last executing test programs: 7m42.156738461s ago: executing program 0 (id=374): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x20000404, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000d001203000000005f30612e5f006e8cdd8557f7484982e2010320bd5fa0c8d6f42917c4866d29d2e971600f7573bbb4625ae55c4b89eeaa82ce4d35263d4ea7155cb9ac2346e9293f47b64e"], &(0x7f0000001180)=""/4096, 0x2b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100000, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{r0, 0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002340)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bond\x00', 0x1000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800000005030000000000008500"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4020940d, &(0x7f00000005c0)=0x81000000000004) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="1400000073544417400b63d25a80648c25940a7f2ba62b33ae1d687d5acf09184613cfbeb798f90266f14f9b90b1168abdc907f7460cebde3d45b3bf522dcca852d5fa99a3547ccd83ed0d9694644b96e5675fe04d0133bd866ae9ea781a6878df5657dd080100002dadf7a109aab07150b7b348cea29b7bbd61f605fb3271bd9880716e432ed5e98d77540583fe3d7c7ecd150af572922f5ab6df990be6a900"/172, 0xac}], 0x1}, 0x8044) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000400)=r6, 0x51a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), 0x0}, 0xffffffffffffff46) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5, 0x1, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000005, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m40.897511845s ago: executing program 0 (id=380): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r2) r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r2}, 0x20) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80a9, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x33d0980, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x19, 0x0, 0xfcd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a0, 0x0, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fcffffff950000001e000000"], &(0x7f00000001c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) mkdir(0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0x2}, 0x12180, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m38.031904092s ago: executing program 0 (id=384): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000080000000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000003008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000f539184d8502f6850e8ce121010000008500000084000000b700"/96], 0x0, 0x3, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0x7, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000180)=[r1, r1, r1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x3, 0x2, 0x1, 0xa}, {0x1, 0x5, 0x7, 0x7}, {0x3, 0x4, 0x10}, {0x4, 0x4, 0x6, 0x9}, {0x0, 0x1, 0xc, 0xb}, {0x5, 0x4, 0xb, 0x1}], 0x10, 0x6}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair(0x1f, 0x20000000000001, 0x4, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0xa004, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0xb}]}) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2c, &(0x7f0000000140), 0x4) r8 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[@ANYBLOB='1-', @ANYRESDEC], 0x31) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000f4ff1c0099f95144e4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_int(r6, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) 7m37.312203085s ago: executing program 0 (id=386): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0xa, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(0x0, r0, 0x1, 0xffffffffffffffff, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r1}, 0x18) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/35, 0x23}, 0x40002123) 7m36.937724897s ago: executing program 0 (id=388): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0xe4, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) (fail_nth: 3) 7m36.420113707s ago: executing program 0 (id=389): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r3) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r3}, 0x20) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80a9, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x33d0980, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x19, 0x0, 0xfcd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a0, 0x0, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESOCT=r8, @ANYRES8=r5, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fcffffff950000001e000000"], &(0x7f00000001c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) mkdir(0x0, 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0x2}, 0x12180, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m20.852584519s ago: executing program 32 (id=389): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1}, 0xc) close(r3) r4 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000300), &(0x7f00000003c0)=r3}, 0x20) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80a9, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x33d0980, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf0550904", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x19, 0x0, 0xfcd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a0, 0x0, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYRESOCT=r8, @ANYRES8=r5, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fcffffff950000001e000000"], &(0x7f00000001c0)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) mkdir(0x0, 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000011c0), 0x2}, 0x12180, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.092861718s ago: executing program 3 (id=2261): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0xc8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 9.160583613s ago: executing program 3 (id=2271): socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) syz_clone(0x10200, &(0x7f00000002c0)="59620f58c7b251d9c1890d3a1ea3f35691da38560577e859af198e7c411fa8b7d09ba89d82db682bd16fa2901c5c84084bb72c7f8d16c53e5984e10607218cf7871ea3fe54283692c2c815e6bba6a1fd26880a692ac0d018de25180f913eddf57870d52345c273472174b02f8e907c5f7d69c5da859bf3b260120f59d9cce731b73435b6bef21fc224a4c63f2d6ee96d0d8e65d663a28708a1eaf0731772f33e151d1cedeea517b3488f6ec7da585bedd562bae9f369e753816023", 0xbb, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000740)="8ef565016c18e85be3e691889c19cefaa78e48780e555c000b68577e47552fca3f19b79d788695482072736790d19d0357e2a53a52fef14a0d23ba396e9a30e96ae9cca9d4466d5c9d245a8484420720ff4d1a562775fe9a810018ae7f20f6fac1cf3e1aea28bddeee5ae31dbc54f0057c9a6b7d492a5e6a2340f143eaaa86df3c51941da29133d99d1fcd119a44cb9375d3c8bae43d1a0da04455148e10a7bb4f9054764727c7adfe42583d0b7bee3196c92f3e76c023b8819c8a30fcac434699540dfc12b3ad7df92da488c1cdeba84c5b3050d098a02e6e164aefa9222e7a7ff00a2b8d9a03873624cca7f5") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x400}, [@jmp={0x5, 0x1, 0xd, 0x5, 0x5, 0x6, 0x4}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x0, 0x0, 0x60880, 0x5e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x4, 0x1, 0x0, 0x9}], 0x10, 0x74}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)) 9.011737292s ago: executing program 3 (id=2275): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xf}, 0x8008, 0xca, 0x0, 0x1, 0x0, 0x40000010, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) socketpair(0x1d, 0x80000, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x4, 0x1, &(0x7f0000000040)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7, &(0x7f0000000080)="3371650685279123"}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000240)=""/86, 0x56}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000480)}, {&(0x7f0000000780)=""/244, 0xf4}], 0x7, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 8.559130429s ago: executing program 3 (id=2280): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000340)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000f80)=ANY=[@ANYBLOB='g'], 0x5) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x30445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1a, 0x1}, 0x8080, 0xa9, 0x7ffffffe, 0x5, 0x400000a5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r5}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.436577873s ago: executing program 3 (id=2292): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0xa, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f00000002c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x0, 0x6, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = syz_clone(0x20008080, &(0x7f0000000180)="6467818387574758f9033b85c4124b9582f4113beed2975885a4f1aeb006117e83751d", 0x23, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000580)="0ae01f1a826f813ffd184e3e368a56013d69f342eb41a4e4cb92c91ee5396e01d8ff163f1099c03223bd81090fd15bee34c6f9f6a7eec717b7ed9dc7b9b2e5b651b803d7c59c35f04574a87f6a7f633b39f1e22f3243d1a7d09302eafe") syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)="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", 0x2e}], 0x1, 0x0, 0xfffffffffffffdb4}, 0x40) 5.7929195s ago: executing program 3 (id=2294): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4c55a10a0015000600142603600e1208000f", 0x1f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 4.807757338s ago: executing program 4 (id=2301): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x80040001, 0x45040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x6}, 0x18, 0x1ffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) 3.90867778s ago: executing program 4 (id=2303): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 3.40441786s ago: executing program 2 (id=2305): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xffffebff, 0x3, 0x2, 0xa, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x3, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) close(r0) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r2, &(0x7f00000002c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x0, 0x6, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) r4 = syz_clone(0x20008080, &(0x7f0000000180)="6467818387574758f9033b85c4124b9582f4113beed2975885a4f1aeb006117e83751d", 0x23, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000580)="0ae01f1a826f813ffd184e3e368a56013d69f342eb41a4e4cb92c91ee5396e01d8ff163f1099c03223bd81090fd15bee34c6f9f6a7eec717b7ed9dc7b9b2e5b651b803d7c59c35f04574a87f6a7f633b39f1e22f3243d1a7d09302eafe") syz_open_procfs$namespace(r4, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000780)="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", 0x2e}], 0x1, 0x0, 0xfffffffffffffdb4}, 0x40) 3.40334571s ago: executing program 4 (id=2312): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0xc8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 3.125316046s ago: executing program 4 (id=2306): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4c55a10a0015000600142603600e1208000f", 0x1f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) 2.933468288s ago: executing program 2 (id=2307): socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x806, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000380)}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1002b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) 2.777625597s ago: executing program 4 (id=2308): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000340)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000f80)=ANY=[@ANYBLOB='g'], 0x5) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x30445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1a, 0x1}, 0x8080, 0xa9, 0x7ffffffe, 0x5, 0x400000a5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r5}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000000c0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/4098, 0x1002}, {&(0x7f0000002080)=""/4111, 0x100f}, {&(0x7f0000000000)=""/92, 0x5c}], 0x4}, 0x40010022) 2.496967234s ago: executing program 2 (id=2309): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000680), 0x0}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0xff0f000020000080) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff11"], 0xfdef) 2.103012287s ago: executing program 1 (id=2311): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000400000e020000000000000000000000000000020000000000002e000000000000000000"], 0x0, 0x38}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x5f, 0x2e, 0x5f]}}, 0x0, 0x2d}, 0x28) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x2}, {0x0, 0x8}], 0x2}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000140), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000002c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={r7, &(0x7f0000000400)="93342cf5159868965a113757913a7e176db318ab07f34b8fa92effc46f9eefbfc14051280f56ee97e40ca8f425d7388c1a41de87f8513de56e556fc8db9e292c3c8267c5804685b0a9a155d48cb525e5f501bb5b76b27692d6fb8bfdca644f470a135809c41443db09f2f1feeb052ac50b5205539a110930bf801e0ea915386416c533a0fc1cbb2cd6322628146a0ac34cc0b9ffa0a41ebb40946a15a4c6f4518b334c7288496de5bdde7b824c11530845b891cbaede0d0e02d801f0c5f31b3b86c365680f88260581814fdac3769bf884ceed6f9a1035", &(0x7f0000000500)=""/155, 0x4}, 0x20) 1.630102394s ago: executing program 1 (id=2313): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 1.501564872s ago: executing program 2 (id=2314): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0xc8, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) 1.236826097s ago: executing program 1 (id=2315): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000680), 0x0}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0xff0f000020000080) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff11"], 0xfdef) 1.116266454s ago: executing program 2 (id=2316): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0), 0x2}, {0x0, 0x8}], 0x2}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f00000002c0)) 764.312174ms ago: executing program 1 (id=2317): socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x806, 0x1, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f0000000380)}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1002b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) 472.773282ms ago: executing program 2 (id=2318): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004"], 0x48) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$cgroup_int(r0, &(0x7f0000000340)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000f80)=ANY=[@ANYBLOB='g'], 0x5) r5 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x30445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1a, 0x1}, 0x8080, 0xa9, 0x7ffffffe, 0x5, 0x400000a5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000001c0)={r5}) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000012006bab9a3ff3d86e17aa0a056b876c1d00489200000080000000002a5ad6f7007ea60864160af34afe5f5e1be7ff5bdf1931a0e64f88c1976627dc80fd4460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 462.971433ms ago: executing program 1 (id=2319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="649d03cd8ab6a524e060dea536977e6f1e2ad65c77e318ccb430e334b1987257a74768ff052f8d0f3acda6d64d4fa7b6f4160e1f0bd66ccca7721cc18d51d03b4ccc31c2e72050a83ecc29f45591cb06b4b53af28103f6b882f00de6975e467e2db63c3f06fd177ca12e9479e7dc55857043a3fd60574d5e8129341d62c4e2a605ff759accca9355a4b1b65dc96972889ebf025b987e11d6a35a4efd9ac05f8bdbf8ee10ab3cf972010e46ae18120fcc4ff34e28a32b3bcfa48449a38be2baf4dbc4d926a8f3b3691187c98d0dfec764871e895043fbb9f730b3070ce697ceb365968346af4c9d76ccb778e4a6013ca04317d1", 0xf3}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="98000000197232d4304eefbc9b69b4707fa0fe6a012929f8983b5d8e3a8aab2f6fc033f349b254891fa31453d9af605490f5ba2f30badec8e54682bbd190dd56416df01ac2e7f4b62f4e8f6d288ab92bb2ccab4acd681276d3f398184389ee15a377b3f57a81de80268673"], 0x98}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x1000}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000060000000400000002000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40040, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x620401, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000100), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e10b0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 84.913924ms ago: executing program 1 (id=2320): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0xfffffffd, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000fbffffff0000000000000000220000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980), 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000040), 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000060000000006"], 0x50) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x56, &(0x7f0000000180)=[{&(0x7f0000000100)="5c0000007a006bd865b5bab2d37b599c7cd63fe3dc6e08000007000004000000007ea60864160af365049ee517d34460bc24eab556a705251e4e82949a3651f668c3664402015f09d452fc0293fe13147260b362682fb6e27bbf", 0x5c}, {&(0x7f0000000080)="6b7d97c5ff015b15fb88c168307e0cdaba319169501e00"}, {&(0x7f00000000c0)="08b46d87208ae7a4247d4a1dd5bdda5e3329bd2f32af352e7ac6049113ebed604e7e4e56a60a866c1a45"}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040) 0s ago: executing program 4 (id=2321): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000680), 0x0}, 