1901': attribute type 5 has an invalid length. [ 464.750614][T11707] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1901'. [ 464.818082][T11708] lo: entered promiscuous mode [ 464.835790][T11708] lo: left allmulticast mode [ 466.207009][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1908'. [ 466.281707][T11732] netlink: 'syz.0.1908': attribute type 21 has an invalid length. [ 466.293128][T11732] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 466.303589][T11732] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1908'. [ 466.505832][T11735] netlink: 'syz.2.1910': attribute type 2 has an invalid length. [ 466.524809][T11735] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1910'. [ 468.141050][T11748] lo: left promiscuous mode [ 468.145799][T11748] lo: entered allmulticast mode [ 468.279785][T11747] netlink: 'syz.3.1913': attribute type 5 has an invalid length. [ 468.289219][T11747] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1913'. [ 468.499319][T11749] lo: entered promiscuous mode [ 468.506235][T11749] lo: left allmulticast mode [ 470.041251][T11766] netlink: 'syz.0.1920': attribute type 2 has an invalid length. [ 470.065721][T11766] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1920'. [ 470.762291][T11784] lo: left promiscuous mode [ 470.779362][T11784] lo: entered allmulticast mode [ 470.921219][T11784] netlink: 'syz.2.1924': attribute type 5 has an invalid length. [ 470.952182][T11784] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1924'. [ 471.143563][T11783] lo: entered promiscuous mode [ 471.172820][T11783] lo: left allmulticast mode [ 471.583656][T11792] lo: left promiscuous mode [ 471.602485][T11792] lo: entered allmulticast mode [ 471.738375][T11792] netlink: 'syz.2.1925': attribute type 5 has an invalid length. [ 471.765832][T11792] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1925'. [ 471.886406][T11794] lo: entered promiscuous mode [ 471.891376][T11794] lo: left allmulticast mode [ 472.657360][T11809] netlink: 'syz.2.1932': attribute type 2 has an invalid length. [ 472.665202][T11809] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1932'. [ 473.056267][T11814] lo: left promiscuous mode [ 473.066029][T11814] lo: entered allmulticast mode [ 473.273167][T11814] netlink: 'syz.2.1935': attribute type 5 has an invalid length. [ 473.281627][T11814] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1935'. [ 473.648930][T11815] lo: entered promiscuous mode [ 473.664971][T11815] lo: left allmulticast mode [ 475.737804][T11839] netlink: 'syz.2.1943': attribute type 2 has an invalid length. [ 475.749877][T11839] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1943'. [ 475.920367][T11841] netlink: 'syz.1.1952': attribute type 2 has an invalid length. [ 475.928478][T11841] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1952'. [ 476.612593][T11852] lo: left promiscuous mode [ 476.625828][T11852] lo: entered allmulticast mode [ 476.688807][T11852] netlink: 'syz.2.1947': attribute type 5 has an invalid length. [ 476.715678][T11852] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1947'. [ 476.826970][T11856] lo: entered promiscuous mode [ 476.852308][T11856] lo: left allmulticast mode [ 477.248467][T11864] lo: left promiscuous mode [ 477.277004][T11864] lo: entered allmulticast mode [ 477.550298][T11861] netlink: 'syz.1.1949': attribute type 5 has an invalid length. [ 477.572350][T11861] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1949'. [ 477.686739][T11864] lo: entered promiscuous mode [ 477.718839][T11864] lo: left allmulticast mode [ 478.408838][T11874] netlink: 'syz.0.1954': attribute type 2 has an invalid length. [ 478.418397][T11874] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1954'. [ 480.040802][T11895] lo: left promiscuous mode [ 480.045502][T11895] lo: entered allmulticast mode [ 480.209503][T11899] lo: left promiscuous mode [ 480.214118][T11899] lo: entered allmulticast mode [ 480.428596][T11896] netlink: 'syz.2.1960': attribute type 5 has an invalid length. [ 480.456454][T11896] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1960'. [ 480.469939][T11892] netlink: 'syz.3.1959': attribute type 5 has an invalid length. [ 480.481135][T11892] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1959'. [ 480.507584][T11896] lo: entered promiscuous mode [ 480.512793][T11896] lo: left allmulticast mode [ 480.551902][T11892] lo: entered promiscuous mode [ 480.562825][T11892] lo: left allmulticast mode [ 482.388902][T11917] netlink: 'syz.3.1965': attribute type 2 has an invalid length. [ 482.405687][T11917] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1965'. [ 482.701144][T11925] lo: left promiscuous mode [ 482.717768][T11925] lo: entered allmulticast mode [ 483.177249][T11923] netlink: 'syz.3.1966': attribute type 5 has an invalid length. [ 483.193498][T11923] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1966'. [ 483.588352][T11923] lo: entered promiscuous mode [ 483.593408][T11923] lo: left allmulticast mode [ 484.377367][ T1013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.691647][T11939] lo: left promiscuous mode [ 484.714155][T11939] lo: entered allmulticast mode [ 485.077284][T11938] netlink: 'syz.1.1970': attribute type 5 has an invalid length. [ 485.094464][T11938] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1970'. [ 485.237427][T11939] lo: entered promiscuous mode [ 485.242324][T11939] lo: left allmulticast mode [ 485.631550][T11943] lo: left promiscuous mode [ 485.649329][T11943] lo: entered allmulticast mode [ 485.701035][T11948] netlink: 'syz.0.1971': attribute type 5 has an invalid length. [ 485.709345][T11948] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1971'. [ 485.821943][T11943] lo: entered promiscuous mode [ 485.843767][T11943] lo: left allmulticast mode [ 486.139210][T11957] lo: left promiscuous mode [ 486.143906][T11957] lo: entered allmulticast mode [ 486.214644][T11957] netlink: 'syz.1.1974': attribute type 5 has an invalid length. [ 486.227552][T11957] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1974'. [ 486.353341][T11957] lo: entered promiscuous mode [ 486.395915][T11957] lo: left allmulticast mode [ 487.566369][T11972] lo: left promiscuous mode [ 487.611525][T11972] lo: entered allmulticast mode [ 487.674742][T11974] lo: left promiscuous mode [ 487.705631][T11974] lo: entered allmulticast mode [ 487.781663][T11973] lo: left promiscuous mode [ 487.830317][T11973] lo: entered allmulticast mode [ 488.010023][T11974] netlink: 'syz.0.1978': attribute type 5 has an invalid length. [ 488.054013][T11974] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1978'. [ 488.108588][T11966] netlink: 'syz.1.1979': attribute type 5 has an invalid length. [ 488.129366][T11966] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1979'. [ 488.209175][T11970] netlink: 'syz.3.1981': attribute type 5 has an invalid length. [ 488.316680][T11970] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1981'. [ 488.438418][T11976] lo: entered promiscuous mode [ 488.535919][T11976] lo: left allmulticast mode [ 488.639965][T11975] lo: entered promiscuous mode [ 488.644827][T11975] lo: left allmulticast mode [ 488.706646][T11977] lo: entered promiscuous mode [ 488.721852][T11977] lo: left allmulticast mode [ 489.619772][T11989] netlink: 'syz.1.1982': attribute type 5 has an invalid length. [ 489.656457][T11989] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1982'. [ 491.173521][T12004] lo: left promiscuous mode [ 491.178864][T12004] lo: entered allmulticast mode [ 491.465266][T12003] netlink: 'syz.3.1987': attribute type 5 has an invalid length. [ 491.474493][T12003] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1987'. [ 491.515427][T12005] lo: entered promiscuous mode [ 491.520526][T12005] lo: left allmulticast mode [ 491.979458][T12009] lo: left promiscuous mode [ 491.987249][T12009] lo: entered allmulticast mode [ 492.488289][T12008] lo: entered promiscuous mode [ 492.493605][T12008] lo: left allmulticast mode [ 494.544268][T12023] lo: left promiscuous mode [ 494.566169][T12023] lo: entered allmulticast mode [ 494.924947][T12021] netlink: 'syz.0.1991': attribute type 5 has an invalid length. [ 494.949501][T12021] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1991'. [ 495.487939][T12021] lo: entered promiscuous mode [ 495.493095][T12021] lo: left allmulticast mode [ 495.546845][T12031] lo: left promiscuous mode [ 495.551638][T12031] lo: entered allmulticast mode [ 496.232043][T12032] netlink: 'syz.2.1995': attribute type 5 has an invalid length. [ 496.244668][T12032] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1995'. [ 496.422945][T12031] lo: entered promiscuous mode [ 496.432580][T12031] lo: left allmulticast mode [ 496.440902][T12041] lo: left promiscuous mode [ 496.454251][T12041] lo: entered allmulticast mode [ 496.482412][T12040] netlink: 'syz.0.1998': attribute type 5 has an invalid length. [ 496.491062][T12040] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1998'. [ 496.875377][T12042] lo: entered promiscuous mode [ 496.882284][T12042] lo: left allmulticast mode [ 497.768291][T12049] lo: left promiscuous mode [ 497.835872][T12049] lo: entered allmulticast mode [ 498.266911][T12047] netlink: 'syz.0.2000': attribute type 5 has an invalid length. [ 498.318793][T12047] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2000'. [ 498.688497][T12047] lo: entered promiscuous mode [ 498.693602][T12047] lo: left allmulticast mode [ 501.988322][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.996088][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.118456][T12080] lo: left promiscuous mode [ 503.188681][T12080] lo: entered allmulticast mode [ 503.481229][T12080] netlink: 'syz.1.2007': attribute type 5 has an invalid length. [ 503.551422][T12080] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2007'. [ 503.687249][T12080] lo: entered promiscuous mode [ 503.775666][T12080] lo: left allmulticast mode [ 504.123157][T12084] lo: left promiscuous mode [ 504.225847][T12084] lo: entered allmulticast mode [ 504.514668][T12084] netlink: 'syz.0.2008': attribute type 5 has an invalid length. [ 504.606050][T12084] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2008'. [ 504.760851][T12083] lo: entered promiscuous mode [ 504.786287][T12083] lo: left allmulticast mode [ 505.040294][T12090] lo: left promiscuous mode [ 505.067635][T12090] lo: entered allmulticast mode [ 505.181568][T12090] netlink: 'syz.1.2009': attribute type 5 has an invalid length. [ 505.212662][T12090] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2009'. [ 505.422402][T12090] lo: entered promiscuous mode [ 505.429063][T12090] lo: left allmulticast mode [ 505.710517][T12098] lo: left promiscuous mode [ 505.717485][T12098] lo: entered allmulticast mode [ 505.856759][T12098] netlink: 'syz.3.2012': attribute type 5 has an invalid length. [ 505.872265][T12098] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2012'. [ 505.969260][T12106] lo: entered promiscuous mode [ 505.974144][T12106] lo: left allmulticast mode [ 506.096025][T12107] lo: left promiscuous mode [ 506.130870][T12107] lo: entered allmulticast mode [ 506.273339][T12107] netlink: 'syz.1.2016': attribute type 5 has an invalid length. [ 506.307434][T12107] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2016'. [ 506.662488][T12104] lo: entered promiscuous mode [ 506.668298][T12104] lo: left allmulticast mode [ 507.221099][T12125] lo: left promiscuous mode [ 507.230411][T12125] lo: entered allmulticast mode [ 507.609686][T12125] netlink: 'syz.1.2021': attribute type 5 has an invalid length. [ 507.618506][T12125] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2021'. [ 507.623221][T12132] FAULT_INJECTION: forcing a failure. [ 507.623221][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 507.659285][T12132] CPU: 1 PID: 12132 Comm: syz.2.2025 Not tainted 6.6.102-syzkaller #0 [ 507.667566][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.677688][T12132] Call Trace: [ 507.681021][T12132] [ 507.684040][T12132] dump_stack_lvl+0x16c/0x230 [ 507.688795][T12132] ? show_regs_print_info+0x20/0x20 [ 507.694058][T12132] ? load_image+0x3b0/0x3b0 [ 507.698636][T12132] ? __might_sleep+0xe0/0xe0 [ 507.703315][T12132] ? __lock_acquire+0x7c80/0x7c80 [ 507.708500][T12132] should_fail_ex+0x39d/0x4d0 [ 507.713255][T12132] should_failslab+0x9/0x20 [ 507.717822][T12132] slab_pre_alloc_hook+0x59/0x310 [ 507.722925][T12132] kmem_cache_alloc+0x5a/0x2e0 [ 507.727871][T12132] ? security_inode_alloc+0x34/0x110 [ 507.733339][T12132] security_inode_alloc+0x34/0x110 [ 507.738562][T12132] inode_init_always+0x8fc/0xc90 [ 507.743611][T12132] new_inode_pseudo+0x95/0x1d0 [ 507.748537][T12132] __sock_create+0x12d/0x940 [ 507.753214][T12132] mptcp_subflow_create_socket+0xf7/0xc00 [ 507.759014][T12132] ? mark_lock+0x94/0x320 [ 507.763413][T12132] ? __mptcp_subflow_connect+0x1370/0x1370 [ 507.769286][T12132] ? lock_chain_count+0x20/0x20 [ 507.774247][T12132] __mptcp_nmpc_sk+0x151/0x730 [ 507.779068][T12132] ? __local_bh_enable_ip+0x12e/0x1c0 [ 507.784558][T12132] ? __bpf_trace_subflow_check_data_avail+0x150/0x150 [ 507.791460][T12132] mptcp_setsockopt+0xfab/0x3250 [ 507.796457][T12132] ? aa_sk_perm+0x7fc/0x930 [ 507.800995][T12132] ? pm_nl_exit_net+0x230/0x230 [ 507.805885][T12132] ? aa_af_perm+0x2b0/0x2b0 [ 507.810437][T12132] ? __fget_files+0x28/0x4d0 [ 507.815182][T12132] ? aa_sock_opt_perm+0x74/0x100 [ 507.820181][T12132] ? sock_common_setsockopt+0x36/0xc0 [ 507.825608][T12132] ? sock_common_recvmsg+0x1b0/0x1b0 [ 507.830942][T12132] do_sock_setsockopt+0x175/0x1a0 [ 507.836099][T12132] ? __fdget+0x180/0x210 [ 507.840425][T12132] __x64_sys_setsockopt+0x184/0x200 [ 507.845664][T12132] do_syscall_64+0x55/0xb0 [ 507.850106][T12132] ? clear_bhb_loop+0x40/0x90 [ 507.854814][T12132] ? clear_bhb_loop+0x40/0x90 [ 507.859551][T12132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.865594][T12132] RIP: 0033:0x7f206cf8ebe9 [ 507.870055][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.889883][T12132] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 507.898676][T12132] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 507.906670][T12132] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000004 [ 507.914756][T12132] RBP: 00007f206de25090 R08: 0000000000000b00 R09: 0000000000000000 [ 507.922851][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.930850][T12132] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 507.938873][T12132] [ 508.054092][T12132] net_ratelimit: 9 callbacks suppressed [ 508.054110][T12132] socket: no more sockets [ 508.075130][T12125] lo: entered promiscuous mode [ 508.080355][T12125] lo: left allmulticast mode [ 508.196969][T12138] netlink: 'syz.2.2026': attribute type 12 has an invalid length. [ 508.204942][T12138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2026'. [ 509.175750][T12152] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2031'. [ 510.199682][T12161] netlink: 'syz.2.2034': attribute type 12 has an invalid length. [ 510.213287][T12161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2034'. [ 511.280490][T12180] lo: left promiscuous mode [ 511.285117][T12180] lo: entered allmulticast mode [ 511.568189][T12179] netlink: 'syz.0.2041': attribute type 5 has an invalid length. [ 511.585990][T12179] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2041'. [ 511.723374][T12180] lo: entered promiscuous mode [ 511.757497][T12180] lo: left allmulticast mode [ 512.431833][T12189] FAULT_INJECTION: forcing a failure. [ 512.431833][T12189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.445497][T12189] CPU: 0 PID: 12189 Comm: syz.3.2043 Not tainted 6.6.102-syzkaller #0 [ 512.453711][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.463905][T12189] Call Trace: [ 512.467236][T12189] [ 512.470214][T12189] dump_stack_lvl+0x16c/0x230 [ 512.475122][T12189] ? show_regs_print_info+0x20/0x20 [ 512.480459][T12189] ? load_image+0x3b0/0x3b0 [ 512.485098][T12189] ? __might_fault+0xaa/0x120 [ 512.489908][T12189] ? __lock_acquire+0x7c80/0x7c80 [ 512.494987][T12189] should_fail_ex+0x39d/0x4d0 [ 512.499764][T12189] _copy_from_user+0x2f/0xe0 [ 512.504500][T12189] __sys_bpf+0x1e9/0x800 [ 512.508882][T12189] ? bpf_link_show_fdinfo+0x350/0x350 [ 512.514409][T12189] ? lock_chain_count+0x20/0x20 [ 512.519325][T12189] __x64_sys_bpf+0x7c/0x90 [ 512.523796][T12189] do_syscall_64+0x55/0xb0 [ 512.528263][T12189] ? clear_bhb_loop+0x40/0x90 [ 512.533077][T12189] ? clear_bhb_loop+0x40/0x90 [ 512.537897][T12189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.543865][T12189] RIP: 0033:0x7fd30778ebe9 [ 512.548346][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.568187][T12189] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.576670][T12189] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 512.584770][T12189] RDX: 0000000000000094 RSI: 00002000000013c0 RDI: 0000000000000005 [ 512.592872][T12189] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 512.600927][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.609029][T12189] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 512.617238][T12189] [ 513.095743][T12201] FAULT_INJECTION: forcing a failure. [ 513.095743][T12201] name failslab, interval 1, probability 0, space 0, times 0 [ 513.108678][T12201] CPU: 1 PID: 12201 Comm: syz.0.2049 Not tainted 6.6.102-syzkaller #0 [ 513.116966][T12201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.127149][T12201] Call Trace: [ 513.130475][T12201] [ 513.133445][T12201] dump_stack_lvl+0x16c/0x230 [ 513.138246][T12201] ? show_regs_print_info+0x20/0x20 [ 513.144103][T12201] ? load_image+0x3b0/0x3b0 [ 513.148660][T12201] ? __might_sleep+0xe0/0xe0 [ 513.153390][T12201] ? __lock_acquire+0x7c80/0x7c80 [ 513.158572][T12201] should_fail_ex+0x39d/0x4d0 [ 513.163408][T12201] should_failslab+0x9/0x20 [ 513.168187][T12201] slab_pre_alloc_hook+0x59/0x310 [ 513.173450][T12201] ? kvmalloc_node+0x70/0x180 [ 513.178263][T12201] ? kvmalloc_node+0x70/0x180 [ 513.183234][T12201] __kmem_cache_alloc_node+0x53/0x260 [ 513.188702][T12201] ? kvmalloc_node+0x70/0x180 [ 513.193420][T12201] __kmalloc_node+0xa4/0x230 [ 513.198154][T12201] kvmalloc_node+0x70/0x180 [ 513.202896][T12201] bpf_test_run_xdp_live+0x180/0x1a20 [ 513.208425][T12201] ? 0xffffffffa0004740 [ 513.212700][T12201] ? bpf_dispatcher_change_prog+0xa76/0xcc0 [ 513.218730][T12201] ? __sys_bpf+0x440/0x800 [ 513.223185][T12201] ? __x64_sys_bpf+0x7c/0x90 [ 513.227979][T12201] ? do_syscall_64+0x55/0xb0 [ 513.232796][T12201] ? xdp_convert_md_to_buff+0x330/0x330 [ 513.238591][T12201] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 513.244954][T12201] ? _copy_from_user+0xa5/0xe0 [ 513.249755][T12201] ? bpf_test_init+0x134/0x150 [ 513.254548][T12201] ? xdp_convert_md_to_buff+0x5b/0x330 [ 513.260151][T12201] bpf_prog_test_run_xdp+0x76c/0xfa0 [ 513.265476][T12201] ? dev_put+0x80/0x80 [ 513.269586][T12201] ? dev_put+0x80/0x80 [ 513.273852][T12201] bpf_prog_test_run+0x321/0x390 [ 513.278937][T12201] __sys_bpf+0x440/0x800 [ 513.283206][T12201] ? bpf_link_show_fdinfo+0x350/0x350 [ 513.288608][T12201] ? lock_chain_count+0x20/0x20 [ 513.293479][T12201] __x64_sys_bpf+0x7c/0x90 [ 513.297921][T12201] do_syscall_64+0x55/0xb0 [ 513.302441][T12201] ? clear_bhb_loop+0x40/0x90 [ 513.307143][T12201] ? clear_bhb_loop+0x40/0x90 [ 513.311840][T12201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.317852][T12201] RIP: 0033:0x7fe11998ebe9 [ 513.322547][T12201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.342275][T12201] RSP: 002b:00007fe11a71b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 513.350805][T12201] RAX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 513.358880][T12201] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 513.366880][T12201] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 513.375051][T12201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.383097][T12201] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 513.391133][T12201] [ 513.665372][T12210] tap0: tun_chr_ioctl cmd 2147767517 [ 513.782712][T12210] tap0: tun_chr_ioctl cmd 1074025680 [ 514.205194][T12218] FAULT_INJECTION: forcing a failure. [ 514.205194][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 514.237058][T12218] CPU: 0 PID: 12218 Comm: syz.3.2054 Not tainted 6.6.102-syzkaller #0 [ 514.245393][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.255642][T12218] Call Trace: [ 514.259003][T12218] [ 514.262078][T12218] dump_stack_lvl+0x16c/0x230 [ 514.266854][T12218] ? show_regs_print_info+0x20/0x20 [ 514.272175][T12218] ? load_image+0x3b0/0x3b0 [ 514.276869][T12218] ? verify_lock_unused+0x140/0x140 [ 514.282153][T12218] should_fail_ex+0x39d/0x4d0 [ 514.286978][T12218] should_failslab+0x9/0x20 [ 514.291566][T12218] slab_pre_alloc_hook+0x59/0x310 [ 514.297021][T12218] kmem_cache_alloc+0x5a/0x2e0 [ 514.301869][T12218] ? skb_clone+0x1eb/0x370 [ 514.306365][T12218] skb_clone+0x1eb/0x370 [ 514.310742][T12218] __netlink_deliver_tap+0x41c/0x830 [ 514.316201][T12218] ? netlink_deliver_tap+0x2e/0x1b0 [ 514.321565][T12218] netlink_deliver_tap+0x19c/0x1b0 [ 514.326764][T12218] netlink_unicast+0x72c/0x8d0 [ 514.331609][T12218] netlink_sendmsg+0x8c1/0xbe0 [ 514.336454][T12218] ? netlink_getsockopt+0x580/0x580 [ 514.341914][T12218] ? aa_sock_msg_perm+0x94/0x150 [ 514.347029][T12218] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 514.352418][T12218] ? security_socket_sendmsg+0x80/0xa0 [ 514.358036][T12218] ? netlink_getsockopt+0x580/0x580 [ 514.363306][T12218] ____sys_sendmsg+0x5bf/0x950 [ 514.368499][T12218] ? __asan_memset+0x22/0x40 [ 514.373159][T12218] ? __sys_sendmsg_sock+0x30/0x30 [ 514.378253][T12218] ? __import_iovec+0x5f2/0x860 [ 514.383188][T12218] ? import_iovec+0x73/0xa0 [ 514.387768][T12218] ___sys_sendmsg+0x220/0x290 [ 514.392519][T12218] ? __sys_sendmsg+0x270/0x270 [ 514.397380][T12218] ? __lock_acquire+0x7c80/0x7c80 [ 514.402499][T12218] __se_sys_sendmsg+0x1a5/0x270 [ 514.407515][T12218] ? __x64_sys_sendmsg+0x80/0x80 [ 514.412721][T12218] ? lockdep_hardirqs_on+0x98/0x150 [ 514.418002][T12218] do_syscall_64+0x55/0xb0 [ 514.422486][T12218] ? clear_bhb_loop+0x40/0x90 [ 514.427223][T12218] ? clear_bhb_loop+0x40/0x90 [ 514.432152][T12218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.438113][T12218] RIP: 0033:0x7fd30778ebe9 [ 514.442551][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.462283][T12218] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.470819][T12218] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 514.478842][T12218] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 514.486973][T12218] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 514.494981][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.503252][T12218] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 514.511378][T12218] [ 514.516895][T12218] netlink: 'syz.3.2054': attribute type 10 has an invalid length. [ 514.525076][T12218] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2054'. [ 514.584119][T12218] team0: entered promiscuous mode [ 514.589958][T12218] team_slave_0: entered promiscuous mode [ 514.610509][T12218] team_slave_1: entered promiscuous mode [ 514.617151][T12218] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 514.718501][T12220] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 514.744535][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 514.974272][T12225] netlink: 'syz.1.2058': attribute type 11 has an invalid length. [ 515.656397][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 515.716552][T12236] lo: left promiscuous mode [ 515.726007][T12236] lo: entered allmulticast mode [ 518.180552][T12238] netlink: 'syz.3.2060': attribute type 5 has an invalid length. [ 518.191313][T12238] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2060'. [ 518.206129][T12233] lo: entered promiscuous mode [ 518.211099][T12233] lo: left allmulticast mode [ 519.314789][T12274] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2070'. [ 519.451946][T12279] tap0: tun_chr_ioctl cmd 2147767517 [ 519.547008][T12279] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 519.732902][T12282] tap0: tun_chr_ioctl cmd 1074025680 [ 520.321618][T12284] lo: left promiscuous mode [ 520.376414][T12284] lo: entered allmulticast mode [ 520.690412][T12284] netlink: 'syz.2.2073': attribute type 5 has an invalid length. [ 520.698344][T12284] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2073'. [ 520.732017][T12297] lo: entered promiscuous mode [ 520.765724][T12297] lo: left allmulticast mode [ 522.492328][T12329] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2085'. [ 522.935828][T12331] tap0: tun_chr_ioctl cmd 2147767517 [ 522.978669][T12332] mac80211_hwsim hwsim8 .3ãc¤±: renamed from wlan1 (while UP) [ 523.370026][T12331] tap0: tun_chr_ioctl cmd 1074025680 [ 523.410667][T12339] lo: left promiscuous mode [ 523.417741][T12339] lo: entered allmulticast mode [ 523.723335][T12338] netlink: 'syz.1.2088': attribute type 5 has an invalid length. [ 523.738850][T12338] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2088'. [ 523.996835][T12339] lo: entered promiscuous mode [ 524.001783][T12339] lo: left allmulticast mode [ 525.237610][T12372] netlink: 'syz.2.2100': attribute type 4 has an invalid length. [ 525.252902][T12371] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2096'. [ 525.262361][T12372] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2100'. [ 526.083468][T12385] lo: left promiscuous mode [ 526.092048][T12385] lo: entered allmulticast mode [ 526.251548][T12383] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 526.454179][T12383] dummy0: entered promiscuous mode [ 526.482938][T12383] team0: Port device dummy0 added [ 526.753673][T12390] netlink: 'syz.3.2102': attribute type 5 has an invalid length. [ 526.795340][T12390] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2102'. [ 526.986482][T12393] FAULT_INJECTION: forcing a failure. [ 526.986482][T12393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.041661][T12393] CPU: 0 PID: 12393 Comm: syz.2.2105 Not tainted 6.6.102-syzkaller #0 [ 527.049999][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.060116][T12393] Call Trace: [ 527.063529][T12393] [ 527.066511][T12393] dump_stack_lvl+0x16c/0x230 [ 527.071239][T12393] ? show_regs_print_info+0x20/0x20 [ 527.076497][T12393] ? load_image+0x3b0/0x3b0 [ 527.081071][T12393] ? __might_fault+0xaa/0x120 [ 527.085799][T12393] ? __lock_acquire+0x7c80/0x7c80 [ 527.090870][T12393] ? perf_trace_lock+0xf7/0x380 [ 527.095779][T12393] should_fail_ex+0x39d/0x4d0 [ 527.100561][T12393] _copy_from_user+0x2f/0xe0 [ 527.105231][T12393] ___sys_sendmsg+0x159/0x290 [ 527.109987][T12393] ? __sys_sendmsg+0x270/0x270 [ 527.114997][T12393] ? __lock_acquire+0x7c80/0x7c80 [ 527.120085][T12393] __se_sys_sendmsg+0x1a5/0x270 [ 527.124992][T12393] ? __x64_sys_sendmsg+0x80/0x80 [ 527.129992][T12393] ? lockdep_hardirqs_on+0x98/0x150 [ 527.135232][T12393] do_syscall_64+0x55/0xb0 [ 527.139675][T12393] ? clear_bhb_loop+0x40/0x90 [ 527.144372][T12393] ? clear_bhb_loop+0x40/0x90 [ 527.149068][T12393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.154999][T12393] RIP: 0033:0x7f206cf8ebe9 [ 527.159434][T12393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.179076][T12393] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.187518][T12393] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 527.195515][T12393] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 527.203514][T12393] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 527.211504][T12393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.219536][T12393] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 527.227573][T12393] [ 527.261012][T12386] lo: entered promiscuous mode [ 527.271625][T12386] lo: left allmulticast mode [ 528.691482][T12420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2114'. [ 528.780528][T12420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2114'. [ 529.318936][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2117'. [ 530.326536][T12451] FAULT_INJECTION: forcing a failure. [ 530.326536][T12451] name failslab, interval 1, probability 0, space 0, times 0 [ 530.409012][T12451] CPU: 1 PID: 12451 Comm: syz.2.2125 Not tainted 6.6.102-syzkaller #0 [ 530.417378][T12451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.427953][T12451] Call Trace: [ 530.431383][T12451] [ 530.434380][T12451] dump_stack_lvl+0x16c/0x230 [ 530.439313][T12451] ? show_regs_print_info+0x20/0x20 [ 530.444738][T12451] ? load_image+0x3b0/0x3b0 [ 530.449343][T12451] ? __might_sleep+0xe0/0xe0 [ 530.454014][T12451] ? __lock_acquire+0x7c80/0x7c80 [ 530.459134][T12451] should_fail_ex+0x39d/0x4d0 [ 530.464046][T12451] should_failslab+0x9/0x20 [ 530.468630][T12451] slab_pre_alloc_hook+0x59/0x310 [ 530.473758][T12451] ? aa_get_newest_label+0xf8/0x5c0 [ 530.479046][T12451] ? sk_prot_alloc+0xe7/0x210 [ 530.483978][T12451] ? sk_prot_alloc+0xe7/0x210 [ 530.488818][T12451] __kmem_cache_alloc_node+0x53/0x260 [ 530.494289][T12451] ? sk_prot_alloc+0xe7/0x210 [ 530.499032][T12451] __kmalloc+0xa4/0x240 [ 530.503267][T12451] sk_prot_alloc+0xe7/0x210 [ 530.507958][T12451] ? sk_alloc+0x24/0x360 [ 530.512451][T12451] sk_alloc+0x3a/0x360 [ 530.516633][T12451] xsk_create+0x102/0x680 [ 530.521128][T12451] __sock_create+0x4a6/0x940 [ 530.525778][T12451] __sys_socket+0xd7/0x1a0 [ 530.530250][T12451] __x64_sys_socket+0x7a/0x90 [ 530.535048][T12451] do_syscall_64+0x55/0xb0 [ 530.539551][T12451] ? clear_bhb_loop+0x40/0x90 [ 530.544287][T12451] ? clear_bhb_loop+0x40/0x90 [ 530.549093][T12451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.555028][T12451] RIP: 0033:0x7f206cf8ebe9 [ 530.559469][T12451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.579211][T12451] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 530.587701][T12451] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 530.596048][T12451] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 530.604050][T12451] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 530.612046][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.620042][T12451] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 530.628065][T12451] [ 530.926334][T12458] FAULT_INJECTION: forcing a failure. [ 530.926334][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.953277][T12459] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2129'. [ 530.963057][T12458] CPU: 1 PID: 12458 Comm: syz.1.2127 Not tainted 6.6.102-syzkaller #0 [ 530.971273][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.981379][T12458] Call Trace: [ 530.984703][T12458] [ 530.987685][T12458] dump_stack_lvl+0x16c/0x230 [ 530.992427][T12458] ? show_regs_print_info+0x20/0x20 [ 530.997670][T12458] ? load_image+0x3b0/0x3b0 [ 531.002230][T12458] ? __lock_acquire+0x7c80/0x7c80 [ 531.007302][T12458] ? snprintf+0xdb/0x120 [ 531.011597][T12458] should_fail_ex+0x39d/0x4d0 [ 531.016423][T12458] _copy_to_user+0x2f/0xa0 [ 531.020881][T12458] simple_read_from_buffer+0xe7/0x150 [ 531.026409][T12458] proc_fail_nth_read+0x1e3/0x250 [ 531.031491][T12458] ? proc_fault_inject_write+0x340/0x340 [ 531.037171][T12458] ? fsnotify_perm+0x271/0x5e0 [ 531.042350][T12458] ? proc_fault_inject_write+0x340/0x340 [ 531.048110][T12458] vfs_read+0x27e/0x920 [ 531.052302][T12458] ? kernel_read+0x1e0/0x1e0 [ 531.056925][T12458] ? __fget_files+0x28/0x4d0 [ 531.061543][T12458] ? __fget_files+0x44a/0x4d0 [ 531.066248][T12458] ? __fdget_pos+0x2a3/0x330 [ 531.070954][T12458] ? ksys_read+0x75/0x250 [ 531.075399][T12458] ksys_read+0x147/0x250 [ 531.079677][T12458] ? vfs_write+0x940/0x940 [ 531.084122][T12458] ? lockdep_hardirqs_on+0x98/0x150 [ 531.089606][T12458] do_syscall_64+0x55/0xb0 [ 531.094135][T12458] ? clear_bhb_loop+0x40/0x90 [ 531.098829][T12458] ? clear_bhb_loop+0x40/0x90 [ 531.103622][T12458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.109545][T12458] RIP: 0033:0x7f02ff98d5fc [ 531.114064][T12458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 531.133777][T12458] RSP: 002b:00007f030073d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.142218][T12458] RAX: ffffffffffffffda RBX: 00007f02ffbb5fa0 RCX: 00007f02ff98d5fc [ 531.150232][T12458] RDX: 000000000000000f RSI: 00007f030073d0a0 RDI: 0000000000000005 [ 531.158339][T12458] RBP: 00007f030073d090 R08: 0000000000000000 R09: 0000000000000000 [ 531.166333][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 531.174603][T12458] R13: 00007f02ffbb6038 R14: 00007f02ffbb5fa0 R15: 00007ffdf9f92c78 [ 531.182817][T12458] [ 531.424260][T12459] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2129'. [ 531.473765][T12459] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2129'. [ 531.488030][T12466] netlink: 'syz.1.2131': attribute type 39 has an invalid length. [ 534.632483][T12529] netlink: 'syz.1.2153': attribute type 10 has an invalid length. [ 534.655958][T12529] team0: left promiscuous mode [ 534.660818][T12529] team_slave_0: left promiscuous mode [ 534.694937][T12529] team_slave_1: left promiscuous mode [ 534.713477][T12529] dummy0: left promiscuous mode [ 534.748042][T12529] team0: Cannot enslave team device to itself [ 534.903420][T12538] lo: left promiscuous mode [ 534.917971][T12538] lo: entered allmulticast mode [ 535.169224][T12538] netlink: 'syz.3.2155': attribute type 5 has an invalid length. [ 535.209047][T12538] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2155'. [ 535.223492][T12539] lo: entered promiscuous mode [ 535.228790][T12539] lo: left allmulticast mode [ 535.452461][T12543] netlink: 'syz.1.2157': attribute type 21 has an invalid length. [ 537.664780][T12567] FAULT_INJECTION: forcing a failure. [ 537.664780][T12567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.693421][T12567] CPU: 1 PID: 12567 Comm: syz.2.2164 Not tainted 6.6.102-syzkaller #0 [ 537.701687][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.711894][T12567] Call Trace: [ 537.715763][T12567] [ 537.719016][T12567] dump_stack_lvl+0x16c/0x230 [ 537.723775][T12567] ? show_regs_print_info+0x20/0x20 [ 537.729052][T12567] ? load_image+0x3b0/0x3b0 [ 537.733728][T12567] ? __might_fault+0xaa/0x120 [ 537.738547][T12567] ? __lock_acquire+0x7c80/0x7c80 [ 537.743652][T12567] should_fail_ex+0x39d/0x4d0 [ 537.748406][T12567] _copy_from_user+0x2f/0xe0 [ 537.753050][T12567] ___sys_sendmsg+0x159/0x290 [ 537.757789][T12567] ? __sys_sendmsg+0x270/0x270 [ 537.762659][T12567] ? __lock_acquire+0x7c80/0x7c80 [ 537.767814][T12567] __se_sys_sendmsg+0x1a5/0x270 [ 537.772907][T12567] ? __x64_sys_sendmsg+0x80/0x80 [ 537.778192][T12567] ? lockdep_hardirqs_on+0x98/0x150 [ 537.783797][T12567] do_syscall_64+0x55/0xb0 [ 537.788328][T12567] ? clear_bhb_loop+0x40/0x90 [ 537.793054][T12567] ? clear_bhb_loop+0x40/0x90 [ 537.797861][T12567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.803999][T12567] RIP: 0033:0x7f206cf8ebe9 [ 537.808580][T12567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.828512][T12567] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.837003][T12567] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 537.845099][T12567] RDX: 0000000004000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 537.853192][T12567] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 537.861240][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.869242][T12567] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 537.877355][T12567] [ 538.044760][T12569] syzkaller0: entered promiscuous mode [ 538.051738][T12569] syzkaller0: entered allmulticast mode [ 541.512704][T12609] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2180'. [ 541.564696][T12609] FAULT_INJECTION: forcing a failure. [ 541.564696][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 541.598054][T12609] CPU: 1 PID: 12609 Comm: syz.2.2180 Not tainted 6.6.102-syzkaller #0 [ 541.606577][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.616865][T12609] Call Trace: [ 541.620184][T12609] [ 541.623148][T12609] dump_stack_lvl+0x16c/0x230 [ 541.627891][T12609] ? sctp_sendmsg+0x155c/0x27e0 [ 541.632804][T12609] ? ___sys_sendmsg+0x220/0x290 [ 541.637809][T12609] ? show_regs_print_info+0x20/0x20 [ 541.643099][T12609] ? load_image+0x3b0/0x3b0 [ 541.647701][T12609] should_fail_ex+0x39d/0x4d0 [ 541.652452][T12609] should_failslab+0x9/0x20 [ 541.657023][T12609] slab_pre_alloc_hook+0x59/0x310 [ 541.662264][T12609] ? sctp_add_bind_addr+0x8c/0x360 [ 541.667466][T12609] __kmem_cache_alloc_node+0x53/0x260 [ 541.673012][T12609] ? sctp_add_bind_addr+0x8c/0x360 [ 541.678268][T12609] kmalloc_trace+0x2a/0xe0 [ 541.682830][T12609] sctp_add_bind_addr+0x8c/0x360 [ 541.687831][T12609] sctp_copy_local_addr_list+0x30c/0x4e0 [ 541.693611][T12609] ? sctp_copy_local_addr_list+0x9c/0x4e0 [ 541.699426][T12609] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 541.705667][T12609] ? sctp_v4_is_any+0x35/0x60 [ 541.710577][T12609] ? sctp_copy_one_addr+0x8c/0x350 [ 541.715831][T12609] sctp_bind_addr_copy+0x189/0x3c0 [ 541.721017][T12609] sctp_connect_new_asoc+0x2da/0x690 [ 541.726366][T12609] ? __sctp_connect+0xd20/0xd20 [ 541.731387][T12609] ? __local_bh_enable_ip+0x12e/0x1c0 [ 541.736829][T12609] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 541.742430][T12609] ? security_sctp_bind_connect+0x89/0xb0 [ 541.748209][T12609] sctp_sendmsg+0x155c/0x27e0 [ 541.752955][T12609] ? sctp_getsockopt+0xb60/0xb60 [ 541.757960][T12609] ? aa_sk_perm+0x7fc/0x930 [ 541.762559][T12609] ? aa_af_perm+0x2b0/0x2b0 [ 541.767360][T12609] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 541.774000][T12609] ? sock_rps_record_flow+0x19/0x400 [ 541.779421][T12609] ? inet_send_prepare+0x260/0x260 [ 541.784675][T12609] ? inet_sendmsg+0xe9/0x2f0 [ 541.789407][T12609] ? inet_send_prepare+0x260/0x260 [ 541.794911][T12609] ____sys_sendmsg+0x5bf/0x950 [ 541.799833][T12609] ? __asan_memset+0x22/0x40 [ 541.804490][T12609] ? __sys_sendmsg_sock+0x30/0x30 [ 541.809664][T12609] ? __import_iovec+0x5f2/0x860 [ 541.814588][T12609] ? import_iovec+0x73/0xa0 [ 541.819157][T12609] ___sys_sendmsg+0x220/0x290 [ 541.824069][T12609] ? __sys_sendmsg+0x270/0x270 [ 541.828918][T12609] ? __lock_acquire+0x7c80/0x7c80 [ 541.834461][T12609] __se_sys_sendmsg+0x1a5/0x270 [ 541.839546][T12609] ? __x64_sys_sendmsg+0x80/0x80 [ 541.844684][T12609] ? lockdep_hardirqs_on+0x98/0x150 [ 541.849961][T12609] do_syscall_64+0x55/0xb0 [ 541.854597][T12609] ? clear_bhb_loop+0x40/0x90 [ 541.859320][T12609] ? clear_bhb_loop+0x40/0x90 [ 541.864039][T12609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.870076][T12609] RIP: 0033:0x7f206cf8ebe9 [ 541.874539][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.894662][T12609] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.903143][T12609] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 541.911265][T12609] RDX: 00000000000008d0 RSI: 0000200000000b00 RDI: 0000000000000006 [ 541.919306][T12609] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 541.927599][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.935621][T12609] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 541.943663][T12609] [ 542.310777][T12622] netlink: 'syz.2.2182': attribute type 10 has an invalid length. [ 542.366008][T12622] batman_adv: batadv0: Adding interface: team0 [ 542.383784][T12622] batman_adv: batadv0: The MTU of interface team0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.445262][T12622] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 543.498707][T12647] syzkaller0: entered promiscuous mode [ 543.515703][T12647] syzkaller0: entered allmulticast mode [ 543.756832][T12636] syzkaller0: entered promiscuous mode [ 543.762772][T12636] syzkaller0: entered allmulticast mode [ 546.720519][ T11] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.341146][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.568378][T12688] syzkaller0: entered promiscuous mode [ 549.605222][T12688] syzkaller0: entered allmulticast mode [ 552.213733][T12725] netlink: 'syz.3.2216': attribute type 21 has an invalid length. [ 552.239546][T12725] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2216'. [ 552.281256][T12725] pim6reg1: entered allmulticast mode [ 553.590452][T12749] FAULT_INJECTION: forcing a failure. [ 553.590452][T12749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.611493][T12749] CPU: 0 PID: 12749 Comm: syz.2.2224 Not tainted 6.6.102-syzkaller #0 [ 553.619871][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.630268][T12749] Call Trace: [ 553.633618][T12749] [ 553.636619][T12749] dump_stack_lvl+0x16c/0x230 [ 553.641405][T12749] ? show_regs_print_info+0x20/0x20 [ 553.646724][T12749] ? load_image+0x3b0/0x3b0 [ 553.651435][T12749] ? __might_fault+0xaa/0x120 [ 553.656289][T12749] ? __lock_acquire+0x7c80/0x7c80 [ 553.661502][T12749] should_fail_ex+0x39d/0x4d0 [ 553.666395][T12749] _copy_from_user+0x2f/0xe0 [ 553.671284][T12749] vti6_siocdevprivate+0x1b8/0xa00 [ 553.676527][T12749] ? vti6_tnl_xmit+0x1970/0x1970 [ 553.681545][T12749] ? do_raw_spin_lock+0x121/0x2c0 [ 553.686736][T12749] ? __mutex_lock+0x4e8/0xcc0 [ 553.691599][T12749] ? full_name_hash+0xb0/0xe0 [ 553.696415][T12749] dev_ifsioc+0xae6/0xe20 [ 553.701321][T12749] ? dev_ioctl+0x1170/0x1170 [ 553.705992][T12749] ? dev_load+0x21/0x1f0 [ 553.710318][T12749] ? dev_load+0x21/0x1f0 [ 553.714651][T12749] dev_ioctl+0x87a/0x1170 [ 553.719167][T12749] sock_ioctl+0x726/0x7a0 [ 553.723609][T12749] ? sock_poll+0x3d0/0x3d0 [ 553.728273][T12749] ? bpf_lsm_file_ioctl+0x9/0x10 [ 553.733388][T12749] ? security_file_ioctl+0x80/0xa0 [ 553.738587][T12749] ? sock_poll+0x3d0/0x3d0 [ 553.743261][T12749] __se_sys_ioctl+0xfd/0x170 [ 553.747969][T12749] do_syscall_64+0x55/0xb0 [ 553.752546][T12749] ? clear_bhb_loop+0x40/0x90 [ 553.757579][T12749] ? clear_bhb_loop+0x40/0x90 [ 553.762375][T12749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.768548][T12749] RIP: 0033:0x7f206cf8ebe9 [ 553.773149][T12749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.792956][T12749] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.801632][T12749] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 553.810035][T12749] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000005 [ 553.818307][T12749] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 553.826358][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.834771][T12749] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 553.842885][T12749] [ 553.866022][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2225'. [ 553.875128][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2225'. [ 553.891361][T12752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2225'. [ 553.961693][T12751] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2225'. [ 554.025305][T12757] FAULT_INJECTION: forcing a failure. [ 554.025305][T12757] name failslab, interval 1, probability 0, space 0, times 0 [ 554.059032][T12757] CPU: 1 PID: 12757 Comm: syz.2.2226 Not tainted 6.6.102-syzkaller #0 [ 554.067461][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.077745][T12757] Call Trace: [ 554.081073][T12757] [ 554.084060][T12757] dump_stack_lvl+0x16c/0x230 [ 554.088803][T12757] ? show_regs_print_info+0x20/0x20 [ 554.094074][T12757] ? load_image+0x3b0/0x3b0 [ 554.098684][T12757] ? __might_sleep+0xe0/0xe0 [ 554.103504][T12757] ? __lock_acquire+0x7c80/0x7c80 [ 554.108760][T12757] should_fail_ex+0x39d/0x4d0 [ 554.113519][T12757] should_failslab+0x9/0x20 [ 554.118069][T12757] slab_pre_alloc_hook+0x59/0x310 [ 554.123232][T12757] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.129171][T12757] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.134931][T12757] __kmem_cache_alloc_node+0x53/0x260 [ 554.140432][T12757] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.146184][T12757] __kmalloc+0xa4/0x240 [ 554.150367][T12757] tomoyo_realpath_from_path+0xe3/0x5d0 [ 554.155957][T12757] tomoyo_check_open_permission+0x1c3/0x3c0 [ 554.162011][T12757] ? tomoyo_check_open_permission+0x16e/0x3c0 [ 554.168109][T12757] ? tomoyo_check_path_number_acl+0x280/0x280 [ 554.174221][T12757] ? __asan_memset+0x22/0x40 [ 554.178851][T12757] ? __rwlock_init+0x150/0x150 [ 554.183728][T12757] ? tomoyo_file_open+0xed/0x180 [ 554.188798][T12757] security_file_open+0x62/0xa0 [ 554.193727][T12757] do_dentry_open+0x380/0x1500 [ 554.198637][T12757] path_openat+0x274b/0x3190 [ 554.203286][T12757] ? do_filp_open+0x3d0/0x3d0 [ 554.208009][T12757] do_filp_open+0x1c5/0x3d0 [ 554.212545][T12757] ? vfs_tmpfile+0x490/0x490 [ 554.217187][T12757] ? _raw_spin_unlock+0x28/0x40 [ 554.222064][T12757] ? alloc_fd+0x58f/0x630 [ 554.226424][T12757] do_sys_openat2+0x12c/0x1c0 [ 554.231145][T12757] ? do_sys_open+0xe0/0xe0 [ 554.235684][T12757] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 554.241700][T12757] ? lock_chain_count+0x20/0x20 [ 554.246594][T12757] __x64_sys_openat+0x139/0x160 [ 554.251648][T12757] do_syscall_64+0x55/0xb0 [ 554.256089][T12757] ? clear_bhb_loop+0x40/0x90 [ 554.260785][T12757] ? clear_bhb_loop+0x40/0x90 [ 554.265571][T12757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.271594][T12757] RIP: 0033:0x7f206cf8ebe9 [ 554.276035][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.295870][T12757] RSP: 002b:00007f206de25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.304339][T12757] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8ebe9 [ 554.312418][T12757] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 554.320413][T12757] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 554.328424][T12757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.336525][T12757] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 554.344532][T12757] [ 554.377280][T12757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.390027][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2233'. [ 555.425090][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2233'. [ 555.511169][T12774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2233'. [ 555.535971][T12776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2233'. [ 556.631180][T12792] C: renamed from team_slave_0 (while UP) [ 556.659104][T12792] netlink: 'syz.1.2238': attribute type 3 has an invalid length. [ 556.688271][T12792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2238'. [ 556.703043][T12792] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 558.105844][T12820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2248'. [ 558.145692][T12820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2248'. [ 558.184598][T12822] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2248'. [ 558.230823][T12820] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2248'. [ 562.234558][T12835] netlink: 'syz.2.2252': attribute type 9 has an invalid length. [ 562.255325][T12835] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2252'. [ 562.531330][T12843] netlink: 'syz.3.2255': attribute type 46 has an invalid length. [ 562.989270][T12859] netlink: 'syz.2.2258': attribute type 29 has an invalid length. [ 563.026878][T12859] netlink: 'syz.2.2258': attribute type 29 has an invalid length. [ 563.184097][T12859] netlink: 'syz.2.2258': attribute type 29 has an invalid length. [ 563.211540][T12856] netlink: 'syz.2.2258': attribute type 29 has an invalid length. [ 563.372599][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.380402][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.395781][T12859] netlink: 'syz.2.2258': attribute type 29 has an invalid length. [ 563.644031][T12866] netlink: 'syz.0.2260': attribute type 3 has an invalid length. [ 563.660667][T12866] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2260'. [ 563.928631][T12868] FAULT_INJECTION: forcing a failure. [ 563.928631][T12868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.945027][T12872] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2263'. [ 563.951288][T12868] CPU: 1 PID: 12868 Comm: syz.2.2261 Not tainted 6.6.102-syzkaller #0 [ 563.962824][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.973072][T12868] Call Trace: [ 563.976377][T12868] [ 563.979335][T12868] dump_stack_lvl+0x16c/0x230 [ 563.984046][T12868] ? show_regs_print_info+0x20/0x20 [ 563.989474][T12868] ? load_image+0x3b0/0x3b0 [ 563.994035][T12868] ? __lock_acquire+0x7c80/0x7c80 [ 563.999287][T12868] ? snprintf+0xdb/0x120 [ 564.003652][T12868] should_fail_ex+0x39d/0x4d0 [ 564.008482][T12868] _copy_to_user+0x2f/0xa0 [ 564.012969][T12868] simple_read_from_buffer+0xe7/0x150 [ 564.018385][T12868] proc_fail_nth_read+0x1e3/0x250 [ 564.023446][T12868] ? proc_fault_inject_write+0x340/0x340 [ 564.029113][T12868] ? fsnotify_perm+0x271/0x5e0 [ 564.034099][T12868] ? proc_fault_inject_write+0x340/0x340 [ 564.039772][T12868] vfs_read+0x27e/0x920 [ 564.043989][T12868] ? kernel_read+0x1e0/0x1e0 [ 564.048724][T12868] ? __fget_files+0x28/0x4d0 [ 564.053368][T12868] ? __fget_files+0x44a/0x4d0 [ 564.058268][T12868] ? __fdget_pos+0x2a3/0x330 [ 564.062899][T12868] ? ksys_read+0x75/0x250 [ 564.067613][T12868] ksys_read+0x147/0x250 [ 564.071884][T12868] ? vfs_write+0x940/0x940 [ 564.076601][T12868] ? lockdep_hardirqs_on+0x98/0x150 [ 564.081930][T12868] do_syscall_64+0x55/0xb0 [ 564.086400][T12868] ? clear_bhb_loop+0x40/0x90 [ 564.091105][T12868] ? clear_bhb_loop+0x40/0x90 [ 564.095963][T12868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.102336][T12868] RIP: 0033:0x7f206cf8d5fc [ 564.106971][T12868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.126961][T12868] RSP: 002b:00007f206de25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.135513][T12868] RAX: ffffffffffffffda RBX: 00007f206d1b5fa0 RCX: 00007f206cf8d5fc [ 564.143530][T12868] RDX: 000000000000000f RSI: 00007f206de250a0 RDI: 0000000000000005 [ 564.151661][T12868] RBP: 00007f206de25090 R08: 0000000000000000 R09: 0000000000000000 [ 564.159784][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.167803][T12868] R13: 00007f206d1b6038 R14: 00007f206d1b5fa0 R15: 00007fffc6f3d648 [ 564.176016][T12868] [ 565.879085][T12923] FAULT_INJECTION: forcing a failure. [ 565.879085][T12923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.938991][T12923] CPU: 1 PID: 12923 Comm: syz.1.2279 Not tainted 6.6.102-syzkaller #0 [ 565.947446][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.957717][T12923] Call Trace: [ 565.961043][T12923] [ 565.963999][T12923] dump_stack_lvl+0x16c/0x230 [ 565.968716][T12923] ? show_regs_print_info+0x20/0x20 [ 565.974008][T12923] ? load_image+0x3b0/0x3b0 [ 565.978561][T12923] ? __might_fault+0xaa/0x120 [ 565.983267][T12923] ? __lock_acquire+0x7c80/0x7c80 [ 565.988318][T12923] should_fail_ex+0x39d/0x4d0 [ 565.993032][T12923] _copy_from_user+0x2f/0xe0 [ 565.997916][T12923] ip_tunnel_siocdevprivate+0xa7/0x1c0 [ 566.003436][T12923] ? ip_tunnel_update+0xb10/0xb10 [ 566.008582][T12923] ipip6_tunnel_siocdevprivate+0x349/0x15e0 [ 566.014502][T12923] ? sit_tunnel_xmit+0x1f70/0x1f70 [ 566.019651][T12923] ? __mutex_trylock_common+0x153/0x250 [ 566.025230][T12923] ? trace_raw_output_contention_end+0xd0/0xd0 [ 566.031446][T12923] ? rcu_is_watching+0x15/0xb0 [ 566.036341][T12923] ? trace_contention_end+0x39/0xe0 [ 566.041585][T12923] ? __mutex_lock+0x304/0xcc0 [ 566.046289][T12923] ? full_name_hash+0x92/0xe0 [ 566.051173][T12923] dev_ifsioc+0xae6/0xe20 [ 566.055531][T12923] ? dev_ioctl+0x1170/0x1170 [ 566.060151][T12923] ? dev_load+0x21/0x1f0 [ 566.064408][T12923] ? dev_load+0x21/0x1f0 [ 566.068680][T12923] dev_ioctl+0x87a/0x1170 [ 566.073028][T12923] sock_ioctl+0x726/0x7a0 [ 566.077389][T12923] ? sock_poll+0x3d0/0x3d0 [ 566.082013][T12923] ? bpf_lsm_file_ioctl+0x9/0x10 [ 566.086987][T12923] ? security_file_ioctl+0x80/0xa0 [ 566.092310][T12923] ? sock_poll+0x3d0/0x3d0 [ 566.096769][T12923] __se_sys_ioctl+0xfd/0x170 [ 566.101478][T12923] do_syscall_64+0x55/0xb0 [ 566.106061][T12923] ? clear_bhb_loop+0x40/0x90 [ 566.110854][T12923] ? clear_bhb_loop+0x40/0x90 [ 566.115560][T12923] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.121654][T12923] RIP: 0033:0x7f02ff98ebe9 [ 566.126152][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.146228][T12923] RSP: 002b:00007f030073d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.154788][T12923] RAX: ffffffffffffffda RBX: 00007f02ffbb5fa0 RCX: 00007f02ff98ebe9 [ 566.162786][T12923] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000004 [ 566.170781][T12923] RBP: 00007f030073d090 R08: 0000000000000000 R09: 0000000000000000 [ 566.178774][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.186772][T12923] R13: 00007f02ffbb6038 R14: 00007f02ffbb5fa0 R15: 00007ffdf9f92c78 [ 566.194776][T12923] [ 567.187372][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 567.806581][T12965] FAULT_INJECTION: forcing a failure. [ 567.806581][T12965] name failslab, interval 1, probability 0, space 0, times 0 [ 567.879920][T12965] CPU: 0 PID: 12965 Comm: syz.0.2295 Not tainted 6.6.102-syzkaller #0 [ 567.888173][T12965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.898467][T12965] Call Trace: [ 567.901840][T12965] [ 