last executing test programs: 49.111536799s ago: executing program 0 (id=1661): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100ff9711000000000000000000000007000000010000000000000018"], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 48.267057659s ago: executing program 0 (id=1669): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x28, 0x5, 0x0) close(r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='{[\\]+\x00') socketpair(0x3f, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@float={0x3, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400040082c104003e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg(r3, &(0x7f0000000580)={&(0x7f0000000280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000640)="f1b0fc1fc5efb35ca84691542e581728baeda4e9d60e7715ae240da791c85878f79730e491e0d3525fd3985cfcb04d3d0e792c23c077a3776ccf2337dffd81776680e0d523173b60df4a3d59ad7b39f89f326f8d2c4f904d3fa1d60bb71329e7f1f844abacc6290cfa809395861cc583fa7cfd2aef511fd92cb367942af9bfdc70a6c3706ef5f2d4475ef90d0c52a94869b5366802e133a3330b16f314e960097923004e6dff8850ce770cc040e1daf32e63bdf60cacfd20e076211a8439c355e4250fd8fac08dcc06b5a48d2ac14f521b17", 0xd2}, {&(0x7f00000001c0)="8b45b5dd9a385e6ff91b2c3d57cbbf5ff805d0e6fc62efff832028879428404f3029089bdadb8cc39672f06be69c842a28e526b5c630", 0x36}, {&(0x7f0000000400)="d2f7fce7b7ab79fe77d9a65ef863da062e063fc947310c04fafe8fccc909d337d8b896553df8e216bcabe8ce5d01b8136aaf5e1c1d5ccb05a6589149d797cce864fdf249d6ad5cfaa9b2d10577e1c57514e0434b17505d0ade3db9b796be5ec46c54", 0x62}, {&(0x7f0000000500)="25f48617ccd5dc5de73ad418d95ebc05cfe9133a0f544bfcff316665d259e577ebc2d33819bd4427f2ccc0ddff7921f1f9c40160d38327af56d2a0f67dcc5e28abc6e74659e8cf8bfc70524a20fdecd5a4ff5e79518b4317cb3a2baabc6b16cc3adfbcfde40d3d25baab679484d1e4b9", 0x70}, {&(0x7f0000000300)="93a74d8985073a28874ff9c25ab32c688839168f4297916e253f32cd55f0281ebabc41e60510542cbbb5dae6d43c8c2bb7b76814", 0x34}], 0x5}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0xffff8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8d8f}, 0x50) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x4004001}, 0x0) 48.215317922s ago: executing program 1 (id=1671): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 47.344121903s ago: executing program 2 (id=1675): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x28, 0x6, 0x0, 0x44) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000f8ffffff850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f00000001c0)=""/60, 0x3c}], 0x2, &(0x7f0000000380)=""/118, 0x76}, 0x13100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0) 47.193122672s ago: executing program 2 (id=1676): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open$cgroup(0x0, r3, 0xb, r1, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x8}, 0x100c, 0x1, 0x0, 0x9, 0x7, 0x8, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611824000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 47.165465303s ago: executing program 1 (id=1677): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x42) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 47.164403953s ago: executing program 0 (id=1685): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 46.942567776s ago: executing program 2 (id=1679): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0xebff, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0xffeb}], 0x2, 0x0, 0x0, 0x60}, 0x0) 46.920800898s ago: executing program 2 (id=1680): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000007fff92e", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000007fff92e", 0x14}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000000000c4ba948176857dfd711199f0c6df3359000000000000000000000000000000b2dc1a8eb775126d62c9d7cd57439d9b813623586092d6587cd2409f62ac59578a52317648610eb83e4da154bcb6fa542a4fd30c549d87f708f2a0d601301f901df1fb535e0f4fa12c7c04", @ANYRESDEC=r0, @ANYRES32, @ANYRES16=0x0], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0xa030, 0x5, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000000), 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="311039000000000018120000", @ANYRES32=r1, @ANYBLOB="000000000053e100b70300000000000085deffff0bfc0000b700000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 45.692638439s ago: executing program 2 (id=1681): socket$kcm(0x29, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000000780)=""/4111, 0x100f}, {&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000680)=""/121, 0x79}], 0x6}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 45.627666063s ago: executing program 0 (id=1682): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="130000001000000002dcc750ca7682b96ac1d8e341fb000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x10, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000b9b300008500003f0c00000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r2], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4008004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) 45.625859163s ago: executing program 1 (id=1683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6206908b, 0x1}, 0x1040c0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}], 0x20}, 0x40010020) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'full', 0x20, 0x401, 0x20, 0xe}, 0x2f) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x7}, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc601000070003000300053582c137153e37000c", 0x26}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000031"], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0}, 0x10) sendmsg$inet(r1, 0x0, 0x4000) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) 45.307021282s ago: executing program 1 (id=1688): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x1c108, 0x3, 0x3, 0x6, 0x7, 0x4, 0x2, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_int(r3, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2000000, @empty}, 0x80, 0x0}, 0x20000001) 45.222215177s ago: executing program 0 (id=1689): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d004000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 45.151745961s ago: executing program 1 (id=1690): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fe099c34c2640608000080000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r3 = socket$kcm(0x2, 0x6, 0xfffe) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000240), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) r9 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000100)={r9}) r10 = socket$kcm(0x10, 0x400000002, 0x0) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETFILTEREBPF(r11, 0x800454e1, &(0x7f00000001c0)=r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000200), &(0x7f00000002c0)=r11}, 0x20) setsockopt$sock_attach_bpf(r10, 0x10e, 0xb, &(0x7f0000000080), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x28008840) 45.107625633s ago: executing program 3 (id=1691): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x1000}) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x92080, 0x0) (rerun: 32) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) (async, rerun: 32) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x1, 0x5, [@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @link_local, @multicast]}) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x8}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x1, 0x49, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1d, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9e}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x12, 0x0, 0xe, 0xb8, 0xfb3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x23, &(0x7f0000000340)=""/35, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x8002000, &(0x7f0000001cc0)="6c8bb66a4f7369a4b73fb6457a47dfa2de85fe2034f8cb63b66ff286b2f5f5d98857f184604fa7227a846a5d8bbdc59a75527419d49d92d98005503c645f08", 0x3f, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)="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") sendmsg$unix(r5, &(0x7f0000002dc0)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="ffe9590a67594f9de64e84aacd3f97790b4a7ffdd43991f853080ca43868de98baa47186e12e9ce4c8d54be2b5b487f18d6785afa34623351e3f4c49dfa091339257d7e347bf1aec813eccf45b7ddd11fff7cb438bfae3338956d26af1d8cb450252f3509d5a65101cd1d33029543b8450af85c7c104ac1b3cad946e2174ca476d43189236b1e24d8a3432358269c99dd6b2fd256052409cceb5b6897d68d42b6c4789eab7aa2b5cb70a40fb1a", 0xad}, {&(0x7f00000016c0)="613a87c7f0bb4ba78a8694d846a75d8e4422c17d7d6b13b694d96d46c0a99fcbc95314a6b0eae2f3bf7588c837d1e975abea119e902316acc47e719fe58bdc132dcb87b623e703f6604c1927ff094a654676c1f6233a081462a9efe8479aca3595ea8a5e5d4c44cf4ad07c1bd8d869dddca6bfbab03f5276bd95e251fad03c5842d2da959a433e72325050f04454fe6bbfc7427c0757b5c3384722db5d33704906", 0xa1}, {&(0x7f0000001780)="83b56169753ed8a8c65be18442992d8cb87e32bbb1802cdfedb09c7203a640fa5604b03827279fda495a37be3d12c186f58badd44fb22177256dcb5d5d38a49dc14e3237f3342879bd8d54fcdfe431442d0b32f1e44549140d30017e53a545e15769ad8f0c5e378a6040700cf920fa3b7e66df2d26859a70fee4e4779b25fec58f21b9bf48dea17ce7939c5f972fd0dbe507a851fefa2c0644deafcf0f46df24c45939e15328145889494c7fef16d93ca14f847a08e409711842572e6cdd7e54fe20eeb3a43a50e580e031b131890853ce8c115e6a28cb4edb892b663a488dbbe791e7e233c13c4c8a9aaa10", 0xec}, {&(0x7f0000001880)="e5aeeb9b23530fbe5fac2a4aad0f02c07c7798b91b4e24daff1664e16f335fcda745d25248b8fae9a6e75ed5edcfc19701c6497786c3bd256547cc485616752d2128f3e9790e7209", 0x48}, {&(0x7f0000001900)="4cc425c3c165cc18c0cc149bfc0118b6a05eb4341beb5ddc3ab376c02883f69b9e53f4ab27bd3f113fbc48b7af3bedd97503d147f5e33bbc79ca60df8e61df9cc4c1bb7ee7bb3f2a821cdabbf4bbe4c82c51bab4b73476726e43f47b1323e6b03072119555302e26a37706b483a96e19091b16993097cfefb6f1ec94232fc602eaaeb977dec9f8ecf70e019cbc501975d19c512d5bfbc011d6838d1181108e20acfb044530b93eb07fd1d3f2f1031fc4ffd7514ce61ddefe3eab60a46121d767add8db37a06cccb1e1fb6f6c37be68f690", 0xd1}, {&(0x7f0000001a00)="f9e4b780ad1cc53e0d229ae199765abdbd2af48aa29d183515c27e513cb2938e7c474119c0341ca60f203683248b28f10ac76566651cca5f634eaa8e3c0b8b683fc9bd81dcf9143777593589ffa621f4219fa0bf46b0f24e68efdfd820e1ed2137df3c72ccf03d75969deb894b78aa11414ce7ecf5a0f200bad8bb165a02d47d05dd46ecfed2cffc321928af2689895e527982a8aa62781cf4d1b13aad105743da823c611788bc50c991d96f975dc15c7a88007d7ec24f231e846f370fe4ceb4b25c30d81a1d949b0dbb34fdec6dc250f3", 0xd1}, {&(0x7f0000001b00)="d11f612e8e68a32b80432ad42115c1e7017dccfff936e2cf940e1d3171ab7618e091d475fdea6a23e69defb57442bc502ceae079de4f00c025fc6ea126f705a634515715248e03cb92ca0063118bb605e80dc5e484f14ba9b777fa204a64d928fbf3f558f299bae093d47671d6b8b20089b82b89be0f78f43b", 0x79}, {&(0x7f0000001b80)="e5b761769d2b1eee368ebe16f83305ee9c6671f307feaadcf5504eb5c5f0a38523fe29b3f890ad62dadd6934df62edd7336a3fd1660413fb564aaa07db80c595e3d1f607b8136dcbfe4bcfc9", 0x4c}], 0x9, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}], 0x20, 0x4c800}, 0x400c010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e00)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003240)={{0x1, 0xffffffffffffffff}, &(0x7f00000031c0), &(0x7f0000003200)=r4}, 0x20) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003300)=@bpf_ext={0x1c, 0x2b, &(0x7f0000002e80)=@raw=[@map_val={0x18, 0xf, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x7, 0xf, 0xffffffffffffffe1, 0xfffffffffffffffc}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xf, 0x1, 0x7, 0x8, 0x4}, @ldst={0x0, 0x2, 0x0, 0x1, 0xb, 0x50, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], &(0x7f0000003000)='GPL\x00', 0xc68, 0xd6, &(0x7f0000003040)=""/214, 0x40f00, 0x1e, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003140)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000003180)={0x2, 0x6, 0x400, 0x2}, 0x10, 0x2c8fc, 0xffffffffffffffff, 0x1, &(0x7f0000003280)=[r1, r10, r2, r2], &(0x7f00000032c0)=[{0x4, 0x4, 0x2}], 0x10, 0x26}, 0x94) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) (async) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000033c0)=r11, 0x4) (async) r12 = perf_event_open(&(0x7f0000003480)={0x4, 0x80, 0x5, 0x75, 0x3, 0x6, 0x0, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, @perf_config_ext={0x6, 0x7fffffff}, 0x20, 0xfff, 0x1, 0x8, 0x401, 0x6, 0x7, 0x0, 0x1, 0x0, 0xb6}, r7, 0xb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000003400)={0x4, 0x80, 0x77, 0x0, 0x7, 0x4, 0x0, 0x7479, 0xa9024, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x40, 0x8}, 0x840, 0xfff, 0x2, 0x8, 0x100, 0x16e, 0x2, 0x0, 0xfff, 0x0, 0x800}, 0x0, 0x1, r12, 0x8) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000003500)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003540)="fb", 0x1}], 0x1, &(0x7f00000035c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0xef, 0x0, 0x5, [0x4a, 0xbf4, 0x8, 0xd, 0x4, 0x401, 0x40, 0x81, 0x10000, 0x8]}, @cipso={0x86, 0x61, 0x0, [{0x1, 0x3, "11"}, {0x6, 0x2}, {0x0, 0x12, "0f837fa51e4358470cae9ce74f3253bc"}, {0x7, 0x11, "1b09b7781adc0d7217b6f9c64154ec"}, {0x7, 0x11, "2b61bcced401f591be3d2f7f6e1c74"}, {0x1, 0x7, "cb3e75b52c"}, {0x1, 0x2}, {0x7, 0x7, "bf01d58d46"}, {0x1, 0x10, "5590f3be7910cb575579dbde1331"}, {0x1, 0x2}]}, @ssrr={0x89, 0xf, 0x5a, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @timestamp_addr={0x44, 0x54, 0x33, 0x1, 0x4, [{@remote, 0x8}, {@private=0xa010101, 0xffffff00}, {@rand_addr=0x64010101, 0x5}, {@empty, 0xfffffff9}, {@multicast1, 0x3be}, {@local, 0x2}, {@rand_addr=0x64010101, 0xfffffff9}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@local, 0x1}]}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x158}, 0x2000c000) (rerun: 32) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000037c0)={0x2, &(0x7f0000003780)=[{0x101, 0x7, 0x2, 0x8}, {0xb5e9, 0x4, 0x6, 0x1}]}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000003800)='{[-\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003840)={'erspan0\x00', 0x1100}) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003a40)={r10, &(0x7f0000003880)="50e58444b5d20844590878e36de400bd7a63724c36b1961eab28c3e51205b31bc1b366e98e829135b7c73201c06151a486fd0d07861794bed5613c8451ddfb568042e69110fa27d591f610b3fbd810292487cff734476ceda906a470db9735b97a3fecf2e224bcbdd54125979a859a94958e8d798336435811fd1112755f61946523e9f21cdbdff13894f26c9994e064bce77ccba5b72d1ddf7e41b25f455f3eec82d33b5ce4af52569d07bd78ffbf434399e858ed8e5b557c7ea7968bee74d7f1ed7b1b07bdf6eabb5ad6c6cf53a1a18ae20305784032bfaaed3accd57ffdd8d433f9ca8515b49d9b3d7d739902e98302", &(0x7f0000003980)=""/174, 0x4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004c00)={{r8, 0xffffffffffffffff}, &(0x7f0000004b80), &(0x7f0000004bc0)='%pB \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004c40)={&(0x7f0000003a80)="d9e5ec77c781facf7c0d163cc688eddacdd87f9785bec0baf8b8eaae986ba2e6f4cb14d0", &(0x7f0000003ac0)=""/43, &(0x7f0000003b00)="88bc4362c888d0dc4f6d4ebc1e47ab2fb0ea167341b24c29edd7fb9dd74813a3948763920f7a457e321059c55069761581f95aea62deb33820ff37b6d736cedc1224b970f41c60d1431f49160e4b84a731eab63b9775099d854e9cb04c2fa08bff2d7481bf59fe7e356bbb7bc18543ef1c10f024dd2fc7d3b37837bd63951943", &(0x7f0000003b80)="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", 0x1ff, r13, 0x4}, 0x38) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000004c80), 0x40, 0x0) ioctl$TUNSETCARRIER(r14, 0x400454e2, &(0x7f0000004cc0)) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000004d00)=r4, 0x4) 45.094823134s ago: executing program 0 (id=1692): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 44.911683365s ago: executing program 3 (id=1693): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x80, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000200)="0c79042b0d3feda58600ba", 0xb}], 0x1}, 0x400888c) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="c10923e1dd00", 0x6}], 0x1}, 0x20040000) 44.789298852s ago: executing program 2 (id=1694): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000010000000000000000000000180000000000000000000000070000004404dc030100ff9711000000000000000000000007000000010000000000000018"], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r8 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000640), 0x4) recvmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$tipc(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd083e9bc", 0x15, 0x24000840}, 0x20040089) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2532, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) 44.789226062s ago: executing program 3 (id=1695): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000910008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a0020000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 44.64523221s ago: executing program 3 (id=1696): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="180000003a000b12d25a80648c2594f90424fc60100c0340", 0x18}], 0x1}, 0x8080) 44.507594359s ago: executing program 3 (id=1697): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87034100ff004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 44.266925533s ago: executing program 3 (id=1698): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="130000001000000002dcc750ca7682b96ac1d8e341fb000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x10, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000b9b300008500003f0c00000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r2], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4008004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) 17.660650618s ago: executing program 1 (id=1699): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="130000001000000002dcc750ca7682b96ac1d8e341fb00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x10, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000b9b300008500003f0c00000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r2], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4008004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) 9.850474444s ago: executing program 32 (id=1692): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x42) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) 0s ago: executing program 33 (id=1699): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x8000}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="130000001000000002dcc750ca7682b96ac1d8e341fb00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x10, r4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r6}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000300000000000000b9b300008500003f0c00000087920400ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000850000008a000000851000000800000018190000", @ANYRES32=r3, @ANYBLOB="00000000000000005a2000010000000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x2, &(0x7f0000000340)=""/2, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x0, 