0x20) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x2e, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000001000000000000000feffff1811", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, 0x0, 0xff0f000020000080) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0xfffffffffffff7fd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff11"], 0xfdef) kernel console output (not intermixed with test programs): how_regs_print_info+0x20/0x20 [ 419.994706][ T9653] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.000925][ T9653] ? dump_stack+0x9/0x20 [ 420.005234][ T9653] should_fail_ex+0x39d/0x4d0 [ 420.009979][ T9653] _copy_from_user+0x2f/0xe0 [ 420.014622][ T9653] bpf_test_init+0xde/0x140 [ 420.019190][ T9653] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 420.024632][ T9653] ? dev_put+0x80/0x80 [ 420.028773][ T9653] ? dev_put+0x80/0x80 [ 420.032896][ T9653] bpf_prog_test_run+0x321/0x390 [ 420.037890][ T9653] __sys_bpf+0x49d/0x890 [ 420.042190][ T9653] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.047647][ T9653] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.048725][ T9654] netlink: 'syz.1.1001': attribute type 8 has an invalid length. [ 420.053849][ T9653] __x64_sys_bpf+0x7c/0x90 [ 420.066060][ T9653] do_syscall_64+0x55/0xa0 [ 420.070530][ T9653] ? clear_bhb_loop+0x40/0x90 [ 420.075256][ T9653] ? clear_bhb_loop+0x40/0x90 [ 420.079982][ T9653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.085922][ T9653] RIP: 0033:0x7f80b759aeb9 [ 420.090483][ T9653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.110141][ T9653] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.114740][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1001'. [ 420.118593][ T9653] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 420.118611][ T9653] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 420.118624][ T9653] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.118636][ T9653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.118648][ T9653] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 420.167709][ T9653] [ 422.563813][ T9690] netlink: 'syz.2.1010': attribute type 2 has an invalid length. [ 422.574634][ T9690] netlink: 'syz.2.1010': attribute type 8 has an invalid length. [ 422.594597][ T9690] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1010'. [ 424.077449][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'. [ 429.002336][ T9738] netlink: 'syz.1.1026': attribute type 2 has an invalid length. [ 429.018971][ T9738] netlink: 'syz.1.1026': attribute type 8 has an invalid length. [ 429.049691][ T9738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1026'. [ 429.086923][ T9749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1028'. [ 429.256140][ T9754] netlink: 'syz.2.1030': attribute type 10 has an invalid length. [ 429.300721][ T9754] FAULT_INJECTION: forcing a failure. [ 429.300721][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 429.334461][ T9754] CPU: 0 PID: 9754 Comm: syz.2.1030 Not tainted syzkaller #0 [ 429.341938][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.352055][ T9754] Call Trace: [ 429.355403][ T9754] [ 429.358385][ T9754] dump_stack_lvl+0x18c/0x250 [ 429.363148][ T9754] ? show_regs_print_info+0x20/0x20 [ 429.368418][ T9754] ? load_image+0x400/0x400 [ 429.373002][ T9754] ? __might_sleep+0xe0/0xe0 [ 429.377660][ T9754] ? __lock_acquire+0x7d40/0x7d40 [ 429.382762][ T9754] should_fail_ex+0x39d/0x4d0 [ 429.387517][ T9754] should_failslab+0x9/0x20 [ 429.392086][ T9754] slab_pre_alloc_hook+0x59/0x310 [ 429.397171][ T9754] ? __lock_acquire+0x7d40/0x7d40 [ 429.402268][ T9754] ? __netdev_adjacent_dev_insert+0x15c/0x8d0 [ 429.408396][ T9754] __kmem_cache_alloc_node+0x53/0x250 [ 429.413842][ T9754] ? __netdev_adjacent_dev_insert+0x15c/0x8d0 [ 429.419975][ T9754] kmalloc_trace+0x2a/0xe0 [ 429.424457][ T9754] __netdev_adjacent_dev_insert+0x15c/0x8d0 [ 429.430413][ T9754] ? vxlan_netdevice_event+0x2aa/0x320 [ 429.435955][ T9754] ? __netdev_adjacent_dev_unlink_neighbour+0x40/0x40 [ 429.442766][ T9754] ? udp_tunnel_nic_netdevice_event+0x1a5/0x12a0 [ 429.449164][ T9754] ? ip6_route_dev_notify+0x9a/0x5b0 [ 429.454523][ T9754] ? notifier_call_chain+0x36b/0x380 [ 429.459888][ T9754] __netdev_upper_dev_link+0x3a0/0x5a0 [ 429.465432][ T9754] ? netdev_upper_dev_link+0x100/0x100 [ 429.470941][ T9754] ? ref_tracker_alloc+0x362/0x4c0 [ 429.476091][ T9754] ? netdev_master_upper_dev_link+0x9c/0x100 [ 429.482108][ T9754] netdev_master_upper_dev_link+0xbd/0x100 [ 429.487965][ T9754] ? __netdev_upper_dev_link+0x5a0/0x5a0 [ 429.493647][ T9754] ? batadv_hardif_get_by_netdev+0x392/0x3d0 [ 429.499685][ T9754] batadv_hardif_enable_interface+0x24e/0x9b0 [ 429.505813][ T9754] batadv_softif_slave_add+0x76/0xf0 [ 429.511136][ T9754] do_setlink+0xdfe/0x4130 [ 429.515582][ T9754] ? arch_stack_walk+0x160/0x190 [ 429.520596][ T9754] ? load_image+0x400/0x400 [ 429.525145][ T9754] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 429.531339][ T9754] ? stack_trace_save+0xaa/0x100 [ 429.536327][ T9754] ? __nla_validate_parse+0x2522/0x2ea0 [ 429.541909][ T9754] ? ___slab_alloc+0x10d9/0x12f0 [ 429.546921][ T9754] ? __nla_validate+0x50/0x50 [ 429.551689][ T9754] ? validate_linkmsg+0x719/0x910 [ 429.556764][ T9754] rtnl_newlink+0x17da/0x20a0 [ 429.561516][ T9754] ? rtnl_newlink+0x431/0x20a0 [ 429.566338][ T9754] ? rtnl_setlink+0x4e0/0x4e0 [ 429.571074][ T9754] ? trace_raw_output_contention_end+0xd0/0xd0 [ 429.577275][ T9754] ? rcu_is_watching+0x15/0xb0 [ 429.582078][ T9754] ? trace_contention_end+0x39/0xe0 [ 429.587308][ T9754] ? __mutex_lock+0x315/0xcc0 [ 429.592073][ T9754] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 429.597231][ T9754] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 429.602375][ T9754] ? rtnl_setlink+0x4e0/0x4e0 [ 429.607099][ T9754] rtnetlink_rcv_msg+0x869/0xfa0 [ 429.612094][ T9754] ? rtnetlink_bind+0x80/0x80 [ 429.616811][ T9754] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 429.622656][ T9754] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 429.628714][ T9754] ? __dev_queue_xmit+0x26b/0x36b0 [ 429.633907][ T9754] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 429.639672][ T9754] ? perf_trace_lock+0x304/0x3b0 [ 429.644667][ T9754] netlink_rcv_skb+0x241/0x4d0 [ 429.649475][ T9754] ? rtnetlink_bind+0x80/0x80 [ 429.654190][ T9754] ? netlink_ack+0x1180/0x1180 [ 429.659045][ T9754] ? __lock_acquire+0x7d40/0x7d40 [ 429.664128][ T9754] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.669387][ T9754] netlink_unicast+0x751/0x8d0 [ 429.674239][ T9754] netlink_sendmsg+0x8d0/0xbf0 [ 429.679042][ T9754] ? perf_trace_lock+0x304/0x3b0 [ 429.684024][ T9754] ? netlink_getsockopt+0x590/0x590 [ 429.689259][ T9754] ? aa_sock_msg_perm+0x94/0x150 [ 429.694250][ T9754] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 429.699570][ T9754] ? security_socket_sendmsg+0x80/0xa0 [ 429.705060][ T9754] ? netlink_getsockopt+0x590/0x590 [ 429.710296][ T9754] ____sys_sendmsg+0x5ba/0x960 [ 429.715111][ T9754] ? __asan_memset+0x22/0x40 [ 429.719748][ T9754] ? __sys_sendmsg_sock+0x30/0x30 [ 429.724816][ T9754] ? __import_iovec+0x5f2/0x850 [ 429.729742][ T9754] ? import_iovec+0x73/0xa0 [ 429.734286][ T9754] ___sys_sendmsg+0x2a6/0x360 [ 429.739018][ T9754] ? __sys_sendmsg+0x2a0/0x2a0 [ 429.743854][ T9754] ? __lock_acquire+0x7d40/0x7d40 [ 429.748957][ T9754] __se_sys_sendmsg+0x1c2/0x2b0 [ 429.753902][ T9754] ? __x64_sys_sendmsg+0x80/0x80 [ 429.758901][ T9754] ? lockdep_hardirqs_on+0x98/0x150 [ 429.764138][ T9754] do_syscall_64+0x55/0xa0 [ 429.768627][ T9754] ? clear_bhb_loop+0x40/0x90 [ 429.773342][ T9754] ? clear_bhb_loop+0x40/0x90 [ 429.778075][ T9754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.784015][ T9754] RIP: 0033:0x7f7751f9aeb9 [ 429.788490][ T9754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.808143][ T9754] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.816690][ T9754] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 429.824705][ T9754] RDX: 0000000000008080 RSI: 0000200000000280 RDI: 0000000000000005 [ 429.832721][ T9754] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 429.840749][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.848756][ T9754] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 429.856813][ T9754] [ 429.923124][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1032'. [ 429.932540][ T9758] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1032'. [ 430.101104][ T9763] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1033'. [ 431.127335][ T9785] netlink: 'syz.4.1039': attribute type 2 has an invalid length. [ 431.154599][ T9785] netlink: 'syz.4.1039': attribute type 8 has an invalid length. [ 431.184632][ T9785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1039'. [ 431.200921][ T9785] Ÿë: port 1(syz_tun) entered blocking state [ 431.207843][ T9785] Ÿë: port 1(syz_tun) entered disabled state [ 431.215317][ T9785] syz_tun: entered allmulticast mode [ 431.222175][ T9785] syz_tun: entered promiscuous mode [ 431.251755][ T9790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1040'. [ 431.588103][ T9801] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1044'. [ 432.118804][ T9819] netlink: 'syz.2.1049': attribute type 33 has an invalid length. [ 432.157953][ T9819] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1049'. [ 432.994948][ T9831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1054'. [ 434.186436][ T9848] FAULT_INJECTION: forcing a failure. [ 434.186436][ T9848] name failslab, interval 1, probability 0, space 0, times 0 [ 434.275464][ T9848] CPU: 0 PID: 9848 Comm: syz.4.1058 Not tainted syzkaller #0 [ 434.282924][ T9848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.293024][ T9848] Call Trace: [ 434.296357][ T9848] [ 434.299324][ T9848] dump_stack_lvl+0x18c/0x250 [ 434.304075][ T9848] ? show_regs_print_info+0x20/0x20 [ 434.309332][ T9848] ? load_image+0x400/0x400 [ 434.313907][ T9848] ? verify_lock_unused+0x140/0x140 [ 434.319190][ T9848] should_fail_ex+0x39d/0x4d0 [ 434.324024][ T9848] should_failslab+0x9/0x20 [ 434.328596][ T9848] slab_pre_alloc_hook+0x59/0x310 [ 434.333689][ T9848] kmem_cache_alloc+0x5a/0x2d0 [ 434.338518][ T9848] ? skb_clone+0x1eb/0x370 [ 434.342981][ T9848] skb_clone+0x1eb/0x370 [ 434.347277][ T9848] __netlink_deliver_tap+0x41c/0x830 [ 434.352636][ T9848] ? netlink_deliver_tap+0x2e/0x1b0 [ 434.357893][ T9848] netlink_deliver_tap+0x19c/0x1b0 [ 434.363075][ T9848] netlink_unicast+0x72c/0x8d0 [ 434.367906][ T9848] netlink_sendmsg+0x8d0/0xbf0 [ 434.372822][ T9848] ? netlink_getsockopt+0x590/0x590 [ 434.378093][ T9848] ? aa_sock_msg_perm+0x94/0x150 [ 434.383085][ T9848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 434.388420][ T9848] ? security_socket_sendmsg+0x80/0xa0 [ 434.393919][ T9848] ? netlink_getsockopt+0x590/0x590 [ 434.399175][ T9848] ____sys_sendmsg+0x5ba/0x960 [ 434.404015][ T9848] ? __asan_memset+0x22/0x40 [ 434.408652][ T9848] ? __sys_sendmsg_sock+0x30/0x30 [ 434.413728][ T9848] ? __import_iovec+0x5f2/0x850 [ 434.418647][ T9848] ? import_iovec+0x73/0xa0 [ 434.423200][ T9848] ___sys_sendmsg+0x2a6/0x360 [ 434.427921][ T9848] ? get_pid_task+0x20/0x1e0 [ 434.432552][ T9848] ? __sys_sendmsg+0x2a0/0x2a0 [ 434.437376][ T9848] ? __lock_acquire+0x7d40/0x7d40 [ 434.442466][ T9848] __se_sys_sendmsg+0x1c2/0x2b0 [ 434.447369][ T9848] ? __x64_sys_sendmsg+0x80/0x80 [ 434.452360][ T9848] ? lockdep_hardirqs_on+0x98/0x150 [ 434.457600][ T9848] do_syscall_64+0x55/0xa0 [ 434.462063][ T9848] ? clear_bhb_loop+0x40/0x90 [ 434.466775][ T9848] ? clear_bhb_loop+0x40/0x90 [ 434.471492][ T9848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.477426][ T9848] RIP: 0033:0x7f5bcb59aeb9 [ 434.481874][ T9848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.501520][ T9848] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.509974][ T9848] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 434.517981][ T9848] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 434.525986][ T9848] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 434.533988][ T9848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.542036][ T9848] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 434.550082][ T9848] [ 434.871310][ T9860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1065'. [ 436.680140][ T9887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1072'. [ 437.155994][ T9893] FAULT_INJECTION: forcing a failure. [ 437.155994][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 437.170692][ T9893] CPU: 0 PID: 9893 Comm: syz.4.1075 Not tainted syzkaller #0 [ 437.178129][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.188242][ T9893] Call Trace: [ 437.191576][ T9893] [ 437.194558][ T9893] dump_stack_lvl+0x18c/0x250 [ 437.199296][ T9893] ? show_regs_print_info+0x20/0x20 [ 437.204552][ T9893] ? load_image+0x400/0x400 [ 437.209114][ T9893] ? verify_lock_unused+0x140/0x140 [ 437.214371][ T9893] should_fail_ex+0x39d/0x4d0 [ 437.219119][ T9893] should_failslab+0x9/0x20 [ 437.223677][ T9893] slab_pre_alloc_hook+0x59/0x310 [ 437.228773][ T9893] kmem_cache_alloc+0x5a/0x2d0 [ 437.233651][ T9893] ? skb_clone+0x1eb/0x370 [ 437.238164][ T9893] skb_clone+0x1eb/0x370 [ 437.242455][ T9893] __netlink_deliver_tap+0x41c/0x830 [ 437.247809][ T9893] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.253065][ T9893] netlink_deliver_tap+0x19c/0x1b0 [ 437.258245][ T9893] netlink_unicast+0x72c/0x8d0 [ 437.263106][ T9893] netlink_sendmsg+0x8d0/0xbf0 [ 437.267937][ T9893] ? netlink_getsockopt+0x590/0x590 [ 437.273191][ T9893] ? aa_sock_msg_perm+0x94/0x150 [ 437.278187][ T9893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.283533][ T9893] ? security_socket_sendmsg+0x80/0xa0 [ 437.289040][ T9893] ? netlink_getsockopt+0x590/0x590 [ 437.294299][ T9893] ____sys_sendmsg+0x5ba/0x960 [ 437.299125][ T9893] ? __asan_memset+0x22/0x40 [ 437.303764][ T9893] ? __sys_sendmsg_sock+0x30/0x30 [ 437.308836][ T9893] ? __import_iovec+0x5f2/0x850 [ 437.313752][ T9893] ? import_iovec+0x73/0xa0 [ 437.318319][ T9893] ___sys_sendmsg+0x2a6/0x360 [ 437.323065][ T9893] ? get_pid_task+0x20/0x1e0 [ 437.327737][ T9893] ? __sys_sendmsg+0x2a0/0x2a0 [ 437.332590][ T9893] ? __lock_acquire+0x7d40/0x7d40 [ 437.337695][ T9893] __se_sys_sendmsg+0x1c2/0x2b0 [ 437.342611][ T9893] ? __x64_sys_sendmsg+0x80/0x80 [ 437.347638][ T9893] ? lockdep_hardirqs_on+0x98/0x150 [ 437.352895][ T9893] do_syscall_64+0x55/0xa0 [ 437.357367][ T9893] ? clear_bhb_loop+0x40/0x90 [ 437.362085][ T9893] ? clear_bhb_loop+0x40/0x90 [ 437.366816][ T9893] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.372762][ T9893] RIP: 0033:0x7f5bcb59aeb9 [ 437.377225][ T9893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.396971][ T9893] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.405448][ T9893] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 437.413486][ T9893] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 437.421535][ T9893] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.429553][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.437571][ T9893] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 437.445608][ T9893] [ 437.550790][ T9893] netlink: 'syz.4.1075': attribute type 39 has an invalid length. [ 437.646207][ T9897] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1076'. [ 438.625795][ T9908] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1080'. [ 438.807434][ T9918] netlink: 'syz.4.1083': attribute type 10 has an invalid length. [ 438.864532][ T9918] batman_adv: batadv0: Removing interface: team0 [ 439.077802][ T9918] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.101905][ T9918] bond0: (slave team0): Enslaving as an active interface with an up link [ 439.118704][ T9923] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1085'. [ 439.229337][ T9918] syz.4.1083 (9918) used greatest stack depth: 19144 bytes left [ 440.381656][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.634895][ T9957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1095'. [ 441.114972][ T9964] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 441.136978][ T9964] netlink: 'syz.2.1104': attribute type 8 has an invalid length. [ 441.161589][ T9964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1104'. [ 441.218249][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1096'. [ 441.792420][ T9984] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1101'. [ 442.597869][ T9992] netlink: 'syz.2.1103': attribute type 10 has an invalid length. [ 442.838830][ T9992] team0: Port device hsr0 added [ 442.859617][ T9997] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1103'. [ 443.163988][T10001] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1106'. [ 443.472227][T10007] netlink: 'syz.4.1108': attribute type 2 has an invalid length. [ 443.487549][T10007] netlink: 'syz.4.1108': attribute type 8 has an invalid length. [ 443.500705][T10007] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1108'. [ 443.666772][T10013] netlink: 'syz.4.1109': attribute type 2 has an invalid length. [ 443.685480][T10013] netlink: 'syz.4.1109': attribute type 8 has an invalid length. [ 443.699355][T10013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1109'. [ 444.244244][T10026] FAULT_INJECTION: forcing a failure. [ 444.244244][T10026] name failslab, interval 1, probability 0, space 0, times 0 [ 