567.904821][T12965] dump_stack_lvl+0x16c/0x230 [ 567.909550][T12965] ? show_regs_print_info+0x20/0x20 [ 567.914883][T12965] ? load_image+0x3b0/0x3b0 [ 567.919627][T12965] ? __lock_acquire+0x7c80/0x7c80 [ 567.924801][T12965] should_fail_ex+0x39d/0x4d0 [ 567.929558][T12965] should_failslab+0x9/0x20 [ 567.934124][T12965] slab_pre_alloc_hook+0x59/0x310 [ 567.939212][T12965] ? sk_prot_alloc+0xe7/0x210 [ 567.943931][T12965] ? sk_prot_alloc+0xe7/0x210 [ 567.948756][T12965] __kmem_cache_alloc_node+0x53/0x260 [ 567.954207][T12965] ? sk_prot_alloc+0xe7/0x210 [ 567.959033][T12965] __kmalloc+0xa4/0x240 [ 567.963258][T12965] sk_prot_alloc+0xe7/0x210 [ 567.967819][T12965] ? sk_alloc+0x24/0x360 [ 567.972193][T12965] sk_alloc+0x3a/0x360 [ 567.976308][T12965] ? bpf_ctx_init+0x163/0x1a0 [ 567.981030][T12965] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 567.986795][T12965] bpf_prog_test_run_skb+0x39a/0x11c0 [ 567.992334][T12965] ? __fget_files+0x28/0x4d0 [ 567.997084][T12965] ? cpu_online+0x60/0x60 [ 568.001466][T12965] bpf_prog_test_run+0x321/0x390 [ 568.006625][T12965] __sys_bpf+0x440/0x800 [ 568.010918][T12965] ? bpf_link_show_fdinfo+0x350/0x350 [ 568.016369][T12965] ? lock_chain_count+0x20/0x20 [ 568.021346][T12965] __x64_sys_bpf+0x7c/0x90 [ 568.025808][T12965] do_syscall_64+0x55/0xb0 [ 568.030369][T12965] ? clear_bhb_loop+0x40/0x90 [ 568.035082][T12965] ? clear_bhb_loop+0x40/0x90 [ 568.039797][T12965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.045748][T12965] RIP: 0033:0x7fe11998ebe9 [ 568.050209][T12965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.069953][T12965] RSP: 002b:00007fe11a71b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 568.078423][T12965] RAX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 568.086541][T12965] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 568.094649][T12965] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 568.102675][T12965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.110698][T12965] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 568.118835][T12965] [ 568.228108][T12968] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2296'. [ 568.453326][T12970] netlink: 'syz.1.2298': attribute type 3 has an invalid length. [ 568.461693][T12970] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2298'. [ 568.471295][T12970] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.758876][T12985] FAULT_INJECTION: forcing a failure. [ 568.758876][T12985] name failslab, interval 1, probability 0, space 0, times 0 [ 568.790370][T12985] CPU: 0 PID: 12985 Comm: syz.1.2302 Not tainted 6.6.102-syzkaller #0 [ 568.798624][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.808719][T12985] Call Trace: [ 568.812238][T12985] [ 568.815200][T12985] dump_stack_lvl+0x16c/0x230 [ 568.819911][T12985] ? show_regs_print_info+0x20/0x20 [ 568.825238][T12985] ? load_image+0x3b0/0x3b0 [ 568.829888][T12985] ? verify_lock_unused+0x140/0x140 [ 568.835141][T12985] ? perf_trace_lock+0xf7/0x380 [ 568.840036][T12985] ? netlink_lookup+0x30/0x200 [ 568.844827][T12985] should_fail_ex+0x39d/0x4d0 [ 568.849539][T12985] should_failslab+0x9/0x20 [ 568.854083][T12985] slab_pre_alloc_hook+0x59/0x310 [ 568.859427][T12985] kmem_cache_alloc+0x5a/0x2e0 [ 568.864275][T12985] ? skb_clone+0x1eb/0x370 [ 568.868777][T12985] skb_clone+0x1eb/0x370 [ 568.873280][T12985] __netlink_deliver_tap+0x41c/0x830 [ 568.878649][T12985] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.883988][T12985] netlink_deliver_tap+0x19c/0x1b0 [ 568.889285][T12985] netlink_unicast+0x72c/0x8d0 [ 568.894214][T12985] netlink_sendmsg+0x8c1/0xbe0 [ 568.899070][T12985] ? netlink_getsockopt+0x580/0x580 [ 568.904485][T12985] ? aa_sock_msg_perm+0x94/0x150 [ 568.909797][T12985] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 568.915153][T12985] ? security_socket_sendmsg+0x80/0xa0 [ 568.920955][T12985] ? netlink_getsockopt+0x580/0x580 [ 568.926206][T12985] ____sys_sendmsg+0x5bf/0x950 [ 568.931040][T12985] ? __asan_memset+0x22/0x40 [ 568.935700][T12985] ? __sys_sendmsg_sock+0x30/0x30 [ 568.940815][T12985] ? __import_iovec+0x5f2/0x860 [ 568.945882][T12985] ? import_iovec+0x73/0xa0 [ 568.950446][T12985] ___sys_sendmsg+0x220/0x290 [ 568.955194][T12985] ? __sys_sendmsg+0x270/0x270 [ 568.960057][T12985] ? __lock_acquire+0x7c80/0x7c80 [ 568.965244][T12985] __se_sys_sendmsg+0x1a5/0x270 [ 568.970160][T12985] ? __x64_sys_sendmsg+0x80/0x80 [ 568.975184][T12985] ? lockdep_hardirqs_on+0x98/0x150 [ 568.980467][T12985] do_syscall_64+0x55/0xb0 [ 568.984940][T12985] ? clear_bhb_loop+0x40/0x90 [ 568.989650][T12985] ? clear_bhb_loop+0x40/0x90 [ 568.994379][T12985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.000343][T12985] RIP: 0033:0x7f02ff98ebe9 [ 569.004859][T12985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.024763][T12985] RSP: 002b:00007f030071c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.033530][T12985] RAX: ffffffffffffffda RBX: 00007f02ffbb6090 RCX: 00007f02ff98ebe9 [ 569.041763][T12985] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 569.049893][T12985] RBP: 00007f030071c090 R08: 0000000000000000 R09: 0000000000000000 [ 569.058086][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.066198][T12985] R13: 00007f02ffbb6128 R14: 00007f02ffbb6090 R15: 00007ffdf9f92c78 [ 569.074266][T12985] [ 569.091476][T12982] lo: left promiscuous mode [ 569.096765][T12982] lo: entered allmulticast mode [ 569.809500][T13004] FAULT_INJECTION: forcing a failure. [ 569.809500][T13004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.836252][T13004] CPU: 1 PID: 13004 Comm: syz.3.2309 Not tainted 6.6.102-syzkaller #0 [ 569.845215][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.855589][T13004] Call Trace: [ 569.858951][T13004] [ 569.862160][T13004] dump_stack_lvl+0x16c/0x230 [ 569.866956][T13004] ? show_regs_print_info+0x20/0x20 [ 569.872350][T13004] ? load_image+0x3b0/0x3b0 [ 569.876965][T13004] ? __might_fault+0xaa/0x120 [ 569.881919][T13004] ? __lock_acquire+0x7c80/0x7c80 [ 569.887052][T13004] should_fail_ex+0x39d/0x4d0 [ 569.891944][T13004] _copy_from_iter+0x1d3/0x1290 [ 569.896984][T13004] ? slab_post_alloc_hook+0x8a/0x4d0 [ 569.902366][T13004] ? __virt_addr_valid+0x18c/0x540 [ 569.907668][T13004] ? __lock_acquire+0x7c80/0x7c80 [ 569.912920][T13004] ? rcu_is_watching+0x15/0xb0 [ 569.917802][T13004] ? copyout_mc+0x70/0x70 [ 569.922222][T13004] ? __virt_addr_valid+0x18c/0x540 [ 569.927507][T13004] ? __virt_addr_valid+0x18c/0x540 [ 569.932724][T13004] ? __virt_addr_valid+0x469/0x540 [ 569.937978][T13004] ? __check_object_size+0x506/0xa30 [ 569.943395][T13004] netlink_sendmsg+0x75c/0xbe0 [ 569.948384][T13004] ? netlink_getsockopt+0x580/0x580 [ 569.953711][T13004] ? aa_sock_msg_perm+0x94/0x150 [ 569.958997][T13004] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 569.964414][T13004] ? security_socket_sendmsg+0x80/0xa0 [ 569.970049][T13004] ? netlink_getsockopt+0x580/0x580 [ 569.975327][T13004] ____sys_sendmsg+0x5bf/0x950 [ 569.980205][T13004] ? __asan_memset+0x22/0x40 [ 569.984892][T13004] ? __sys_sendmsg_sock+0x30/0x30 [ 569.990004][T13004] ? __import_iovec+0x5f2/0x860 [ 569.995075][T13004] ? import_iovec+0x73/0xa0 [ 569.999702][T13004] ___sys_sendmsg+0x220/0x290 [ 570.004481][T13004] ? __sys_sendmsg+0x270/0x270 [ 570.009578][T13004] ? __lock_acquire+0x7c80/0x7c80 [ 570.014800][T13004] __se_sys_sendmsg+0x1a5/0x270 [ 570.019762][T13004] ? __x64_sys_sendmsg+0x80/0x80 [ 570.024839][T13004] ? lockdep_hardirqs_on+0x98/0x150 [ 570.030141][T13004] do_syscall_64+0x55/0xb0 [ 570.034637][T13004] ? clear_bhb_loop+0x40/0x90 [ 570.039574][T13004] ? clear_bhb_loop+0x40/0x90 [ 570.044365][T13004] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 570.050437][T13004] RIP: 0033:0x7fd30778ebe9 [ 570.054929][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.074653][T13004] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.083248][T13004] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 570.091310][T13004] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 570.099454][T13004] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 570.107772][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.116436][T13004] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 570.124547][T13004] [ 570.866914][T13011] syzkaller0: entered promiscuous mode [ 570.885788][T13011] syzkaller0: entered allmulticast mode [ 573.500713][T13030] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 573.515231][T13030] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2316'. [ 574.049973][T13046] netlink: 'syz.1.2323': attribute type 153 has an invalid length. [ 574.074328][T13046] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2323'. [ 575.049368][T13064] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2327'. [ 575.437570][T13082] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2335'. [ 575.521804][T13087] FAULT_INJECTION: forcing a failure. [ 575.521804][T13087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.580566][T13087] CPU: 0 PID: 13087 Comm: syz.0.2336 Not tainted 6.6.102-syzkaller #0 [ 575.588918][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.599545][T13087] Call Trace: [ 575.602877][T13087] [ 575.605845][T13087] dump_stack_lvl+0x16c/0x230 [ 575.610596][T13087] ? show_regs_print_info+0x20/0x20 [ 575.615854][T13087] ? load_image+0x3b0/0x3b0 [ 575.620538][T13087] ? __lock_acquire+0x7c80/0x7c80 [ 575.625668][T13087] ? do_raw_spin_unlock+0x121/0x230 [ 575.631029][T13087] should_fail_ex+0x39d/0x4d0 [ 575.635805][T13087] strncpy_from_user+0x36/0x2e0 [ 575.640714][T13087] bpf_prog_load+0xd0e/0x16d0 [ 575.645534][T13087] ? map_freeze+0x420/0x420 [ 575.650093][T13087] ? __might_fault+0xaa/0x120 [ 575.654810][T13087] ? __might_fault+0xc6/0x120 [ 575.659705][T13087] ? __might_fault+0xaa/0x120 [ 575.664440][T13087] ? bpf_lsm_bpf+0x9/0x10 [ 575.668824][T13087] ? security_bpf+0x7e/0xa0 [ 575.673462][T13087] __sys_bpf+0x55a/0x800 [ 575.677840][T13087] ? bpf_link_show_fdinfo+0x350/0x350 [ 575.683280][T13087] ? lock_chain_count+0x20/0x20 [ 575.688261][T13087] __x64_sys_bpf+0x7c/0x90 [ 575.692741][T13087] do_syscall_64+0x55/0xb0 [ 575.697220][T13087] ? clear_bhb_loop+0x40/0x90 [ 575.702119][T13087] ? clear_bhb_loop+0x40/0x90 [ 575.706864][T13087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.713002][T13087] RIP: 0033:0x7fe11998ebe9 [ 575.717608][T13087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.737530][T13087] RSP: 002b:00007fe11a71b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.746087][T13087] RAX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 575.754205][T13087] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 575.762366][T13087] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 575.770389][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.778411][T13087] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 575.786538][T13087] [ 576.682137][T13100] FAULT_INJECTION: forcing a failure. [ 576.682137][T13100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.695812][T13100] CPU: 0 PID: 13100 Comm: syz.0.2342 Not tainted 6.6.102-syzkaller #0 [ 576.704036][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.714287][T13100] Call Trace: [ 576.717701][T13100] [ 576.720670][T13100] dump_stack_lvl+0x16c/0x230 [ 576.725564][T13100] ? show_regs_print_info+0x20/0x20 [ 576.730938][T13100] ? load_image+0x3b0/0x3b0 [ 576.735578][T13100] should_fail_ex+0x39d/0x4d0 [ 576.740326][T13100] strncpy_from_user+0x36/0x2e0 [ 576.745219][T13100] ? bpf_trace_run10+0x14a/0x450 [ 576.750297][T13100] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 576.756695][T13100] strncpy_from_user_nofault+0x71/0x140 [ 576.762479][T13100] bpf_probe_read_compat_str+0xe1/0x170 [ 576.768086][T13100] ? bpf_trace_run10+0x14a/0x450 [ 576.773069][T13100] bpf_prog_0f004680e7f58249+0x66/0x68 [ 576.778583][T13100] bpf_trace_run10+0x3a2/0x450 [ 576.783535][T13100] ? bpf_trace_run9+0x450/0x450 [ 576.788613][T13100] ? mark_lock+0x94/0x320 [ 576.792995][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.799491][T13100] ? verify_lock_unused+0x140/0x140 [ 576.804843][T13100] __bpf_trace_percpu_alloc_percpu+0x365/0x3f0 [ 576.811144][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.816494][T13100] ? perf_trace_percpu_destroy_chunk+0x2f0/0x2f0 [ 576.822956][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.828568][T13100] ? verify_lock_unused+0x140/0x140 [ 576.833812][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.839200][T13100] ? pcpu_alloc+0xf23/0x18d0 [ 576.843854][T13100] ? mark_lock+0x94/0x320 [ 576.848234][T13100] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 576.854533][T13100] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 576.860230][T13100] ? mutex_unlock+0x10/0x10 [ 576.864807][T13100] ? perf_trace_percpu_destroy_chunk+0x2f0/0x2f0 [ 576.871363][T13100] __traceiter_percpu_alloc_percpu+0xaf/0x100 [ 576.877572][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.882938][T13100] ? bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.888279][T13100] pcpu_alloc+0x1747/0x18d0 [ 576.893036][T13100] bpf_map_alloc_percpu+0xb9/0x1a0 [ 576.898386][T13100] htab_map_alloc+0x3f9/0xe50 [ 576.903213][T13100] map_create+0x877/0x1110 [ 576.907765][T13100] ? security_bpf+0x7e/0xa0 [ 576.912323][T13100] __sys_bpf+0x5f0/0x800 [ 576.916617][T13100] ? bpf_link_show_fdinfo+0x350/0x350 [ 576.922167][T13100] ? lock_chain_count+0x20/0x20 [ 576.927266][T13100] __x64_sys_bpf+0x7c/0x90 [ 576.931928][T13100] do_syscall_64+0x55/0xb0 [ 576.936479][T13100] ? clear_bhb_loop+0x40/0x90 [ 576.941383][T13100] ? clear_bhb_loop+0x40/0x90 [ 576.946197][T13100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.952156][T13100] RIP: 0033:0x7fe11998ebe9 [ 576.956619][T13100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.976623][T13100] RSP: 002b:00007fe11a71b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.985442][T13100] RAX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 576.993551][T13100] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 577.001586][T13100] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 577.009697][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.017899][T13100] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 577.026024][T13100] [ 577.126264][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 577.137594][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 577.146774][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 577.157133][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 577.165055][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 577.173205][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 577.459553][ T5787] bond0: (slave syz_tun): Releasing backup interface [ 577.545373][T13107] wg2: entered promiscuous mode [ 577.590930][T13107] wg2: entered allmulticast mode [ 577.652579][ T1013] .3ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 577.791694][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.990060][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.064518][T13121] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2349'. [ 578.195056][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.304887][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 578.326526][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.422266][T13101] chnl_net:caif_netlink_parms(): no params data found [ 578.720304][T13101] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.751672][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.782529][T13101] bridge_slave_0: entered allmulticast mode [ 578.824188][T13101] bridge_slave_0: entered promiscuous mode [ 578.870686][T13101] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.883253][T13101] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.903584][T13101] bridge_slave_1: entered allmulticast mode [ 578.922558][T13101] bridge_slave_1: entered promiscuous mode [ 579.072749][T13101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 579.120895][T13101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.239300][T13140] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2352'. [ 579.291633][ T5785] Bluetooth: hci4: command tx timeout [ 579.541537][T13101] team0: Port device team_slave_0 added [ 579.848749][T13101] team0: Port device team_slave_1 added [ 580.551611][T13101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.596048][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.656899][T13170] FAULT_INJECTION: forcing a failure. [ 580.656899][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 580.675659][T13101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.687044][T13170] CPU: 1 PID: 13170 Comm: syz.3.2357 Not tainted 6.6.102-syzkaller #0 [ 580.695262][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 580.705457][T13170] Call Trace: [ 580.708861][T13170] [ 580.711818][T13170] dump_stack_lvl+0x16c/0x230 [ 580.716539][T13170] ? show_regs_print_info+0x20/0x20 [ 580.721823][T13170] ? load_image+0x3b0/0x3b0 [ 580.726398][T13170] should_fail_ex+0x39d/0x4d0 [ 580.731114][T13170] should_failslab+0x9/0x20 [ 580.735738][T13170] slab_pre_alloc_hook+0x59/0x310 [ 580.740816][T13170] ? nf_ct_ext_add+0x1ab/0x440 [ 580.745662][T13170] ? nf_ct_ext_add+0x1ab/0x440 [ 580.750764][T13170] __kmem_cache_alloc_node+0x53/0x260 [ 580.756207][T13170] ? nf_ct_ext_add+0x1ab/0x440 [ 580.761031][T13170] __kmalloc_node_track_caller+0xa2/0x230 [ 580.766967][T13170] krealloc+0x86/0x120 [ 580.771252][T13170] nf_ct_ext_add+0x1ab/0x440 [ 580.775968][T13170] init_conntrack+0x674/0xee0 [ 580.780865][T13170] ? early_drop+0x7b0/0x7b0 [ 580.785401][T13170] ? nf_conntrack_find_get+0x600/0x600 [ 580.790973][T13170] ? __local_bh_enable_ip+0x12e/0x1c0 [ 580.796451][T13170] ? __siphash_unaligned+0x232/0x3b0 [ 580.801978][T13170] nf_conntrack_in+0xbf1/0x15c0 [ 580.806883][T13170] ? nf_ct_pernet+0x270/0x270 [ 580.811603][T13170] ? ipt_do_table+0x2b2/0x15f0 [ 580.816429][T13170] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 580.822184][T13170] ? ipv4_conntrack_local+0x123/0x200 [ 580.827579][T13170] ? ipv4_conntrack_in+0x20/0x20 [ 580.832536][T13170] nf_hook_slow+0xbd/0x200 [ 580.837066][T13170] nf_hook+0x215/0x370 [ 580.841173][T13170] ? nf_hook+0x9e/0x370 [ 580.845477][T13170] ? __ip_local_out+0x5f0/0x5f0 [ 580.850546][T13170] ? nf_hook+0x370/0x370 [ 580.854819][T13170] ? ip_fast_csum+0x1ee/0x2b0 [ 580.859526][T13170] __ip_local_out+0x4db/0x5f0 [ 580.864336][T13170] ? nf_hook+0x370/0x370 [ 580.868633][T13170] ip_send_skb+0x4c/0x1d0 [ 580.873042][T13170] raw_sendmsg+0x1488/0x1950 [ 580.877712][T13170] ? compat_raw_ioctl+0x70/0x70 [ 580.882628][T13170] ? aa_sk_perm+0x7fc/0x930 [ 580.887170][T13170] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 580.893745][T13170] ? sock_rps_record_flow+0x19/0x400 [ 580.899154][T13170] ? inet_send_prepare+0x260/0x260 [ 580.904293][T13170] ? inet_sendmsg+0x7c/0x2f0 [ 580.908931][T13170] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 580.914278][T13170] ? security_socket_sendmsg+0x80/0xa0 [ 580.919762][T13170] ? inet_send_prepare+0x260/0x260 [ 580.925098][T13170] ____sys_sendmsg+0x5bf/0x950 [ 580.929949][T13170] ? __asan_memset+0x22/0x40 [ 580.934676][T13170] ? __sys_sendmsg_sock+0x30/0x30 [ 580.939856][T13170] ? __import_iovec+0x5f2/0x860 [ 580.944764][T13170] ? import_iovec+0x73/0xa0 [ 580.949361][T13170] ___sys_sendmsg+0x220/0x290 [ 580.954089][T13170] ? __sys_sendmsg+0x270/0x270 [ 580.959009][T13170] ? __lock_acquire+0x7c80/0x7c80 [ 580.964174][T13170] __se_sys_sendmsg+0x1a5/0x270 [ 580.969076][T13170] ? __x64_sys_sendmsg+0x80/0x80 [ 580.974068][T13170] ? lockdep_hardirqs_on+0x98/0x150 [ 580.979387][T13170] do_syscall_64+0x55/0xb0 [ 580.983833][T13170] ? clear_bhb_loop+0x40/0x90 [ 580.988554][T13170] ? clear_bhb_loop+0x40/0x90 [ 580.993257][T13170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.999185][T13170] RIP: 0033:0x7fd30778ebe9 [ 581.003805][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.023539][T13170] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.032080][T13170] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 581.040137][T13170] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 581.048131][T13170] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 581.056278][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.064437][T13170] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 581.072618][T13170] [ 581.082923][T13101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.090190][T13101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.117039][T13101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.343394][T13101] hsr_slave_0: entered promiscuous mode [ 581.365792][ T5785] Bluetooth: hci4: command tx timeout [ 581.403077][T13101] hsr_slave_1: entered promiscuous mode [ 581.629507][T13174] netlink: 'syz.3.2358': attribute type 39 has an invalid length. [ 583.445995][ T5785] Bluetooth: hci4: command tx timeout [ 583.506538][T13211] FAULT_INJECTION: forcing a failure. [ 583.506538][T13211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.532616][T13211] CPU: 1 PID: 13211 Comm: syz.1.2366 Not tainted 6.6.102-syzkaller #0 [ 583.541053][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.551189][T13211] Call Trace: [ 583.554632][T13211] [ 583.557764][T13211] dump_stack_lvl+0x16c/0x230 [ 583.562776][T13211] ? show_regs_print_info+0x20/0x20 [ 583.568251][T13211] ? load_image+0x3b0/0x3b0 [ 583.572829][T13211] ? __lock_acquire+0x7c80/0x7c80 [ 583.578188][T13211] ? snprintf+0xdb/0x120 [ 583.582512][T13211] should_fail_ex+0x39d/0x4d0 [ 583.587348][T13211] _copy_to_user+0x2f/0xa0 [ 583.591847][T13211] simple_read_from_buffer+0xe7/0x150 [ 583.597346][T13211] proc_fail_nth_read+0x1e3/0x250 [ 583.602642][T13211] ? proc_fault_inject_write+0x340/0x340 [ 583.608344][T13211] ? fsnotify_perm+0x271/0x5e0 [ 583.613346][T13211] ? proc_fault_inject_write+0x340/0x340 [ 583.619204][T13211] vfs_read+0x27e/0x920 [ 583.623419][T13211] ? kernel_read+0x1e0/0x1e0 [ 583.628092][T13211] ? __fget_files+0x28/0x4d0 [ 583.632769][T13211] ? __fget_files+0x44a/0x4d0 [ 583.637534][T13211] ? __fdget_pos+0x2a3/0x330 [ 583.642170][T13211] ? ksys_read+0x75/0x250 [ 583.646648][T13211] ksys_read+0x147/0x250 [ 583.650985][T13211] ? vfs_write+0x940/0x940 [ 583.655568][T13211] ? lockdep_hardirqs_on+0x98/0x150 [ 583.661291][T13211] do_syscall_64+0x55/0xb0 [ 583.665877][T13211] ? clear_bhb_loop+0x40/0x90 [ 583.670822][T13211] ? clear_bhb_loop+0x40/0x90 [ 583.675632][T13211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.681667][T13211] RIP: 0033:0x7f02ff98d5fc [ 583.686140][T13211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 583.705930][T13211] RSP: 002b:00007f030073d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.714398][T13211] RAX: ffffffffffffffda RBX: 00007f02ffbb5fa0 RCX: 00007f02ff98d5fc [ 583.722875][T13211] RDX: 000000000000000f RSI: 00007f030073d0a0 RDI: 0000000000000006 [ 583.731102][T13211] RBP: 00007f030073d090 R08: 0000000000000000 R09: 0000000000000000 [ 583.739236][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.747420][T13211] R13: 00007f02ffbb6038 R14: 00007f02ffbb5fa0 R15: 00007ffdf9f92c78 [ 583.755613][T13211] [ 584.442656][ T11] batman_adv: batadv0: Removing interface: team0 [ 584.455348][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.463353][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.473409][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.498230][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.516179][ T11] bridge_slave_1: left allmulticast mode [ 584.521928][ T11] bridge_slave_1: left promiscuous mode [ 584.531527][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.547939][ T11] bridge_slave_0: left allmulticast mode [ 584.555371][T13224] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.2368'. [ 584.560676][ T11] bridge_slave_0: left promiscuous mode [ 584.566240][T13224] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 584.580944][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.622135][ T11] veth1_vlan: left promiscuous mode [ 584.629351][ T11] veth0_vlan: left promiscuous mode [ 584.897220][ T11] team0 (unregistering): Port device geneve1 removed [ 585.293190][ T11] team0 (unregistering): Port device team_slave_1 removed [ 585.346687][ T11] team0 (unregistering): Port device team_slave_0 removed [ 585.393521][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.454712][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.529538][ T5785] Bluetooth: hci4: command tx timeout [ 585.692394][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 586.023614][ T11] bond0 (unregistering): Released all slaves [ 586.283068][T13101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 586.349300][T13101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 586.367221][T13238] FAULT_INJECTION: forcing a failure. [ 586.367221][T13238] name failslab, interval 1, probability 0, space 0, times 0 [ 586.401245][T13238] CPU: 0 PID: 13238 Comm: syz.3.2371 Not tainted 6.6.102-syzkaller #0 [ 586.409575][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.419854][T13238] Call Trace: [ 586.423172][T13238] [ 586.426163][T13238] dump_stack_lvl+0x16c/0x230 [ 586.431102][T13238] ? show_regs_print_info+0x20/0x20 [ 586.436486][T13238] ? load_image+0x3b0/0x3b0 [ 586.441058][T13238] ? __might_sleep+0xe0/0xe0 [ 586.445896][T13238] ? __lock_acquire+0x7c80/0x7c80 [ 586.451159][T13238] should_fail_ex+0x39d/0x4d0 [ 586.456081][T13238] should_failslab+0x9/0x20 [ 586.460721][T13238] slab_pre_alloc_hook+0x59/0x310 [ 586.465864][T13238] ? apparmor_sk_alloc_security+0x77/0x100 [ 586.471810][T13238] __kmem_cache_alloc_node+0x53/0x260 [ 586.477250][T13238] ? apparmor_sk_alloc_security+0x77/0x100 [ 586.483122][T13238] kmalloc_trace+0x2a/0xe0 [ 586.487704][T13238] apparmor_sk_alloc_security+0x77/0x100 [ 586.493499][T13238] security_sk_alloc+0x6e/0xa0 [ 586.498414][T13238] sk_prot_alloc+0x101/0x210 [ 586.503047][T13238] ? sk_alloc+0x24/0x360 [ 586.507333][T13238] sk_alloc+0x3a/0x360 [ 586.511446][T13238] ? bpf_ctx_init+0x163/0x1a0 [ 586.516170][T13238] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 586.521779][T13238] bpf_prog_test_run_skb+0x39a/0x11c0 [ 586.527220][T13238] ? __fget_files+0x28/0x4d0 [ 586.531890][T13238] ? cpu_online+0x60/0x60 [ 586.536283][T13238] bpf_prog_test_run+0x321/0x390 [ 586.541266][T13238] __sys_bpf+0x440/0x800 [ 586.545651][T13238] ? bpf_link_show_fdinfo+0x350/0x350 [ 586.551179][T13238] ? lock_chain_count+0x20/0x20 [ 586.556197][T13238] __x64_sys_bpf+0x7c/0x90 [ 586.560753][T13238] do_syscall_64+0x55/0xb0 [ 586.565611][T13238] ? clear_bhb_loop+0x40/0x90 [ 586.574256][T13238] ? clear_bhb_loop+0x40/0x90 [ 586.582382][T13238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.588495][T13238] RIP: 0033:0x7fd30778ebe9 [ 586.593048][T13238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.613644][T13238] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.622256][T13238] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 586.630448][T13238] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 586.638589][T13238] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 586.646593][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.654590][T13238] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 586.662811][T13238] [ 586.753503][T13101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 586.841135][T13101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 587.112528][T13101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.163679][T13259] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2375'. [ 587.184193][T13101] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.226285][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.233721][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.283759][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.291082][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.395779][T13265] FAULT_INJECTION: forcing a failure. [ 587.395779][T13265] name failslab, interval 1, probability 0, space 0, times 0 [ 587.434710][T13101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.459897][T13265] CPU: 1 PID: 13265 Comm: syz.3.2377 Not tainted 6.6.102-syzkaller #0 [ 587.468328][T13265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.478526][T13265] Call Trace: [ 587.481942][T13265] [ 587.484921][T13265] dump_stack_lvl+0x16c/0x230 [ 587.489671][T13265] ? show_regs_print_info+0x20/0x20 [ 587.495064][T13265] ? load_image+0x3b0/0x3b0 [ 587.499924][T13265] ? __might_sleep+0xe0/0xe0 [ 587.504843][T13265] ? __lock_acquire+0x7c80/0x7c80 [ 587.510053][T13265] should_fail_ex+0x39d/0x4d0 [ 587.514907][T13265] should_failslab+0x9/0x20 [ 587.519474][T13265] slab_pre_alloc_hook+0x59/0x310 [ 587.524670][T13265] kmem_cache_alloc_node+0x60/0x330 [ 587.530025][T13265] ? unix_stream_sendmsg+0x14e/0xba0 [ 587.535447][T13265] ? __alloc_skb+0x108/0x2c0 [ 587.540303][T13265] __alloc_skb+0x108/0x2c0 [ 587.545470][T13265] alloc_skb_with_frags+0xca/0x7c0 [ 587.550928][T13265] ? __fget_files+0x28/0x4d0 [ 587.556022][T13265] sock_alloc_send_pskb+0x857/0x990 [ 587.561270][T13265] ? sock_kzfree_s+0x50/0x50 [ 587.566137][T13265] ? __scm_send+0x1137/0x14a0 [ 587.570970][T13265] queue_oob+0xe7/0x4e0 [ 587.575189][T13265] ? scm_stat_add+0xc0/0xc0 [ 587.579725][T13265] ? __might_sleep+0xe0/0xe0 [ 587.584341][T13265] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 587.590525][T13265] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 587.596817][T13265] unix_stream_sendmsg+0xaa2/0xba0 [ 587.601998][T13265] ? aa_sk_perm+0x7fc/0x930 [ 587.606751][T13265] ? __might_fault+0xaa/0x120 [ 587.611479][T13265] ? unix_show_fdinfo+0x270/0x270 [ 587.616833][T13265] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 587.623378][T13265] ? __might_fault+0xaa/0x120 [ 587.628648][T13265] ? aa_sock_msg_perm+0x94/0x150 [ 587.633726][T13265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 587.639057][T13265] ? security_socket_sendmsg+0x80/0xa0 [ 587.647434][T13265] ? unix_show_fdinfo+0x270/0x270 [ 587.652677][T13265] ____sys_sendmsg+0x5bf/0x950 [ 587.658110][T13265] ? __sys_sendmsg_sock+0x30/0x30 [ 587.663519][T13265] ? __import_iovec+0x5f2/0x860 [ 587.668499][T13265] ? import_iovec+0x73/0xa0 [ 587.673031][T13265] ___sys_sendmsg+0x220/0x290 [ 587.677739][T13265] ? __sys_sendmsg+0x270/0x270 [ 587.682551][T13265] ? __lock_acquire+0x7c80/0x7c80 [ 587.687704][T13265] __se_sys_sendmsg+0x1a5/0x270 [ 587.692586][T13265] ? __x64_sys_sendmsg+0x80/0x80 [ 587.697557][T13265] ? lockdep_hardirqs_on+0x98/0x150 [ 587.702781][T13265] do_syscall_64+0x55/0xb0 [ 587.707232][T13265] ? clear_bhb_loop+0x40/0x90 [ 587.711927][T13265] ? clear_bhb_loop+0x40/0x90 [ 587.716626][T13265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.722638][T13265] RIP: 0033:0x7fd30778ebe9 [ 587.727083][T13265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.746796][T13265] RSP: 002b:00007fd308642038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.755322][T13265] RAX: ffffffffffffffda RBX: 00007fd3079b5fa0 RCX: 00007fd30778ebe9 [ 587.763427][T13265] RDX: 0000000004000011 RSI: 0000200000001200 RDI: 0000000000000003 [ 587.771903][T13265] RBP: 00007fd308642090 R08: 0000000000000000 R09: 0000000000000000 [ 587.779981][T13265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.788114][T13265] R13: 00007fd3079b6038 R14: 00007fd3079b5fa0 R15: 00007ffc98155ee8 [ 587.796377][T13265] [ 587.838325][T13270] netlink: set zone limit has 8 unknown bytes [ 588.032966][T13273] netlink: 192440 bytes leftover after parsing attributes in process `syz.3.2379'. [ 588.073726][T13273] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 588.344904][T13101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.590178][T13101] veth0_vlan: entered promiscuous mode [ 588.693799][T13101] veth1_vlan: entered promiscuous mode [ 588.781643][T13101] veth0_macvtap: entered promiscuous mode [ 588.854585][T13101] veth1_macvtap: entered promiscuous mode [ 589.077541][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.092994][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.133240][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.165714][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.205755][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.235358][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.259486][T13101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.320840][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.367071][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.392322][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.410019][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.427558][T13101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.460185][T13101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.476290][T13101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.550082][T13101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.588602][T13101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.612263][T13101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.632474][T13101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.686184][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 589.731898][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 589.842373][T13318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2390'. [ 590.074045][T13331] netlink: 'syz.1.2392': attribute type 33 has an invalid length. [ 590.084513][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.122725][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.209289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.237016][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.810191][T13356] C: renamed from team_slave_0 (while UP) [ 590.871910][T13356] netlink: 'syz.2.2397': attribute type 3 has an invalid length. [ 590.923783][T13356] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2397'. [ 591.782615][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.793854][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.804289][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.815445][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.826148][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 591.833938][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.085332][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.242151][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.382420][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.512924][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 592.532932][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.776397][T13408] veth0_vlan: entered allmulticast mode [ 592.851968][T13411] sctp: [Deprecated]: syz.2.2411 (pid 13411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.851968][T13411] Use struct sctp_sack_info instead [ 592.961608][T13409] ipvlan0: entered allmulticast mode [ 593.008184][T13379] chnl_net:caif_netlink_parms(): no params data found [ 593.537489][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.554496][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.569762][T13379] bridge_slave_0: entered allmulticast mode [ 593.587225][T13379] bridge_slave_0: entered promiscuous mode [ 593.687583][T13438] netlink: 'syz.2.2419': attribute type 2 has an invalid length. [ 593.705736][T13438] netlink: 'syz.2.2419': attribute type 8 has an invalid length. [ 593.722740][T13438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2419'. [ 593.760557][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.786359][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.793825][T13379] bridge_slave_1: entered allmulticast mode [ 593.837592][T13379] bridge_slave_1: entered promiscuous mode [ 593.857384][T13436] netlink: 'syz.3.2420': attribute type 5 has an invalid length. [ 593.925818][ T5785] Bluetooth: hci2: command tx timeout [ 594.048133][T13448] netlink: 'syz.2.2421': attribute type 1 has an invalid length. [ 594.065418][T13448] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2421'. [ 594.229050][T13379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.274368][T13379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.464781][T13379] team0: Port device team_slave_0 added [ 594.551576][T13379] team0: Port device team_slave_1 added [ 594.724685][T13379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.787527][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.845594][T13379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.866586][T13463] netlink: 'syz.3.2426': attribute type 21 has an invalid length. [ 594.881823][T13463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2426'. [ 594.941497][T13379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.948870][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.980122][T13379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.113321][T13379] hsr_slave_0: entered promiscuous mode [ 595.120687][T13379] hsr_slave_1: entered promiscuous mode [ 595.130623][T13379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 595.143640][T13379] Cannot create hsr debugfs directory [ 595.605107][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.632118][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.660323][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.699111][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.849874][ T11] veth1_macvtap: left promiscuous mode [ 595.857417][ T11] veth0_macvtap: left promiscuous mode [ 595.877229][ T11] veth1_vlan: left promiscuous mode [ 595.885981][ T11] veth0_vlan: left promiscuous mode [ 596.006612][ T5785] Bluetooth: hci2: command tx timeout [ 596.823095][ T11] team0 (unregistering): Port device team_slave_1 removed [ 596.894417][ T11] team0 (unregistering): Port device C removed [ 596.944316][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.999463][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.260037][ T11] team0 (unregistering): Port device dummy0 removed [ 597.542106][ T11] bond0 (unregistering): Released all slaves [ 598.089500][ T5785] Bluetooth: hci2: command tx timeout [ 598.190881][T13517] netlink: 'syz.3.2437': attribute type 2 has an invalid length. [ 598.221587][T13517] netlink: 'syz.3.2437': attribute type 8 has an invalid length. [ 598.261837][T13517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2437'. [ 598.370930][T13521] lo: left promiscuous mode [ 598.375740][T13521] lo: entered allmulticast mode [ 598.611090][T13521] netlink: 'syz.0.2436': attribute type 5 has an invalid length. [ 598.627572][T13521] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2436'. [ 598.671414][T13518] lo: entered promiscuous mode [ 598.710277][T13518] lo: left allmulticast mode [ 599.297179][T13379] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 599.320203][T13379] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 599.437825][T13379] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 599.471070][T13379] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 599.763400][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.818961][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.873201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.880761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.900032][T13565] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 599.942209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.950067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.997070][T13565] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 600.014949][T13568] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 600.073521][T13565] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 600.125799][T13568] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 