0x2, 0x3eec4b6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r2], &(0x7f00000005c0)=[{0x5, 0x3, 0x9, 0xb}, {0x2, 0x4, 0x4, 0xb}, {0x5, 0x1, 0xa, 0x1}, {0x1, 0x4, 0x7, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x5, 0x3, 0x9, 0xc}, {0x1, 0x2, 0x5, 0xc}, {0x1, 0x3, 0x10, 0x7}, {0x5, 0x2, 0x2, 0x1}], 0x10, 0x3b}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4008004) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): s an invalid length. [ 255.384748][ T8671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.841'. [ 255.401314][ T8671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.924289][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.930798][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.729255][ T8687] netlink: 'syz.0.846': attribute type 10 has an invalid length. [ 256.771245][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.846'. [ 256.983980][ T8687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.693344][ T8709] FAULT_INJECTION: forcing a failure. [ 258.693344][ T8709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.738714][ T8709] CPU: 1 PID: 8709 Comm: syz.0.850 Not tainted syzkaller #0 [ 258.746061][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.756159][ T8709] Call Trace: [ 258.759462][ T8709] [ 258.762421][ T8709] dump_stack_lvl+0x18c/0x250 [ 258.767127][ T8709] ? show_regs_print_info+0x20/0x20 [ 258.772347][ T8709] ? load_image+0x400/0x400 [ 258.776877][ T8709] ? __might_fault+0xaa/0x120 [ 258.781577][ T8709] ? __lock_acquire+0x7d40/0x7d40 [ 258.786621][ T8709] ? btf_check_sec_info+0x29f/0x350 [ 258.791843][ T8709] should_fail_ex+0x39d/0x4d0 [ 258.796553][ T8709] _copy_to_user+0x2f/0xa0 [ 258.800996][ T8709] btf_new_fd+0x5c0/0x9f0 [ 258.805355][ T8709] ? bpf_btf_show_fdinfo+0x80/0x80 [ 258.810482][ T8709] ? capable+0x88/0xe0 [ 258.814569][ T8709] __sys_bpf+0x670/0x890 [ 258.818823][ T8709] ? bpf_link_show_fdinfo+0x390/0x390 [ 258.824241][ T8709] ? lock_chain_count+0x20/0x20 [ 258.829117][ T8709] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 258.835117][ T8709] __x64_sys_bpf+0x7c/0x90 [ 258.839550][ T8709] do_syscall_64+0x55/0xa0 [ 258.843992][ T8709] ? clear_bhb_loop+0x40/0x90 [ 258.848681][ T8709] ? clear_bhb_loop+0x40/0x90 [ 258.853409][ T8709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.859314][ T8709] RIP: 0033:0x7f746339aeb9 [ 258.863739][ T8709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.883354][ T8709] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.891789][ T8709] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 258.899781][ T8709] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 258.907768][ T8709] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 258.915754][ T8709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.923734][ T8709] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 258.931736][ T8709] [ 260.010392][ T8738] netlink: 'syz.0.860': attribute type 10 has an invalid length. [ 260.027465][ T8738] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'. [ 260.056271][ T8738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.084426][ T8734] netlink: 'syz.2.858': attribute type 10 has an invalid length. [ 260.092434][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.858'. [ 260.131828][ T8734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.245929][ T8747] delete_channel: no stack [ 260.255509][ T8747] delete_channel: no stack [ 260.507208][ T8753] netlink: 'syz.3.866': attribute type 10 has an invalid length. [ 260.543364][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.866'. [ 260.567354][ T8753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.125288][ T8761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.868'. [ 261.157698][ T8761] netlink: 'syz.0.868': attribute type 9 has an invalid length. [ 261.176627][ T8761] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.868'. [ 261.208822][ T8764] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 261.226564][ T8764] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 261.275718][ T8764] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 261.291962][ T8764] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 261.656478][ T8769] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 261.672652][ T8769] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.872'. [ 261.984916][ T8786] netlink: 'syz.1.877': attribute type 10 has an invalid length. [ 262.003183][ T8786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.877'. [ 262.038442][ T8786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.079746][ T8789] netlink: 'syz.2.879': attribute type 10 has an invalid length. [ 262.098924][ T8789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.879'. [ 262.117348][ T8789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.190040][ T8790] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 262.209274][ T8790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.878'. [ 262.289487][ T8790] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.740041][ T8803] Â: renamed from pim6reg1 [ 263.418731][ T8820] FAULT_INJECTION: forcing a failure. [ 263.418731][ T8820] name failslab, interval 1, probability 0, space 0, times 0 [ 263.437748][ T8820] CPU: 1 PID: 8820 Comm: syz.1.890 Not tainted syzkaller #0 [ 263.445103][ T8820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.455213][ T8820] Call Trace: [ 263.458523][ T8820] [ 263.461488][ T8820] dump_stack_lvl+0x18c/0x250 [ 263.466237][ T8820] ? show_regs_print_info+0x20/0x20 [ 263.471541][ T8820] ? load_image+0x400/0x400 [ 263.476106][ T8820] ? __might_sleep+0xe0/0xe0 [ 263.480737][ T8820] ? __lock_acquire+0x7d40/0x7d40 [ 263.485802][ T8820] should_fail_ex+0x39d/0x4d0 [ 263.490541][ T8820] should_failslab+0x9/0x20 [ 263.495086][ T8820] slab_pre_alloc_hook+0x59/0x310 [ 263.500151][ T8820] ? lockdep_hardirqs_on+0x98/0x150 [ 263.505391][ T8820] kmem_cache_alloc_node+0x60/0x320 [ 263.510627][ T8820] ? __alloc_skb+0x103/0x2c0 [ 263.515256][ T8820] __alloc_skb+0x103/0x2c0 [ 263.519721][ T8820] netlink_ack+0x376/0x1180 [ 263.524264][ T8820] ? __dev_queue_xmit+0x26b/0x36b0 [ 263.529430][ T8820] ? netlink_dump+0xe50/0xe50 [ 263.534199][ T8820] ? ref_tracker_free+0x690/0x840 [ 263.539280][ T8820] netlink_rcv_skb+0x2c5/0x4d0 [ 263.544073][ T8820] ? rtnetlink_bind+0x80/0x80 [ 263.548784][ T8820] ? netlink_ack+0x1180/0x1180 [ 263.553595][ T8820] ? __lock_acquire+0x7d40/0x7d40 [ 263.558649][ T8820] ? netlink_deliver_tap+0x2e/0x1b0 [ 263.563911][ T8820] netlink_unicast+0x751/0x8d0 [ 263.568721][ T8820] netlink_sendmsg+0x8d0/0xbf0 [ 263.573615][ T8820] ? netlink_getsockopt+0x590/0x590 [ 263.578847][ T8820] ? aa_sock_msg_perm+0x94/0x150 [ 263.584087][ T8820] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 263.589413][ T8820] ? security_socket_sendmsg+0x80/0xa0 [ 263.594908][ T8820] ? netlink_getsockopt+0x590/0x590 [ 263.600143][ T8820] ____sys_sendmsg+0x5ba/0x960 [ 263.604959][ T8820] ? __asan_memset+0x22/0x40 [ 263.609662][ T8820] ? __sys_sendmsg_sock+0x30/0x30 [ 263.614717][ T8820] ? __import_iovec+0x5f2/0x850 [ 263.619605][ T8820] ? import_iovec+0x73/0xa0 [ 263.624138][ T8820] ___sys_sendmsg+0x2a6/0x360 [ 263.628876][ T8820] ? __sys_sendmsg+0x2a0/0x2a0 [ 263.633678][ T8820] ? trace_call_bpf+0xc3/0x6c0 [ 263.638507][ T8820] __se_sys_sendmsg+0x1c2/0x2b0 [ 263.643439][ T8820] ? __x64_sys_sendmsg+0x80/0x80 [ 263.648419][ T8820] ? lockdep_hardirqs_on+0x98/0x150 [ 263.653649][ T8820] do_syscall_64+0x55/0xa0 [ 263.658107][ T8820] ? clear_bhb_loop+0x40/0x90 [ 263.662810][ T8820] ? clear_bhb_loop+0x40/0x90 [ 263.667513][ T8820] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.673429][ T8820] RIP: 0033:0x7fe7ea59aeb9 [ 263.677898][ T8820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.697555][ T8820] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 263.705993][ T8820] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 263.713996][ T8820] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 263.722048][ T8820] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 263.730066][ T8820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.738095][ T8820] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 263.746148][ T8820] [ 263.920199][ T8827] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 263.951793][ T8827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.893'. [ 264.239630][ T8827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.286154][ T8833] netlink: 'syz.0.894': attribute type 10 has an invalid length. [ 264.329667][ T8833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.840788][ T8868] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 265.881311][ T8868] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 265.950122][ T8862] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 266.002053][ T8862] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 266.042044][ T8870] validate_nla: 1 callbacks suppressed [ 266.042233][ T8870] netlink: 'syz.2.906': attribute type 2 has an invalid length. [ 266.112454][ T8870] netlink: 'syz.2.906': attribute type 8 has an invalid length. [ 266.182162][ T8870] __nla_validate_parse: 1 callbacks suppressed [ 266.182207][ T8870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.906'. [ 266.272214][ T8867] netlink: 'syz.3.900': attribute type 4 has an invalid length. [ 266.344798][ T8867] netlink: 152 bytes leftover after parsing attributes in process `syz.3.900'. [ 266.721000][ T8879] netlink: 'syz.0.909': attribute type 10 has an invalid length. [ 266.743705][ T8879] netlink: 40 bytes leftover after parsing attributes in process `syz.0.909'. [ 266.763914][ T8879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.857761][ T8882] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.910'. [ 266.871340][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 266.917060][ T8883] netlink: 'syz.2.911': attribute type 10 has an invalid length. [ 266.944599][ T8883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.911'. [ 267.028867][ T8883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.298095][ T8888] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 267.313832][ T8888] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 267.363459][ T8890] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 267.409674][ T8890] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 268.604001][ T8909] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 268.612130][ T8909] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 268.636826][ T8912] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 268.659118][ T8912] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 268.681751][ T8920] netlink: 'syz.3.921': attribute type 21 has an invalid length. [ 268.705454][ T8920] netlink: 132 bytes leftover after parsing attributes in process `syz.3.921'. [ 268.894902][ T8924] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 268.903468][ T8924] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 268.957341][ T8924] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 268.973714][ T8924] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 269.283684][ T8931] netlink: 'syz.2.926': attribute type 10 has an invalid length. [ 269.291879][ T8931] netlink: 40 bytes leftover after parsing attributes in process `syz.2.926'. [ 269.347420][ T8931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.375215][ T8961] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 270.382229][ T8961] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 270.433697][ T8961] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 270.451706][ T8961] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 270.630620][ T8968] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 270.662663][ T8968] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 270.703899][ T8969] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 270.723648][ T8969] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 270.860073][ T8963] FAULT_INJECTION: forcing a failure. [ 270.860073][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 270.928422][ T8963] CPU: 0 PID: 8963 Comm: syz.1.936 Not tainted syzkaller #0 [ 270.935787][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 270.945882][ T8963] Call Trace: [ 270.949190][ T8963] [ 270.952160][ T8963] dump_stack_lvl+0x18c/0x250 [ 270.956883][ T8963] ? show_regs_print_info+0x20/0x20 [ 270.962119][ T8963] ? load_image+0x400/0x400 [ 270.966680][ T8963] ? __might_sleep+0xe0/0xe0 [ 270.971304][ T8963] ? __lock_acquire+0x7d40/0x7d40 [ 270.976391][ T8963] should_fail_ex+0x39d/0x4d0 [ 270.981101][ T8963] should_failslab+0x9/0x20 [ 270.985643][ T8963] slab_pre_alloc_hook+0x59/0x310 [ 270.990744][ T8963] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 270.996483][ T8963] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 271.002218][ T8963] __kmem_cache_alloc_node+0x53/0x250 [ 271.007622][ T8963] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 271.013355][ T8963] __kmalloc+0xa4/0x230 [ 271.017531][ T8963] tomoyo_realpath_from_path+0xe3/0x5d0 [ 271.023105][ T8963] tomoyo_path_number_perm+0x248/0x620 [ 271.028593][ T8963] ? tomoyo_path_number_perm+0x217/0x620 [ 271.034255][ T8963] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 271.039748][ T8963] ? ktime_get+0x7f/0x280 [ 271.044121][ T8963] ? __fget_files+0x28/0x4b0 [ 271.048726][ T8963] ? __fget_files+0x28/0x4b0 [ 271.053340][ T8963] security_file_ioctl+0x70/0xa0 [ 271.058303][ T8963] __se_sys_ioctl+0x48/0x170 [ 271.062909][ T8963] do_syscall_64+0x55/0xa0 [ 271.067342][ T8963] ? clear_bhb_loop+0x40/0x90 [ 271.072050][ T8963] ? clear_bhb_loop+0x40/0x90 [ 271.076756][ T8963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.082670][ T8963] RIP: 0033:0x7fe7ea59aeb9 [ 271.087102][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.106734][ T8963] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.115175][ T8963] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 271.123176][ T8963] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 271.131170][ T8963] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 271.139182][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.147174][ T8963] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 271.155182][ T8963] [ 271.206046][ T8963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.588826][ T8993] netlink: 'syz.1.945': attribute type 10 has an invalid length. [ 271.603042][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.1.945'. [ 271.618368][ T8993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.916980][ T9000] netlink: 'syz.2.947': attribute type 4 has an invalid length. [ 272.074519][ T9003] netlink: 'syz.2.948': attribute type 11 has an invalid length. [ 272.082423][ T9003] netlink: 168 bytes leftover after parsing attributes in process `syz.2.948'. [ 272.104649][ T9003] netlink: 'syz.2.948': attribute type 4 has an invalid length. [ 272.507815][ T9011] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 272.523894][ T9011] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 272.562597][ T9012] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 272.582299][ T9012] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 272.955995][ T9015] delete_channel: no stack [ 273.154557][ T9025] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 273.162092][ T9025] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 273.206020][ T9025] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 273.213200][ T9025] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 273.325147][ T9033] FAULT_INJECTION: forcing a failure. [ 273.325147][ T9033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.346180][ T9033] CPU: 1 PID: 9033 Comm: syz.2.961 Not tainted syzkaller #0 [ 273.353527][ T9033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.363612][ T9033] Call Trace: [ 273.366915][ T9033] [ 273.369872][ T9033] dump_stack_lvl+0x18c/0x250 [ 273.374587][ T9033] ? show_regs_print_info+0x20/0x20 [ 273.379824][ T9033] ? load_image+0x400/0x400 [ 273.384424][ T9033] ? __might_fault+0xaa/0x120 [ 273.389146][ T9033] ? __lock_acquire+0x7d40/0x7d40 [ 273.394223][ T9033] should_fail_ex+0x39d/0x4d0 [ 273.398947][ T9033] _copy_from_iter+0x1d9/0x12e0 [ 273.403839][ T9033] ? __virt_addr_valid+0x18c/0x540 [ 273.408985][ T9033] ? __lock_acquire+0x7d40/0x7d40 [ 273.414035][ T9033] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 273.419442][ T9033] ? rep_movs_alternative+0x30/0x90 [ 273.424689][ T9033] ? copyout_mc+0x70/0x70 [ 273.429053][ T9033] ? __virt_addr_valid+0x18c/0x540 [ 273.434202][ T9033] ? __virt_addr_valid+0x18c/0x540 [ 273.439357][ T9033] ? __virt_addr_valid+0x469/0x540 [ 273.444514][ T9033] ? __check_object_size+0x506/0xa20 [ 273.449845][ T9033] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 273.455600][ T9033] ? dev_get_by_index+0x22/0x2d0 [ 273.460572][ T9033] ? skb_put+0x11b/0x210 [ 273.464857][ T9033] packet_sendmsg+0x3566/0x4d70 [ 273.469767][ T9033] ? verify_lock_unused+0x140/0x140 [ 273.474998][ T9033] ? mark_lock+0x94/0x320 [ 273.479360][ T9033] ? __lock_acquire+0x1273/0x7d40 [ 273.484427][ T9033] ? aa_sk_perm+0x83c/0x970 [ 273.488975][ T9033] ? packet_getsockopt+0xad0/0xad0 [ 273.494135][ T9033] ? aa_sock_msg_perm+0x94/0x150 [ 273.499109][ T9033] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.504441][ T9033] ? security_socket_sendmsg+0x80/0xa0 [ 273.509939][ T9033] ? packet_getsockopt+0xad0/0xad0 [ 273.515091][ T9033] ____sys_sendmsg+0x5ba/0x960 [ 273.519900][ T9033] ? __lock_acquire+0x7d40/0x7d40 [ 273.524996][ T9033] ? __asan_memset+0x22/0x40 [ 273.529632][ T9033] ? __sys_sendmsg_sock+0x30/0x30 [ 273.534695][ T9033] ? __import_iovec+0x5f2/0x850 [ 273.539597][ T9033] ? import_iovec+0x73/0xa0 [ 273.544148][ T9033] ___sys_sendmsg+0x2a6/0x360 [ 273.548870][ T9033] ? __sys_sendmsg+0x2a0/0x2a0 [ 273.553693][ T9033] ? __lock_acquire+0x7d40/0x7d40 [ 273.558780][ T9033] __se_sys_sendmsg+0x1c2/0x2b0 [ 273.563665][ T9033] ? __x64_sys_sendmsg+0x80/0x80 [ 273.568652][ T9033] ? lockdep_hardirqs_on+0x98/0x150 [ 273.573898][ T9033] do_syscall_64+0x55/0xa0 [ 273.578363][ T9033] ? clear_bhb_loop+0x40/0x90 [ 273.583075][ T9033] ? clear_bhb_loop+0x40/0x90 [ 273.587789][ T9033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.593723][ T9033] RIP: 0033:0x7f43ea79aeb9 [ 273.598173][ T9033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.617819][ T9033] RSP: 002b:00007f43eb64f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.626270][ T9033] RAX: ffffffffffffffda RBX: 00007f43eaa15fa0 RCX: 00007f43ea79aeb9 [ 273.634290][ T9033] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 273.642282][ T9033] RBP: 00007f43eb64f090 R08: 0000000000000000 R09: 0000000000000000 [ 273.650303][ T9033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.658303][ T9033] R13: 00007f43eaa16038 R14: 00007f43eaa15fa0 R15: 00007ffe407a5858 [ 273.666341][ T9033] [ 273.684730][ T9041] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 273.692582][ T9041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.962'. [ 273.709223][ T9041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.902833][ T9043] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 273.913491][ T9043] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 273.963893][ T9044] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 273.971026][ T9044] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 274.197088][ T9046] netlink: 'syz.2.965': attribute type 29 has an invalid length. [ 274.206513][ T9046] netlink: 'syz.2.965': attribute type 29 has an invalid length. [ 274.242154][ T9046] netlink: 'syz.2.965': attribute type 29 has an invalid length. [ 275.234572][ T9063] netlink: 830 bytes leftover after parsing attributes in process `syz.3.972'. [ 275.368381][ T9067] TCP: TCP_TX_DELAY enabled [ 275.394367][ T9065] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 275.415014][ T9065] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 275.453286][ T9071] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 275.462146][ T9071] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 275.562100][ T9074] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.975'. [ 275.592623][ T9072] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.975'. [ 275.644281][ T9079] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 275.651678][ T9079] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 275.680459][ T9077] netlink: 830 bytes leftover after parsing attributes in process `syz.2.985'. [ 275.704815][ T9079] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 275.714981][ T9079] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 275.742934][ T9084] netlink: 'syz.0.979': attribute type 15 has an invalid length. [ 275.752968][ T9084] netlink: 'syz.0.979': attribute type 7 has an invalid length. [ 275.991319][ T9091] delete_channel: no stack [ 276.367912][ T9108] netlink: 830 bytes leftover after parsing attributes in process `syz.2.989'. [ 276.694975][ T9114] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 276.702069][ T9114] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 276.750468][ T9114] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 276.773793][ T9114] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 276.966085][ T9127] FAULT_INJECTION: forcing a failure. [ 276.966085][ T9127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.004578][ T9127] CPU: 0 PID: 9127 Comm: syz.1.997 Not tainted syzkaller #0 [ 277.011949][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.022063][ T9127] Call Trace: [ 277.025365][ T9127] [ 277.028323][ T9127] dump_stack_lvl+0x18c/0x250 [ 277.033045][ T9127] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.039252][ T9127] ? show_regs_print_info+0x20/0x20 [ 277.044511][ T9127] ? load_image+0x400/0x400 [ 277.049087][ T9127] should_fail_ex+0x39d/0x4d0 [ 277.053817][ T9127] _copy_to_user+0x2f/0xa0 [ 277.058269][ T9127] simple_read_from_buffer+0xe7/0x150 [ 277.063692][ T9127] proc_fail_nth_read+0x1e8/0x260 [ 277.068774][ T9127] ? proc_fault_inject_write+0x360/0x360 [ 277.074470][ T9127] ? fsnotify_perm+0x271/0x5e0 [ 277.079301][ T9127] ? proc_fault_inject_write+0x360/0x360 [ 277.084973][ T9127] vfs_read+0x28b/0x970 [ 277.089179][ T9127] ? kernel_read+0x1e0/0x1e0 [ 277.093810][ T9127] ? __fget_files+0x28/0x4b0 [ 277.098436][ T9127] ? __fget_files+0x28/0x4b0 [ 277.103074][ T9127] ? __fget_files+0x43d/0x4b0 [ 277.107797][ T9127] ? __fdget_pos+0x2a3/0x330 [ 277.112429][ T9127] ? ksys_read+0x75/0x260 [ 277.116794][ T9127] ksys_read+0x150/0x260 [ 277.121089][ T9127] ? vfs_write+0x990/0x990 [ 277.125557][ T9127] ? lockdep_hardirqs_on+0x98/0x150 [ 277.130800][ T9127] do_syscall_64+0x55/0xa0 [ 277.135289][ T9127] ? clear_bhb_loop+0x40/0x90 [ 277.140015][ T9127] ? clear_bhb_loop+0x40/0x90 [ 277.144723][ T9127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.150648][ T9127] RIP: 0033:0x7fe7ea55b78e [ 277.155094][ T9127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 277.174734][ T9127] RSP: 002b:00007fe7eb52dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.183182][ T9127] RAX: ffffffffffffffda RBX: 00007fe7eb52e6c0 RCX: 00007fe7ea55b78e [ 277.191193][ T9127] RDX: 000000000000000f RSI: 00007fe7eb52e0a0 RDI: 000000000000000e [ 277.199202][ T9127] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.207206][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.215208][ T9127] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 277.223229][ T9127] [ 277.249183][ T9133] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1000'. [ 277.736479][ T9149] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 277.743935][ T9149] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 277.776042][ T9149] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 277.783915][ T9149] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 278.011850][ T9161] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1011'. [ 278.721582][ T9179] validate_nla: 1 callbacks suppressed [ 278.721600][ T9179] netlink: 'syz.3.1017': attribute type 13 has an invalid length. [ 278.739358][ T9179] netlink: 'syz.3.1017': attribute type 58 has an invalid length. [ 278.747662][ T9179] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1017'. [ 278.832377][ T9181] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 278.847092][ T9181] netlink: 'syz.3.1017': attribute type 29 has an invalid length. [ 279.220533][ T9189] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1021'. [ 279.370672][ T9195] delete_channel: no stack [ 279.382337][ T9195] delete_channel: no stack [ 279.555893][ T9201] netlink: 'syz.1.1027': attribute type 27 has an invalid length. [ 279.571435][ T9201] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1027'. [ 279.680426][ T9205] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1029'. [ 280.554610][ T9219] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1033'. [ 285.316506][ T9260] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1047'. [ 285.530011][ T9269] pimreg: tun_chr_ioctl cmd 1074025677 [ 285.536118][ T9269] pimreg: linktype set to 780 [ 285.592724][ T9266] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 285.634740][ T9270] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 285.659974][ T9266] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 285.738043][ T9266] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1050'. [ 285.756981][ T9266] netlink: 'syz.0.1050': attribute type 29 has an invalid length. [ 285.782878][ T9273] netlink: 'syz.2.1049': attribute type 39 has an invalid length. [ 287.095689][ T9289] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1056'. [ 287.141198][ T9293] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 287.150286][ T9293] syz_tun: entered promiscuous mode [ 287.180029][ T9293] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 287.291028][ T9296] raw_sendmsg: syz.0.1057 forgot to set AF_INET. Fix it! [ 287.928838][ T9299] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1059'. [ 288.720533][ T9311] pimreg: tun_chr_ioctl cmd 1074025677 [ 288.726168][ T9311] pimreg: linktype set to 780 [ 288.731712][ T9313] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 288.739829][ T9313] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1062'. [ 288.750499][ T9313] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 290.565141][ T9332] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1070'. [ 293.558905][ T9361] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 293.566990][ T9361] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 293.607540][ T9362] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 293.615263][ T9362] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 293.634429][ T9367] netlink: 'syz.3.1080': attribute type 10 has an invalid length. [ 297.280727][ T9391] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 297.301867][ T9391] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 297.336154][ T9394] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 297.343371][ T9394] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 297.385799][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 297.430208][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 297.463169][ T9401] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 297.484727][ T9400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 297.691282][ T9408] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 297.713955][ T9408] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 297.721876][ T9408] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1095'. [ 297.978637][ T9415] netlink: 'syz.1.1099': attribute type 10 has an invalid length. [ 298.808636][ T9435] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 298.828738][ T9435] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 298.849324][ T9439] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 298.859792][ T9439] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 299.296561][ T9458] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 299.344730][ T9461] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 299.489947][ T9463] syzkaller0: entered promiscuous mode [ 299.495919][ T9463] syzkaller0: entered allmulticast mode [ 299.629895][ T9472] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 299.647277][ T9472] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 299.713621][ T9475] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 299.731896][ T9475] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 303.712659][ T9491] bridge_slave_1: left allmulticast mode [ 303.718779][ T9491] bridge_slave_1: left promiscuous mode [ 303.724754][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.735500][ T9491] bridge_slave_0: left allmulticast mode [ 303.741246][ T9491] bridge_slave_0: left promiscuous mode [ 303.747135][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.878255][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 303.887670][ T9504] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1129'. [ 303.922146][ T9508] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 303.947657][ T9508] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 304.009977][ T9511] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 304.028429][ T9511] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 304.291092][ T9520] netlink: 'syz.0.1135': attribute type 10 has an invalid length. [ 304.310188][ T9520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1135'. [ 304.385033][ T9520] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.540104][ T9522] netlink: 'syz.3.1134': attribute type 21 has an invalid length. [ 304.552376][ T9522] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1134'. [ 304.672974][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1137'. [ 304.693679][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1137'. [ 304.719610][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1137'. [ 304.740726][ T9530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1137'. [ 305.218338][ T9543] netlink: zone id is out of range [ 305.225660][ T9543] netlink: set zone limit has 8 unknown bytes [ 307.216919][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.226633][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.690736][ T9572] netlink: 'syz.0.1150': attribute type 21 has an invalid length. [ 310.354031][ T9584] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 310.363334][ T9584] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 310.393144][ T9588] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 310.424255][ T9588] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 310.479297][ T9590] netlink: 'syz.0.1156': attribute type 39 has an invalid length. [ 312.051912][ T9627] __nla_validate_parse: 3 callbacks suppressed [ 312.051929][ T9627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 312.075143][ T9627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 312.116773][ T9627] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1166'. [ 312.214501][ T9629] netlink: 'syz.1.1165': attribute type 21 has an invalid length. [ 312.222775][ T9629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1165'. [ 312.468936][ T9640] netlink: 'syz.1.1169': attribute type 10 has an invalid length. [ 312.652452][ T9640] team0: Port device macvlan0 added [ 312.725471][ T9647] netlink: 'syz.2.1171': attribute type 9 has an invalid length. [ 312.734461][ T9647] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1171'. [ 313.490917][ T9640] syz.1.1169 (9640) used greatest stack depth: 18664 bytes left [ 313.678303][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 313.683441][ T9657] netlink: 'syz.2.1175': attribute type 153 has an invalid length. [ 313.687991][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 313.706052][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1176'. [ 313.723637][ T9657] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1175'. [ 313.874212][ T9662] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 313.882731][ T9664] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 313.898008][ T9662] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1177'. [ 314.272595][ T9683] ip6gretap0: refused to change device tx_queue_len [ 316.253117][ T9712] netlink: 'syz.0.1195': attribute type 10 has an invalid length. [ 316.267471][ T9712] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 316.275798][ T9712] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 316.316526][ T9712] team0: Port device wlan1 added [ 317.199170][ T9735] FAULT_INJECTION: forcing a failure. [ 317.199170][ T9735] name failslab, interval 1, probability 0, space 0, times 0 [ 317.224910][ T9735] CPU: 0 PID: 9735 Comm: syz.1.1203 Not tainted syzkaller #0 [ 317.232334][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.242435][ T9735] Call Trace: [ 317.245750][ T9735] [ 317.248713][ T9735] dump_stack_lvl+0x18c/0x250 [ 317.253436][ T9735] ? show_regs_print_info+0x20/0x20 [ 317.258682][ T9735] ? load_image+0x400/0x400 [ 317.263217][ T9735] ? __might_sleep+0xe0/0xe0 [ 317.267843][ T9735] ? __lock_acquire+0x7d40/0x7d40 [ 317.272924][ T9735] should_fail_ex+0x39d/0x4d0 [ 317.277684][ T9735] should_failslab+0x9/0x20 [ 317.282219][ T9735] slab_pre_alloc_hook+0x59/0x310 [ 317.287299][ T9735] ? lock_chain_count+0x20/0x20 [ 317.292198][ T9735] ? apparmor_sk_alloc_security+0x77/0x100 [ 317.298047][ T9735] __kmem_cache_alloc_node+0x53/0x250 [ 317.303474][ T9735] ? apparmor_sk_alloc_security+0x77/0x100 [ 317.309312][ T9735] kmalloc_trace+0x2a/0xe0 [ 317.313775][ T9735] apparmor_sk_alloc_security+0x77/0x100 [ 317.319460][ T9735] security_sk_alloc+0x6e/0xa0 [ 317.324256][ T9735] sk_prot_alloc+0x101/0x210 [ 317.328878][ T9735] ? sk_alloc+0x24/0x360 [ 317.333156][ T9735] sk_alloc+0x3a/0x360 [ 317.337255][ T9735] ? can_get_proto+0x234/0x280 [ 317.342076][ T9735] can_create+0x1cc/0x4d0 [ 317.346453][ T9735] __sock_create+0x4a6/0x940 [ 317.351098][ T9735] __sys_socketpair+0x1c1/0x550 [ 317.356005][ T9735] __x64_sys_socketpair+0x9b/0xb0 [ 317.361073][ T9735] do_syscall_64+0x55/0xa0 [ 317.365542][ T9735] ? clear_bhb_loop+0x40/0x90 [ 317.370252][ T9735] ? clear_bhb_loop+0x40/0x90 [ 317.374955][ T9735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.380911][ T9735] RIP: 0033:0x7fe7ea59aeb9 [ 317.385359][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.404992][ T9735] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 317.413440][ T9735] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 317.421445][ T9735] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 317.429446][ T9735] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 317.437441][ T9735] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 317.445444][ T9735] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 317.453463][ T9735] [ 317.524082][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.530514][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.739500][ T9744] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 318.553343][ T9751] netlink: 'syz.1.1207': attribute type 17 has an invalid length. [ 318.587296][ T9751] netlink: 'syz.1.1207': attribute type 16 has an invalid length. [ 318.611485][ T9751] __nla_validate_parse: 1 callbacks suppressed [ 318.611501][ T9751] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1207'. [ 318.632493][ T9755] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1209'. [ 318.801863][ T9767] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1214'. [ 318.898156][ T9771] netlink: 'syz.3.1215': attribute type 10 has an invalid length. [ 319.093914][ T9776] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 319.103439][ T9776] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1217'. [ 319.784220][ T9785] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1221'. [ 320.088103][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'. [ 320.117821][ T9790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'. [ 320.178767][ T9796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1223'. [ 320.199430][ T9795] netlink: 'syz.3.1224': attribute type 10 has an invalid length. [ 320.210845][ T9795] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1224'. [ 320.222382][ T9795] bond0: entered promiscuous mode [ 320.232569][ T9795] bond_slave_0: entered promiscuous mode [ 320.238560][ T9795] bond_slave_1: entered promiscuous mode [ 320.269694][ T9795] team0: Port device bond0 removed [ 320.675820][ T9810] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1231'. [ 322.117291][ T9826] netlink: 'syz.3.1237': attribute type 9 has an invalid length. [ 322.545343][ T9841] FAULT_INJECTION: forcing a failure. [ 322.545343][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 322.597648][ T9841] CPU: 0 PID: 9841 Comm: syz.0.1244 Not tainted syzkaller #0 [ 322.605098][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 