444.257290][T10026] CPU: 0 PID: 10026 Comm: syz.2.1113 Not tainted syzkaller #0 [ 444.264812][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.274951][T10026] Call Trace: [ 444.278284][T10026] [ 444.281257][T10026] dump_stack_lvl+0x18c/0x250 [ 444.286004][T10026] ? show_regs_print_info+0x20/0x20 [ 444.291270][T10026] ? load_image+0x400/0x400 [ 444.295936][T10026] should_fail_ex+0x39d/0x4d0 [ 444.300682][T10026] should_failslab+0x9/0x20 [ 444.305248][T10026] slab_pre_alloc_hook+0x59/0x310 [ 444.310354][T10026] kmem_cache_alloc+0x5a/0x2d0 [ 444.315169][T10026] ? __nf_conntrack_alloc+0x99/0x380 [ 444.320526][T10026] __nf_conntrack_alloc+0x99/0x380 [ 444.325705][T10026] init_conntrack+0x177/0xf10 [ 444.330556][T10026] ? early_drop+0x7f0/0x7f0 [ 444.335112][T10026] ? nf_conntrack_find_get+0x650/0x650 [ 444.340672][T10026] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.346115][T10026] ? __siphash_unaligned+0x22e/0x3a0 [ 444.351460][T10026] nf_conntrack_in+0xc06/0x15c0 [ 444.356394][T10026] ? nf_ct_pernet+0x270/0x270 [ 444.361143][T10026] ? ipt_do_table+0x2c1/0x15e0 [ 444.365979][T10026] ? __local_bh_enable_ip+0x13a/0x1c0 [ 444.371402][T10026] ? read_lock_is_recursive+0x20/0x20 [ 444.376836][T10026] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 444.382354][T10026] ? ipv4_conntrack_local+0x123/0x200 [ 444.387782][T10026] ? ipv4_conntrack_in+0x20/0x20 [ 444.392781][T10026] nf_hook_slow+0xbd/0x200 [ 444.397293][T10026] ? nf_hook+0x390/0x390 [ 444.401604][T10026] nf_hook+0x228/0x390 [ 444.405741][T10026] ? nf_hook+0xa2/0x390 [ 444.409947][T10026] ? __ip_local_out+0x5f0/0x5f0 [ 444.414893][T10026] ? nf_hook+0x390/0x390 [ 444.419244][T10026] ? __asan_memset+0x22/0x40 [ 444.423905][T10026] ? ip_fast_csum+0x1ee/0x2b0 [ 444.428636][T10026] __ip_local_out+0x4db/0x5f0 [ 444.433384][T10026] ? nf_hook+0x390/0x390 [ 444.437703][T10026] ip_local_out+0x2a/0x130 [ 444.442181][T10026] iptunnel_xmit+0x4f0/0x920 [ 444.446840][T10026] ip_tunnel_xmit+0x1cbc/0x2410 [ 444.451784][T10026] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 444.456881][T10026] ? validate_xmit_xfrm+0xbc/0x12c0 [ 444.462184][T10026] ? gre_build_header+0x25b/0x990 [ 444.467279][T10026] ipgre_xmit+0x7a6/0xb20 [ 444.471860][T10026] dev_hard_start_xmit+0x246/0x740 [ 444.477046][T10026] __dev_queue_xmit+0x1ac2/0x36b0 [ 444.482149][T10026] ? __dev_queue_xmit+0x26b/0x36b0 [ 444.487356][T10026] ? __kmem_cache_alloc_node+0x13a/0x250 [ 444.493059][T10026] ? netdev_core_pick_tx+0x340/0x340 [ 444.498392][T10026] ? skb_release_data+0x1cf/0x800 [ 444.503482][T10026] ? pskb_expand_head+0xbfe/0x1230 [ 444.508652][T10026] ? __bpf_redirect+0x534/0xe60 [ 444.513569][T10026] __bpf_tx_skb+0x189/0x250 [ 444.518135][T10026] bpf_clone_redirect+0x270/0x3d0 [ 444.523252][T10026] bpf_prog_169a6ad24ef2d602+0x5e/0x63 [ 444.528764][T10026] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 444.534805][T10026] ? lock_chain_count+0x20/0x20 [ 444.539737][T10026] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 444.546124][T10026] ? lockdep_softirqs_on+0x580/0x580 [ 444.551463][T10026] ? ktime_get+0x7f/0x280 [ 444.555854][T10026] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 444.562230][T10026] ? ktime_get_real_ts64+0x440/0x440 [ 444.567562][T10026] ? __x64_sys_bpf+0x7c/0x90 [ 444.572214][T10026] ? __local_bh_disable_ip+0x108/0x1a0 [ 444.577735][T10026] ? __cant_sleep+0x220/0x220 [ 444.582464][T10026] ? read_tsc+0x9/0x20 [ 444.586593][T10026] ? ktime_get+0x24b/0x280 [ 444.591074][T10026] ? bpf_test_run+0x174/0x870 [ 444.595820][T10026] bpf_test_run+0x2df/0x870 [ 444.600406][T10026] ? bpf_test_run+0x174/0x870 [ 444.605141][T10026] ? convert___skb_to_skb+0x590/0x590 [ 444.610568][T10026] ? eth_get_headlen+0x210/0x210 [ 444.615565][T10026] ? slab_build_skb+0x25f/0x3f0 [ 444.620479][T10026] ? convert___skb_to_skb+0x3d/0x590 [ 444.625820][T10026] bpf_prog_test_run_skb+0xad2/0x12b0 [ 444.631276][T10026] ? cpu_online+0x60/0x60 [ 444.635652][T10026] bpf_prog_test_run+0x321/0x390 [ 444.640664][T10026] __sys_bpf+0x49d/0x890 [ 444.644967][T10026] ? bpf_link_show_fdinfo+0x390/0x390 [ 444.650425][T10026] ? lock_chain_count+0x20/0x20 [ 444.655365][T10026] __x64_sys_bpf+0x7c/0x90 [ 444.659828][T10026] do_syscall_64+0x55/0xa0 [ 444.664304][T10026] ? clear_bhb_loop+0x40/0x90 [ 444.669053][T10026] ? clear_bhb_loop+0x40/0x90 [ 444.673791][T10026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.679741][T10026] RIP: 0033:0x7f7751f9aeb9 [ 444.684292][T10026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.703950][T10026] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.712422][T10026] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 444.720438][T10026] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 444.728459][T10026] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 444.736478][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.744487][T10026] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 444.752532][T10026] [ 445.485414][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1116'. [ 445.664792][T10040] netlink: 'syz.3.1119': attribute type 2 has an invalid length. [ 445.686358][T10040] netlink: 'syz.3.1119': attribute type 8 has an invalid length. [ 445.694264][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1119'. [ 445.727273][T10040] Ÿë: port 1(syz_tun) entered blocking state [ 445.733650][T10040] Ÿë: port 1(syz_tun) entered disabled state [ 445.747897][T10040] syz_tun: entered allmulticast mode [ 445.763635][T10040] syz_tun: entered promiscuous mode [ 445.838739][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1128'. [ 445.880040][T10044] netlink: 'syz.1.1120': attribute type 2 has an invalid length. [ 445.918264][T10044] netlink: 'syz.1.1120': attribute type 8 has an invalid length. [ 445.966271][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1120'. [ 446.160956][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1121'. [ 446.554737][T10062] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1124'. [ 447.678358][T10075] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 447.769902][T10075] team0: Port device dummy0 added [ 447.783394][T10079] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 447.839783][T10079] team0: Port device dummy0 removed [ 447.873601][T10081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1131'. [ 448.007717][T10085] netlink: 'syz.1.1132': attribute type 2 has an invalid length. [ 448.026794][T10085] netlink: 'syz.1.1132': attribute type 8 has an invalid length. [ 448.045357][T10085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1132'. [ 448.090083][T10089] netlink: 'syz.2.1134': attribute type 2 has an invalid length. [ 448.122554][T10089] netlink: 'syz.2.1134': attribute type 8 has an invalid length. [ 448.141480][T10089] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'. [ 448.409296][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1135'. [ 448.648648][T10097] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1136'. [ 449.670902][T10119] netlink: 'syz.3.1143': attribute type 2 has an invalid length. [ 449.679120][T10119] netlink: 'syz.3.1143': attribute type 8 has an invalid length. [ 450.149914][T10125] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 450.426759][T10131] netlink: 'syz.4.1152': attribute type 10 has an invalid length. [ 450.485584][T10131] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 450.917272][T10141] sit0: entered promiscuous mode [ 451.063571][T10146] __nla_validate_parse: 4 callbacks suppressed [ 451.063733][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1150'. [ 451.276203][T10148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1151'. [ 451.742880][T10166] netlink: 'syz.3.1154': attribute type 2 has an invalid length. [ 451.785599][T10166] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1154'. [ 452.670903][T10179] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 453.661092][T10185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1161'. [ 453.677706][T10186] validate_nla: 1 callbacks suppressed [ 453.677742][T10186] netlink: 'syz.2.1160': attribute type 33 has an invalid length. [ 453.706362][T10186] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1160'. [ 453.968969][T10195] sit0: entered promiscuous mode [ 454.020583][T10200] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1164'. [ 454.908642][T10208] netlink: 'syz.2.1167': attribute type 2 has an invalid length. [ 454.932988][T10208] netlink: 'syz.2.1167': attribute type 8 has an invalid length. [ 454.947031][T10208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1167'. [ 455.539364][T10216] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1169'. [ 455.875315][T10224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1172'. [ 456.019791][T10227] netlink: 'syz.1.1173': attribute type 33 has an invalid length. [ 456.064516][T10227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1173'. [ 456.273605][T10230] FAULT_INJECTION: forcing a failure. [ 456.273605][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 456.353567][T10230] CPU: 0 PID: 10230 Comm: syz.2.1174 Not tainted syzkaller #0 [ 456.361120][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.371223][T10230] Call Trace: [ 456.374543][T10230] [ 456.377537][T10230] dump_stack_lvl+0x18c/0x250 [ 456.382262][T10230] ? show_regs_print_info+0x20/0x20 [ 456.387516][T10230] ? load_image+0x400/0x400 [ 456.392068][T10230] ? __might_sleep+0xe0/0xe0 [ 456.396727][T10230] ? __lock_acquire+0x7d40/0x7d40 [ 456.401802][T10230] should_fail_ex+0x39d/0x4d0 [ 456.406534][T10230] should_failslab+0x9/0x20 [ 456.411081][T10230] slab_pre_alloc_hook+0x59/0x310 [ 456.416154][T10230] ? __lock_acquire+0x7d40/0x7d40 [ 456.421231][T10230] kmem_cache_alloc_node+0x60/0x320 [ 456.426475][T10230] ? __alloc_skb+0x103/0x2c0 [ 456.431112][T10230] __alloc_skb+0x103/0x2c0 [ 456.435565][T10230] netlink_sendmsg+0x66a/0xbf0 [ 456.440360][T10230] ? netlink_getsockopt+0x590/0x590 [ 456.445584][T10230] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.451763][T10230] ? aa_sock_msg_perm+0x94/0x150 [ 456.456749][T10230] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 456.462061][T10230] ? security_socket_sendmsg+0x80/0xa0 [ 456.467550][T10230] ? netlink_getsockopt+0x590/0x590 [ 456.472791][T10230] ____sys_sendmsg+0x5ba/0x960 [ 456.477623][T10230] ? __asan_memset+0x22/0x40 [ 456.482238][T10230] ? __sys_sendmsg_sock+0x30/0x30 [ 456.487289][T10230] ? __import_iovec+0x5f2/0x850 [ 456.492183][T10230] ? import_iovec+0x73/0xa0 [ 456.496729][T10230] ___sys_sendmsg+0x2a6/0x360 [ 456.501439][T10230] ? __sys_sendmsg+0x2a0/0x2a0 [ 456.506279][T10230] __se_sys_sendmsg+0x1c2/0x2b0 [ 456.511166][T10230] ? __x64_sys_sendmsg+0x80/0x80 [ 456.516160][T10230] ? syscall_enter_from_user_mode+0x2e/0x80 [ 456.522079][T10230] do_syscall_64+0x55/0xa0 [ 456.526652][T10230] ? clear_bhb_loop+0x40/0x90 [ 456.531360][T10230] ? clear_bhb_loop+0x40/0x90 [ 456.536065][T10230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.542001][T10230] RIP: 0033:0x7f7751f9aeb9 [ 456.546436][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.566060][T10230] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.574503][T10230] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 456.582502][T10230] RDX: 00000000000408e0 RSI: 0000200000000000 RDI: 000000000000000a [ 456.590493][T10230] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 456.598500][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.606506][T10230] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 456.614555][T10230] [ 456.724484][T10235] IPv6: NLM_F_CREATE should be specified when creating new route [ 457.038620][T10238] netlink: 'syz.2.1177': attribute type 2 has an invalid length. [ 457.070333][T10238] netlink: 'syz.2.1177': attribute type 8 has an invalid length. [ 457.099155][T10238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1177'. [ 458.194753][T10255] netlink: 'syz.2.1190': attribute type 2 has an invalid length. [ 458.217461][T10255] netlink: 'syz.2.1190': attribute type 8 has an invalid length. [ 458.235175][T10255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1190'. [ 458.341847][T10259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1182'. [ 458.399110][T10262] netlink: 'syz.3.1184': attribute type 33 has an invalid length. [ 458.417325][T10262] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1184'. [ 458.605494][T10272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1196'. [ 458.816410][T10277] sit0: entered promiscuous mode [ 459.399963][T10287] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 459.506352][T10287] netlink: 'syz.1.1200': attribute type 10 has an invalid length. [ 459.793815][T10300] FAULT_INJECTION: forcing a failure. [ 459.793815][T10300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.831640][T10300] CPU: 0 PID: 10300 Comm: syz.2.1194 Not tainted syzkaller #0 [ 459.839203][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.849324][T10300] Call Trace: [ 459.852650][T10300] [ 459.855619][T10300] dump_stack_lvl+0x18c/0x250 [ 459.860349][T10300] ? show_regs_print_info+0x20/0x20 [ 459.865599][T10300] ? load_image+0x400/0x400 [ 459.870154][T10300] ? __lock_acquire+0x7d40/0x7d40 [ 459.875227][T10300] should_fail_ex+0x39d/0x4d0 [ 459.879975][T10300] _copy_from_user+0x2f/0xe0 [ 459.884630][T10300] __copy_msghdr+0x3bb/0x580 [ 459.889282][T10300] ___sys_sendmsg+0x214/0x360 [ 459.894014][T10300] ? __sys_sendmsg+0x2a0/0x2a0 [ 459.898856][T10300] ? __lock_acquire+0x7d40/0x7d40 [ 459.903957][T10300] __se_sys_sendmsg+0x1c2/0x2b0 [ 459.908853][T10300] ? __x64_sys_sendmsg+0x80/0x80 [ 459.913859][T10300] ? lockdep_hardirqs_on+0x98/0x150 [ 459.919104][T10300] do_syscall_64+0x55/0xa0 [ 459.923561][T10300] ? clear_bhb_loop+0x40/0x90 [ 459.928268][T10300] ? clear_bhb_loop+0x40/0x90 [ 459.932984][T10300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.938914][T10300] RIP: 0033:0x7f7751f9aeb9 [ 459.943359][T10300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.962996][T10300] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.971462][T10300] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 459.979474][T10300] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 459.987493][T10300] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 459.995541][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.003558][T10300] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 460.011605][T10300] [ 460.315467][T10287] team0: Port device wlan1 removed [ 460.560915][T10287] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 460.619992][T10302] netlink: 'syz.4.1195': attribute type 2 has an invalid length. [ 460.636092][T10302] netlink: 'syz.4.1195': attribute type 8 has an invalid length. [ 460.649051][T10302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1195'. [ 460.703516][T10307] netlink: 'syz.2.1197': attribute type 33 has an invalid length. [ 460.711730][T10307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1197'. [ 461.043165][T10313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1199'. [ 461.836943][T10330] sit0: entered promiscuous mode [ 462.587754][T10343] netlink: 'syz.3.1208': attribute type 33 has an invalid length. [ 462.597191][T10343] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1208'. [ 462.750336][T10345] netlink: 'syz.3.1209': attribute type 2 has an invalid length. [ 462.762652][T10345] netlink: 'syz.3.1209': attribute type 8 has an invalid length. [ 462.793629][T10345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1209'. [ 462.940434][T10352] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1211'. [ 463.096070][T10358] netlink: 'syz.4.1221': attribute type 2 has an invalid length. [ 463.114786][T10358] netlink: 'syz.4.1221': attribute type 8 has an invalid length. [ 463.126623][T10358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1221'. [ 463.427502][T10369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1216'. [ 463.624786][T10371] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1217'. [ 466.210739][T10379] netlink: 'syz.1.1220': attribute type 33 has an invalid length. [ 466.223641][T10379] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1220'. [ 466.416081][T10383] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 466.428823][T10383] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 466.437499][T10384] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 466.575565][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1223'. [ 466.834148][T10394] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 466.843282][T10394] netlink: 'syz.3.1226': attribute type 8 has an invalid length. [ 466.851704][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1226'. [ 467.194567][T10402] sit0: left promiscuous mode [ 469.090310][T10412] netlink: 'syz.2.1230': attribute type 33 has an invalid length. [ 469.154594][T10412] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1230'. [ 469.770675][T10421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1233'. [ 469.919896][T10423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1234'. [ 470.022851][T10427] netlink: 'syz.2.1235': attribute type 2 has an invalid length. [ 470.039683][T10427] netlink: 'syz.2.1235': attribute type 8 has an invalid length. [ 