600.175668][ T5785] Bluetooth: hci2: command tx timeout [ 600.927503][T13585] FAULT_INJECTION: forcing a failure. [ 600.927503][T13585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.972130][T13585] CPU: 1 PID: 13585 Comm: syz.0.2448 Not tainted 6.6.102-syzkaller #0 [ 600.980653][T13585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.990848][T13585] Call Trace: [ 600.994170][T13585] [ 600.997142][T13585] dump_stack_lvl+0x16c/0x230 [ 601.001880][T13585] ? show_regs_print_info+0x20/0x20 [ 601.007273][T13585] ? load_image+0x3b0/0x3b0 [ 601.011850][T13585] ? __might_fault+0xaa/0x120 [ 601.016771][T13585] ? __lock_acquire+0x7c80/0x7c80 [ 601.021930][T13585] should_fail_ex+0x39d/0x4d0 [ 601.026853][T13585] _copy_from_user+0x2f/0xe0 [ 601.031598][T13585] csum_and_copy_from_iter+0x1ed/0x1450 [ 601.037373][T13585] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 601.043111][T13585] ? __kmem_cache_alloc_node+0x13e/0x260 [ 601.049187][T13585] ? __alloc_skb+0x138/0x2c0 [ 601.053925][T13585] ? rcu_is_watching+0x15/0xb0 [ 601.059529][T13585] ip_generic_getfrag+0x145/0x2d0 [ 601.064801][T13585] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 601.069784][T13585] ? skb_put+0x11b/0x210 [ 601.074263][T13585] __ip_append_data+0x2e01/0x3bd0 [ 601.079441][T13585] ? raw_send_hdrinc+0x1240/0x1240 [ 601.084595][T13585] ? ip_setup_cork+0x860/0x860 [ 601.089415][T13585] ? ip_setup_cork+0x530/0x860 [ 601.094362][T13585] ip_append_data+0x10d/0x180 [ 601.099093][T13585] ? raw_send_hdrinc+0x1240/0x1240 [ 601.104402][T13585] raw_sendmsg+0x1420/0x1950 [ 601.109038][T13585] ? compat_raw_ioctl+0x70/0x70 [ 601.113957][T13585] ? aa_sk_perm+0x7fc/0x930 [ 601.118917][T13585] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 601.125836][T13585] ? sock_rps_record_flow+0x19/0x400 [ 601.131214][T13585] ? inet_send_prepare+0x260/0x260 [ 601.136460][T13585] ? inet_sendmsg+0x7c/0x2f0 [ 601.141082][T13585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 601.146476][T13585] ? security_socket_sendmsg+0x80/0xa0 [ 601.152074][T13585] ? inet_send_prepare+0x260/0x260 [ 601.157401][T13585] ____sys_sendmsg+0x5bf/0x950 [ 601.162336][T13585] ? __asan_memset+0x22/0x40 [ 601.167061][T13585] ? __sys_sendmsg_sock+0x30/0x30 [ 601.174701][T13585] ? __import_iovec+0x5f2/0x860 [ 601.180182][T13585] ? import_iovec+0x73/0xa0 [ 601.184721][T13585] ___sys_sendmsg+0x220/0x290 [ 601.189689][T13585] ? __sys_sendmsg+0x270/0x270 [ 601.194669][T13585] ? __lock_acquire+0x7c80/0x7c80 [ 601.199981][T13585] __se_sys_sendmsg+0x1a5/0x270 [ 601.204992][T13585] ? __x64_sys_sendmsg+0x80/0x80 [ 601.210166][T13585] ? lockdep_hardirqs_on+0x98/0x150 [ 601.215661][T13585] do_syscall_64+0x55/0xb0 [ 601.221002][T13585] ? clear_bhb_loop+0x40/0x90 [ 601.225711][T13585] ? clear_bhb_loop+0x40/0x90 [ 601.230531][T13585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.236472][T13585] RIP: 0033:0x7fe11998ebe9 [ 601.240909][T13585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.260654][T13585] RSP: 002b:00007fe11a71b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.269366][T13585] RAX: ffffffffffffffda RBX: 00007fe119bb5fa0 RCX: 00007fe11998ebe9 [ 601.277360][T13585] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 601.285611][T13585] RBP: 00007fe11a71b090 R08: 0000000000000000 R09: 0000000000000000 [ 601.293695][T13585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.301715][T13585] R13: 00007fe119bb6038 R14: 00007fe119bb5fa0 R15: 00007fffeb6d2b88 [ 601.309808][T13585] [ 601.442583][T13379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.521364][T13590] netlink: 'syz.0.2449': attribute type 2 has an invalid length. [ 601.540652][T13590] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2449'. [ 602.537977][T13379] veth0_vlan: entered promiscuous mode [ 602.716452][T13379] veth1_vlan: entered promiscuous mode [ 603.061976][T13379] veth0_macvtap: entered promiscuous mode [ 603.084171][T13379] veth1_macvtap: entered promiscuous mode [ 603.211492][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.262346][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.301986][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.349500][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.388113][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 603.431125][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.491971][T13379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.510789][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.543819][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.560587][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.581708][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.596678][T13379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 603.607557][T13379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.646792][T13379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.737120][T13379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.766694][T13379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.784961][T13379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.795540][T13379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.128816][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.168020][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.335961][T13641] netlink: 'syz.3.2460': attribute type 5 has an invalid length. [ 604.411108][T13641] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2460'. [ 604.473049][T13639] lo: entered promiscuous mode [ 604.515866][T13639] lo: left allmulticast mode [ 604.698149][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.728538][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.234546][T13664] lo: entered allmulticast mode [ 605.508147][T13664] netlink: 'syz.1.2396': attribute type 5 has an invalid length. [ 605.555664][T13664] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2396'. [ 605.766163][T13668] lo: entered promiscuous mode [ 605.771231][T13668] lo: left allmulticast mode [ 606.506020][T13683] lo: entered allmulticast mode [ 606.594686][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.617293][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.637739][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.667498][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.676788][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.696034][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.774001][ T1132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.180406][ T1132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.237971][T13681] netlink: 'syz.2.2469': attribute type 5 has an invalid length. [ 607.269816][T13681] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2469'. [ 607.450493][ T1132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.468942][T13683] lo: entered promiscuous mode [ 607.473784][T13683] lo: left allmulticast mode [ 607.726821][ T1132] batman_adv: batadv0: Removing interface: netdevsim0 [ 607.747443][ T1132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.151525][T13717] lo: left promiscuous mode [ 608.156509][T13717] lo: entered allmulticast mode [ 608.317095][T13713] netlink: 'syz.1.2473': attribute type 5 has an invalid length. [ 608.332835][T13713] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2473'. [ 608.458607][T13713] lo: entered promiscuous mode [ 608.463848][T13713] lo: left allmulticast mode [ 608.745015][ T5785] Bluetooth: hci0: command tx timeout [ 608.891928][T13686] chnl_net:caif_netlink_parms(): no params data found [ 609.454601][T13750] lo: left promiscuous mode [ 609.521488][T13750] lo: entered allmulticast mode [ 609.792918][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.843034][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.854679][T13686] bridge_slave_0: entered allmulticast mode [ 609.878225][T13686] bridge_slave_0: entered promiscuous mode [ 610.003496][T13752] lo: left promiscuous mode [ 610.008631][T13752] lo: entered allmulticast mode [ 610.119577][T13750] netlink: 'syz.1.2485': attribute type 5 has an invalid length. [ 610.130391][T13750] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2485'. [ 610.145958][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.160117][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.172743][T13686] bridge_slave_1: entered allmulticast mode [ 610.181949][T13686] bridge_slave_1: entered promiscuous mode [ 610.189382][T13759] netlink: 'syz.2.2478': attribute type 5 has an invalid length. [ 610.197475][T13759] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2478'. [ 610.207603][T13753] lo: entered promiscuous mode [ 610.213299][T13753] lo: left allmulticast mode [ 610.341484][T13748] lo: entered promiscuous mode [ 610.355032][T13748] lo: left allmulticast mode [ 610.440823][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.453511][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.591233][T13686] team0: Port device team_slave_0 added [ 610.640070][T13686] team0: Port device team_slave_1 added [ 610.682930][ T1132] [ 610.685340][ T1132] ====================================================== [ 610.692391][ T1132] WARNING: possible circular locking dependency detected [ 610.699638][ T1132] 6.6.102-syzkaller #0 Not tainted [ 610.704795][ T1132] ------------------------------------------------------ [ 610.711936][ T1132] kworker/u4:7/1132 is trying to acquire lock: [ 610.718494][ T1132] ffff88802f84cd00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 610.728226][ T1132] [ 610.728226][ T1132] but task is already holding lock: [ 610.735741][ T1132] ffff88805d5a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 610.746282][ T1132] [ 610.746282][ T1132] which lock already depends on the new lock. [ 610.746282][ T1132] [ 610.756814][ T1132] [ 610.756814][ T1132] the existing dependency chain (in reverse order) is: [ 610.765952][ T1132] [ 610.765952][ T1132] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 610.773915][ T1132] __mutex_lock+0x129/0xcc0 [ 610.778998][ T1132] ieee80211_open+0x144/0x200 [ 610.784254][ T1132] __dev_open+0x2bc/0x430 [ 610.789156][ T1132] dev_open+0xab/0x170 [ 610.794225][ T1132] team_add_slave+0xae7/0x2660 [ 610.799559][ T1132] do_setlink+0xe14/0x3fb0 [ 610.804541][ T1132] rtnl_newlink+0x175b/0x2020 [ 610.809765][ T1132] rtnetlink_rcv_msg+0x7c7/0xf10 [ 610.815249][ T1132] netlink_rcv_skb+0x216/0x480 [ 610.820575][ T1132] netlink_unicast+0x751/0x8d0 [ 610.825968][ T1132] netlink_sendmsg+0x8c1/0xbe0 [ 610.831364][ T1132] ____sys_sendmsg+0x5bf/0x950 [ 610.836693][ T1132] ___sys_sendmsg+0x220/0x290 [ 610.842019][ T1132] __se_sys_sendmsg+0x1a5/0x270 [ 610.847414][ T1132] do_syscall_64+0x55/0xb0 [ 610.852365][ T1132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.858806][ T1132] [ 610.858806][ T1132] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 610.866917][ T1132] __lock_acquire+0x2ddb/0x7c80 [ 610.872324][ T1132] lock_acquire+0x197/0x410 [ 610.877373][ T1132] __mutex_lock+0x129/0xcc0 [ 610.882505][ T1132] team_del_slave+0x32/0x1c0 [ 610.887718][ T1132] team_device_event+0x28d/0xa20 [ 610.893282][ T1132] notifier_call_chain+0x197/0x390 [ 610.898929][ T1132] unregister_netdevice_many_notify+0xf36/0x1810 [ 610.905801][ T1132] unregister_netdevice_queue+0x324/0x360 [ 610.912146][ T1132] _cfg80211_unregister_wdev+0x16b/0x580 [ 610.918319][ T1132] ieee80211_remove_interfaces+0x496/0x680 [ 610.924669][ T1132] ieee80211_unregister_hw+0x5d/0x2a0 [ 610.930610][ T1132] mac80211_hwsim_del_radio+0x274/0x450 [ 610.936709][ T1132] hwsim_exit_net+0x585/0x640 [ 610.942045][ T1132] cleanup_net+0x6f4/0xb90 [ 610.947014][ T1132] process_scheduled_works+0xa45/0x15b0 [ 610.953189][ T1132] worker_thread+0xa55/0xfc0 [ 610.958317][ T1132] kthread+0x2fa/0x390 [ 610.962948][ T1132] ret_from_fork+0x48/0x80 [ 610.968035][ T1132] ret_from_fork_asm+0x11/0x20 [ 610.973627][ T1132] [ 610.973627][ T1132] other info that might help us debug this: [ 610.973627][ T1132] [ 610.983873][ T1132] Possible unsafe locking scenario: [ 610.983873][ T1132] [ 610.991441][ T1132] CPU0 CPU1 [ 610.996833][ T1132] ---- ---- [ 611.002215][ T1132] lock(&rdev->wiphy.mtx); [ 611.006835][ T1132] lock(team->team_lock_key); [ 611.014133][ T1132] lock(&rdev->wiphy.mtx); [ 611.021780][ T1132] lock(team->team_lock_key); [ 611.026601][ T1132] [ 611.026601][ T1132] *** DEADLOCK *** [ 611.026601][ T1132] [ 611.034947][ T1132] 5 locks held by kworker/u4:7/1132: [ 611.040337][ T1132] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 611.051353][ T1132] #1: ffffc90004ccfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 611.062137][ T1132] #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 611.071685][ T1132] #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 611.081666][ T1132] #4: ffff88805d5a8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 611.092843][ T1132] [ 611.092843][ T1132] stack backtrace: [ 611.098840][ T1132] CPU: 1 PID: 1132 Comm: kworker/u4:7 Not tainted 6.6.102-syzkaller #0 [ 611.107121][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 611.117218][ T1132] Workqueue: netns cleanup_net [ 611.122011][ T1132] Call Trace: [ 611.125313][ T1132] [ 611.128259][ T1132] dump_stack_lvl+0x16c/0x230 [ 611.133147][ T113