322.615198][ T9841] Call Trace: [ 322.618516][ T9841] [ 322.621486][ T9841] dump_stack_lvl+0x18c/0x250 [ 322.626225][ T9841] ? show_regs_print_info+0x20/0x20 [ 322.631489][ T9841] ? load_image+0x400/0x400 [ 322.636445][ T9841] ? __might_sleep+0xe0/0xe0 [ 322.641090][ T9841] ? __lock_acquire+0x7d40/0x7d40 [ 322.646165][ T9841] should_fail_ex+0x39d/0x4d0 [ 322.650923][ T9841] should_failslab+0x9/0x20 [ 322.655481][ T9841] slab_pre_alloc_hook+0x59/0x310 [ 322.660559][ T9841] ? rtnl_newlink+0x10d/0x20a0 [ 322.665362][ T9841] __kmem_cache_alloc_node+0x53/0x250 [ 322.670776][ T9841] ? rtnl_newlink+0x10d/0x20a0 [ 322.675594][ T9841] kmalloc_trace+0x2a/0xe0 [ 322.680035][ T9841] ? rtnl_setlink+0x4e0/0x4e0 [ 322.684731][ T9841] rtnl_newlink+0x10d/0x20a0 [ 322.689346][ T9841] ? arch_stack_walk+0x160/0x190 [ 322.694317][ T9841] ? __mutex_trylock_common+0x159/0x260 [ 322.699877][ T9841] ? rtnl_setlink+0x4e0/0x4e0 [ 322.704576][ T9841] ? trace_raw_output_contention_end+0xd0/0xd0 [ 322.710749][ T9841] ? rcu_is_watching+0x15/0xb0 [ 322.715535][ T9841] ? trace_contention_end+0x39/0xe0 [ 322.720742][ T9841] ? __mutex_lock+0x315/0xcc0 [ 322.725449][ T9841] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 322.730578][ T9841] ? mutex_lock_nested+0x20/0x20 [ 322.735552][ T9841] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 322.740674][ T9841] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 322.745793][ T9841] ? rtnl_setlink+0x4e0/0x4e0 [ 322.750497][ T9841] rtnetlink_rcv_msg+0x869/0xfa0 [ 322.755454][ T9841] ? lockdep_hardirqs_on+0x98/0x150 [ 322.760668][ T9841] ? rtnetlink_bind+0x80/0x80 [ 322.765362][ T9841] ? perf_trace_preemptirq_template+0xac/0x330 [ 322.771548][ T9841] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 322.777553][ T9841] ? lock_chain_count+0x20/0x20 [ 322.782418][ T9841] ? __local_bh_enable_ip+0x13a/0x1c0 [ 322.787806][ T9841] ? lockdep_hardirqs_on+0x98/0x150 [ 322.793023][ T9841] ? __local_bh_enable_ip+0x13a/0x1c0 [ 322.798427][ T9841] ? _local_bh_enable+0xa0/0xa0 [ 322.803302][ T9841] ? __dev_queue_xmit+0x26b/0x36b0 [ 322.808437][ T9841] ? __dev_queue_xmit+0x26b/0x36b0 [ 322.813570][ T9841] ? __dev_queue_xmit+0x124f/0x36b0 [ 322.818798][ T9841] ? __dev_queue_xmit+0x26b/0x36b0 [ 322.823937][ T9841] ? ref_tracker_free+0x690/0x840 [ 322.828980][ T9841] netlink_rcv_skb+0x241/0x4d0 [ 322.833764][ T9841] ? rtnetlink_bind+0x80/0x80 [ 322.838451][ T9841] ? netlink_ack+0x1180/0x1180 [ 322.843244][ T9841] ? __lock_acquire+0x7d40/0x7d40 [ 322.848291][ T9841] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.853516][ T9841] netlink_unicast+0x751/0x8d0 [ 322.858318][ T9841] netlink_sendmsg+0x8d0/0xbf0 [ 322.863155][ T9841] ? netlink_getsockopt+0x590/0x590 [ 322.868408][ T9841] ? aa_sock_msg_perm+0x94/0x150 [ 322.873392][ T9841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 322.878707][ T9841] ? security_socket_sendmsg+0x80/0xa0 [ 322.884189][ T9841] ? netlink_getsockopt+0x590/0x590 [ 322.889416][ T9841] ____sys_sendmsg+0x5ba/0x960 [ 322.894220][ T9841] ? __asan_memset+0x22/0x40 [ 322.898833][ T9841] ? __sys_sendmsg_sock+0x30/0x30 [ 322.903883][ T9841] ? __import_iovec+0x5f2/0x850 [ 322.908764][ T9841] ? import_iovec+0x73/0xa0 [ 322.913302][ T9841] ___sys_sendmsg+0x2a6/0x360 [ 322.918000][ T9841] ? get_pid_task+0x20/0x1e0 [ 322.922608][ T9841] ? __sys_sendmsg+0x2a0/0x2a0 [ 322.927410][ T9841] ? __lock_acquire+0x7d40/0x7d40 [ 322.932488][ T9841] __se_sys_sendmsg+0x1c2/0x2b0 [ 322.937361][ T9841] ? __x64_sys_sendmsg+0x80/0x80 [ 322.942323][ T9841] ? lockdep_hardirqs_on+0x98/0x150 [ 322.947541][ T9841] do_syscall_64+0x55/0xa0 [ 322.951981][ T9841] ? clear_bhb_loop+0x40/0x90 [ 322.956735][ T9841] ? clear_bhb_loop+0x40/0x90 [ 322.961439][ T9841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.967376][ T9841] RIP: 0033:0x7f746339aeb9 [ 322.971805][ T9841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.991448][ T9841] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.999884][ T9841] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 323.007872][ T9841] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000b [ 323.015851][ T9841] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 323.023832][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.031821][ T9841] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 323.039828][ T9841] [ 324.406202][ T9861] __nla_validate_parse: 2 callbacks suppressed [ 324.406220][ T9861] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1252'. [ 324.703122][ T9868] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 324.729320][ T9868] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 324.918450][ T9872] FAULT_INJECTION: forcing a failure. [ 324.918450][ T9872] name failslab, interval 1, probability 0, space 0, times 0 [ 324.949142][ T9872] CPU: 1 PID: 9872 Comm: syz.2.1255 Not tainted syzkaller #0 [ 324.956590][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 324.966684][ T9872] Call Trace: [ 324.969990][ T9872] [ 324.972952][ T9872] dump_stack_lvl+0x18c/0x250 [ 324.977682][ T9872] ? show_regs_print_info+0x20/0x20 [ 324.982925][ T9872] ? load_image+0x400/0x400 [ 324.987475][ T9872] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.993666][ T9872] ? lockdep_hardirqs_on+0x98/0x150 [ 324.998914][ T9872] should_fail_ex+0x39d/0x4d0 [ 325.003649][ T9872] should_failslab+0x9/0x20 [ 325.008192][ T9872] slab_pre_alloc_hook+0x59/0x310 [ 325.013262][ T9872] ? sctp_association_new+0x89/0x25c0 [ 325.018691][ T9872] __kmem_cache_alloc_node+0x53/0x250 [ 325.024127][ T9872] ? sctp_association_new+0x89/0x25c0 [ 325.029529][ T9872] kmalloc_trace+0x2a/0xe0 [ 325.033983][ T9872] sctp_association_new+0x89/0x25c0 [ 325.039224][ T9872] ? sctp_unpack_cookie+0xd80/0xd80 [ 325.044496][ T9872] ? __lock_acquire+0x1347/0x7d40 [ 325.049567][ T9872] sctp_make_temp_asoc+0x89/0x150 [ 325.054627][ T9872] sctp_sf_do_unexpected_init+0x576/0x10f0 [ 325.060490][ T9872] ? sctp_sf_do_5_2_1_siminit+0x40/0x40 [ 325.066118][ T9872] ? verify_lock_unused+0x140/0x140 [ 325.071371][ T9872] sctp_do_sm+0x23a/0x5a60 [ 325.075845][ T9872] ? rht_unlock+0x1d0/0x1d0 [ 325.080394][ T9872] ? mark_lock+0x94/0x320 [ 325.084772][ T9872] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 325.090748][ T9872] ? read_tsc+0x9/0x20 [ 325.094877][ T9872] sctp_assoc_bh_rcv+0x3f2/0x630 [ 325.099878][ T9872] sctp_backlog_rcv+0x163/0x370 [ 325.104780][ T9872] __release_sock+0x1e5/0x460 [ 325.109500][ T9872] release_sock+0x5f/0x1c0 [ 325.113962][ T9872] sctp_sendmsg+0x1bd7/0x28c0 [ 325.118698][ T9872] ? sctp_getsockopt+0xb60/0xb60 [ 325.123666][ T9872] ? aa_sk_perm+0x83c/0x970 [ 325.128221][ T9872] ? aa_af_perm+0x330/0x330 [ 325.132753][ T9872] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 325.139207][ T9872] ? sock_rps_record_flow+0x19/0x3f0 [ 325.144582][ T9872] ? inet_sendmsg+0x7c/0x2f0 [ 325.149210][ T9872] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.154543][ T9872] ? security_socket_sendmsg+0x80/0xa0 [ 325.160035][ T9872] ? inet_send_prepare+0x260/0x260 [ 325.165280][ T9872] ____sys_sendmsg+0x5ba/0x960 [ 325.170132][ T9872] ? __lock_acquire+0x7d40/0x7d40 [ 325.175197][ T9872] ? __asan_memset+0x22/0x40 [ 325.179845][ T9872] ? __sys_sendmsg_sock+0x30/0x30 [ 325.184933][ T9872] ? __import_iovec+0x5f2/0x850 [ 325.189848][ T9872] ? import_iovec+0x73/0xa0 [ 325.194485][ T9872] ___sys_sendmsg+0x2a6/0x360 [ 325.199205][ T9872] ? __sys_sendmsg+0x2a0/0x2a0 [ 325.204040][ T9872] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 325.210343][ T9872] __se_sys_sendmsg+0x1c2/0x2b0 [ 325.215233][ T9872] ? __x64_sys_sendmsg+0x80/0x80 [ 325.220218][ T9872] ? lockdep_hardirqs_on+0x98/0x150 [ 325.225450][ T9872] do_syscall_64+0x55/0xa0 [ 325.229904][ T9872] ? clear_bhb_loop+0x40/0x90 [ 325.234614][ T9872] ? clear_bhb_loop+0x40/0x90 [ 325.239320][ T9872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.245243][ T9872] RIP: 0033:0x7f43ea79aeb9 [ 325.249692][ T9872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.269527][ T9872] RSP: 002b:00007f43eb64f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.277992][ T9872] RAX: ffffffffffffffda RBX: 00007f43eaa15fa0 RCX: 00007f43ea79aeb9 [ 325.286017][ T9872] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 325.294040][ T9872] RBP: 00007f43eb64f090 R08: 0000000000000000 R09: 0000000000000000 [ 325.302073][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.310134][ T9872] R13: 00007f43eaa16038 R14: 00007f43eaa15fa0 R15: 00007ffe407a5858 [ 325.318160][ T9872] [ 325.507098][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.523686][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.563466][ T9882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.599347][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1257'. [ 325.843816][ T9889] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1260'. [ 325.968158][ T9893] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1262'. [ 326.481471][ T9897] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 326.490673][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1263'. [ 326.897222][ T9906] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1266'. [ 326.910145][ T9910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1268'. [ 327.262888][ T9925] netlink: 'syz.0.1272': attribute type 9 has an invalid length. [ 329.158257][ T9955] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 329.240212][ T9955] team0: Cannot enslave team device to itself [ 333.086999][ T9993] netlink: 'syz.0.1294': attribute type 21 has an invalid length. [ 333.108101][ T9993] __nla_validate_parse: 12 callbacks suppressed [ 333.108116][ T9993] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1294'. [ 333.334829][T10004] netlink: 'syz.1.1298': attribute type 3 has an invalid length. [ 333.350557][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1298'. [ 333.485328][T10012] FAULT_INJECTION: forcing a failure. [ 333.485328][T10012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.513952][T10012] CPU: 0 PID: 10012 Comm: syz.3.1302 Not tainted syzkaller #0 [ 333.521503][T10012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.531649][T10012] Call Trace: [ 333.534969][T10012] [ 333.537927][T10012] dump_stack_lvl+0x18c/0x250 [ 333.542733][T10012] ? show_regs_print_info+0x20/0x20 [ 333.547970][T10012] ? load_image+0x400/0x400 [ 333.552508][T10012] ? __lock_acquire+0x7d40/0x7d40 [ 333.557574][T10012] ? snprintf+0xe9/0x140 [ 333.561894][T10012] should_fail_ex+0x39d/0x4d0 [ 333.566629][T10012] _copy_to_user+0x2f/0xa0 [ 333.571090][T10012] simple_read_from_buffer+0xe7/0x150 [ 333.576532][T10012] proc_fail_nth_read+0x1e8/0x260 [ 333.581615][T10012] ? proc_fault_inject_write+0x360/0x360 [ 333.587314][T10012] ? fsnotify_perm+0x271/0x5e0 [ 333.592144][T10012] ? proc_fault_inject_write+0x360/0x360 [ 333.597834][T10012] vfs_read+0x28b/0x970 [ 333.602134][T10012] ? kernel_read+0x1e0/0x1e0 [ 333.606768][T10012] ? __fget_files+0x28/0x4b0 [ 333.611406][T10012] ? __fget_files+0x28/0x4b0 [ 333.616047][T10012] ? __fget_files+0x43d/0x4b0 [ 333.620804][T10012] ? __fdget_pos+0x2a3/0x330 [ 333.625489][T10012] ? ksys_read+0x75/0x260 [ 333.629879][T10012] ksys_read+0x150/0x260 [ 333.634169][T10012] ? vfs_write+0x990/0x990 [ 333.638634][T10012] ? lockdep_hardirqs_on+0x98/0x150 [ 333.643886][T10012] do_syscall_64+0x55/0xa0 [ 333.648342][T10012] ? clear_bhb_loop+0x40/0x90 [ 333.653048][T10012] ? clear_bhb_loop+0x40/0x90 [ 333.657754][T10012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.663676][T10012] RIP: 0033:0x7f555995b78e [ 333.668113][T10012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.687750][T10012] RSP: 002b:00007f555a925fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.696193][T10012] RAX: ffffffffffffffda RBX: 00007f555a9266c0 RCX: 00007f555995b78e [ 333.704187][T10012] RDX: 000000000000000f RSI: 00007f555a9260a0 RDI: 0000000000000004 [ 333.712179][T10012] RBP: 00007f555a926090 R08: 0000000000000000 R09: 0000000000000000 [ 333.720258][T10012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.728246][T10012] R13: 00007f5559c16038 R14: 00007f5559c15fa0 R15: 00007ffd68711888 [ 333.736249][T10012] [ 334.696513][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 334.840273][T10034] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 334.902378][T10039] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1312'. [ 334.915808][T10039] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1312'. [ 334.970588][T10039] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1312'. [ 335.084090][T10044] netlink: 'syz.3.1314': attribute type 3 has an invalid length. [ 335.097398][T10044] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1314'. [ 336.085986][T10061] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 336.108229][T10061] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 336.152454][T10062] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 336.174337][T10062] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 337.019456][T10097] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 337.029670][T10097] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 337.073385][T10097] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 337.082221][T10097] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 338.680028][T10124] FAULT_INJECTION: forcing a failure. [ 338.680028][T10124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.703597][T10124] CPU: 0 PID: 10124 Comm: syz.2.1337 Not tainted syzkaller #0 [ 338.711119][T10124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 338.721216][T10124] Call Trace: [ 338.724530][T10124] [ 338.727486][T10124] dump_stack_lvl+0x18c/0x250 [ 338.732225][T10124] ? show_regs_print_info+0x20/0x20 [ 338.737566][T10124] ? load_image+0x400/0x400 [ 338.742121][T10124] ? __lock_acquire+0x7d40/0x7d40 [ 338.747179][T10124] ? __might_fault+0xaa/0x120 [ 338.751902][T10124] ? full_name_hash+0x92/0xe0 [ 338.756654][T10124] should_fail_ex+0x39d/0x4d0 [ 338.761392][T10124] _copy_to_user+0x2f/0xa0 [ 338.765875][T10124] put_user_ifreq+0x78/0xb0 [ 338.770425][T10124] sock_do_ioctl+0x268/0x310 [ 338.775066][T10124] ? sock_show_fdinfo+0xb0/0xb0 [ 338.779984][T10124] sock_ioctl+0x5ba/0x7e0 [ 338.784449][T10124] ? sock_poll+0x3e0/0x3e0 [ 338.788911][T10124] ? bpf_lsm_file_ioctl+0x9/0x10 [ 338.793891][T10124] ? security_file_ioctl+0x80/0xa0 [ 338.799041][T10124] ? sock_poll+0x3e0/0x3e0 [ 338.803485][T10124] __se_sys_ioctl+0xfd/0x170 [ 338.808115][T10124] do_syscall_64+0x55/0xa0 [ 338.812566][T10124] ? clear_bhb_loop+0x40/0x90 [ 338.817287][T10124] ? clear_bhb_loop+0x40/0x90 [ 338.822021][T10124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.827977][T10124] RIP: 0033:0x7f43ea79aeb9 [ 338.832427][T10124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.852096][T10124] RSP: 002b:00007f43eb64f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.860526][T10124] RAX: ffffffffffffffda RBX: 00007f43eaa15fa0 RCX: 00007f43ea79aeb9 [ 338.868516][T10124] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000008 [ 338.876509][T10124] RBP: 00007f43eb64f090 R08: 0000000000000000 R09: 0000000000000000 [ 338.884491][T10124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 338.892487][T10124] R13: 00007f43eaa16038 R14: 00007f43eaa15fa0 R15: 00007ffe407a5858 [ 338.900485][T10124] [ 339.156949][T10134] FAULT_INJECTION: forcing a failure. [ 339.156949][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 339.181919][T10134] CPU: 0 PID: 10134 Comm: syz.0.1342 Not tainted syzkaller #0 [ 339.189473][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.199558][T10134] Call Trace: [ 339.202869][T10134] [ 339.205840][T10134] dump_stack_lvl+0x18c/0x250 [ 339.210573][T10134] ? show_regs_print_info+0x20/0x20 [ 339.215816][T10134] ? load_image+0x400/0x400 [ 339.220376][T10134] ? __might_sleep+0xe0/0xe0 [ 339.225009][T10134] ? __lock_acquire+0x7d40/0x7d40 [ 339.230074][T10134] should_fail_ex+0x39d/0x4d0 [ 339.234798][T10134] should_failslab+0x9/0x20 [ 339.239343][T10134] slab_pre_alloc_hook+0x59/0x310 [ 339.244494][T10134] ? kvmalloc_node+0x70/0x180 [ 339.249206][T10134] ? kvmalloc_node+0x70/0x180 [ 339.253921][T10134] __kmem_cache_alloc_node+0x53/0x250 [ 339.259344][T10134] ? kvmalloc_node+0x70/0x180 [ 339.264068][T10134] __kmalloc_node+0xa4/0x230 [ 339.269185][T10134] kvmalloc_node+0x70/0x180 [ 339.273735][T10134] alloc_netdev_mqs+0x8cd/0x1040 [ 339.278733][T10134] __ip_tunnel_create+0x303/0x4d0 [ 339.283818][T10134] ? ip_tunnel_init_net+0x790/0x790 [ 339.289067][T10134] ? security_capable+0x89/0xb0 [ 339.293963][T10134] ip_tunnel_ctl+0x98c/0x1970 [ 339.298698][T10134] vti_tunnel_ctl+0x1f9/0x390 [ 339.303432][T10134] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 339.309025][T10134] ? dev_ioctl+0x83c/0x1140 [ 339.313577][T10134] ? ip_tunnel_update+0xb10/0xb10 [ 339.318663][T10134] ? dev_ifsioc+0x958/0xc40 [ 339.323218][T10134] dev_ioctl+0x84c/0x1140 [ 339.327597][T10134] sock_ioctl+0x74c/0x7e0 [ 339.331998][T10134] ? sock_poll+0x3e0/0x3e0 [ 339.336481][T10134] ? security_file_ioctl+0x38/0xa0 [ 339.341641][T10134] ? bpf_lsm_file_ioctl+0x9/0x10 [ 339.346622][T10134] ? security_file_ioctl+0x80/0xa0 [ 339.351801][T10134] ? sock_poll+0x3e0/0x3e0 [ 339.356272][T10134] __se_sys_ioctl+0xfd/0x170 [ 339.360933][T10134] do_syscall_64+0x55/0xa0 [ 339.365424][T10134] ? clear_bhb_loop+0x40/0x90 [ 339.370159][T10134] ? clear_bhb_loop+0x40/0x90 [ 339.374877][T10134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.380823][T10134] RIP: 0033:0x7f746339aeb9 [ 339.385312][T10134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.404952][T10134] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.413410][T10134] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 339.421416][T10134] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000f [ 339.429427][T10134] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 339.437427][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.445450][T10134] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 339.453476][T10134] [ 339.515639][T10138] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 339.539575][T10138] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 339.575512][T10144] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 339.590467][T10144] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 340.720360][T10174] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1354'. [ 340.774691][T10177] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 341.707835][T10187] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 