470.049893][T10427] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 470.686389][T10432] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1237'. [ 470.913962][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1238'. [ 471.466716][T10449] netlink: 'syz.2.1244': attribute type 2 has an invalid length. [ 471.475319][T10449] netlink: 'syz.2.1244': attribute type 8 has an invalid length. [ 471.484046][T10449] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1244'. [ 471.596077][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1243'. [ 472.034716][T10464] sit0: left promiscuous mode [ 473.738191][T10480] syzkaller0: entered promiscuous mode [ 473.742616][T10477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1252'. [ 473.743944][T10480] syzkaller0: entered allmulticast mode [ 473.790121][T10481] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1251'. [ 475.848235][T10486] netlink: 'syz.3.1254': attribute type 2 has an invalid length. [ 475.856927][T10486] netlink: 'syz.3.1254': attribute type 8 has an invalid length. [ 475.865344][T10486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1254'. [ 476.026161][T10493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1256'. [ 476.173323][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1266'. [ 476.596931][T10506] sit0: left promiscuous mode [ 477.992592][T10518] sit0: left promiscuous mode [ 479.982615][T10530] netlink: 'syz.3.1265': attribute type 2 has an invalid length. [ 480.003329][T10530] netlink: 'syz.3.1265': attribute type 8 has an invalid length. [ 480.016917][T10530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1265'. [ 480.156742][T10535] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1268'. [ 480.509494][T10542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1272'. [ 480.663414][T10546] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1273'. [ 481.303851][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1283'. [ 481.345585][T10555] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 482.096949][T10568] netlink: 'syz.2.1288': attribute type 33 has an invalid length. [ 482.129056][T10568] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1288'. [ 482.541671][T10583] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1284'. [ 482.593344][T10581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1285'. [ 482.651548][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.715004][T10587] FAULT_INJECTION: forcing a failure. [ 482.715004][T10587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.739699][T10587] CPU: 0 PID: 10587 Comm: syz.3.1286 Not tainted syzkaller #0 [ 482.747262][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.757362][T10587] Call Trace: [ 482.760679][T10587] [ 482.763642][T10587] dump_stack_lvl+0x18c/0x250 [ 482.768382][T10587] ? show_regs_print_info+0x20/0x20 [ 482.773626][T10587] ? load_image+0x400/0x400 [ 482.778169][T10587] ? __might_fault+0xaa/0x120 [ 482.783042][T10587] ? __lock_acquire+0x7d40/0x7d40 [ 482.788134][T10587] should_fail_ex+0x39d/0x4d0 [ 482.792878][T10587] _copy_from_user+0x2f/0xe0 [ 482.797511][T10587] ____sys_sendmsg+0x2fd/0x960 [ 482.802329][T10587] ? __lock_acquire+0x7d40/0x7d40 [ 482.807399][T10587] ? __sys_sendmsg_sock+0x30/0x30 [ 482.812475][T10587] ? __import_iovec+0x3fa/0x850 [ 482.817397][T10587] ? import_iovec+0x73/0xa0 [ 482.821960][T10587] ___sys_sendmsg+0x2a6/0x360 [ 482.826687][T10587] ? get_pid_task+0x20/0x1e0 [ 482.831331][T10587] ? __sys_sendmsg+0x2a0/0x2a0 [ 482.836170][T10587] ? __lock_acquire+0x7d40/0x7d40 [ 482.841253][T10587] __se_sys_sendmsg+0x1c2/0x2b0 [ 482.846145][T10587] ? __x64_sys_sendmsg+0x80/0x80 [ 482.851126][T10587] ? lockdep_hardirqs_on+0x98/0x150 [ 482.856357][T10587] do_syscall_64+0x55/0xa0 [ 482.860831][T10587] ? clear_bhb_loop+0x40/0x90 [ 482.865539][T10587] ? clear_bhb_loop+0x40/0x90 [ 482.870243][T10587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.876164][T10587] RIP: 0033:0x7f80b759aeb9 [ 482.880615][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.900251][T10587] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.908703][T10587] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 482.916695][T10587] RDX: 0000000004004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 482.924688][T10587] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 482.932712][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.940710][T10587] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 482.948720][T10587] [ 483.002598][T10590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1289'. [ 483.830978][T10581] bridge_slave_0 (unregistering): left allmulticast mode [ 483.848566][T10581] bridge_slave_0 (unregistering): left promiscuous mode [ 483.857210][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.939536][T10593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1290'. [ 484.078298][T10599] netlink: 'syz.2.1292': attribute type 33 has an invalid length. [ 484.087902][T10599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1292'. [ 484.457087][T10609] net veth1_virt_wifi -1: renamed from virt_wifi0 [ 484.481516][T10609] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 484.494804][T10609] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1296'. [ 484.841577][T10616] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1298'. [ 485.652542][T10629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1303'. [ 486.184240][T10632] netlink: 'syz.1.1304': attribute type 33 has an invalid length. [ 486.449563][T10641] syzkaller0: entered promiscuous mode [ 486.463959][T10641] syzkaller0: entered allmulticast mode [ 486.504895][T10644] __nla_validate_parse: 1 callbacks suppressed [ 486.504925][T10644] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1307'. [ 487.672539][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1310'. [ 489.789689][T10671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1317'. [ 490.479712][T10679] netlink: 'syz.1.1318': attribute type 33 has an invalid length. [ 490.487764][T10679] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1318'. [ 490.690961][T10683] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 490.792424][T10686] FAULT_INJECTION: forcing a failure. [ 490.792424][T10686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.810721][T10686] CPU: 0 PID: 10686 Comm: syz.3.1321 Not tainted syzkaller #0 [ 490.818242][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.828350][T10686] Call Trace: [ 490.831671][T10686] [ 490.834644][T10686] dump_stack_lvl+0x18c/0x250 [ 490.839404][T10686] ? show_regs_print_info+0x20/0x20 [ 490.844653][T10686] ? load_image+0x400/0x400 [ 490.849236][T10686] ? __lock_acquire+0x7d40/0x7d40 [ 490.854329][T10686] should_fail_ex+0x39d/0x4d0 [ 490.859072][T10686] _copy_from_user+0x2f/0xe0 [ 490.863702][T10686] __copy_msghdr+0x3bb/0x580 [ 490.868348][T10686] ___sys_sendmsg+0x214/0x360 [ 490.873085][T10686] ? get_pid_task+0x20/0x1e0 [ 490.877753][T10686] ? __sys_sendmsg+0x2a0/0x2a0 [ 490.882582][T10686] ? __lock_acquire+0x7d40/0x7d40 [ 490.887689][T10686] __se_sys_sendmsg+0x1c2/0x2b0 [ 490.892603][T10686] ? __x64_sys_sendmsg+0x80/0x80 [ 490.897602][T10686] ? lockdep_hardirqs_on+0x98/0x150 [ 490.902847][T10686] do_syscall_64+0x55/0xa0 [ 490.907311][T10686] ? clear_bhb_loop+0x40/0x90 [ 490.912038][T10686] ? clear_bhb_loop+0x40/0x90 [ 490.916796][T10686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.922742][T10686] RIP: 0033:0x7f80b759aeb9 [ 490.927206][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.946859][T10686] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.955537][T10686] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 490.963560][T10686] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 490.971595][T10686] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.979627][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.987631][T10686] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 490.995661][T10686] [ 491.732582][T10690] netlink: 'syz.3.1323': attribute type 11 has an invalid length. [ 491.738208][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1322'. [ 491.755902][T10690] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 491.763704][T10690] netlink: 'syz.3.1323': attribute type 2 has an invalid length. [ 491.790814][T10690] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.1323'. [ 492.503138][T10696] sit0: entered promiscuous mode [ 493.016397][T10702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1327'. [ 493.066833][T10704] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1328'. [ 493.178369][T10707] FAULT_INJECTION: forcing a failure. [ 493.178369][T10707] name failslab, interval 1, probability 0, space 0, times 0 [ 493.191143][T10707] CPU: 0 PID: 10707 Comm: syz.3.1329 Not tainted syzkaller #0 [ 493.198653][T10707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 493.208765][T10707] Call Trace: [ 493.212080][T10707] [ 493.215048][T10707] dump_stack_lvl+0x18c/0x250 [ 493.219781][T10707] ? show_regs_print_info+0x20/0x20 [ 493.225033][T10707] ? load_image+0x400/0x400 [ 493.229592][T10707] ? skb_network_protocol+0x529/0x780 [ 493.235017][T10707] should_fail_ex+0x39d/0x4d0 [ 493.239763][T10707] should_failslab+0x9/0x20 [ 493.244312][T10707] slab_pre_alloc_hook+0x59/0x310 [ 493.249401][T10707] kmem_cache_alloc+0x5a/0x2d0 [ 493.254228][T10707] ? skb_clone+0x1eb/0x370 [ 493.258699][T10707] skb_clone+0x1eb/0x370 [ 493.262983][T10707] ? dev_queue_xmit_nit+0x212/0xbb0 [ 493.268249][T10707] dev_queue_xmit_nit+0x24d/0xbb0 [ 493.273348][T10707] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 493.278533][T10707] ? validate_xmit_skb+0x949/0xf60 [ 493.283752][T10707] dev_hard_start_xmit+0x148/0x740 [ 493.288935][T10707] __dev_queue_xmit+0x1ac2/0x36b0 [ 493.294022][T10707] ? __dev_queue_xmit+0x26b/0x36b0 [ 493.299207][T10707] ? netdev_core_pick_tx+0x340/0x340 [ 493.304550][T10707] ? __copy_skb_header+0xa3/0x4a0 [ 493.309628][T10707] ? __asan_memcpy+0x40/0x70 [ 493.314270][T10707] ? __skb_clone+0x63/0x790 [ 493.318822][T10707] ? __skb_clone+0x480/0x790 [ 493.323468][T10707] ? skb_clone+0x21f/0x370 [ 493.327934][T10707] __netlink_deliver_tap+0x5ab/0x830 [ 493.333302][T10707] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.338559][T10707] netlink_deliver_tap+0x19c/0x1b0 [ 493.343752][T10707] netlink_unicast+0x72c/0x8d0 [ 493.348600][T10707] netlink_sendmsg+0x8d0/0xbf0 [ 493.353431][T10707] ? netlink_getsockopt+0x590/0x590 [ 493.358699][T10707] ? aa_sock_msg_perm+0x94/0x150 [ 493.363699][T10707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.369038][T10707] ? security_socket_sendmsg+0x80/0xa0 [ 493.374547][T10707] ? netlink_getsockopt+0x590/0x590 [ 493.379806][T10707] ____sys_sendmsg+0x5ba/0x960 [ 493.384638][T10707] ? __asan_memset+0x22/0x40 [ 493.389289][T10707] ? __sys_sendmsg_sock+0x30/0x30 [ 493.394371][T10707] ? __import_iovec+0x5f2/0x850 [ 493.399311][T10707] ? import_iovec+0x73/0xa0 [ 493.403874][T10707] ___sys_sendmsg+0x2a6/0x360 [ 493.408601][T10707] ? get_pid_task+0x20/0x1e0 [ 493.413256][T10707] ? __sys_sendmsg+0x2a0/0x2a0 [ 493.418110][T10707] ? __lock_acquire+0x7d40/0x7d40 [ 493.423219][T10707] __se_sys_sendmsg+0x1c2/0x2b0 [ 493.428152][T10707] ? __x64_sys_sendmsg+0x80/0x80 [ 493.433191][T10707] ? lockdep_hardirqs_on+0x98/0x150 [ 493.438496][T10707] do_syscall_64+0x55/0xa0 [ 493.442966][T10707] ? clear_bhb_loop+0x40/0x90 [ 493.447698][T10707] ? clear_bhb_loop+0x40/0x90 [ 493.452452][T10707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.458408][T10707] RIP: 0033:0x7f80b759aeb9 [ 493.462861][T10707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.482523][T10707] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.491010][T10707] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 493.499038][T10707] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 493.507061][T10707] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 493.515079][T10707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.523098][T10707] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 493.531138][T10707] [ 495.060214][T10714] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 495.204714][T10716] delete_channel: no stack [ 495.277873][T10719] FAULT_INJECTION: forcing a failure. [ 495.277873][T10719] name failslab, interval 1, probability 0, space 0, times 0 [ 495.300918][T10719] CPU: 0 PID: 10719 Comm: syz.1.1333 Not tainted syzkaller #0 [ 495.308458][T10719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.318560][T10719] Call Trace: [ 495.321861][T10719] [ 495.324816][T10719] dump_stack_lvl+0x18c/0x250 [ 495.329554][T10719] ? show_regs_print_info+0x20/0x20 [ 495.334780][T10719] ? load_image+0x400/0x400 [ 495.339316][T10719] ? slab_post_alloc_hook+0x8a/0x4b0 [ 495.344645][T10719] should_fail_ex+0x39d/0x4d0 [ 495.349362][T10719] should_failslab+0x9/0x20 [ 495.353897][T10719] slab_pre_alloc_hook+0x59/0x310 [ 495.358969][T10719] ? __build_skb_around+0x255/0x3d0 [ 495.364198][T10719] kmem_cache_alloc+0x5a/0x2d0 [ 495.368994][T10719] ? _sctp_make_chunk+0x14e/0x420 [ 495.374056][T10719] _sctp_make_chunk+0x14e/0x420 [ 495.378943][T10719] sctp_make_init+0x5f3/0xfc0 [ 495.383656][T10719] ? sctp_addto_chunk+0x230/0x230 [ 495.388711][T10719] ? kernel_text_address+0xa0/0xd0 [ 495.393860][T10719] ? __kernel_text_address+0xd/0x30 [ 495.399090][T10719] ? stack_trace_save+0x100/0x100 [ 495.404166][T10719] ? arch_stack_walk+0x160/0x190 [ 495.409158][T10719] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 495.414292][T10719] sctp_do_sm+0x23a/0x5a60 [ 495.418747][T10719] ? sctp_cname+0x110/0x110 [ 495.423277][T10719] ? __stack_depot_save+0x1f/0x630 [ 495.428437][T10719] ? kasan_set_track+0x4e/0x70 [ 495.433223][T10719] ? __kasan_kmalloc+0x8f/0xa0 [ 495.438010][T10719] ? sctp_stream_init_ext+0x57/0x170 [ 495.443322][T10719] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 495.448933][T10719] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 495.454866][T10719] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 495.459929][T10719] ? do_syscall_64+0x55/0xa0 [ 495.464553][T10719] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.470680][T10719] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 495.476521][T10719] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 495.481942][T10719] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 495.487351][T10719] ? __asan_memcpy+0x40/0x70 [ 495.491981][T10719] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 495.497385][T10719] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 495.503215][T10719] ? __sctp_connect+0xd80/0xd80 [ 495.508083][T10719] ? __local_bh_enable_ip+0x13a/0x1c0 [ 495.513566][T10719] ? _local_bh_enable+0xa0/0xa0 [ 495.518462][T10719] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 495.524298][T10719] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 495.530134][T10719] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 495.535708][T10719] ? security_sctp_bind_connect+0x89/0xb0 [ 495.541456][T10719] sctp_sendmsg+0x1b83/0x28c0 [ 495.546169][T10719] ? sctp_getsockopt+0xb60/0xb60 [ 495.551135][T10719] ? aa_sk_perm+0x83c/0x970 [ 495.555677][T10719] ? aa_af_perm+0x330/0x330 [ 495.560206][T10719] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 495.566649][T10719] ? sock_rps_record_flow+0x19/0x3f0 [ 495.571959][T10719] ? inet_sendmsg+0x7c/0x2f0 [ 495.576575][T10719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 495.581887][T10719] ? security_socket_sendmsg+0x80/0xa0 [ 495.587411][T10719] ? inet_send_prepare+0x260/0x260 [ 495.592565][T10719] ____sys_sendmsg+0x5ba/0x960 [ 495.597362][T10719] ? __lock_acquire+0x7d40/0x7d40 [ 495.602426][T10719] ? __asan_memset+0x22/0x40 [ 495.607059][T10719] ? __sys_sendmsg_sock+0x30/0x30 [ 495.612122][T10719] ? __import_iovec+0x5f2/0x850 [ 495.617016][T10719] ? import_iovec+0x73/0xa0 [ 495.621565][T10719] ___sys_sendmsg+0x2a6/0x360 [ 495.626270][T10719] ? get_pid_task+0x20/0x1e0 [ 495.630905][T10719] ? __sys_sendmsg+0x2a0/0x2a0 [ 495.635718][T10719] ? __lock_acquire+0x7d40/0x7d40 [ 495.640787][T10719] __se_sys_sendmsg+0x1c2/0x2b0 [ 495.645672][T10719] ? __x64_sys_sendmsg+0x80/0x80 [ 495.650648][T10719] ? lockdep_hardirqs_on+0x98/0x150 [ 495.655886][T10719] do_syscall_64+0x55/0xa0 [ 495.660413][T10719] ? clear_bhb_loop+0x40/0x90 [ 495.665114][T10719] ? clear_bhb_loop+0x40/0x90 [ 495.669815][T10719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.675737][T10719] RIP: 0033:0x7f8508b9aeb9 [ 495.680195][T10719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.699821][T10719] RSP: 002b:00007f85099be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.708257][T10719] RAX: ffffffffffffffda RBX: 00007f8508e15fa0 RCX: 00007f8508b9aeb9 [ 495.716253][T10719] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 495.724244][T10719] RBP: 00007f85099be090 R08: 0000000000000000 R09: 0000000000000000 [ 495.732237][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.740230][T10719] R13: 00007f8508e16038 R14: 00007f8508e15fa0 R15: 00007fff9d2765b8 [ 495.748264][T10719] [ 495.936421][T10725] FAULT_INJECTION: forcing a failure. [ 495.936421][T10725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.951624][T10725] CPU: 0 PID: 10725 Comm: syz.3.1336 Not tainted syzkaller #0 [ 495.959153][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.969257][T10725] Call