341.737023][T10187] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 341.774749][T10188] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 341.782210][T10188] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 343.045610][T10219] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1368'. [ 344.068764][T10228] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 344.076239][T10228] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 344.131926][T10228] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 344.148570][T10228] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 344.257339][T10235] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1374'. [ 344.369639][T10240] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 344.562883][T10243] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 344.587383][T10243] team0: Device veth1_macvtap failed to register rx_handler [ 344.623687][T10246] netlink: 'syz.2.1377': attribute type 13 has an invalid length. [ 344.631640][T10246] netlink: 'syz.2.1377': attribute type 58 has an invalid length. [ 344.655010][T10246] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1377'. [ 345.637241][T10263] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 345.652734][T10263] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 345.696821][T10264] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 345.705127][T10264] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 345.947046][T10273] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1387'. [ 346.128897][T10273] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 346.208109][T10281] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 346.222519][T10281] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 346.491179][T10282] delete_channel: no stack [ 347.490176][T10299] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 347.510165][T10299] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 347.534051][T10301] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 347.541141][T10301] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 347.927305][T10307] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 347.945188][T10307] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 347.990047][T10314] FAULT_INJECTION: forcing a failure. [ 347.990047][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.007427][T10314] CPU: 1 PID: 10314 Comm: syz.2.1399 Not tainted syzkaller #0 [ 348.014962][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.025065][T10314] Call Trace: [ 348.028420][T10314] [ 348.031411][T10314] dump_stack_lvl+0x18c/0x250 [ 348.036257][T10314] ? show_regs_print_info+0x20/0x20 [ 348.041529][T10314] ? load_image+0x400/0x400 [ 348.046100][T10314] ? __lock_acquire+0x7d40/0x7d40 [ 348.051185][T10314] ? snprintf+0xe9/0x140 [ 348.055515][T10314] should_fail_ex+0x39d/0x4d0 [ 348.060263][T10314] _copy_to_user+0x2f/0xa0 [ 348.064734][T10314] simple_read_from_buffer+0xe7/0x150 [ 348.070177][T10314] proc_fail_nth_read+0x1e8/0x260 [ 348.075322][T10314] ? proc_fault_inject_write+0x360/0x360 [ 348.081026][T10314] ? fsnotify_perm+0x271/0x5e0 [ 348.085857][T10314] ? proc_fault_inject_write+0x360/0x360 [ 348.091539][T10307] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 348.091571][T10314] vfs_read+0x28b/0x970 [ 348.102743][T10314] ? kernel_read+0x1e0/0x1e0 [ 348.107395][T10314] ? __fget_files+0x28/0x4b0 [ 348.110683][T10307] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 348.112023][T10314] ? __fget_files+0x28/0x4b0 [ 348.112070][T10314] ? __fget_files+0x43d/0x4b0 [ 348.112115][T10314] ? __fdget_pos+0x2a3/0x330 [ 348.112139][T10314] ? ksys_read+0x75/0x260 [ 348.112178][T10314] ksys_read+0x150/0x260 [ 348.112213][T10314] ? vfs_write+0x990/0x990 [ 348.112344][T10314] ? lockdep_hardirqs_on+0x98/0x150 [ 348.151550][T10314] do_syscall_64+0x55/0xa0 [ 348.156037][T10314] ? clear_bhb_loop+0x40/0x90 [ 348.160758][T10314] ? clear_bhb_loop+0x40/0x90 [ 348.165485][T10314] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.171428][T10314] RIP: 0033:0x7f43ea75b78e [ 348.175884][T10314] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.195607][T10314] RSP: 002b:00007f43eb64efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.204054][T10314] RAX: ffffffffffffffda RBX: 00007f43eb64f6c0 RCX: 00007f43ea75b78e [ 348.212051][T10314] RDX: 000000000000000f RSI: 00007f43eb64f0a0 RDI: 000000000000000a [ 348.220097][T10314] RBP: 00007f43eb64f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.228101][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.236095][T10314] R13: 00007f43eaa16038 R14: 00007f43eaa15fa0 R15: 00007ffe407a5858 [ 348.244121][T10314] [ 349.449830][T10329] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1402'. [ 349.474423][T10327] FAULT_INJECTION: forcing a failure. [ 349.474423][T10327] name failslab, interval 1, probability 0, space 0, times 0 [ 349.502714][T10327] CPU: 0 PID: 10327 Comm: syz.1.1411 Not tainted syzkaller #0 [ 349.510262][T10327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.520469][T10327] Call Trace: [ 349.523785][T10327] [ 349.526742][T10327] dump_stack_lvl+0x18c/0x250 [ 349.531467][T10327] ? show_regs_print_info+0x20/0x20 [ 349.536712][T10327] ? load_image+0x400/0x400 [ 349.541256][T10327] ? __might_sleep+0xe0/0xe0 [ 349.545891][T10327] ? __lock_acquire+0x7d40/0x7d40 [ 349.550963][T10327] should_fail_ex+0x39d/0x4d0 [ 349.555686][T10327] should_failslab+0x9/0x20 [ 349.560216][T10327] slab_pre_alloc_hook+0x59/0x310 [ 349.565280][T10327] kmem_cache_alloc_node+0x60/0x320 [ 349.570529][T10327] ? __alloc_skb+0x103/0x2c0 [ 349.575171][T10327] __alloc_skb+0x103/0x2c0 [ 349.579638][T10327] alloc_skb_with_frags+0xca/0x7b0 [ 349.584778][T10327] ? trace_event_raw_event_lock+0x250/0x250 [ 349.590702][T10327] ? __ipv6_dev_get_saddr+0x404/0x430 [ 349.596112][T10327] sock_alloc_send_pskb+0x883/0x9a0 [ 349.601374][T10327] ? sock_kzfree_s+0x50/0x50 [ 349.606034][T10327] ? ip6_dst_lookup_tail+0xbf9/0x1530 [ 349.611531][T10327] rawv6_send_hdrinc+0x2fc/0x1640 [ 349.616671][T10327] ? txopt_get+0x7a/0x3f0 [ 349.621045][T10327] ? txopt_get+0x3f0/0x3f0 [ 349.625494][T10327] ? txopt_get+0x344/0x3f0 [ 349.629940][T10327] ? fl6_sock_lookup+0xc0/0xc0 [ 349.634740][T10327] rawv6_sendmsg+0x12cc/0x1770 [ 349.639551][T10327] ? compat_rawv6_ioctl+0x70/0x70 [ 349.644643][T10327] ? aa_sk_perm+0x83c/0x970 [ 349.649198][T10327] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 349.655656][T10327] ? inet_sendmsg+0x7c/0x2f0 [ 349.660269][T10327] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.665593][T10327] ? security_socket_sendmsg+0x80/0xa0 [ 349.671083][T10327] ? inet_send_prepare+0x260/0x260 [ 349.676229][T10327] ____sys_sendmsg+0x5ba/0x960 [ 349.681035][T10327] ? __lock_acquire+0x7d40/0x7d40 [ 349.686105][T10327] ? __asan_memset+0x22/0x40 [ 349.690722][T10327] ? __sys_sendmsg_sock+0x30/0x30 [ 349.695780][T10327] ? __import_iovec+0x5f2/0x850 [ 349.700684][T10327] ? import_iovec+0x73/0xa0 [ 349.705248][T10327] ___sys_sendmsg+0x2a6/0x360 [ 349.709955][T10327] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.714768][T10327] ? __lock_acquire+0x7d40/0x7d40 [ 349.719861][T10327] __se_sys_sendmsg+0x1c2/0x2b0 [ 349.724743][T10327] ? __x64_sys_sendmsg+0x80/0x80 [ 349.729726][T10327] ? lockdep_hardirqs_on+0x98/0x150 [ 349.734957][T10327] do_syscall_64+0x55/0xa0 [ 349.739403][T10327] ? clear_bhb_loop+0x40/0x90 [ 349.744107][T10327] ? clear_bhb_loop+0x40/0x90 [ 349.748808][T10327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.754733][T10327] RIP: 0033:0x7fe7ea59aeb9 [ 349.759184][T10327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.778826][T10327] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.787264][T10327] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 349.795259][T10327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 349.803250][T10327] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.811244][T10327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.819243][T10327] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 349.827277][T10327] [ 354.002295][T10329] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 354.027298][T10351] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 354.034691][T10351] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 354.074021][T10352] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 354.081174][T10352] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 354.227578][T10360] netlink: 'syz.0.1413': attribute type 2 has an invalid length. [ 354.248651][T10360] netlink: 'syz.0.1413': attribute type 8 has an invalid length. [ 354.264994][T10360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1413'. [ 354.639502][T10374] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1419'. [ 354.669741][T10374] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 354.684810][T10374] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.574341][T10384] FAULT_INJECTION: forcing a failure. [ 355.574341][T10384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.595562][T10384] CPU: 1 PID: 10384 Comm: syz.3.1422 Not tainted syzkaller #0 [ 355.603070][T10384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.613141][T10384] Call Trace: [ 355.616454][T10384] [ 355.619406][T10384] dump_stack_lvl+0x18c/0x250 [ 355.624110][T10384] ? show_regs_print_info+0x20/0x20 [ 355.629326][T10384] ? load_image+0x400/0x400 [ 355.633853][T10384] ? __might_fault+0xaa/0x120 [ 355.638573][T10384] ? __lock_acquire+0x7d40/0x7d40 [ 355.643617][T10384] should_fail_ex+0x39d/0x4d0 [ 355.648326][T10384] _copy_from_user+0x2f/0xe0 [ 355.652940][T10384] dev_ethtool+0xc6/0x18d0 [ 355.657382][T10384] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 355.663670][T10384] ? __lock_acquire+0x7d40/0x7d40 [ 355.668724][T10384] ? __might_fault+0xaa/0x120 [ 355.673425][T10384] ? full_name_hash+0x92/0xe0 [ 355.678139][T10384] ? dev_load+0x21/0x1f0 [ 355.682406][T10384] dev_ioctl+0x392/0x1140 [ 355.686755][T10384] sock_do_ioctl+0x239/0x310 [ 355.691371][T10384] ? sock_show_fdinfo+0xb0/0xb0 [ 355.696265][T10384] sock_ioctl+0x5ba/0x7e0 [ 355.700641][T10384] ? sock_poll+0x3e0/0x3e0 [ 355.705084][T10384] ? bpf_lsm_file_ioctl+0x9/0x10 [ 355.710038][T10384] ? security_file_ioctl+0x80/0xa0 [ 355.715175][T10384] ? sock_poll+0x3e0/0x3e0 [ 355.719632][T10384] __se_sys_ioctl+0xfd/0x170 [ 355.724239][T10384] do_syscall_64+0x55/0xa0 [ 355.728676][T10384] ? clear_bhb_loop+0x40/0x90 [ 355.733364][T10384] ? clear_bhb_loop+0x40/0x90 [ 355.738055][T10384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.743964][T10384] RIP: 0033:0x7f555999aeb9 [ 355.748397][T10384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.768066][T10384] RSP: 002b:00007f555a926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.776495][T10384] RAX: ffffffffffffffda RBX: 00007f5559c15fa0 RCX: 00007f555999aeb9 [ 355.784483][T10384] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 355.792464][T10384] RBP: 00007f555a926090 R08: 0000000000000000 R09: 0000000000000000 [ 355.800457][T10384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.808444][T10384] R13: 00007f5559c16038 R14: 00007f5559c15fa0 R15: 00007ffd68711888 [ 355.816450][T10384] [ 356.233382][T10387] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 356.240612][T10387] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 356.286083][T10388] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 356.307258][T10388] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 356.729598][T10410] netlink: 'syz.2.1432': attribute type 3 has an invalid length. [ 356.753670][T10410] netlink: 'syz.2.1432': attribute type 16 has an invalid length. [ 356.787269][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1432'. [ 356.918008][T10410] netlink: 'syz.2.1432': attribute type 9 has an invalid length. [ 356.963731][T10410] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1432'. [ 357.137611][T10422] FAULT_INJECTION: forcing a failure. [ 357.137611][T10422] name failslab, interval 1, probability 0, space 0, times 0 [ 357.224382][T10422] CPU: 1 PID: 10422 Comm: syz.0.1435 Not tainted syzkaller #0 [ 357.231932][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.242073][T10422] Call Trace: [ 357.245413][T10422] [ 357.248386][T10422] dump_stack_lvl+0x18c/0x250 [ 357.253153][T10422] ? show_regs_print_info+0x20/0x20 [ 357.258419][T10422] ? load_image+0x400/0x400 [ 357.262967][T10422] ? verify_lock_unused+0x140/0x140 [ 357.268211][T10422] ? perf_trace_lock_acquire+0x34f/0x410 [ 357.273948][T10422] should_fail_ex+0x39d/0x4d0 [ 357.278703][T10422] should_failslab+0x9/0x20 [ 357.283346][T10422] slab_pre_alloc_hook+0x59/0x310 [ 357.288430][T10422] kmem_cache_alloc+0x5a/0x2d0 [ 357.293309][T10422] ? skb_clone+0x1eb/0x370 [ 357.297756][T10422] skb_clone+0x1eb/0x370 [ 357.302040][T10422] __netlink_deliver_tap+0x41c/0x830 [ 357.307383][T10422] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.312616][T10422] netlink_deliver_tap+0x19c/0x1b0 [ 357.317779][T10422] netlink_unicast+0x72c/0x8d0 [ 357.322598][T10422] netlink_sendmsg+0x8d0/0xbf0 [ 357.327410][T10422] ? netlink_getsockopt+0x590/0x590 [ 357.332637][T10422] ? aa_sock_msg_perm+0x94/0x150 [ 357.337609][T10422] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 357.342935][T10422] ? security_socket_sendmsg+0x80/0xa0 [ 357.348418][T10422] ? netlink_getsockopt+0x590/0x590 [ 357.353653][T10422] ____sys_sendmsg+0x5ba/0x960 [ 357.358455][T10422] ? __asan_memset+0x22/0x40 [ 357.363079][T10422] ? __sys_sendmsg_sock+0x30/0x30 [ 357.368140][T10422] ? __import_iovec+0x5f2/0x850 [ 357.373045][T10422] ? import_iovec+0x73/0xa0 [ 357.377583][T10422] ___sys_sendmsg+0x2a6/0x360 [ 357.382283][T10422] ? get_pid_task+0x20/0x1e0 [ 357.386952][T10422] ? __sys_sendmsg+0x2a0/0x2a0 [ 357.391778][T10422] ? __lock_acquire+0x7d40/0x7d40 [ 357.396877][T10422] __se_sys_sendmsg+0x1c2/0x2b0 [ 357.401758][T10422] ? __x64_sys_sendmsg+0x80/0x80 [ 357.406750][T10422] ? lockdep_hardirqs_on+0x98/0x150 [ 357.411981][T10422] do_syscall_64+0x55/0xa0 [ 357.416458][T10422] ? clear_bhb_loop+0x40/0x90 [ 357.421160][T10422] ? clear_bhb_loop+0x40/0x90 [ 357.425882][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.431808][T10422] RIP: 0033:0x7f746339aeb9 [ 357.436268][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.455899][T10422] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.464342][T10422] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 357.472351][T10422] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 357.480344][T10422] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 357.488338][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.496328][T10422] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 357.504342][T10422] [ 357.990740][T10429] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1437'. [ 358.056866][T10431] FAULT_INJECTION: forcing a failure. [ 358.056866][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 358.071696][T10431] CPU: 1 PID: 10431 Comm: syz.0.1438 Not tainted syzkaller #0 [ 358.079217][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.089305][T10431] Call Trace: [ 358.092614][T10431] [ 358.095588][T10431] dump_stack_lvl+0x18c/0x250 [ 358.100309][T10431] ? show_regs_print_info+0x20/0x20 [ 358.105529][T10431] ? load_image+0x400/0x400 [ 358.110056][T10431] ? __might_sleep+0xe0/0xe0 [ 358.114661][T10431] ? __lock_acquire+0x7d40/0x7d40 [ 358.119708][T10431] should_fail_ex+0x39d/0x4d0 [ 358.124410][T10431] should_failslab+0x9/0x20 [ 358.128934][T10431] slab_pre_alloc_hook+0x59/0x310 [ 358.133978][T10431] ? __request_module+0x2ed/0x600 [ 358.139018][T10431] ? __request_module+0x2ed/0x600 [ 358.144060][T10431] __kmem_cache_alloc_node+0x53/0x250 [ 358.149468][T10431] ? __request_module+0x2ed/0x600 [ 358.154526][T10431] __kmalloc_node_track_caller+0xa2/0x230 [ 358.160341][T10431] kstrdup+0x3b/0x80 [ 358.164255][T10431] __request_module+0x2ed/0x600 [ 358.169120][T10431] ? end_current_label_crit_section+0x170/0x170 [ 358.175416][T10431] ? module_enforce_rwx_sections+0x150/0x150 [ 358.181455][T10431] ? apparmor_capable+0x137/0x1a0 [ 358.186507][T10431] ? capable+0x88/0xe0 [ 358.190607][T10431] ? dev_load+0x21/0x1f0 [ 358.195055][T10431] devinet_ioctl+0x133/0x1c40 [ 358.199795][T10431] ? __might_fault+0xc6/0x120 [ 358.204485][T10431] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 358.209615][T10431] ? _copy_from_user+0xa5/0xe0 [ 358.214404][T10431] ? get_user_ifreq+0x12b/0x180 [ 358.219283][T10431] inet_ioctl+0x42b/0x560 [ 358.223632][T10431] ? tomoyo_path_number_perm+0x217/0x620 [ 358.229296][T10431] ? inet_shutdown+0x370/0x370 [ 358.234073][T10431] ? slab_free_freelist_hook+0x130/0x1a0 [ 358.239753][T10431] ? tomoyo_path_number_perm+0x500/0x620 [ 358.245412][T10431] ? __kmem_cache_free+0xba/0x1e0 [ 358.250463][T10431] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 358.255945][T10431] ? packet_ioctl+0x270/0x340 [ 358.260651][T10431] sock_do_ioctl+0xfc/0x310 [ 358.265171][T10431] ? sock_show_fdinfo+0xb0/0xb0 [ 358.270044][T10431] sock_ioctl+0x5ba/0x7e0 [ 358.274393][T10431] ? sock_poll+0x3e0/0x3e0 [ 358.278832][T10431] ? bpf_lsm_file_ioctl+0x9/0x10 [ 358.283781][T10431] ? security_file_ioctl+0x80/0xa0 [ 358.288911][T10431] ? sock_poll+0x3e0/0x3e0 [ 358.293341][T10431] __se_sys_ioctl+0xfd/0x170 [ 358.297950][T10431] do_syscall_64+0x55/0xa0 [ 358.302383][T10431] ? clear_bhb_loop+0x40/0x90 [ 358.307068][T10431] ? clear_bhb_loop+0x40/0x90 [ 358.311766][T10431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.317683][T10431] RIP: 0033:0x7f746339aeb9 [ 358.322122][T10431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.341757][T10431] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.350201][T10431] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 358.358201][T10431] RDX: 00002000000007c0 RSI: 0000000000008916 RDI: 0000000000000006 [ 358.366190][T10431] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 358.374191][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.382179][T10431] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 358.390175][T10431] [ 359.936395][T10458] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 359.944569][T10458] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 359.984202][T10459] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 360.004971][T10459] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 360.287184][T10472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1453'. [ 360.353692][T10474] FAULT_INJECTION: forcing a failure. [ 360.353692][T10474] name failslab, interval 1, probability 0, space 0, times 0 [ 360.368191][T10474] CPU: 0 PID: 10474 Comm: syz.1.1454 Not tainted syzkaller #0 [ 360.375708][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.385795][T10474] Call Trace: [ 360.389106][T10474] [ 360.392074][T10474] dump_stack_lvl+0x18c/0x250 [ 360.396874][T10474] ? sctp_sendmsg+0x1575/0x28c0 [ 360.401766][T10474] ? ___sys_sendmsg+0x2a6/0x360 [ 360.406658][T10474] ? show_regs_print_info+0x20/0x20 [ 360.411908][T10474] ? load_image+0x400/0x400 [ 360.416481][T10474] should_fail_ex+0x39d/0x4d0 [ 360.421215][T10474] should_failslab+0x9/0x20 [ 360.425768][T10474] slab_pre_alloc_hook+0x59/0x310 [ 360.430835][T10474] ? sctp_add_bind_addr+0x8c/0x360 [ 360.436033][T10474] __kmem_cache_alloc_node+0x53/0x250 [ 360.441475][T10474] ? sctp_add_bind_addr+0x8c/0x360 [ 360.446656][T10474] kmalloc_trace+0x2a/0xe0 [ 360.451137][T10474] sctp_add_bind_addr+0x8c/0x360 [ 360.456130][T10474] sctp_copy_local_addr_list+0x315/0x4f0 [ 360.461830][T10474] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 360.467600][T10474] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 360.473712][T10474] ? sctp_v4_is_any+0x35/0x60 [ 360.478414][T10474] ? sctp_copy_one_addr+0x8c/0x350 [ 360.483576][T10474] sctp_bind_addr_copy+0xb3/0x3c0 [ 360.488676][T10474] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 360.495038][T10474] sctp_connect_new_asoc+0x2f9/0x6a0 [ 360.500356][T10474] ? __sctp_connect+0xd80/0xd80 [ 360.505238][T10474] ? __local_bh_enable_ip+0x13a/0x1c0 [ 360.510657][T10474] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 360.516234][T10474] ? security_sctp_bind_connect+0x89/0xb0 [ 360.521996][T10474] sctp_sendmsg+0x1575/0x28c0 [ 360.526720][T10474] ? sctp_getsockopt+0xb60/0xb60 [ 360.531691][T10474] ? aa_sk_perm+0x83c/0x970 [ 360.536244][T10474] ? aa_af_perm+0x330/0x330 [ 360.540785][T10474] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 360.547249][T10474] ? sock_rps_record_flow+0x19/0x3f0 [ 360.552591][T10474] ? inet_sendmsg+0xe9/0x2f0 [ 360.557212][T10474] ? inet_send_prepare+0x260/0x260 [ 360.562371][T10474] ____sys_sendmsg+0x5ba/0x960 [ 360.567185][T10474] ? __asan_memset+0x22/0x40 [ 360.571824][T10474] ? __sys_sendmsg_sock+0x30/0x30 [ 360.576890][T10474] ? __import_iovec+0x3fa/0x850 [ 360.581801][T10474] ? import_iovec+0x73/0xa0 [ 360.586448][T10474] ___sys_sendmsg+0x2a6/0x360 [ 360.591173][T10474] ? __sys_sendmsg+0x2a0/0x2a0 [ 360.595997][T10474] ? __lock_acquire+0x7d40/0x7d40 [ 360.601094][T10474] __se_sys_sendmsg+0x1c2/0x2b0 [ 360.606000][T10474] ? __x64_sys_sendmsg+0x80/0x80 [ 360.611001][T10474] ? lockdep_hardirqs_on+0x98/0x150 [ 360.616247][T10474] do_syscall_64+0x55/0xa0 [ 360.620701][T10474] ? clear_bhb_loop+0x40/0x90 [ 360.625413][T10474] ? clear_bhb_loop+0x40/0x90 [ 360.630131][T10474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.636060][T10474] RIP: 0033:0x7fe7ea59aeb9 [ 360.640504][T10474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.660143][T10474] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.668615][T10474] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 360.676612][T10474] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 360.684613][T10474] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 360.692609][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.700602][T10474] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 360.708617][T10474] [ 360.822894][T10479] syzkaller0: entered promiscuous mode [ 360.828945][T10479] syzkaller0: entered allmulticast mode [ 361.041244][T10487] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 361.084674][T10487] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 361.168870][T10490] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 361.192029][T10490] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 362.028738][T10509] netlink: 'syz.1.1465': attribute type 3 has an invalid length. [ 362.055055][T10509] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1465'. [ 363.487908][T10526] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 363.517710][T10526] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 363.543352][T10530] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 363.550920][T10530] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 363.613778][T10541] netlink: 'syz.2.1476': attribute type 10 has an invalid length. [ 363.633763][T10541] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 363.747388][T10545] netlink: 'syz.3.1478': attribute type 27 has an invalid length. [ 363.755838][T10545] netlink: 'syz.3.1478': attribute type 4 has an invalid length. [ 363.764407][T10545] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1478'. [ 364.368564][T10566] pim6reg: tun_chr_ioctl cmd 2147767519 [ 365.553087][T10575] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 365.563788][T10575] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 365.633276][T10576] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 365.642102][T10576] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 367.146820][T10597] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1492'. [ 367.964664][T10604] FAULT_INJECTION: forcing a failure. [ 367.964664][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 367.977378][T10604] CPU: 0 PID: 10604 Comm: syz.1.1496 Not tainted syzkaller #0 [ 367.984878][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.994988][T10604] Call Trace: [ 367.998377][T10604] [ 368.001341][T10604] dump_stack_lvl+0x18c/0x250 [ 368.006108][T10604] ? show_regs_print_info+0x20/0x20 [ 368.011349][T10604] ? load_image+0x400/0x400 [ 368.015910][T10604] should_fail_ex+0x39d/0x4d0 [ 368.020643][T10604] should_failslab+0x9/0x20 [ 368.025207][T10604] slab_pre_alloc_hook+0x59/0x310 [ 368.030303][T10604] ? verify_lock_unused+0x140/0x140 [ 368.035638][T10604] kmem_cache_alloc+0x5a/0x2d0 [ 368.040439][T10604] ? skb_clone+0x1eb/0x370 [ 368.044895][T10604] skb_clone+0x1eb/0x370 [ 368.049287][T10604] bpf_clone_redirect+0x167/0x4a0 [ 368.054376][T10604] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 368.059872][T10604] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 368.065910][T10604] ? lock_chain_count+0x20/0x20 [ 368.070797][T10604] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 368.077166][T10604] ? lockdep_softirqs_on+0x580/0x580 [ 368.082479][T10604] ? ktime_get+0x7f/0x280 [ 368.086833][T10604] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 368.093098][T10604] ? ktime_get_real_ts64+0x440/0x440 [ 368.098408][T10604] ? __x64_sys_bpf+0x7c/0x90 [ 368.103015][T10604] ? __local_bh_disable_ip+0x108/0x1a0 [ 368.108496][T10604] ? __cant_sleep+0x220/0x220 [ 368.113201][T10604] ? read_tsc+0x9/0x20 [ 368.117290][T10604] ? ktime_get+0x24b/0x280 [ 368.121753][T10604] ? bpf_test_run+0x174/0x870 [ 368.126472][T10604] bpf_test_run+0x2df/0x870 [ 368.131010][T10604] ? bpf_test_run+0x174/0x870 [ 368.135720][T10604] ? convert___skb_to_skb+0x590/0x590 [ 368.141116][T10604] ? eth_get_headlen+0x210/0x210 [ 368.146095][T10604] ? slab_build_skb+0x25f/0x3f0 [ 368.150981][T10604] ? convert___skb_to_skb+0x3d/0x590 [ 368.156296][T10604] bpf_prog_test_run_skb+0xad2/0x12b0 [ 368.161700][T10604] ? cpu_online+0x60/0x60 [ 368.166054][T10604] bpf_prog_test_run+0x321/0x390 [ 368.171017][T10604] __sys_bpf+0x49d/0x890 [ 368.175282][T10604] ? bpf_link_show_fdinfo+0x390/0x390 [ 368.180678][T10604] ? lock_chain_count+0x20/0x20 [ 368.185555][T10604] __x64_sys_bpf+0x7c/0x90 [ 368.189989][T10604] do_syscall_64+0x55/0xa0 [ 368.194432][T10604] ? clear_bhb_loop+0x40/0x90 [ 368.199142][T10604] ? clear_bhb_loop+0x40/0x90 [ 368.203842][T10604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.209764][T10604] RIP: 0033:0x7fe7ea59aeb9 [ 368.214210][T10604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.233855][T10604] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.242297][T10604] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 368.250285][T10604] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 368.258284][T10604] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.266288][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.274285][T10604] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 368.282299][T10604] [ 369.908108][T10613] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 369.946009][T10613] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 369.955722][T10620] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 369.964291][T10620] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 370.150627][T10639] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1504'. [ 370.333035][T10648] netlink: 'syz.3.1509': attribute type 11 has an invalid length. [ 370.343408][T10644] netlink: 'syz.1.1507': attribute type 46 has an invalid length. [ 370.357492][T10648] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1509'. [ 370.510798][T10646] netlink: 'syz.3.1509': attribute type 11 has an invalid length. [ 370.593642][T10646] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1509'. [ 370.669453][T10646] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 370.704945][T10646] CPU: 0 PID: 10646 Comm: syz.3.1509 Not tainted syzkaller #0 [ 370.712477][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.722563][T10646] Call Trace: [ 370.725867][T10646] [ 370.728828][T10646] dump_stack_lvl+0x18c/0x250 [ 370.733561][T10646] ? show_regs_print_info+0x20/0x20 [ 370.738815][T10646] ? load_image+0x400/0x400 [ 370.743385][T10646] sysfs_warn_dup+0x8e/0xa0 [ 370.747924][T10646] sysfs_do_create_link_sd+0xc0/0x110 [ 370.753377][T10646] device_add_class_symlinks+0x1cf/0x240 [ 370.759052][T10646] device_add+0x507/0xc20 [ 370.763425][T10646] wiphy_register+0x1dad/0x2ae0 [ 370.768326][T10646] ? cfg80211_event_work+0x40/0x40 [ 370.773553][T10646] ? minstrel_ht_alloc+0x88a/0x990 [ 370.778729][T10646] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 370.784839][T10646] ieee80211_register_hw+0x3464/0x4250 [ 370.790364][T10646] ? ieee80211_tasklet_handler+0x20/0x20 [ 370.796033][T10646] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 370.801981][T10646] ? __debug_object_init+0xec/0x450 [ 370.807286][T10646] ? __asan_memset+0x22/0x40 [ 370.811930][T10646] ? __hrtimer_init+0x186/0x270 [ 370.816846][T10646] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 370.822638][T10646] ? mac80211_hwsim_free+0x220/0x220 [ 370.827962][T10646] ? rcu_is_watching+0x15/0xb0 [ 370.832775][T10646] ? kstrndup+0xbd/0x140 [ 370.837069][T10646] hwsim_new_radio_nl+0xdc9/0x1a90 [ 370.842232][T10646] ? __nla_validate+0x50/0x50 [ 370.846966][T10646] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 370.853351][T10646] ? __nla_parse+0x40/0x50 [ 370.857810][T10646] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 370.864174][T10646] genl_family_rcv_msg_doit+0x211/0x310 [ 370.869767][T10646] ? end_current_label_crit_section+0x170/0x170 [ 370.876058][T10646] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 370.882014][T10646] ? bpf_lsm_capable+0x9/0x10 [ 370.886751][T10646] ? security_capable+0x89/0xb0 [ 370.891659][T10646] genl_rcv_msg+0x619/0x7a0 [ 370.896235][T10646] ? genl_bind+0x360/0x360 [ 370.900694][T10646] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 370.907086][T10646] netlink_rcv_skb+0x241/0x4d0 [ 370.911898][T10646] ? genl_bind+0x360/0x360 [ 370.916400][T10646] ? netlink_ack+0x1180/0x1180 [ 370.921239][T10646] ? __lock_acquire+0x7d40/0x7d40 [ 370.926307][T10646] ? net_generic+0x1e/0x240 [ 370.930859][T10646] ? down_read+0x1ac/0x2e0 [ 370.935342][T10646] genl_rcv+0x28/0x40 [ 370.939360][T10646] netlink_unicast+0x751/0x8d0 [ 370.944292][T10646] netlink_sendmsg+0x8d0/0xbf0 [ 370.949112][T10646] ? netlink_getsockopt+0x590/0x590 [ 370.954349][T10646] ? aa_sock_msg_perm+0x94/0x150 [ 370.959324][T10646] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 370.964640][T10646] ? security_socket_sendmsg+0x80/0xa0 [ 370.970133][T10646] ? netlink_getsockopt+0x590/0x590 [ 370.975375][T10646] ____sys_sendmsg+0x5ba/0x960 [ 370.980186][T10646] ? __asan_memset+0x22/0x40 [ 370.984810][T10646] ? __sys_sendmsg_sock+0x30/0x30 [ 370.989872][T10646] ? __import_iovec+0x5f2/0x850 [ 370.994774][T10646] ? import_iovec+0x73/0xa0 [ 370.999316][T10646] ___sys_sendmsg+0x2a6/0x360 [ 371.004026][T10646] ? __sys_sendmsg+0x2a0/0x2a0 [ 371.008881][T10646] __se_sys_sendmsg+0x1c2/0x2b0 [ 371.013763][T10646] ? __x64_sys_sendmsg+0x80/0x80 [ 371.018763][T10646] ? lockdep_hardirqs_on+0x98/0x150 [ 371.024001][T10646] do_syscall_64+0x55/0xa0 [ 371.028463][T10646] ? clear_bhb_loop+0x40/0x90 [ 371.033189][T10646] ? clear_bhb_loop+0x40/0x90 [ 371.037908][T10646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.043833][T10646] RIP: 0033:0x7f555999aeb9 [ 371.048279][T10646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.067923][T10646] RSP: 002b:00007f555a926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.076377][T10646] RAX: ffffffffffffffda RBX: 00007f5559c15fa0 RCX: 00007f555999aeb9 [ 371.084376][T10646] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 371.092402][T10646] RBP: 00007f5559a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 371.100493][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.108501][T10646] R13: 00007f5559c16038 R14: 00007f5559c15fa0 R15: 00007ffd68711888 [ 371.116525][T10646] [ 371.194595][T10658] netlink: 'syz.2.1511': attribute type 33 has an invalid length. [ 371.202826][T10658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1511'. [ 371.404792][T10663] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 371.414254][T10663] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 371.513974][T10665] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 371.541630][T10665] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 371.719908][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1514'. [ 371.848024][T10672] FAULT_INJECTION: forcing a failure. [ 371.848024][T10672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 371.893807][T10672] CPU: 1 PID: 10672 Comm: syz.3.1516 Not tainted syzkaller #0 [ 371.901355][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.911469][T10672] Call Trace: [ 371.914797][T10672] [ 371.917769][T10672] dump_stack_lvl+0x18c/0x250 [ 371.922506][T10672] ? show_regs_print_info+0x20/0x20 [ 371.927763][T10672] ? load_image+0x400/0x400 [ 371.932324][T10672] ? __lock_acquire+0x7d40/0x7d40 [ 371.937386][T10672] ? perf_trace_lock+0xfc/0x3b0 [ 371.942315][T10672] should_fail_ex+0x39d/0x4d0 [ 371.947042][T10672] prepare_alloc_pages+0x1e2/0x5f0 [ 371.952229][T10672] __alloc_pages+0x134/0x460 [ 371.956867][T10672] ? zone_statistics+0x170/0x170 [ 371.961873][T10672] ? alloc_pages+0x4dc/0x740 [ 371.966506][T10672] ? do_raw_spin_unlock+0x121/0x230 [ 371.971756][T10672] __get_free_pages+0xc/0x30 [ 371.976399][T10672] kasan_populate_vmalloc_pte+0x35/0x100 [ 371.982110][T10672] __apply_to_page_range+0x860/0xdd0 [ 371.987461][T10672] ? kasan_populate_vmalloc+0x70/0x70 [ 371.992892][T10672] ? apply_to_page_range+0x50/0x50 [ 371.998085][T10672] ? do_raw_spin_unlock+0x121/0x230 [ 372.003333][T10672] alloc_vmap_area+0x1d0c/0x1e30 [ 372.008369][T10672] ? vm_map_ram+0xcb0/0xcb0 [ 372.012924][T10672] ? rcu_is_watching+0x15/0xb0 [ 372.017751][T10672] __get_vm_area_node+0x162/0x370 [ 372.022827][T10672] __vmalloc_node_range+0x36e/0x1330 [ 372.028166][T10672] ? dev_map_alloc+0x1f6/0x4c0 [ 372.033013][T10672] ? free_vm_area+0x50/0x50 [ 372.037579][T10672] ? rcu_is_watching+0x15/0xb0 [ 372.042390][T10672] ? bpf_map_area_alloc+0x5e/0x110 [ 372.047545][T10672] bpf_map_area_alloc+0xf1/0x110 [ 372.052518][T10672] ? dev_map_alloc+0x1f6/0x4c0 [ 372.057319][T10672] dev_map_alloc+0x1f6/0x4c0 [ 372.061956][T10672] map_create+0x877/0x12f0 [ 372.066447][T10672] ? bpf_lsm_bpf+0x9/0x10 [ 372.070836][T10672] __sys_bpf+0x651/0x890 [ 372.075149][T10672] ? bpf_link_show_fdinfo+0x390/0x390 [ 372.080580][T10672] ? lock_chain_count+0x20/0x20 [ 372.085501][T10672] __x64_sys_bpf+0x7c/0x90 [ 372.089961][T10672] do_syscall_64+0x55/0xa0 [ 372.094421][T10672] ? clear_bhb_loop+0x40/0x90 [ 372.099136][T10672] ? clear_bhb_loop+0x40/0x90 [ 372.103856][T10672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.109788][T10672] RIP: 0033:0x7f555999aeb9 [ 372.114235][T10672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.133879][T10672] RSP: 002b:00007f555a926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.142406][T10672] RAX: ffffffffffffffda RBX: 00007f5559c15fa0 RCX: 00007f555999aeb9 [ 372.150419][T10672] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 372.158430][T10672] RBP: 00007f555a926090 R08: 0000000000000000 R09: 0000000000000000 [ 372.166439][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.174443][T10672] R13: 00007f5559c16038 R14: 00007f5559c15fa0 R15: 00007ffd68711888 [ 372.182471][T10672] [ 372.218553][T10674] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1515'. [ 372.598807][T10689] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1527'. [ 372.647360][T10689] netlink: 'syz.1.1527': attribute type 29 has an invalid length. [ 372.745765][T10689] netlink: 'syz.1.1527': attribute type 29 has an invalid length. [ 372.764327][T10693] netlink: 'syz.1.1527': attribute type 29 has an invalid length. [ 372.793651][T10694] netlink: 'syz.1.1527': attribute type 29 has an invalid length. [ 372.921987][T10696] netlink: 'syz.0.1520': attribute type 46 has an invalid length. [ 374.251199][T10708] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 374.264957][T10708] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 374.278421][T10711] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 374.286357][T10711] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 374.391858][T10710] FAULT_INJECTION: forcing a failure. [ 374.391858][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.425651][T10710] CPU: 1 PID: 10710 Comm: syz.0.1525 Not tainted syzkaller #0 [ 374.433283][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.443370][T10710] Call Trace: [ 374.446722][T10710] [ 374.449709][T10710] dump_stack_lvl+0x18c/0x250 [ 374.454454][T10710] ? show_regs_print_info+0x20/0x20 [ 374.459717][T10710] ? load_image+0x400/0x400 [ 374.464279][T10710] ? __lock_acquire+0x7d40/0x7d40 [ 374.469349][T10710] ? __virt_addr_valid+0x18c/0x540 [ 374.474521][T10710] should_fail_ex+0x39d/0x4d0 [ 374.479347][T10710] _copy_from_user+0x2f/0xe0 [ 374.483986][T10710] bpf_test_init+0xde/0x140 [ 374.488540][T10710] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 374.494055][T10710] ? dev_put+0x80/0x80 [ 374.498202][T10710] ? dev_put+0x80/0x80 [ 374.502310][T10710] bpf_prog_test_run+0x321/0x390 [ 374.507294][T10710] __sys_bpf+0x49d/0x890 [ 374.511593][T10710] ? bpf_link_show_fdinfo+0x390/0x390 [ 374.517051][T10710] ? lock_chain_count+0x20/0x20 [ 374.521984][T10710] __x64_sys_bpf+0x7c/0x90 [ 374.526459][T10710] do_syscall_64+0x55/0xa0 [ 374.530951][T10710] ? clear_bhb_loop+0x40/0x90 [ 374.535678][T10710] ? clear_bhb_loop+0x40/0x90 [ 374.540421][T10710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.546356][T10710] RIP: 0033:0x7f746339aeb9 [ 374.550831][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.570558][T10710] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 374.579028][T10710] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 374.587026][T10710] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 374.595014][T10710] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 374.603003][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.610996][T10710] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 374.619020][T10710] [ 374.639369][T10714] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1526'. [ 375.185679][T10724] FAULT_INJECTION: forcing a failure. [ 375.185679][T10724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 375.253588][T10724] CPU: 0 PID: 10724 Comm: syz.0.1530 Not tainted syzkaller #0 [ 375.261173][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.271298][T10724] Call Trace: [ 375.274638][T10724] [ 375.277648][T10724] dump_stack_lvl+0x18c/0x250 [ 375.282406][T10724] ? show_regs_print_info+0x20/0x20 [ 375.287719][T10724] ? load_image+0x400/0x400 [ 375.292308][T10724] ? __lock_acquire+0x7d40/0x7d40 [ 375.297473][T10724] should_fail_ex+0x39d/0x4d0 [ 375.302266][T10724] prepare_alloc_pages+0x1e2/0x5f0 [ 375.307505][T10724] __alloc_pages+0x134/0x460 [ 375.312171][T10724] ? zone_statistics+0x170/0x170 [ 375.317231][T10724] __folio_alloc+0x10/0x20 [ 375.321710][T10724] vma_alloc_folio+0x47a/0x8f0 [ 375.326555][T10724] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 375.332429][T10724] shmem_alloc_folio+0x1a9/0x2a0 [ 375.337452][T10724] ? folio_put+0xd0/0xd0 [ 375.341840][T10724] ? __vm_enough_memory+0x11b/0x370 [ 375.347129][T10724] ? shmem_inode_acct_block+0x35e/0x460 [ 375.352757][T10724] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 375.358583][T10724] ? put_swap_device+0x230/0x230 [ 375.363639][T10724] ? xas_load+0x12b/0x140 [ 375.368061][T10724] ? filemap_get_entry+0xce/0x3f0 [ 375.373144][T10724] ? filemap_get_entry+0xce/0x3f0 [ 375.378254][T10724] ? filemap_get_entry+0x379/0x3f0 [ 375.383460][T10724] ? shmem_get_folio_gfp+0x138f/0x2aa0 [ 375.389017][T10724] ? page_cache_prev_miss+0x390/0x390 [ 375.394447][T10724] ? do_raw_spin_lock+0x11f/0x2c0 [ 375.399591][T10724] shmem_get_folio_gfp+0xcde/0x2aa0 [ 375.404932][T10724] shmem_fallocate+0x8cc/0xfc0 [ 375.409823][T10724] ? shmem_file_splice_read+0xc60/0xc60 [ 375.415464][T10724] ? rcu_read_lock_any_held+0xb4/0x140 [ 375.420992][T10724] ? rcu_read_lock_bh_held+0x100/0x100 [ 375.426518][T10724] ? end_current_label_crit_section+0x149/0x170 [ 375.432826][T10724] ? common_file_perm+0x198/0x1f0 [ 375.437942][T10724] vfs_fallocate+0x58e/0x700 [ 375.442614][T10724] do_vfs_ioctl+0x19f6/0x1cc0 [ 375.447370][T10724] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 375.453105][T10724] ? tomoyo_path_number_perm+0x217/0x620 [ 375.458806][T10724] ? __lock_acquire+0x7d40/0x7d40 [ 375.463881][T10724] ? slab_free_freelist_hook+0x130/0x1a0 [ 375.469662][T10724] ? tomoyo_path_number_perm+0x5b4/0x620 [ 375.475383][T10724] ? tomoyo_path_number_perm+0x217/0x620 [ 375.481119][T10724] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 375.486782][T10724] ? __fget_files+0x28/0x4b0 [ 375.491446][T10724] ? __fget_files+0x28/0x4b0 [ 375.496153][T10724] ? bpf_lsm_file_ioctl+0x9/0x10 [ 375.501152][T10724] ? security_file_ioctl+0x80/0xa0 [ 375.506348][T10724] __se_sys_ioctl+0x83/0x170 [ 375.511021][T10724] do_syscall_64+0x55/0xa0 [ 375.515507][T10724] ? clear_bhb_loop+0x40/0x90 [ 375.520283][T10724] ? clear_bhb_loop+0x40/0x90 [ 375.525046][T10724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.531004][T10724] RIP: 0033:0x7f746339aeb9 [ 375.535491][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.555183][T10724] RSP: 002b:00007f74641bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.563663][T10724] RAX: ffffffffffffffda RBX: 00007f7463615fa0 RCX: 00007f746339aeb9 [ 375.571699][T10724] RDX: 0000200000000040 RSI: 000000004030582a RDI: 0000000000000004 [ 375.579737][T10724] RBP: 00007f74641bb090 R08: 0000000000000000 R09: 0000000000000000 [ 375.587769][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.595804][T10724] R13: 00007f7463616038 R14: 00007f7463615fa0 R15: 00007ffd5e6227b8 [ 375.603888][T10724] [ 375.708903][T10729] netlink: 'syz.3.1531': attribute type 2 has an invalid length. [ 375.717158][T10729] netlink: 'syz.3.1531': attribute type 8 has an invalid length. [ 375.732302][T10729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1531'. [ 375.936496][T10731] netlink: 'syz.0.1540': attribute type 3 has an invalid length. [ 375.948971][T10731] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1540'. [ 376.058468][T10733] netlink: 'syz.2.1532': attribute type 46 has an invalid length. [ 376.775743][T10745] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 376.782851][T10745] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 376.826091][T10746] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 376.833103][T10746] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 376.915143][T10749] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1537'. [ 378.853959][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.860359][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.897453][T10779] À: port 1(vlan0) entered blocking state [ 379.917781][T10779] À: port 1(vlan0) entered disabled state [ 379.934439][T10779] vlan0: entered allmulticast mode [ 379.940638][T10779] veth0_vlan: entered allmulticast mode [ 379.956289][T10779] vlan0: entered promiscuous mode [ 380.116484][T10796] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1550'. [ 380.129553][T10792] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 380.143811][T10792] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 380.202273][T10797] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 380.209668][T10797] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 380.328968][T10806] netlink: 'syz.0.1553': attribute type 8 has an invalid length. [ 380.336963][T10806] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 380.345490][T10806] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1553'. [ 381.857217][T10834] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1560'. [ 381.922630][T10830] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1559'. [ 382.024935][T10838] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 382.043930][T10838] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 382.091375][T10839] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 382.098551][T10839] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 382.377617][T10855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1567'. [ 382.987633][T10873] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1571'. [ 383.036588][T10874] netlink: 'syz.1.1570': attribute type 3 has an invalid length. [ 383.060292][T10874] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1570'. [ 383.991779][T10884] netlink: 'syz.1.1575': attribute type 1 has an invalid length. [ 384.004256][T10884] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1575'. [ 386.818603][T10880] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 386.840749][T10880] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 386.868323][T10885] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 386.894170][T10885] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 386.986228][T10893] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 387.000657][T10893] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 387.123017][T10897] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1578'. [ 390.258074][T10924] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 390.275832][T10924] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 390.308319][T10926] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 390.324274][T10926] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 390.510263][T10942] netlink: 'syz.2.1590': attribute type 1 has an invalid length. [ 390.650786][T10945] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 390.661398][T10945] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 390.718736][T10945] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 390.729204][T10945] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 390.882505][T10948] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 390.905624][T10948] netlink: 'syz.0.1593': attribute type 10 has an invalid length. [ 390.921737][T10948] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1593'. [ 390.944355][T10948] openvswitch: netlink: Message has 4 unknown bytes. [ 391.064165][T10950] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 391.072189][T10950] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 391.146459][T10954] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 391.168118][T10954] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 391.481839][T10961] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 391.520714][T10961] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 392.303156][T10965] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 392.310619][T10965] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 392.325799][T10966] netlink: 'syz.1.1600': attribute type 3 has an invalid length. [ 392.442469][T10974] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 392.891327][T10993] netlink: 'syz.3.1611': attribute type 30 has an invalid length. [ 392.967104][T10995] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 392.983293][T10995] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 393.002995][T10995] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 393.018101][T10995] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 393.905193][T11004] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 393.966051][T11006] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 393.984784][T11006] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1623'. [ 394.032433][T11006] netlink: 'syz.2.1623': attribute type 10 has an invalid length. [ 394.138490][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.269518][T11006] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 394.339945][T11009] bond0: entered promiscuous mode [ 394.356699][T11009] bond_slave_0: entered promiscuous mode [ 394.368790][T11009] bond_slave_1: entered promiscuous mode [ 394.379440][T11009] batadv0: entered promiscuous mode [ 394.679441][T11033] netlink: 'syz.0.1625': attribute type 4 has an invalid length. [ 394.853663][T11042] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1628'. [ 394.884698][T11042] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1628'. [ 395.735530][T11054] FAULT_INJECTION: forcing a failure. [ 395.735530][T11054] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.768738][T11054] CPU: 0 PID: 11054 Comm: syz.3.1632 Not tainted syzkaller #0 [ 395.776280][T11054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.786391][T11054] Call Trace: [ 395.789716][T11054] [ 395.792696][T11054] dump_stack_lvl+0x18c/0x250 [ 395.797450][T11054] ? show_regs_print_info+0x20/0x20 [ 395.802719][T11054] ? load_image+0x400/0x400 [ 395.807310][T11054] ? __lock_acquire+0x7d40/0x7d40 [ 395.812430][T11054] should_fail_ex+0x39d/0x4d0 [ 395.817204][T11054] prepare_alloc_pages+0x1e2/0x5f0 [ 395.822430][T11054] __alloc_pages+0x134/0x460 [ 395.827110][T11054] ? zone_statistics+0x170/0x170 [ 395.832170][T11054] ? alloc_pages+0x4dc/0x740 [ 395.836818][T11054] ? do_raw_spin_unlock+0x121/0x230 [ 395.842122][T11054] __get_free_pages+0xc/0x30 [ 395.846765][T11054] kasan_populate_vmalloc_pte+0x35/0x100 [ 395.852463][T11054] __apply_to_page_range+0x860/0xdd0 [ 395.857846][T11054] ? kasan_populate_vmalloc+0x70/0x70 [ 395.863300][T11054] ? apply_to_page_range+0x50/0x50 [ 395.868487][T11054] ? do_raw_spin_unlock+0x121/0x230 [ 395.873764][T11054] alloc_vmap_area+0x1d0c/0x1e30 [ 395.878827][T11054] ? vm_map_ram+0xcb0/0xcb0 [ 395.883400][T11054] ? rcu_is_watching+0x15/0xb0 [ 395.888248][T11054] __get_vm_area_node+0x162/0x370 [ 395.893406][T11054] __vmalloc_node_range+0x36e/0x1330 [ 395.898756][T11054] ? reuseport_array_alloc+0x98/0x120 [ 395.904255][T11054] ? end_current_label_crit_section+0x170/0x170 [ 395.910588][T11054] ? free_vm_area+0x50/0x50 [ 395.915182][T11054] ? apparmor_capable+0x137/0x1a0 [ 395.920289][T11054] bpf_map_area_alloc+0xf1/0x110 [ 395.925320][T11054] ? reuseport_array_alloc+0x98/0x120 [ 395.930768][T11054] reuseport_array_alloc+0x98/0x120 [ 395.936046][T11054] map_create+0x877/0x12f0 [ 395.940534][T11054] ? bpf_lsm_bpf+0x9/0x10 [ 395.944938][T11054] __sys_bpf+0x651/0x890 [ 395.949252][T11054] ? bpf_link_show_fdinfo+0x390/0x390 [ 395.954741][T11054] ? lock_chain_count+0x20/0x20 [ 395.959685][T11054] __x64_sys_bpf+0x7c/0x90 [ 395.964172][T11054] do_syscall_64+0x55/0xa0 [ 395.968658][T11054] ? clear_bhb_loop+0x40/0x90 [ 395.973400][T11054] ? clear_bhb_loop+0x40/0x90 [ 395.978153][T11054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.984141][T11054] RIP: 0033:0x7f555999aeb9 [ 395.988619][T11054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.008293][T11054] RSP: 002b:00007f555a926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.016774][T11054] RAX: ffffffffffffffda RBX: 00007f5559c15fa0 RCX: 00007f555999aeb9 [ 396.024800][T11054] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 396.032834][T11054] RBP: 00007f555a926090 R08: 0000000000000000 R09: 0000000000000000 [ 396.040905][T11054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.048946][T11054] R13: 00007f5559c16038 R14: 00007f5559c15fa0 R15: 00007ffd68711888 [ 396.057066][T11054] [ 396.651404][T11073] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 396.668458][T11073] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 396.697669][T11077] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 396.705016][T11077] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 398.445281][T11111] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 398.463318][T11111] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 398.528773][T11111] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 398.559140][T11111] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 398.770053][T11119] validate_nla: 1 callbacks suppressed [ 398.770072][T11119] netlink: 'syz.2.1652': attribute type 3 has an invalid length. [ 398.804353][T11118] netlink: 'syz.1.1651': attribute type 1 has an invalid length. [ 398.815454][T11118] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1651'. [ 398.829725][T11119] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1652'. [ 398.902386][T11118] netlink: 'syz.1.1651': attribute type 10 has an invalid length. [ 399.048588][T11118] bond0: entered promiscuous mode [ 399.074215][T11124] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1654'. [ 399.095398][T11118] bond_slave_0: entered promiscuous mode [ 399.114617][T11118] bond_slave_1: entered promiscuous mode [ 400.152087][T11143] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 400.166237][T11143] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 400.217775][T11143] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 400.243887][T11143] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 400.442466][T11161] FAULT_INJECTION: forcing a failure. [ 400.442466][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.461566][T11161] CPU: 0 PID: 11161 Comm: syz.1.1664 Not tainted syzkaller #0 [ 400.469087][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.479169][T11161] Call Trace: [ 400.482470][T11161] [ 400.485435][T11161] dump_stack_lvl+0x18c/0x250 [ 400.490149][T11161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.496336][T11161] ? show_regs_print_info+0x20/0x20 [ 400.501577][T11161] ? load_image+0x400/0x400 [ 400.506137][T11161] should_fail_ex+0x39d/0x4d0 [ 400.510864][T11161] copyin+0x1a/0x90 [ 400.514740][T11161] _copy_from_iter+0x54f/0x12e0 [ 400.519631][T11161] ? copyin+0x70/0x90 [ 400.523662][T11161] ? copyout_mc+0x70/0x70 [ 400.528155][T11161] ? copyout_mc+0x70/0x70 [ 400.532538][T11161] ? __virt_addr_valid+0x18c/0x540 [ 400.537685][T11161] ? page_copy_sane+0x4e/0x270 [ 400.542481][T11161] copy_page_from_iter+0x7b/0x100 [ 400.547540][T11161] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 400.553397][T11161] packet_sendmsg+0x3566/0x4d70 [ 400.558306][T11161] ? irqentry_enter+0x37/0x50 [ 400.563025][T11161] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 400.569039][T11161] ? lock_chain_count+0x20/0x20 [ 400.573946][T11161] ? packet_getsockopt+0xad0/0xad0 [ 400.579124][T11161] ? lockdep_hardirqs_on+0x98/0x150 [ 400.584365][T11161] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 400.590552][T11161] ? packet_getsockopt+0xad0/0xad0 [ 400.595703][T11161] ? packet_getsockopt+0xad0/0xad0 [ 400.600900][T11161] ____sys_sendmsg+0x5ba/0x960 [ 400.605735][T11161] ? __lock_acquire+0x7d40/0x7d40 [ 400.610820][T11161] ? __asan_memset+0x22/0x40 [ 400.615451][T11161] ? __sys_sendmsg_sock+0x30/0x30 [ 400.620504][T11161] ? __import_iovec+0x3fa/0x850 [ 400.625384][T11161] ? import_iovec+0x73/0xa0 [ 400.629923][T11161] ___sys_sendmsg+0x2a6/0x360 [ 400.634634][T11161] ? __sys_sendmsg+0x2a0/0x2a0 [ 400.639434][T11161] ? trace_call_bpf+0xc3/0x6c0 [ 400.644232][T11161] __se_sys_sendmsg+0x1c2/0x2b0 [ 400.649095][T11161] ? __x64_sys_sendmsg+0x80/0x80 [ 400.654059][T11161] ? lockdep_hardirqs_on+0x98/0x150 [ 400.659278][T11161] do_syscall_64+0x55/0xa0 [ 400.663717][T11161] ? clear_bhb_loop+0x40/0x90 [ 400.668410][T11161] ? clear_bhb_loop+0x40/0x90 [ 400.673106][T11161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.679008][T11161] RIP: 0033:0x7fe7ea59aeb9 [ 400.683439][T11161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.703059][T11161] RSP: 002b:00007fe7eb52e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.711491][T11161] RAX: ffffffffffffffda RBX: 00007fe7ea815fa0 RCX: 00007fe7ea59aeb9 [ 400.719486][T11161] RDX: 00000000200400c4 RSI: 0000200000000180 RDI: 0000000000000003 [ 400.727465][T11161] RBP: 00007fe7eb52e090 R08: 0000000000000000 R09: 0000000000000000 [ 