Trace: [ 495.972576][T10725] [ 495.975547][T10725] dump_stack_lvl+0x18c/0x250 [ 495.980297][T10725] ? show_regs_print_info+0x20/0x20 [ 495.985567][T10725] ? load_image+0x400/0x400 [ 495.990124][T10725] ? __lock_acquire+0x7d40/0x7d40 [ 495.995198][T10725] ? snprintf+0xe9/0x140 [ 495.999503][T10725] should_fail_ex+0x39d/0x4d0 [ 496.004249][T10725] _copy_to_user+0x2f/0xa0 [ 496.008722][T10725] simple_read_from_buffer+0xe7/0x150 [ 496.014221][T10725] proc_fail_nth_read+0x1e8/0x260 [ 496.019323][T10725] ? proc_fault_inject_write+0x360/0x360 [ 496.025034][T10725] ? fsnotify_perm+0x271/0x5e0 [ 496.029865][T10725] ? proc_fault_inject_write+0x360/0x360 [ 496.035545][T10725] vfs_read+0x28b/0x970 [ 496.039755][T10725] ? kernel_read+0x1e0/0x1e0 [ 496.044395][T10725] ? __fget_files+0x28/0x4b0 [ 496.049040][T10725] ? __fget_files+0x28/0x4b0 [ 496.053681][T10725] ? __fget_files+0x43d/0x4b0 [ 496.058413][T10725] ? __fdget_pos+0x2a3/0x330 [ 496.063047][T10725] ? ksys_read+0x75/0x260 [ 496.067435][T10725] ksys_read+0x150/0x260 [ 496.071736][T10725] ? vfs_write+0x990/0x990 [ 496.076228][T10725] ? lockdep_hardirqs_on+0x98/0x150 [ 496.081476][T10725] do_syscall_64+0x55/0xa0 [ 496.085943][T10725] ? clear_bhb_loop+0x40/0x90 [ 496.090675][T10725] ? clear_bhb_loop+0x40/0x90 [ 496.095407][T10725] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.101348][T10725] RIP: 0033:0x7f80b755b78e [ 496.105830][T10725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 496.125490][T10725] RSP: 002b:00007f80b83c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 496.133957][T10725] RAX: ffffffffffffffda RBX: 00007f80b83c66c0 RCX: 00007f80b755b78e [ 496.141988][T10725] RDX: 000000000000000f RSI: 00007f80b83c60a0 RDI: 0000000000000007 [ 496.150004][T10725] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 496.158031][T10725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.166066][T10725] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 496.174097][T10725] [ 496.310106][T10728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1337'. [ 496.858373][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 496.884433][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 496.919935][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 496.929840][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1340'. [ 500.039155][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'. [ 500.063527][T10751] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1342'. [ 500.276953][T10759] sit0: left promiscuous mode [ 501.185368][T10766] FAULT_INJECTION: forcing a failure. [ 501.185368][T10766] name failslab, interval 1, probability 0, space 0, times 0 [ 501.207381][T10766] CPU: 1 PID: 10766 Comm: syz.2.1348 Not tainted syzkaller #0 [ 501.214954][T10766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.225060][T10766] Call Trace: [ 501.228389][T10766] [ 501.231353][T10766] dump_stack_lvl+0x18c/0x250 [ 501.236105][T10766] ? sctp_sendmsg+0x1575/0x28c0 [ 501.240999][T10766] ? ___sys_sendmsg+0x2a6/0x360 [ 501.245905][T10766] ? show_regs_print_info+0x20/0x20 [ 501.251174][T10766] ? load_image+0x400/0x400 [ 501.255748][T10766] should_fail_ex+0x39d/0x4d0 [ 501.260486][T10766] should_failslab+0x9/0x20 [ 501.265046][T10766] slab_pre_alloc_hook+0x59/0x310 [ 501.270142][T10766] ? sctp_add_bind_addr+0x8c/0x360 [ 501.275311][T10766] __kmem_cache_alloc_node+0x53/0x250 [ 501.280748][T10766] ? sctp_add_bind_addr+0x8c/0x360 [ 501.285926][T10766] kmalloc_trace+0x2a/0xe0 [ 501.290405][T10766] sctp_add_bind_addr+0x8c/0x360 [ 501.295406][T10766] sctp_copy_local_addr_list+0x315/0x4f0 [ 501.301118][T10766] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 501.306889][T10766] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 501.313013][T10766] ? sctp_v6_is_any+0x64/0x70 [ 501.317741][T10766] ? sctp_copy_one_addr+0x8c/0x350 [ 501.322896][T10766] sctp_bind_addr_copy+0xb3/0x3c0 [ 501.327939][T10766] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 501.334294][T10766] sctp_connect_new_asoc+0x2f9/0x6a0 [ 501.339604][T10766] ? __sctp_connect+0xd80/0xd80 [ 501.344461][T10766] ? __local_bh_enable_ip+0x13a/0x1c0 [ 501.349849][T10766] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 501.355424][T10766] ? security_sctp_bind_connect+0x89/0xb0 [ 501.361158][T10766] sctp_sendmsg+0x1575/0x28c0 [ 501.365877][T10766] ? sctp_getsockopt+0xb60/0xb60 [ 501.370851][T10766] ? aa_sk_perm+0x83c/0x970 [ 501.375381][T10766] ? aa_af_perm+0x330/0x330 [ 501.379907][T10766] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 501.386334][T10766] ? sock_rps_record_flow+0x19/0x3f0 [ 501.391634][T10766] ? inet_sendmsg+0xe9/0x2f0 [ 501.396234][T10766] ? inet_send_prepare+0x260/0x260 [ 501.401353][T10766] ____sys_sendmsg+0x5ba/0x960 [ 501.406140][T10766] ? __lock_acquire+0x7d40/0x7d40 [ 501.411177][T10766] ? __asan_memset+0x22/0x40 [ 501.415784][T10766] ? __sys_sendmsg_sock+0x30/0x30 [ 501.420821][T10766] ? __import_iovec+0x5f2/0x850 [ 501.425693][T10766] ? import_iovec+0x73/0xa0 [ 501.430212][T10766] ___sys_sendmsg+0x2a6/0x360 [ 501.434935][T10766] ? get_pid_task+0x20/0x1e0 [ 501.439558][T10766] ? __sys_sendmsg+0x2a0/0x2a0 [ 501.444374][T10766] ? __lock_acquire+0x7d40/0x7d40 [ 501.449456][T10766] __se_sys_sendmsg+0x1c2/0x2b0 [ 501.454375][T10766] ? __x64_sys_sendmsg+0x80/0x80 [ 501.459340][T10766] ? lockdep_hardirqs_on+0x98/0x150 [ 501.464567][T10766] do_syscall_64+0x55/0xa0 [ 501.469017][T10766] ? clear_bhb_loop+0x40/0x90 [ 501.473707][T10766] ? clear_bhb_loop+0x40/0x90 [ 501.478394][T10766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 501.484328][T10766] RIP: 0033:0x7f7751f9aeb9 [ 501.488760][T10766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.508385][T10766] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.516832][T10766] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 501.524832][T10766] RDX: 0000000000000080 RSI: 0000200000002500 RDI: 0000000000000003 [ 501.532838][T10766] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 501.541011][T10766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.549019][T10766] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 501.557039][T10766] [ 501.764378][T10770] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1350'. [ 501.769690][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1349'. [ 501.847045][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.858075][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.508023][T10777] netlink: 'syz.2.1353': attribute type 2 has an invalid length. [ 502.516110][T10777] netlink: 'syz.2.1353': attribute type 8 has an invalid length. [ 502.524604][T10777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1353'. [ 502.909675][T10785] netlink: 'syz.4.1355': attribute type 10 has an invalid length. [ 503.396639][T10787] netlink: 'syz.3.1356': attribute type 10 has an invalid length. [ 503.693150][T10801] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1360'. [ 505.136014][T10810] netlink: 'syz.4.1362': attribute type 2 has an invalid length. [ 505.166106][T10810] netlink: 'syz.4.1362': attribute type 8 has an invalid length. [ 505.195528][T10810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1362'. [ 506.201755][T10838] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1372'. [ 508.096517][T10826] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 508.161768][T10850] netlink: 'syz.2.1375': attribute type 2 has an invalid length. [ 508.170633][T10850] netlink: 'syz.2.1375': attribute type 8 has an invalid length. [ 508.184818][T10850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'. [ 508.633326][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1379'. [ 508.687397][T10867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1379'. [ 508.723695][T10872] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1379'. [ 509.072572][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1384'. [ 509.092907][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1384'. [ 509.129746][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1384'. [ 509.156480][T10878] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1384'. [ 512.679088][T10894] sit0: entered promiscuous mode [ 513.386281][T10896] netlink: 'syz.4.1388': attribute type 2 has an invalid length. [ 513.414519][T10896] netlink: 'syz.4.1388': attribute type 8 has an invalid length. [ 513.422759][T10896] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1388'. [ 513.440443][T10905] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 513.460317][T10906] netlink: 'syz.3.1391': attribute type 10 has an invalid length. [ 513.947740][T10915] netlink: 'syz.2.1395': attribute type 10 has an invalid length. [ 514.015956][T10917] sit0: entered promiscuous mode [ 514.568010][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1398'. [ 514.884783][T10933] netlink: 'syz.4.1400': attribute type 2 has an invalid length. [ 514.904898][T10933] netlink: 'syz.4.1400': attribute type 8 has an invalid length. [ 514.912869][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1400'. [ 515.064360][T10931] netlink: 'syz.3.1399': attribute type 10 has an invalid length. [ 515.282131][T10941] netlink: 'syz.1.1402': attribute type 10 has an invalid length. [ 515.322380][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.340703][T10941] bridge_slave_1: left allmulticast mode [ 515.347967][T10941] bridge_slave_1: left promiscuous mode [ 515.354128][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.382967][T10941] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 515.957086][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1410'. [ 515.991707][T10958] netlink: 'syz.2.1409': attribute type 2 has an invalid length. [ 516.000584][T10958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1409'. [ 516.013650][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1410'. [ 516.038757][T10968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1410'. [ 516.072372][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1410'. [ 516.339691][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1414'. [ 518.380131][T11025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1430'. [ 518.461676][T11028] FAULT_INJECTION: forcing a failure. [ 518.461676][T11028] name failslab, interval 1, probability 0, space 0, times 0 [ 518.521494][T11028] CPU: 0 PID: 11028 Comm: syz.1.1431 Not tainted syzkaller #0 [ 518.529035][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.539133][T11028] Call Trace: [ 518.542447][T11028] [ 518.545422][T11028] dump_stack_lvl+0x18c/0x250 [ 518.550148][T11028] ? show_regs_print_info+0x20/0x20 [ 518.555402][T11028] ? load_image+0x400/0x400 [ 518.559960][T11028] ? __might_sleep+0xe0/0xe0 [ 518.564592][T11028] ? __lock_acquire+0x7d40/0x7d40 [ 518.569657][T11028] should_fail_ex+0x39d/0x4d0 [ 518.574416][T11028] should_failslab+0x9/0x20 [ 518.578992][T11028] slab_pre_alloc_hook+0x59/0x310 [ 518.584079][T11028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.589855][T11028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.595635][T11028] __kmem_cache_alloc_node+0x53/0x250 [ 518.601058][T11028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.606814][T11028] __kmalloc+0xa4/0x230 [ 518.611032][T11028] tomoyo_realpath_from_path+0xe3/0x5d0 [ 518.616658][T11028] tomoyo_path_number_perm+0x248/0x620 [ 518.622161][T11028] ? tomoyo_path_number_perm+0x217/0x620 [ 518.627846][T11028] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 518.633357][T11028] ? ksys_write+0x1c4/0x260 [ 518.637952][T11028] ? __fget_files+0x28/0x4b0 [ 518.642584][T11028] ? __fget_files+0x28/0x4b0 [ 518.647231][T11028] security_file_ioctl+0x70/0xa0 [ 518.652481][T11028] __se_sys_ioctl+0x48/0x170 [ 518.657134][T11028] do_syscall_64+0x55/0xa0 [ 518.661617][T11028] ? clear_bhb_loop+0x40/0x90 [ 518.666348][T11028] ? clear_bhb_loop+0x40/0x90 [ 518.671075][T11028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.677112][T11028] RIP: 0033:0x7f8508b9aeb9 [ 518.681683][T11028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.701357][T11028] RSP: 002b:00007f85099be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 518.709821][T11028] RAX: ffffffffffffffda RBX: 00007f8508e15fa0 RCX: 00007f8508b9aeb9 [ 518.717836][T11028] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 518.725902][T11028] RBP: 00007f85099be090 R08: 0000000000000000 R09: 0000000000000000 [ 518.733919][T11028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.741931][T11028] R13: 00007f8508e16038 R14: 00007f8508e15fa0 R15: 00007fff9d2765b8 [ 518.749960][T11028] [ 518.844596][T11028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 519.481854][T11050] syzkaller0: entered promiscuous mode [ 519.501185][T11050] syzkaller0: entered allmulticast mode [ 519.523038][T11053] FAULT_INJECTION: forcing a failure. [ 519.523038][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 519.566622][T11053] CPU: 0 PID: 11053 Comm: syz.3.1440 Not tainted syzkaller #0 [ 519.574175][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.584299][T11053] Call Trace: [ 519.587616][T11053] [ 519.590590][T11053] dump_stack_lvl+0x18c/0x250 [ 519.595334][T11053] ? show_regs_print_info+0x20/0x20 [ 519.600574][T11053] ? load_image+0x400/0x400 [ 519.605118][T11053] ? __lock_acquire+0x7d40/0x7d40 [ 519.610187][T11053] ? kobject_set_name_vargs+0x61/0x110 [ 519.615686][T11053] ? rcu_is_watching+0x15/0xb0 [ 519.620511][T11053] should_fail_ex+0x39d/0x4d0 [ 519.625249][T11053] should_failslab+0x9/0x20 [ 519.629813][T11053] slab_pre_alloc_hook+0x59/0x310 [ 519.634900][T11053] ? device_add+0xbe/0xc20 [ 519.639365][T11053] __kmem_cache_alloc_node+0x53/0x250 [ 519.644793][T11053] ? device_add+0xbe/0xc20 [ 519.649345][T11053] kmalloc_trace+0x2a/0xe0 [ 519.653813][T11053] device_add+0xbe/0xc20 [ 519.658101][T11053] ? device_initialize+0x24b/0x440 [ 519.663258][T11053] netdev_register_kobject+0x188/0x320 [ 519.668768][T11053] register_netdevice+0x12ef/0x1b90 [ 519.674041][T11053] ? netif_stacked_transfer_operstate+0x210/0x210 [ 519.680510][T11053] ? __lock_acquire+0x7d40/0x7d40 [ 519.685578][T11053] ? dev_addr_check+0x20/0x240 [ 519.690415][T11053] ? ipip6_tunnel_create+0x81/0x2d0 [ 519.695693][T11053] ipip6_tunnel_create+0x10c/0x2d0 [ 519.700888][T11053] ipip6_tunnel_locate+0x527/0x760 [ 519.706081][T11053] ? check_6rd+0x670/0x670 [ 519.710550][T11053] ? bpf_lsm_capable+0x9/0x10 [ 519.715295][T11053] ipip6_tunnel_ctl+0x6ae/0x9e0 [ 519.720238][T11053] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 519.725847][T11053] ? ip_tunnel_update+0xb10/0xb10 [ 519.730937][T11053] ? __mutex_lock+0x94c/0xcc0 [ 519.735666][T11053] ? __lock_acquire+0x7d40/0x7d40 [ 519.740729][T11053] ? do_raw_spin_lock+0x11f/0x2c0 [ 519.745826][T11053] ipip6_tunnel_siocdevprivate+0x363/0x16f0 [ 519.751790][T11053] ? do_raw_spin_unlock+0x121/0x230 [ 519.757086][T11053] ? sit_tunnel_xmit+0x2010/0x2010 [ 519.762300][T11053] ? __mutex_lock+0x956/0xcc0 [ 519.767050][T11053] ? __mutex_lock+0x4f9/0xcc0 [ 519.771782][T11053] ? dev_ioctl+0x83c/0x1140 [ 519.776345][T11053] ? mutex_lock_nested+0x20/0x20 [ 519.781335][T11053] ? full_name_hash+0x92/0xe0 [ 519.786071][T11053] ? dev_ifsioc+0x958/0xc40 [ 519.790625][T11053] dev_ioctl+0x84c/0x1140 [ 519.795104][T11053] sock_ioctl+0x74c/0x7e0 [ 519.799482][T11053] ? sock_poll+0x3e0/0x3e0 [ 519.803959][T11053] ? bpf_lsm_file_ioctl+0x9/0x10 [ 519.808942][T11053] ? security_file_ioctl+0x80/0xa0 [ 519.814143][T11053] ? sock_poll+0x3e0/0x3e0 [ 519.818634][T11053] __se_sys_ioctl+0xfd/0x170 [ 519.823314][T11053] do_syscall_64+0x55/0xa0 [ 519.827801][T11053] ? clear_bhb_loop+0x40/0x90 [ 519.832519][T11053] ? clear_bhb_loop+0x40/0x90 [ 519.837231][T11053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.843153][T11053] RIP: 0033:0x7f80b759aeb9 [ 519.847611][T11053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.867242][T11053] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.875715][T11053] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 519.883731][T11053] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 519.891756][T11053] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.899760][T11053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 519.907760][T11053] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 519.915777][T11053] [ 520.350934][T11067] validate_nla: 3 callbacks suppressed [ 520.350954][T11067] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 520.394617][T11067] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1443'. [ 522.855348][T11057] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 522.868903][T11076] FAULT_INJECTION: forcing a failure. [ 522.868903][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 522.903915][T11076] CPU: 0 PID: 11076 Comm: syz.4.1446 Not tainted syzkaller #0 [ 522.911453][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.921569][T11076] Call Trace: [ 522.924898][T11076] [ 522.927879][T11076] dump_stack_lvl+0x18c/0x250 [ 522.932623][T11076] ? show_regs_print_info+0x20/0x20 [ 522.937980][T11076] ? load_image+0x400/0x400 [ 522.942544][T11076] ? __might_sleep+0xe0/0xe0 [ 522.947189][T11076] ? __lock_acquire+0x7d40/0x7d40 [ 522.952279][T11076] should_fail_ex+0x39d/0x4d0 [ 522.957041][T11076] should_failslab+0x9/0x20 [ 522.961597][T11076] slab_pre_alloc_hook+0x59/0x310 [ 