400.735879][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.743864][T11161] R13: 00007fe7ea816038 R14: 00007fe7ea815fa0 R15: 00007fff430b86b8 [ 400.751865][T11161] [ 401.165196][T11178] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 401.177579][T11178] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1669'. [ 401.237321][T11178] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 401.814804][T11178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.849806][T11178] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 401.879875][T11182] bond0: entered promiscuous mode [ 401.898871][T11182] bond_slave_0: entered promiscuous mode [ 401.913745][T11182] bond_slave_1: entered promiscuous mode [ 401.919769][T11182] batadv0: entered promiscuous mode [ 401.939493][T11184] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 401.951126][T11184] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 401.972568][T11186] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 401.980302][T11186] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 402.100116][T11193] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1676'. [ 403.747658][T11216] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1683'. [ 403.761216][T11216] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1683'. [ 403.789754][T11216] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1683'. [ 403.819557][T11218] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 403.834601][T11218] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 403.860218][T11224] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 403.881944][T11224] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 403.943001][T11226] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 403.957070][T11226] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 403.996427][T11226] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 404.016754][T11226] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 404.060063][T11231] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.1689'. [ 404.169472][T11233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 404.826742][T11253] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 404.866730][T11253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1697'. [ 440.229527][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.241956][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.763674][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.772828][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.783065][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.791721][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.799672][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.808479][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.819098][ T5773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.826966][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.846859][ T5773] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 457.854434][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 457.862221][ T5773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.869760][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.040771][ T5777] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 458.053998][ T5777] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 458.062337][ T5777] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 458.071575][ T5777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 458.079681][ T5777] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 458.098316][ T5777] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 458.234784][ T5084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 458.244190][ T5084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 458.252233][ T5084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 458.263778][ T5084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 458.273226][ T5084] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 458.283359][ T5084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 459.903788][ T5084] Bluetooth: hci5: command tx timeout [ 459.986783][ T5084] Bluetooth: hci4: command tx timeout [ 460.143808][ T5084] Bluetooth: hci6: command tx timeout [ 460.383721][ T5084] Bluetooth: hci7: command tx timeout [ 461.983708][ T5084] Bluetooth: hci5: command tx timeout [ 462.067254][ T5084] Bluetooth: hci4: command tx timeout [ 462.223608][ T5084] Bluetooth: hci6: command tx timeout [ 462.463660][ T5084] Bluetooth: hci7: command tx timeout [ 464.063705][ T5084] Bluetooth: hci5: command tx timeout [ 464.143714][ T5084] Bluetooth: hci4: command tx timeout [ 464.303667][ T5084] Bluetooth: hci6: command tx timeout [ 464.543783][ T5084] Bluetooth: hci7: command tx timeout [ 466.143711][ T5084] Bluetooth: hci5: command tx timeout [ 466.226422][ T5084] Bluetooth: hci4: command tx timeout [ 466.383561][ T5084] Bluetooth: hci6: command tx timeout [ 466.623557][ T5084] Bluetooth: hci7: command tx timeout [ 510.123451][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 510.130219][ C1] rcu: 1-....: (10486 ticks this GP) idle=5f34/1/0x4000000000000000 softirq=33519/33521 fqs=2155 [ 510.141742][ C1] rcu: hardirqs softirqs csw/system [ 510.148168][ C1] rcu: number: 1341527 4 0 [ 510.154597][ C1] rcu: cputime: 17151 35328 53 ==> 52510(ms) [ 510.162412][ C1] rcu: (t=10503 jiffies g=40585 q=1332 ncpus=2) [ 510.168770][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 2578 jiffies! g40585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 510.181058][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=25037 [ 510.188963][ C1] rcu: rcu_preempt kthread starved for 2581 jiffies! g40585 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 510.200248][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 510.210221][ C1] rcu: RCU grace-period kthread stack dump: [ 510.216115][ C1] task:rcu_preempt state:I stack:27128 pid:17 ppid:2 flags:0x00004000 [ 510.225337][ C1] Call Trace: [ 510.228628][ C1] [ 510.231587][ C1] __schedule+0x1553/0x45a0 [ 510.236131][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 510.242046][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 510.247959][ C1] ? asan.module_dtor+0x20/0x20 [ 510.252829][ C1] ? enqueue_timer+0x23d/0x550 [ 510.257620][ C1] ? __mod_timer+0x984/0xdb0 [ 510.262241][ C1] schedule+0xbd/0x170 [ 510.266334][ C1] schedule_timeout+0x188/0x2d0 [ 510.271205][ C1] ? console_conditional_schedule+0x40/0x40 [ 510.277111][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 510.283011][ C1] ? update_process_times+0x1b0/0x1b0 [ 510.288403][ C1] ? prepare_to_swait_event+0x339/0x360 [ 510.293976][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 510.298859][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 510.305030][ C1] ? rcu_gp_init+0x1560/0x1560 [ 510.309800][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 510.314675][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.319883][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 510.325100][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 510.329714][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 510.334839][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 510.339792][ C1] ? __kthread_parkme+0x162/0x1c0 [ 510.344830][ C1] kthread+0x2fa/0x390 [ 510.348926][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 510.354044][ C1] ? kthread_blkcg+0xd0/0xd0 [ 510.358648][ C1] ret_from_fork+0x48/0x80 [ 510.363079][ C1] ? kthread_blkcg+0xd0/0xd0 [ 510.367676][ C1] ret_from_fork_asm+0x11/0x20 [ 510.372472][ C1] [ 510.375505][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 510.381851][ C1] Sending NMI from CPU 1 to CPUs 0: [ 510.387163][ C0] NMI backtrace for cpu 0 [ 510.387171][ C0] CPU: 0 PID: 8407 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 510.387185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.387194][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 510.387212][ C0] RIP: 0010:queued_write_lock_slowpath+0x137/0x2ac [ 510.387231][ C0] Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 3d 31 51 f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08 [ 510.387242][ C0] RSP: 0018:ffffc90011a9f2c0 EFLAGS: 00000206 [ 510.387253][ C0] RAX: 00000000000001ff RBX: 1ffff11003878405 RCX: ffffffff8a8e0a7d [ 510.387263][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88801c3c2028 [ 510.387272][ C0] RBP: ffffc90011a9f370 R08: ffff88801c3c202b R09: 1ffff11003878405 [ 510.387283][ C0] R10: dffffc0000000000 R11: ffffed1003878406 R12: dffffc0000000000 [ 510.387293][ C0] R13: 1ffff92002353e5c R14: ffff88801c3c2028 R15: ffffc90011a9f310 [ 510.387303][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 510.387315][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.387324][ C0] CR2: 00007efd82f23e80 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 510.387337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 510.387345][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 510.387353][ C0] Call Trace: [ 510.387358][ C0] [ 510.387366][ C0] ? queued_read_lock_slowpath+0x250/0x250 [ 510.387389][ C0] do_raw_write_lock+0x1ea/0x260 [ 510.387410][ C0] ? do_raw_read_unlock+0x80/0x80 [ 510.387429][ C0] ? nf_nat_inet_fn+0x975/0xbe0 [ 510.387453][ C0] ? __neigh_event_send+0x3b/0x1440 [ 510.387473][ C0] __neigh_event_send+0x3b/0x1440 [ 510.387499][ C0] neigh_resolve_output+0x19b/0x730 [ 510.387519][ C0] ? ip_finish_output2+0x11e0/0x11e0 [ 510.387532][ C0] ? nf_nat_ipv4_out+0x3af/0x4d0 [ 510.387555][ C0] ? ip_finish_output2+0x457/0x11e0 [ 510.387568][ C0] ip_finish_output2+0xd3a/0x11e0 [ 510.387582][ C0] ? ip_finish_output2+0x457/0x11e0 [ 510.387597][ C0] ? nf_hook+0xa2/0x390 [ 510.387617][ C0] ? __ip_local_out+0x5f0/0x5f0 [ 510.387638][ C0] ? ip_fragment+0x210/0x210 [ 510.387650][ C0] ? ip_mc_finish_output+0x250/0x250 [ 510.387671][ C0] ? perf_trace_lock_acquire+0x104/0x410 [ 510.387692][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 510.387716][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 510.387740][ C0] ip_output+0x2a1/0x3b0 [ 510.387761][ C0] ? ip_output+0x60/0x3b0 [ 510.387783][ C0] iptunnel_xmit+0x4f0/0x920 [ 510.387808][ C0] udp_tunnel_xmit_skb+0x249/0x390 [ 510.387835][ C0] send4+0x9dc/0xe40 [ 510.387855][ C0] ? send4+0x226/0xe40 [ 510.387869][ C0] ? wg_socket_send_skb_to_peer+0x1c0/0x1c0 [ 510.387893][ C0] wg_socket_send_skb_to_peer+0xd1/0x1c0 [ 510.387909][ C0] wg_packet_handshake_send_worker+0x207/0x350 [ 510.387926][ C0] ? wg_prev_queue_dequeue+0x220/0x220 [ 510.387952][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 510.387966][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 510.387985][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 510.388002][ C0] process_scheduled_works+0xa5d/0x15d0 [ 510.388036][ C0] ? assign_work+0x430/0x430 [ 510.388056][ C0] ? assign_work+0x3d0/0x430 [ 510.388076][ C0] worker_thread+0xa55/0xfc0 [ 510.388109][ C0] kthread+0x2fa/0x390 [ 510.388121][ C0] ? pr_cont_work+0x560/0x560 [ 510.388139][ C0] ? kthread_blkcg+0xd0/0xd0 [ 510.388152][ C0] ret_from_fork+0x48/0x80 [ 510.388169][ C0] ? kthread_blkcg+0xd0/0xd0 [ 510.388183][ C0] ret_from_fork_asm+0x11/0x20 [ 510.388210][ C0] [ 510.389178][ C1] CPU: 1 PID: 11251 Comm: syz.2.1694 Not tainted syzkaller #0 [ 510.754815][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.764886][ C1] RIP: 0010:rcu_read_unlock_special+0x83/0x470 [ 510.771071][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 0e 0c 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 510.790700][ C1] RSP: 0018:ffffc900001f0400 EFLAGS: 00000206 [ 510.796781][ C1] RAX: f24e202aa5c5d700 RBX: 1ffff9200003e084 RCX: f24e202aa5c5d700 [ 510.804772][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 510.812780][ C1] RBP: ffffc900001f04c8 R08: ffffffff911bf5cf R09: 1ffffffff2237eb9 [ 510.820763][ C1] R10: dffffc0000000000 R11: fffffbfff2237eba R12: ffffffff8d137201 [ 510.828748][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffff888064e51e00 [ 510.836739][ C1] FS: 00007f43eb60d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 510.845679][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.852272][ C1] CR2: 0000001b2e90fff8 CR3: 000000001bef1000 CR4: 00000000003506e0 [ 510.860253][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 510.868232][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 510.876210][ C1] Call Trace: [ 510.879513][ C1] [ 510.882377][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 510.887341][ C1] ? read_lock_is_recursive+0x20/0x20 [ 510.892728][ C1] ? deref_stack_reg+0x1bd/0x240 [ 510.897684][ C1] __rcu_read_unlock+0x7c/0xd0 [ 510.902477][ C1] is_bpf_text_address+0x27e/0x2a0 [ 510.907610][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 510.912821][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.918906][ C1] kernel_text_address+0xa0/0xd0 [ 510.923861][ C1] __kernel_text_address+0xd/0x30 [ 510.928898][ C1] unwind_get_return_address+0x5d/0xc0 [ 510.934381][ C1] ? stack_trace_save+0x100/0x100 [ 510.939436][ C1] arch_stack_walk+0x11d/0x190 [ 510.944219][ C1] stack_trace_save+0xaa/0x100 [ 510.948992][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 510.954123][ C1] kasan_set_track+0x4e/0x70 [ 510.958745][ C1] ? kasan_set_track+0x4e/0x70 [ 510.963525][ C1] ? kasan_save_free_info+0x2e/0x50 [ 510.968741][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 510.974038][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 510.979689][ C1] ? kmem_cache_free+0xf8/0x270 [ 510.984556][ C1] ? skb_release_data+0x60a/0x800 [ 510.989592][ C1] ? kfree_skb_reason+0x10e/0x170 [ 510.994641][ C1] ? neigh_invalidate+0x394/0x450 [ 510.999689][ C1] ? neigh_timer_handler+0x914/0xff0 [ 511.004984][ C1] ? call_timer_fn+0x189/0x540 [ 511.009755][ C1] ? __run_timers+0x542/0x800 [ 511.014441][ C1] ? run_timer_softirq+0x67/0xf0 [ 511.019407][ C1] ? handle_softirqs+0x280/0x820 [ 511.024376][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 511.029154][ C1] ? irq_exit_rcu+0x9/0x20 [ 511.033584][ C1] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 511.039414][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.045587][ C1] ? generic_exec_single+0x481/0x4f0 [ 511.050897][ C1] ? smp_call_function_single+0x36d/0x5a0 [ 511.056668][ C1] ? perf_install_in_context+0x5be/0x920 [ 511.062343][ C1] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 511.068289][ C1] ? do_syscall_64+0x55/0xa0 [ 511.072896][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.079003][ C1] ? kmem_cache_free+0xf8/0x270 [ 511.083882][ C1] kasan_save_free_info+0x2e/0x50 [ 511.088923][ C1] ____kasan_slab_free+0x126/0x1e0 [ 511.094053][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 511.099528][ C1] ? skb_release_data+0x60a/0x800 [ 511.104570][ C1] kmem_cache_free+0xf8/0x270 [ 511.109278][ C1] skb_release_data+0x60a/0x800 [ 511.114171][ C1] kfree_skb_reason+0x10e/0x170 [ 511.119053][ C1] neigh_invalidate+0x394/0x450 [ 511.123985][ C1] neigh_timer_handler+0x914/0xff0 [ 511.129128][ C1] call_timer_fn+0x189/0x540 [ 511.133741][ C1] ? neigh_release+0x80/0x80 [ 511.138346][ C1] ? call_timer_fn+0xd2/0x540 [ 511.143033][ C1] ? __run_timers+0x800/0x800 [ 511.147739][ C1] ? neigh_release+0x80/0x80 [ 511.152357][ C1] __run_timers+0x542/0x800 [ 511.156882][ C1] ? detach_timer+0x2b0/0x2b0 [ 511.161577][ C1] ? lock_chain_count+0x20/0x20 [ 511.166450][ C1] run_timer_softirq+0x67/0xf0 [ 511.171228][ C1] handle_softirqs+0x280/0x820 [ 511.176012][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 511.180795][ C1] ? do_softirq+0x1a0/0x1a0 [ 511.185312][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 511.190537][ C1] __irq_exit_rcu+0xd3/0x190 [ 511.195139][ C1] ? irq_exit_rcu+0x20/0x20 [ 511.199670][ C1] irq_exit_rcu+0x9/0x20 [ 511.203931][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 511.209579][ C1] [ 511.212524][ C1] [ 511.215475][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.221482][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 511.227406][ C1] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 0c 29 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 511.247029][ C1] RSP: 0018:ffffc9000c4a7a00 EFLAGS: 00000246 [ 511.253108][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 511.261178][ C1] RDX: ffffc900149d2000 RSI: 00000000000030a3 RDI: 00000000000030a4 [ 511.269267][ C1] RBP: ffffc9000c4a7ad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 511.277291][ C1] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff92001894f44 [ 511.285283][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001894f65 [ 511.293287][ C1] ? event_function+0x300/0x300 [ 511.298169][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 511.303958][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 511.309971][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 511.315640][ C1] smp_call_function_single+0x36d/0x5a0 [ 511.321215][ C1] ? event_function+0x300/0x300 [ 511.326093][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 511.332276][ C1] ? event_function+0x300/0x300 [ 511.337238][ C1] perf_install_in_context+0x5be/0x920 [ 511.342753][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 511.348745][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 511.353981][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 511.359201][ C1] ? perf_event__header_size+0x165/0x220 [ 511.364847][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 511.370594][ C1] ? clockevents_program_event+0x230/0x310 [ 511.376419][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 511.382091][ C1] ? lock_chain_count+0x20/0x20 [ 511.386972][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 511.392978][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 511.398196][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 511.403844][ C1] do_syscall_64+0x55/0xa0 [ 511.408276][ C1] ? clear_bhb_loop+0x40/0x90 [ 511.412968][ C1] ? clear_bhb_loop+0x40/0x90 [ 511.417657][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.423563][ C1] RIP: 0033:0x7f43ea79aeb9 [ 511.427985][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.447598][ C1] RSP: 002b:00007f43eb60d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 511.456027][ C1] RAX: ffffffffffffffda RBX: 00007f43eaa16180 RCX: 00007f43ea79aeb9 [ 511.464023][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 511.472011][ C1] RBP: 00007f43ea808c1f R08: 0000000000000002 R09: 0000000000000000 [ 511.480115][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 511.488094][ C1] R13: 00007f43eaa16218 R14: 00007f43eaa16180 R15: 00007ffe407a5858 [ 511.496090][ C1]