522.966686][T11076] ? kvmalloc_node+0x70/0x180 [ 522.971418][T11076] ? kvmalloc_node+0x70/0x180 [ 522.976153][T11076] __kmem_cache_alloc_node+0x53/0x250 [ 522.981589][T11076] ? kvmalloc_node+0x70/0x180 [ 522.986322][T11076] __kmalloc_node+0xa4/0x230 [ 522.990979][T11076] kvmalloc_node+0x70/0x180 [ 522.995541][T11076] __veth_napi_enable_range+0x2b4/0x700 [ 523.001161][T11076] ? __skb_frag_ref+0x1c0/0x1c0 [ 523.006085][T11076] veth_enable_xdp+0x301/0x4c0 [ 523.010915][T11076] veth_xdp+0x4ab/0x730 [ 523.015136][T11076] bond_xdp+0x3ff/0x8a0 [ 523.019374][T11076] ? bond_fix_features+0x1e0/0x1e0 [ 523.024548][T11076] ? alloc_file+0x88/0x600 [ 523.029042][T11076] dev_xdp_install+0x110/0x250 [ 523.033853][T11076] ? bond_fix_features+0x1e0/0x1e0 [ 523.039019][T11076] ? bpf_xdp_link_fill_link_info+0xc0/0xc0 [ 523.044886][T11076] ? bond_fix_features+0x1e0/0x1e0 [ 523.050048][T11076] dev_xdp_attach+0xbc7/0x1030 [ 523.054876][T11076] bpf_xdp_link_attach+0x3cd/0x730 [ 523.060379][T11076] ? dev_xdp_prog+0x100/0x100 [ 523.065101][T11076] ? __lock_acquire+0x7d40/0x7d40 [ 523.070171][T11076] ? __fget_files+0x43d/0x4b0 [ 523.074903][T11076] ? attach_type_to_prog_type+0x330/0x3a0 [ 523.080663][T11076] ? bpf_prog_attach_check_attach_type+0x2d8/0x440 [ 523.087205][T11076] link_create+0x3ff/0x720 [ 523.091649][T11076] __sys_bpf+0x4d7/0x890 [ 523.095921][T11076] ? bpf_link_show_fdinfo+0x390/0x390 [ 523.101345][T11076] ? lock_chain_count+0x20/0x20 [ 523.106243][T11076] __x64_sys_bpf+0x7c/0x90 [ 523.110699][T11076] do_syscall_64+0x55/0xa0 [ 523.115205][T11076] ? clear_bhb_loop+0x40/0x90 [ 523.119934][T11076] ? clear_bhb_loop+0x40/0x90 [ 523.124647][T11076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.130573][T11076] RIP: 0033:0x7f5bcb59aeb9 [ 523.135012][T11076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.154644][T11076] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.163091][T11076] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 523.171086][T11076] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 523.179084][T11076] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 523.187161][T11076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.195158][T11076] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 523.203252][T11076] [ 523.290147][T11076] bond0: (slave bond_slave_0): Error -12 calling ndo_bpf [ 523.308864][T11080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1448'. [ 523.585847][T11086] syzkaller0: entered promiscuous mode [ 523.597235][T11086] syzkaller0: entered allmulticast mode [ 524.256122][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1453'. [ 528.602184][T11092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1453'. [ 529.238715][T11111] netlink: 'syz.1.1457': attribute type 10 has an invalid length. [ 529.311596][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1460'. [ 529.320940][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1460'. [ 529.343069][T11120] netlink: 'syz.4.1468': attribute type 2 has an invalid length. [ 529.351163][T11120] netlink: 'syz.4.1468': attribute type 8 has an invalid length. [ 529.359487][T11120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1468'. [ 529.369082][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1460'. [ 529.386326][T11122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1460'. [ 529.483408][T11124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1461'. [ 529.853309][T11145] netlink: 'syz.3.1465': attribute type 15 has an invalid length. [ 529.866653][T11145] netlink: 'syz.3.1465': attribute type 7 has an invalid length. [ 530.657651][T11153] netlink: 'syz.2.1470': attribute type 10 has an invalid length. [ 530.806639][T11166] FAULT_INJECTION: forcing a failure. [ 530.806639][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.830561][T11166] CPU: 1 PID: 11166 Comm: syz.1.1475 Not tainted syzkaller #0 [ 530.838102][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 530.848197][T11166] Call Trace: [ 530.851520][T11166] [ 530.854489][T11166] dump_stack_lvl+0x18c/0x250 [ 530.859258][T11166] ? show_regs_print_info+0x20/0x20 [ 530.864593][T11166] ? load_image+0x400/0x400 [ 530.869151][T11166] ? __lock_acquire+0x7d40/0x7d40 [ 530.874265][T11166] should_fail_ex+0x39d/0x4d0 [ 530.879028][T11166] _copy_from_user+0x2f/0xe0 [ 530.883668][T11166] __copy_msghdr+0x3bb/0x580 [ 530.888326][T11166] ___sys_sendmsg+0x214/0x360 [ 530.893064][T11166] ? get_pid_task+0x20/0x1e0 [ 530.897716][T11166] ? __sys_sendmsg+0x2a0/0x2a0 [ 530.902555][T11166] ? __lock_acquire+0x7d40/0x7d40 [ 530.907647][T11166] __se_sys_sendmsg+0x1c2/0x2b0 [ 530.912560][T11166] ? __x64_sys_sendmsg+0x80/0x80 [ 530.917590][T11166] ? lockdep_hardirqs_on+0x98/0x150 [ 530.922829][T11166] do_syscall_64+0x55/0xa0 [ 530.927300][T11166] ? clear_bhb_loop+0x40/0x90 [ 530.932020][T11166] ? clear_bhb_loop+0x40/0x90 [ 530.936757][T11166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.942688][T11166] RIP: 0033:0x7f8508b9aeb9 [ 530.947141][T11166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.966799][T11166] RSP: 002b:00007f85099be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.975253][T11166] RAX: ffffffffffffffda RBX: 00007f8508e15fa0 RCX: 00007f8508b9aeb9 [ 530.983274][T11166] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 530.991276][T11166] RBP: 00007f85099be090 R08: 0000000000000000 R09: 0000000000000000 [ 530.999281][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.007289][T11166] R13: 00007f8508e16038 R14: 00007f8508e15fa0 R15: 00007fff9d2765b8 [ 531.015324][T11166] [ 531.361843][T11180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1479'. [ 531.634596][T11192] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1484'. [ 531.670012][T11192] €Â0: renamed from batadv_slave_1 (while UP) [ 531.748459][T11196] netlink: 'syz.2.1486': attribute type 13 has an invalid length. [ 531.775555][T11196] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1486'. [ 531.810841][T11198] openvswitch: netlink: Message has 20476 unknown bytes. [ 532.420201][T11203] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 535.096097][T11255] netlink: 'syz.2.1505': attribute type 10 has an invalid length. [ 537.031026][T11273] netlink: 'syz.3.1512': attribute type 21 has an invalid length. [ 537.052351][T11273] __nla_validate_parse: 7 callbacks suppressed [ 537.052368][T11273] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1512'. [ 537.243603][T11280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1514'. [ 537.286207][T11283] netlink: 'syz.1.1515': attribute type 2 has an invalid length. [ 537.306332][T11283] netlink: 'syz.1.1515': attribute type 8 has an invalid length. [ 537.314175][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1515'. [ 537.558821][T11291] netlink: 6115 bytes leftover after parsing attributes in process `syz.3.1519'. [ 537.578188][T11293] FAULT_INJECTION: forcing a failure. [ 537.578188][T11293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 537.594425][T11293] CPU: 1 PID: 11293 Comm: syz.4.1520 Not tainted syzkaller #0 [ 537.601948][T11293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.612044][T11293] Call Trace: [ 537.615377][T11293] [ 537.618353][T11293] dump_stack_lvl+0x18c/0x250 [ 537.623107][T11293] ? show_regs_print_info+0x20/0x20 [ 537.628438][T11293] ? load_image+0x400/0x400 [ 537.632988][T11293] ? __lock_acquire+0x7d40/0x7d40 [ 537.638054][T11293] ? snprintf+0xe9/0x140 [ 537.642341][T11293] should_fail_ex+0x39d/0x4d0 [ 537.647075][T11293] _copy_to_user+0x2f/0xa0 [ 537.651549][T11293] simple_read_from_buffer+0xe7/0x150 [ 537.656981][T11293] proc_fail_nth_read+0x1e8/0x260 [ 537.662070][T11293] ? proc_fault_inject_write+0x360/0x360 [ 537.667755][T11293] ? fsnotify_perm+0x271/0x5e0 [ 537.672568][T11293] ? proc_fault_inject_write+0x360/0x360 [ 537.678245][T11293] vfs_read+0x28b/0x970 [ 537.682459][T11293] ? kernel_read+0x1e0/0x1e0 [ 537.687114][T11293] ? __fget_files+0x28/0x4b0 [ 537.691747][T11293] ? __fget_files+0x28/0x4b0 [ 537.696391][T11293] ? __fget_files+0x43d/0x4b0 [ 537.701135][T11293] ? __fdget_pos+0x2a3/0x330 [ 537.705776][T11293] ? ksys_read+0x75/0x260 [ 537.710156][T11293] ksys_read+0x150/0x260 [ 537.714460][T11293] ? vfs_write+0x990/0x990 [ 537.718962][T11293] ? lockdep_hardirqs_on+0x98/0x150 [ 537.724237][T11293] do_syscall_64+0x55/0xa0 [ 537.728706][T11293] ? clear_bhb_loop+0x40/0x90 [ 537.733420][T11293] ? clear_bhb_loop+0x40/0x90 [ 537.738160][T11293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.744123][T11293] RIP: 0033:0x7f5bcb55b78e [ 537.748623][T11293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 537.768268][T11293] RSP: 002b:00007f5bcc53efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 537.776728][T11293] RAX: ffffffffffffffda RBX: 00007f5bcc53f6c0 RCX: 00007f5bcb55b78e [ 537.784746][T11293] RDX: 000000000000000f RSI: 00007f5bcc53f0a0 RDI: 0000000000000005 [ 537.792767][T11293] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 537.800782][T11293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 537.808790][T11293] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 537.816815][T11293] [ 537.839591][T11295] sit0: left promiscuous mode [ 539.315471][T11310] netlink: 'syz.3.1525': attribute type 3 has an invalid length. [ 539.354763][T11310] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 539.403340][T11301] netlink: 'syz.2.1523': attribute type 10 has an invalid length. [ 539.432378][T11310] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1525'. [ 539.642072][T11316] netlink: 'syz.4.1526': attribute type 2 has an invalid length. [ 539.661385][T11316] netlink: 'syz.4.1526': attribute type 8 has an invalid length. [ 539.671997][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1526'. [ 540.228711][T11318] syzkaller0: entered promiscuous mode [ 540.235117][T11318] syzkaller0: entered allmulticast mode [ 540.281060][T11328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1531'. [ 542.992122][T11351] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 543.002242][T11351] netlink: 'syz.4.1537': attribute type 8 has an invalid length. [ 543.010149][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1537'. [ 543.021157][T11349] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 543.476863][T11367] syzkaller0: entered promiscuous mode [ 543.482416][T11367] syzkaller0: entered allmulticast mode [ 543.628765][T11376] FAULT_INJECTION: forcing a failure. [ 543.628765][T11376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.642896][T11376] CPU: 1 PID: 11376 Comm: syz.2.1545 Not tainted syzkaller #0 [ 543.650427][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 543.660521][T11376] Call Trace: [ 543.663846][T11376] [ 543.666816][T11376] dump_stack_lvl+0x18c/0x250 [ 543.671543][T11376] ? show_regs_print_info+0x20/0x20 [ 543.676792][T11376] ? load_image+0x400/0x400 [ 543.681338][T11376] ? __lock_acquire+0x7d40/0x7d40 [ 543.686408][T11376] ? lockdep_hardirqs_on+0x98/0x150 [ 543.691659][T11376] should_fail_ex+0x39d/0x4d0 [ 543.696482][T11376] _copy_from_user+0x2f/0xe0 [ 543.701117][T11376] __copy_msghdr+0x3bb/0x580 [ 543.705770][T11376] ___sys_sendmsg+0x214/0x360 [ 543.710522][T11376] ? __sys_sendmsg+0x2a0/0x2a0 [ 543.715359][T11376] ? __lock_acquire+0x7d40/0x7d40 [ 543.720544][T11376] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.725478][T11376] ? __x64_sys_sendmsg+0x80/0x80 [ 543.730482][T11376] ? lockdep_hardirqs_on+0x98/0x150 [ 543.735722][T11376] do_syscall_64+0x55/0xa0 [ 543.740186][T11376] ? clear_bhb_loop+0x40/0x90 [ 543.744903][T11376] ? clear_bhb_loop+0x40/0x90 [ 543.749639][T11376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.755594][T11376] RIP: 0033:0x7f7751f9aeb9 [ 543.760056][T11376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.779716][T11376] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.788187][T11376] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 543.796199][T11376] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 543.804224][T11376] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 543.812263][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.820286][T11376] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 543.828325][T11376] [ 546.030292][T11375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1544'. [ 546.058401][T11382] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 546.126999][T11388] netlink: 'syz.3.1548': attribute type 2 has an invalid length. [ 546.160470][T11388] netlink: 'syz.3.1548': attribute type 8 has an invalid length. [ 546.184775][T11388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1548'. [ 547.358295][T11417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1557'. [ 547.385901][T11422] netlink: 'syz.1.1560': attribute type 2 has an invalid length. [ 547.404317][T11422] netlink: 'syz.1.1560': attribute type 8 has an invalid length. [ 547.422510][T11422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1560'. [ 547.568396][T11425] FAULT_INJECTION: forcing a failure. [ 547.568396][T11425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.648861][T11425] CPU: 0 PID: 11425 Comm: syz.2.1561 Not tainted syzkaller #0 [ 547.656417][T11425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.666515][T11425] Call Trace: [ 547.669835][T11425] [ 547.672802][T11425] dump_stack_lvl+0x18c/0x250 [ 547.677549][T11425] ? show_regs_print_info+0x20/0x20 [ 547.682797][T11425] ? load_image+0x400/0x400 [ 547.687353][T11425] ? __lock_acquire+0x7d40/0x7d40 [ 547.692423][T11425] ? snprintf+0xe9/0x140 [ 547.696725][T11425] should_fail_ex+0x39d/0x4d0 [ 547.701472][T11425] _copy_to_user+0x2f/0xa0 [ 547.705950][T11425] simple_read_from_buffer+0xe7/0x150 [ 547.711386][T11425] proc_fail_nth_read+0x1e8/0x260 [ 547.716473][T11425] ? proc_fault_inject_write+0x360/0x360 [ 547.722172][T11425] ? fsnotify_perm+0x271/0x5e0 [ 547.727014][T11425] ? proc_fault_inject_write+0x360/0x360 [ 547.732710][T11425] vfs_read+0x28b/0x970 [ 547.736927][T11425] ? kernel_read+0x1e0/0x1e0 [ 547.741568][T11425] ? __fget_files+0x28/0x4b0 [ 547.746204][T11425] ? __fget_files+0x28/0x4b0 [ 547.750838][T11425] ? __fget_files+0x43d/0x4b0 [ 547.755579][T11425] ? __fdget_pos+0x2a3/0x330 [ 547.760278][T11425] ? ksys_read+0x75/0x260 [ 547.764661][T11425] ksys_read+0x150/0x260 [ 547.768961][T11425] ? vfs_write+0x990/0x990 [ 547.773434][T11425] ? lockdep_hardirqs_on+0x98/0x150 [ 547.778711][T11425] do_syscall_64+0x55/0xa0 [ 547.783186][T11425] ? clear_bhb_loop+0x40/0x90 [ 547.787924][T11425] ? clear_bhb_loop+0x40/0x90 [ 547.792701][T11425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.798642][T11425] RIP: 0033:0x7f7751f5b78e [ 547.803103][T11425] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 547.809142][T11419] netlink: 'syz.4.1558': attribute type 10 has an invalid length. [ 547.822767][T11425] RSP: 002b:00007f7752ef0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 547.822824][T11425] RAX: ffffffffffffffda RBX: 00007f7752ef16c0 RCX: 00007f7751f5b78e [ 547.822840][T11425] RDX: 000000000000000f RSI: 00007f7752ef10a0 RDI: 0000000000000004 [ 547.822852][T11425] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 547.822864][T11425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 547.822876][T11425] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 547.822908][T11425] [ 548.078807][T11432] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1563'. [ 548.105442][T11432] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 548.406352][T11440] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 548.417793][T11440] team0: Device hsr_slave_0 is already a lower device of the team interface [ 548.802327][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1570'. [ 549.029427][T11458] netlink: 'syz.2.1571': attribute type 2 has an invalid length. [ 549.062133][T11458] netlink: 'syz.2.1571': attribute type 8 has an invalid length. [ 549.112711][T11458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1571'. [ 549.387153][T11462] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 549.431514][T11471] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1575'. [ 550.245160][T11490] netlink: 'syz.1.1583': attribute type 2 has an invalid length. [ 550.290500][T11490] netlink: 'syz.1.1583': attribute type 8 has an invalid length. [ 550.313402][T11490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1583'. [ 550.803482][T11511] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1588'. [ 551.138518][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 551.744470][T11514] netlink: 'syz.4.1589': attribute type 10 has an invalid length. [ 551.773536][T11530] netlink: 'syz.1.1595': attribute type 2 has an invalid length. [ 551.791107][T11530] netlink: 'syz.1.1595': attribute type 8 has an invalid length. [ 551.823215][T11530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 552.036858][T11536] FAULT_INJECTION: forcing a failure. [ 552.036858][T11536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.058061][T11536] CPU: 1 PID: 11536 Comm: syz.4.1597 Not tainted syzkaller #0 [ 552.065584][T11536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.075679][T11536] Call Trace: [ 552.079000][T11536] [ 552.081984][T11536] dump_stack_lvl+0x18c/0x250 [ 552.086724][T11536] ? show_regs_print_info+0x20/0x20 [ 552.091973][T11536] ? load_image+0x400/0x400 [ 552.096529][T11536] ? __might_fault+0xaa/0x120 [ 552.101249][T11536] ? __lock_acquire+0x7d40/0x7d40 [ 552.106351][T11536] should_fail_ex+0x39d/0x4d0 [ 552.111086][T11536] _copy_from_iter+0x1d9/0x12e0 [ 552.115984][T11536] ? slab_post_alloc_hook+0x8a/0x4b0 [ 552.121330][T11536] ? __virt_addr_valid+0x18c/0x540 [ 552.126549][T11536] ? __lock_acquire+0x7d40/0x7d40 [ 552.131648][T11536] ? rcu_is_watching+0x15/0xb0 [ 552.136466][T11536] ? copyout_mc+0x70/0x70 [ 552.140849][T11536] ? __virt_addr_valid+0x18c/0x540 [ 552.146016][T11536] ? __virt_addr_valid+0x18c/0x540 [ 552.151184][T11536] ? __virt_addr_valid+0x469/0x540 [ 552.156376][T11536] ? __check_object_size+0x506/0xa20 [ 552.161728][T11536] netlink_sendmsg+0x76b/0xbf0 [ 552.166563][T11536] ? netlink_getsockopt+0x590/0x590 [ 552.171833][T11536] ? aa_sock_msg_perm+0x94/0x150 [ 552.176821][T11536] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 552.182156][T11536] ? security_socket_sendmsg+0x80/0xa0 [ 552.187668][T11536] ? netlink_getsockopt+0x590/0x590 [ 552.192916][T11536] ____sys_sendmsg+0x5ba/0x960 [ 552.197749][T11536] ? __asan_memset+0x22/0x40 [ 552.202384][T11536] ? __sys_sendmsg_sock+0x30/0x30 [ 552.207459][T11536] ? __import_iovec+0x5f2/0x850 [ 552.212371][T11536] ? import_iovec+0x73/0xa0 [ 552.216941][T11536] ___sys_sendmsg+0x2a6/0x360 [ 552.221695][T11536] ? get_pid_task+0x20/0x1e0 [ 552.226344][T11536] ? __sys_sendmsg+0x2a0/0x2a0 [ 552.231196][T11536] ? __lock_acquire+0x7d40/0x7d40 [ 552.236292][T11536] __se_sys_sendmsg+0x1c2/0x2b0 [ 552.241200][T11536] ? __x64_sys_sendmsg+0x80/0x80 [ 552.246218][T11536] ? lockdep_hardirqs_on+0x98/0x150 [ 552.251562][T11536] do_syscall_64+0x55/0xa0 [ 552.256033][T11536] ? clear_bhb_loop+0x40/0x90 [ 552.260756][T11536] ? clear_bhb_loop+0x40/0x90 [ 552.265480][T11536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.271432][T11536] RIP: 0033:0x7f5bcb59aeb9 [ 552.275869][T11536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.295597][T11536] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.304042][T11536] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 552.312034][T11536] RDX: 000000002000c090 RSI: 0000200000000040 RDI: 0000000000000003 [ 552.320034][T11536] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 552.328031][T11536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.336049][T11536] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 552.344059][T11536] [ 552.399653][T11541] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1598'. [ 552.644582][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1600'. [ 553.342480][T11569] FAULT_INJECTION: forcing a failure. [ 553.342480][T11569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.363238][T11569] CPU: 0 PID: 11569 Comm: syz.3.1607 Not tainted syzkaller #0 [ 553.370771][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.380878][T11569] Call Trace: [ 553.384251][T11569] [ 553.387223][T11569] dump_stack_lvl+0x18c/0x250 [ 553.391965][T11569] ? show_regs_print_info+0x20/0x20 [ 553.397209][T11569] ? load_image+0x400/0x400 [ 553.401765][T11569] ? __might_fault+0xaa/0x120 [ 553.406483][T11569] ? __lock_acquire+0x7d40/0x7d40 [ 553.411549][T11569] ? __lock_acquire+0x7d40/0x7d40 [ 553.416624][T11569] should_fail_ex+0x39d/0x4d0 [ 553.421371][T11569] _copy_from_user+0x2f/0xe0 [ 553.426033][T11569] perf_copy_attr+0x16a/0x840 [ 553.430774][T11569] __se_sys_perf_event_open+0x11b/0x1c50 [ 553.436454][T11569] ? __fget_files+0x28/0x4b0 [ 553.441134][T11569] ? mutex_unlock+0x10/0x10 [ 553.445694][T11569] ? __fget_files+0x43d/0x4b0 [ 553.450432][T11569] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 553.456138][T11569] ? lock_chain_count+0x20/0x20 [ 553.461054][T11569] ? lockdep_hardirqs_on+0x98/0x150 [ 553.466301][T11569] ? __x64_sys_perf_event_open+0x20/0xc0 [ 553.471984][T11569] do_syscall_64+0x55/0xa0 [ 553.476462][T11569] ? clear_bhb_loop+0x40/0x90 [ 553.481181][T11569] ? clear_bhb_loop+0x40/0x90 [ 553.485927][T11569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.491867][T11569] RIP: 0033:0x7f80b759aeb9 [ 553.496319][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.515981][T11569] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 553.524457][T11569] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 553.532485][T11569] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000001100 [ 553.540505][T11569] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 553.548522][T11569] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 553.556540][T11569] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 553.564574][T11569] [ 553.647570][T11570] syzkaller0: entered promiscuous mode [ 553.665836][T11570] syzkaller0: entered allmulticast mode [ 553.939447][T11584] __nla_validate_parse: 3 callbacks suppressed [ 553.939470][T11584] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1611'. [ 554.002477][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 554.027888][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 554.066365][T11588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 554.100470][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1612'. [ 558.063383][T11595] netlink: 'syz.2.1615': attribute type 10 has an invalid length. [ 558.083982][T11607] sit0: left promiscuous mode [ 558.452038][T11623] FAULT_INJECTION: forcing a failure. [ 558.452038][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.467093][T11623] CPU: 0 PID: 11623 Comm: syz.4.1621 Not tainted syzkaller #0 [ 558.474640][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.484745][T11623] Call Trace: [ 558.488078][T11623] [ 558.491054][T11623] dump_stack_lvl+0x18c/0x250 [ 558.495792][T11623] ? show_regs_print_info+0x20/0x20 [ 558.501032][T11623] ? load_image+0x400/0x400 [ 558.505577][T11623] ? __lock_acquire+0x7d40/0x7d40 [ 558.510699][T11623] ? __virt_addr_valid+0x18c/0x540 [ 558.515865][T11623] should_fail_ex+0x39d/0x4d0 [ 558.520610][T11623] _copy_from_user+0x2f/0xe0 [ 558.525258][T11623] bpf_test_init+0xde/0x140 [ 558.529807][T11623] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 558.535229][T11623] ? dev_put+0x80/0x80 [ 558.539347][T11623] ? dev_put+0x80/0x80 [ 558.543455][T11623] bpf_prog_test_run+0x321/0x390 [ 558.548472][T11623] __sys_bpf+0x49d/0x890 [ 558.552756][T11623] ? bpf_link_show_fdinfo+0x390/0x390 [ 558.558190][T11623] ? lock_chain_count+0x20/0x20 [ 558.563081][T11623] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 558.569110][T11623] __x64_sys_bpf+0x7c/0x90 [ 558.573561][T11623] do_syscall_64+0x55/0xa0 [ 558.578014][T11623] ? clear_bhb_loop+0x40/0x90 [ 558.582725][T11623] ? clear_bhb_loop+0x40/0x90 [ 558.587436][T11623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.593348][T11623] RIP: 0033:0x7f5bcb59aeb9 [ 558.597804][T11623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.617458][T11623] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 558.625909][T11623] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 558.633901][T11623] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 558.641893][T11623] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 558.649908][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.657918][T11623] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 558.665938][T11623] [ 559.702203][T11639] netlink: 'syz.3.1629': attribute type 10 has an invalid length. [ 560.457943][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1642'. [ 560.521800][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1642'. [ 560.544119][T11670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1642'. [ 560.602994][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1642'. [ 561.346881][T11678] netlink: 'syz.4.1644': attribute type 33 has an invalid length. [ 561.374175][T11678] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1644'. [ 561.664501][T11688] FAULT_INJECTION: forcing a failure. [ 561.664501][T11688] name failslab, interval 1, probability 0, space 0, times 0 [ 561.684452][T11688] CPU: 0 PID: 11688 Comm: syz.4.1647 Not tainted syzkaller #0 [ 561.691999][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 561.702123][T11688] Call Trace: [ 561.705452][T11688] [ 561.708430][T11688] dump_stack_lvl+0x18c/0x250 [ 561.713155][T11688] ? show_regs_print_info+0x20/0x20 [ 561.718396][T11688] ? load_image+0x400/0x400 [ 561.722942][T11688] ? verify_lock_unused+0x140/0x140 [ 561.728213][T11688] should_fail_ex+0x39d/0x4d0 [ 561.732947][T11688] should_failslab+0x9/0x20 [ 561.737513][T11688] slab_pre_alloc_hook+0x59/0x310 [ 561.742590][T11688] kmem_cache_alloc+0x5a/0x2d0 [ 561.747389][T11688] ? skb_clone+0x1eb/0x370 [ 561.751836][T11688] skb_clone+0x1eb/0x370 [ 561.756105][T11688] __netlink_deliver_tap+0x41c/0x830 [ 561.761432][T11688] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.766667][T11688] netlink_deliver_tap+0x19c/0x1b0 [ 561.771812][T11688] netlink_unicast+0x72c/0x8d0 [ 561.776617][T11688] netlink_sendmsg+0x8d0/0xbf0 [ 561.781413][T11688] ? netlink_getsockopt+0x590/0x590 [ 561.786651][T11688] ? aa_sock_msg_perm+0x94/0x150 [ 561.791623][T11688] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 561.796941][T11688] ? security_socket_sendmsg+0x80/0xa0 [ 561.802424][T11688] ? netlink_getsockopt+0x590/0x590 [ 561.807653][T11688] ____sys_sendmsg+0x5ba/0x960 [ 561.812458][T11688] ? __asan_memset+0x22/0x40 [ 561.817074][T11688] ? __sys_sendmsg_sock+0x30/0x30 [ 561.822131][T11688] ? __import_iovec+0x5f2/0x850 [ 561.827019][T11688] ? import_iovec+0x73/0xa0 [ 561.831557][T11688] ___sys_sendmsg+0x2a6/0x360 [ 561.836267][T11688] ? get_pid_task+0x20/0x1e0 [ 561.840889][T11688] ? __sys_sendmsg+0x2a0/0x2a0 [ 561.845717][T11688] ? __lock_acquire+0x7d40/0x7d40 [ 561.850816][T11688] __se_sys_sendmsg+0x1c2/0x2b0 [ 561.855709][T11688] ? __x64_sys_sendmsg+0x80/0x80 [ 561.860705][T11688] ? lockdep_hardirqs_on+0x98/0x150 [ 561.865935][T11688] do_syscall_64+0x55/0xa0 [ 561.870389][T11688] ? clear_bhb_loop+0x40/0x90 [ 561.875099][T11688] ? clear_bhb_loop+0x40/0x90 [ 561.879807][T11688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 561.885730][T11688] RIP: 0033:0x7f5bcb59aeb9 [ 561.890170][T11688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.909799][T11688] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.918246][T11688] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 561.926274][T11688] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 561.934287][T11688] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 561.942292][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.950289][T11688] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 561.958300][T11688] [ 562.159390][T11693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1651'. [ 562.184621][T11693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1651'. [ 562.206970][T11693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1651'. [ 562.233637][T11693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1651'. [ 562.257597][T11693] FAULT_INJECTION: forcing a failure. [ 562.257597][T11693] name failslab, interval 1, probability 0, space 0, times 0 [ 562.283168][T11693] CPU: 0 PID: 11693 Comm: syz.3.1651 Not tainted syzkaller #0 [ 562.290715][T11693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.300817][T11693] Call Trace: [ 562.304140][T11693] [ 562.307114][T11693] dump_stack_lvl+0x18c/0x250 [ 562.311884][T11693] ? show_regs_print_info+0x20/0x20 [ 562.317132][T11693] ? load_image+0x400/0x400 [ 562.321686][T11693] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 562.327651][T11693] should_fail_ex+0x39d/0x4d0 [ 562.332393][T11693] should_failslab+0x9/0x20 [ 562.336957][T11693] slab_pre_alloc_hook+0x59/0x310 [ 562.342044][T11693] kmem_cache_alloc+0x5a/0x2d0 [ 562.346866][T11693] ? skb_clone+0x1eb/0x370 [ 562.351322][T11693] skb_clone+0x1eb/0x370 [ 562.355596][T11693] __netlink_deliver_tap+0x41c/0x830 [ 562.360923][T11693] ? netlink_deliver_tap+0x2e/0x1b0 [ 562.366148][T11693] netlink_deliver_tap+0x19c/0x1b0 [ 562.371288][T11693] netlink_dump+0x94b/0xe50 [ 562.375827][T11693] ? netlink_lookup+0x200/0x200 [ 562.380722][T11693] ? slab_free_freelist_hook+0x130/0x1a0 [ 562.386382][T11693] ? netlink_recvmsg+0x5e7/0xe60 [ 562.391345][T11693] ? kmem_cache_free+0xf8/0x270 [ 562.396229][T11693] netlink_recvmsg+0x693/0xe60 [ 562.401025][T11693] ? netlink_sendmsg+0xbf0/0xbf0 [ 562.405993][T11693] ? aa_af_perm+0x330/0x330 [ 562.410547][T11693] ? __lock_acquire+0x1273/0x7d40 [ 562.415603][T11693] ? verify_lock_unused+0x140/0x140 [ 562.420832][T11693] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 562.426142][T11693] ? security_socket_recvmsg+0x89/0xb0 [ 562.431623][T11693] ? netlink_sendmsg+0xbf0/0xbf0 [ 562.436591][T11693] ____sys_recvmsg+0x2ce/0x5e0 [ 562.441384][T11693] ? __sys_recvmsg_sock+0x50/0x50 [ 562.446445][T11693] ? import_iovec+0x73/0xa0 [ 562.450991][T11693] ___sys_recvmsg+0x216/0x590 [ 562.455708][T11693] ? __sys_recvmsg+0x2a0/0x2a0 [ 562.460492][T11693] ? ksys_write+0x1c4/0x260 [ 562.465031][T11693] ? __fget_files+0x43d/0x4b0 [ 562.469749][T11693] __x64_sys_recvmsg+0x20c/0x2e0 [ 562.474714][T11693] ? ___sys_recvmsg+0x590/0x590 [ 562.479598][T11693] ? lockdep_hardirqs_on+0x98/0x150 [ 562.484827][T11693] do_syscall_64+0x55/0xa0 [ 562.489305][T11693] ? clear_bhb_loop+0x40/0x90 [ 562.493997][T11693] ? clear_bhb_loop+0x40/0x90 [ 562.498692][T11693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.504606][T11693] RIP: 0033:0x7f80b759aeb9 [ 562.509040][T11693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.528681][T11693] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 562.537129][T11693] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 562.545119][T11693] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 562.553121][T11693] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 562.561114][T11693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.569099][T11693] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 562.577104][T11693] [ 562.710681][T11700] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1653'. [ 563.222053][T11713] netlink: 'syz.4.1656': attribute type 33 has an invalid length. [ 563.265537][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.281573][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.184041][T11740] FAULT_INJECTION: forcing a failure. [ 564.184041][T11740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.211172][T11740] CPU: 0 PID: 11740 Comm: syz.4.1667 Not tainted syzkaller #0 [ 564.218706][T11740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.228806][T11740] Call Trace: [ 564.232109][T11740] [ 564.235063][T11740] dump_stack_lvl+0x18c/0x250 [ 564.239788][T11740] ? show_regs_print_info+0x20/0x20 [ 564.245020][T11740] ? load_image+0x400/0x400 [ 564.249547][T11740] ? __might_fault+0xaa/0x120 [ 564.254251][T11740] ? __lock_acquire+0x7d40/0x7d40 [ 564.259338][T11740] should_fail_ex+0x39d/0x4d0 [ 564.264073][T11740] _copy_from_user+0x2f/0xe0 [ 564.268694][T11740] ___sys_sendmsg+0x1c7/0x360 [ 564.273398][T11740] ? get_pid_task+0x20/0x1e0 [ 564.278023][T11740] ? __sys_sendmsg+0x2a0/0x2a0 [ 564.282852][T11740] ? __lock_acquire+0x7d40/0x7d40 [ 564.287930][T11740] __se_sys_sendmsg+0x1c2/0x2b0 [ 564.292814][T11740] ? __x64_sys_sendmsg+0x80/0x80 [ 564.297802][T11740] ? lockdep_hardirqs_on+0x98/0x150 [ 564.303026][T11740] do_syscall_64+0x55/0xa0 [ 564.307510][T11740] ? clear_bhb_loop+0x40/0x90 [ 564.312218][T11740] ? clear_bhb_loop+0x40/0x90 [ 564.316930][T11740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.322843][T11740] RIP: 0033:0x7f5bcb59aeb9 [ 564.327297][T11740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.346933][T11740] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.355388][T11740] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 564.363402][T11740] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 564.371393][T11740] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 564.379383][T11740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.387380][T11740] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 564.395387][T11740] [ 564.676680][T11742] netlink: 'syz.4.1669': attribute type 33 has an invalid length. [ 565.167356][T11757] netlink: 'syz.2.1674': attribute type 16 has an invalid length. [ 565.367984][T11765] netlink: set zone limit has 8 unknown bytes [ 565.388022][T11763] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 565.424033][T11763] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 565.456731][T11765] netlink: 'syz.4.1678': attribute type 10 has an invalid length. [ 565.475326][T11763] __nla_validate_parse: 12 callbacks suppressed [ 565.475354][T11763] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1677'. [ 565.496600][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.504025][T11765] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.567947][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.575261][T11765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.582878][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.590112][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.638024][T11765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 565.873700][T11774] netlink: 'syz.3.1681': attribute type 33 has an invalid length. [ 565.893969][T11774] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1681'. [ 566.356227][T11786] FAULT_INJECTION: forcing a failure. [ 566.356227][T11786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.384446][T11786] CPU: 0 PID: 11786 Comm: syz.4.1686 Not tainted syzkaller #0 [ 566.392009][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 566.402155][T11786] Call Trace: [ 566.405494][T11786] [ 566.408462][T11786] dump_stack_lvl+0x18c/0x250 [ 566.413200][T11786] ? show_regs_print_info+0x20/0x20 [ 566.418443][T11786] ? load_image+0x400/0x400 [ 566.422994][T11786] ? __might_fault+0xaa/0x120 [ 566.427715][T11786] should_fail_ex+0x39d/0x4d0 [ 566.432446][T11786] copyin+0x1a/0x90 [ 566.436317][T11786] _copy_from_iter+0x404/0x12e0 [ 566.441210][T11786] ? copyin+0x70/0x90 [ 566.445240][T11786] ? copyout_mc+0x70/0x70 [ 566.449621][T11786] ? copyout_mc+0x70/0x70 [ 566.453983][T11786] ? __virt_addr_valid+0x18c/0x540 [ 566.459137][T11786] ? page_copy_sane+0x16a/0x270 [ 566.464030][T11786] copy_page_from_iter+0x7b/0x100 [ 566.469108][T11786] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 566.474975][T11786] packet_sendmsg+0x3566/0x4d70 [ 566.479904][T11786] ? verify_lock_unused+0x140/0x140 [ 566.485143][T11786] ? mark_lock+0x94/0x320 [ 566.489520][T11786] ? __lock_acquire+0x1273/0x7d40 [ 566.494595][T11786] ? aa_sk_perm+0x83c/0x970 [ 566.499156][T11786] ? packet_getsockopt+0xad0/0xad0 [ 566.504329][T11786] ? aa_sock_msg_perm+0x94/0x150 [ 566.509320][T11786] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 566.514652][T11786] ? security_socket_sendmsg+0x80/0xa0 [ 566.520154][T11786] ? packet_getsockopt+0xad0/0xad0 [ 566.525319][T11786] ____sys_sendmsg+0x5ba/0x960 [ 566.530141][T11786] ? __lock_acquire+0x7d40/0x7d40 [ 566.535210][T11786] ? __asan_memset+0x22/0x40 [ 566.539938][T11786] ? __sys_sendmsg_sock+0x30/0x30 [ 566.545018][T11786] ? __import_iovec+0x3fa/0x850 [ 566.549925][T11786] ? import_iovec+0x73/0xa0 [ 566.554492][T11786] ___sys_sendmsg+0x2a6/0x360 [ 566.559226][T11786] ? __sys_sendmsg+0x2a0/0x2a0 [ 566.564057][T11786] ? __lock_acquire+0x7d40/0x7d40 [ 566.569185][T11786] __se_sys_sendmsg+0x1c2/0x2b0 [ 566.574085][T11786] ? __x64_sys_sendmsg+0x80/0x80 [ 566.579111][T11786] ? lockdep_hardirqs_on+0x98/0x150 [ 566.584358][T11786] do_syscall_64+0x55/0xa0 [ 566.588822][T11786] ? clear_bhb_loop+0x40/0x90 [ 566.593534][T11786] ? clear_bhb_loop+0x40/0x90 [ 566.598245][T11786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.604177][T11786] RIP: 0033:0x7f5bcb59aeb9 [ 566.608651][T11786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.628301][T11786] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.636771][T11786] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 566.644771][T11786] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 566.652781][T11786] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 566.660796][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.668793][T11786] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 566.676815][T11786] [ 567.188528][T11797] netlink: 'syz.4.1688': attribute type 10 has an invalid length. [ 567.230436][T11797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1688'. [ 567.262827][T11797] bridge0: port 3(ipvlan1) entered blocking state [ 567.271981][T11797] bridge0: port 3(ipvlan1) entered disabled state [ 567.289646][T11797] ipvlan1: entered allmulticast mode [ 567.304460][T11797] veth0_vlan: entered allmulticast mode [ 567.321587][T11797] ipvlan1: left allmulticast mode [ 567.332513][T11797] veth0_vlan: left allmulticast mode [ 567.343097][T11797] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 567.367045][T11805] netlink: 'syz.2.1692': attribute type 33 has an invalid length. [ 567.381969][T11805] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1692'. [ 568.055842][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 568.246135][T11812] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 568.277153][T11817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 568.311272][T11819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 569.034626][T11824] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.253607][T11830] FAULT_INJECTION: forcing a failure. [ 569.253607][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 569.285237][T11830] CPU: 1 PID: 11830 Comm: syz.3.1702 Not tainted syzkaller #0 [ 569.292789][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.302896][T11830] Call Trace: [ 569.306219][T11830] [ 569.309196][T11830] dump_stack_lvl+0x18c/0x250 [ 569.313927][T11830] ? show_regs_print_info+0x20/0x20 [ 569.319183][T11830] ? load_image+0x400/0x400 [ 569.323745][T11830] should_fail_ex+0x39d/0x4d0 [ 569.328480][T11830] should_failslab+0x9/0x20 [ 569.333054][T11830] slab_pre_alloc_hook+0x59/0x310 [ 569.338132][T11830] ? lock_is_held_type+0x13e/0x190 [ 569.343317][T11830] kmem_cache_alloc+0x5a/0x2d0 [ 569.348128][T11830] ? __nf_conntrack_alloc+0x99/0x380 [ 569.353476][T11830] __nf_conntrack_alloc+0x99/0x380 [ 569.358638][T11830] init_conntrack+0x177/0xf10 [ 569.363362][T11830] ? early_drop+0x7f0/0x7f0 [ 569.367907][T11830] ? nf_conntrack_find_get+0x650/0x650 [ 569.373409][T11830] ? __local_bh_enable_ip+0x13a/0x1c0 [ 569.378826][T11830] ? __siphash_unaligned+0x22e/0x3a0 [ 569.384211][T11830] nf_conntrack_in+0xc06/0x15c0 [ 569.389135][T11830] ? nf_ct_pernet+0x270/0x270 [ 569.393870][T11830] ? ipt_do_table+0x2c1/0x15e0 [ 569.398691][T11830] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 569.404228][T11830] ? ipv4_conntrack_local+0x123/0x200 [ 569.409665][T11830] ? ipv4_conntrack_in+0x20/0x20 [ 569.414647][T11830] nf_hook_slow+0xbd/0x200 [ 569.419119][T11830] ? nf_hook+0x390/0x390 [ 569.423420][T11830] nf_hook+0x228/0x390 [ 569.427540][T11830] ? nf_hook+0xa2/0x390 [ 569.431749][T11830] ? __ip_local_out+0x5f0/0x5f0 [ 569.436657][T11830] ? nf_hook+0x390/0x390 [ 569.440952][T11830] ? __lock_acquire+0x7d40/0x7d40 [ 569.446044][T11830] __ip_local_out+0x4db/0x5f0 [ 569.450783][T11830] ? nf_hook+0x390/0x390 [ 569.455083][T11830] ? __ip_queue_xmit+0x5d/0x1950 [ 569.460085][T11830] __ip_queue_xmit+0xf7c/0x1950 [ 569.465009][T11830] ? __ip_queue_xmit+0x5d/0x1950 [ 569.470003][T11830] __tcp_transmit_skb+0x1cbd/0x32f0 [ 569.475293][T11830] ? __tcp_send_ack+0x5a0/0x5a0 [ 569.480208][T11830] ? tcp_fastopen_cookie_check+0x26d/0x3c0 [ 569.486066][T11830] tcp_connect+0x327a/0x5190 [ 569.490755][T11830] ? tcp_options_write+0xc70/0xc70 [ 569.495926][T11830] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 569.501960][T11830] ? __asan_memset+0x22/0x40 [ 569.506612][T11830] ? tcp_fastopen_active_should_disable+0x240/0x240 [ 569.513267][T11830] tcp_v4_connect+0xfee/0x18e0 [ 569.518108][T11830] ? tcp_twsk_unique+0x990/0x990 [ 569.523119][T11830] ? __inet_stream_connect+0xd6/0xdc0 [ 569.528552][T11830] __inet_stream_connect+0x254/0xdc0 [ 569.533891][T11830] ? inet_dgram_connect+0x360/0x360 [ 569.539165][T11830] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 569.544423][T11830] tcp_sendmsg_locked+0x4610/0x4ba0 [ 569.549668][T11830] ? lock_chain_count+0x20/0x20 [ 569.554588][T11830] ? lockdep_hardirqs_on+0x98/0x150 [ 569.559833][T11830] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 569.566047][T11830] ? mark_lock+0x94/0x320 [ 569.570424][T11830] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 569.576454][T11830] ? lock_chain_count+0x20/0x20 [ 569.581337][T11830] ? tcp_set_state+0x680/0x680 [ 569.586146][T11830] tcp_sendmsg+0x2f/0x50 [ 569.590428][T11830] ? inet_send_prepare+0x260/0x260 [ 569.595576][T11830] ____sys_sendmsg+0x5ba/0x960 [ 569.600378][T11830] ? __lock_acquire+0x7d40/0x7d40 [ 569.605434][T11830] ? __asan_memset+0x22/0x40 [ 569.610079][T11830] ? __sys_sendmsg_sock+0x30/0x30 [ 569.615165][T11830] ? __import_iovec+0x3fa/0x850 [ 569.620075][T11830] ? import_iovec+0x73/0xa0 [ 569.624635][T11830] ___sys_sendmsg+0x2a6/0x360 [ 569.629372][T11830] ? __sys_sendmsg+0x2a0/0x2a0 [ 569.634201][T11830] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 569.640545][T11830] __se_sys_sendmsg+0x1c2/0x2b0 [ 569.645452][T11830] ? __x64_sys_sendmsg+0x80/0x80 [ 569.650476][T11830] ? syscall_enter_from_user_mode+0x2e/0x80 [ 569.656426][T11830] do_syscall_64+0x55/0xa0 [ 569.660884][T11830] ? clear_bhb_loop+0x40/0x90 [ 569.665607][T11830] ? clear_bhb_loop+0x40/0x90 [ 569.670337][T11830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.676273][T11830] RIP: 0033:0x7f80b759aeb9 [ 569.680721][T11830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.700449][T11830] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.708920][T11830] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 569.716939][T11830] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000003 [ 569.724936][T11830] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 569.732941][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.740947][T11830] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 569.749003][T11830] [ 569.916179][T11837] netlink: 'syz.2.1704': attribute type 2 has an invalid length. [ 569.926076][T11837] netlink: 'syz.2.1704': attribute type 8 has an invalid length. [ 569.933889][T11837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1704'. [ 569.944102][T11838] netlink: 'syz.1.1705': attribute type 33 has an invalid length. [ 569.953936][T11838] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1705'. [ 570.345980][T11852] netlink: 'syz.2.1709': attribute type 7 has an invalid length. [ 570.463546][T11856] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 570.496915][T11856] team0: Device veth1_macvtap failed to register rx_handler [ 570.612010][T11860] netlink: 'syz.1.1715': attribute type 2 has an invalid length. [ 570.624954][T11860] netlink: 'syz.1.1715': attribute type 8 has an invalid length. [ 570.636332][T11860] __nla_validate_parse: 4 callbacks suppressed [ 570.636348][T11860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1715'. [ 570.758666][T11864] netlink: 'syz.3.1716': attribute type 33 has an invalid length. [ 570.804610][T11864] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1716'. [ 571.414648][T11877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1721'. [ 571.495674][T11880] FAULT_INJECTION: forcing a failure. [ 571.495674][T11880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.574810][T11880] CPU: 1 PID: 11880 Comm: syz.1.1723 Not tainted syzkaller #0 [ 571.582355][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.592459][T11880] Call Trace: [ 571.595778][T11880] [ 571.598743][T11880] dump_stack_lvl+0x18c/0x250 [ 571.603493][T11880] ? show_regs_print_info+0x20/0x20 [ 571.608756][T11880] ? load_image+0x400/0x400 [ 571.613314][T11880] ? __might_fault+0xaa/0x120 [ 571.618035][T11880] ? __lock_acquire+0x7d40/0x7d40 [ 571.623114][T11880] should_fail_ex+0x39d/0x4d0 [ 571.627857][T11880] _copy_from_user+0x2f/0xe0 [ 571.632501][T11880] __sys_bpf+0x23e/0x890 [ 571.636794][T11880] ? bpf_link_show_fdinfo+0x390/0x390 [ 571.642232][T11880] ? lock_chain_count+0x20/0x20 [ 571.647139][T11880] __x64_sys_bpf+0x7c/0x90 [ 571.651606][T11880] do_syscall_64+0x55/0xa0 [ 571.656066][T11880] ? clear_bhb_loop+0x40/0x90 [ 571.660777][T11880] ? clear_bhb_loop+0x40/0x90 [ 571.665503][T11880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.671443][T11880] RIP: 0033:0x7f8508b9aeb9 [ 571.675909][T11880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.695559][T11880] RSP: 002b:00007f85099be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.704022][T11880] RAX: ffffffffffffffda RBX: 00007f8508e15fa0 RCX: 00007f8508b9aeb9 [ 571.712033][T11880] RDX: 0000000000000022 RSI: 0000200000000640 RDI: 0000000000000005 [ 571.715548][T11877] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1721'. [ 571.720025][T11880] RBP: 00007f85099be090 R08: 0000000000000000 R09: 0000000000000000 [ 571.737002][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.745014][T11880] R13: 00007f8508e16038 R14: 00007f8508e15fa0 R15: 00007fff9d2765b8 [ 571.753048][T11880] [ 571.859769][T11881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1721'. [ 571.882248][T11882] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1721'. [ 572.001726][T11886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.031281][T11886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.498258][T11896] netlink: 'syz.3.1727': attribute type 2 has an invalid length. [ 572.506540][T11896] netlink: 'syz.3.1727': attribute type 8 has an invalid length. [ 572.520683][T11896] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1727'. [ 572.709908][T11899] FAULT_INJECTION: forcing a failure. [ 572.709908][T11899] name failslab, interval 1, probability 0, space 0, times 0 [ 572.723725][T11899] CPU: 1 PID: 11899 Comm: syz.3.1728 Not tainted syzkaller #0 [ 572.731250][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.741350][T11899] Call Trace: [ 572.744676][T11899] [ 572.747650][T11899] dump_stack_lvl+0x18c/0x250 [ 572.752387][T11899] ? show_regs_print_info+0x20/0x20 [ 572.757644][T11899] ? load_image+0x400/0x400 [ 572.762200][T11899] ? __might_sleep+0xe0/0xe0 [ 572.766843][T11899] ? __lock_acquire+0x7d40/0x7d40 [ 572.771918][T11899] ? rcu_is_watching+0x15/0xb0 [ 572.776735][T11899] should_fail_ex+0x39d/0x4d0 [ 572.781495][T11899] should_failslab+0x9/0x20 [ 572.786054][T11899] slab_pre_alloc_hook+0x59/0x310 [ 572.791142][T11899] ? do_syscall_64+0x55/0xa0 [ 572.795792][T11899] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.801917][T11899] kmem_cache_alloc_node+0x60/0x320 [ 572.807172][T11899] ? __alloc_skb+0x103/0x2c0 [ 572.811826][T11899] __alloc_skb+0x103/0x2c0 [ 572.816299][T11899] netlink_dump+0x1ec/0xe50 [ 572.820893][T11899] ? lock_chain_count+0x20/0x20 [ 572.825803][T11899] ? netlink_lookup+0x200/0x200 [ 572.830721][T11899] ? slab_free_freelist_hook+0x130/0x1a0 [ 572.836410][T11899] ? netlink_recvmsg+0x5e7/0xe60 [ 572.841405][T11899] ? kmem_cache_free+0xf8/0x270 [ 572.846314][T11899] netlink_recvmsg+0x693/0xe60 [ 572.851149][T11899] ? netlink_sendmsg+0xbf0/0xbf0 [ 572.856152][T11899] ? aa_af_perm+0x330/0x330 [ 572.860711][T11899] ? __lock_acquire+0x1273/0x7d40 [ 572.865880][T11899] ? verify_lock_unused+0x140/0x140 [ 572.871136][T11899] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 572.876466][T11899] ? security_socket_recvmsg+0x89/0xb0 [ 572.881964][T11899] ? netlink_sendmsg+0xbf0/0xbf0 [ 572.886964][T11899] ____sys_recvmsg+0x2ce/0x5e0 [ 572.891780][T11899] ? __sys_recvmsg_sock+0x50/0x50 [ 572.896907][T11899] ? import_iovec+0x73/0xa0 [ 572.901470][T11899] ___sys_recvmsg+0x216/0x590 [ 572.906235][T11899] ? __sys_recvmsg+0x2a0/0x2a0 [ 572.911048][T11899] ? ksys_write+0x1c4/0x260 [ 572.915643][T11899] ? __fget_files+0x43d/0x4b0 [ 572.920391][T11899] __x64_sys_recvmsg+0x20c/0x2e0 [ 572.925391][T11899] ? ___sys_recvmsg+0x590/0x590 [ 572.930348][T11899] ? lockdep_hardirqs_on+0x98/0x150 [ 572.935604][T11899] do_syscall_64+0x55/0xa0 [ 572.940074][T11899] ? clear_bhb_loop+0x40/0x90 [ 572.944815][T11899] ? clear_bhb_loop+0x40/0x90 [ 572.949561][T11899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.955501][T11899] RIP: 0033:0x7f80b759aeb9 [ 572.959967][T11899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.979647][T11899] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 572.988125][T11899] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 572.996271][T11899] RDX: 0000000000010000 RSI: 0000200000000300 RDI: 0000000000000003 [ 573.004309][T11899] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.012351][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.020373][T11899] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 573.028410][T11899] [ 573.428469][T11905] syzkaller0: entered promiscuous mode [ 573.434009][T11905] syzkaller0: entered allmulticast mode [ 575.711758][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 575.722214][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 575.733943][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 575.743757][T11913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 576.127380][T11921] netlink: 'syz.2.1737': attribute type 2 has an invalid length. [ 576.136684][T11921] netlink: 'syz.2.1737': attribute type 8 has an invalid length. [ 576.144664][T11921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 576.429954][T11927] syzkaller0: entered promiscuous mode [ 576.452002][T11927] syzkaller0: entered allmulticast mode [ 576.604193][T11936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1743'. [ 578.786692][T11936] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1743'. [ 578.797067][T11938] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 578.805670][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 578.823421][T11938] bridge0: port 3(ipvlan1) entered blocking state [ 578.856902][T11938] bridge0: port 3(ipvlan1) entered disabled state [ 578.863969][T11938] ipvlan1: entered allmulticast mode [ 578.875433][T11938] veth0_vlan: entered allmulticast mode [ 578.882785][T11938] ipvlan1: left allmulticast mode [ 578.888700][T11938] veth0_vlan: left allmulticast mode [ 578.895689][T11938] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 579.111090][T11954] netlink: 'syz.2.1750': attribute type 2 has an invalid length. [ 579.175001][T11954] netlink: 'syz.2.1750': attribute type 8 has an invalid length. [ 579.182829][T11954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1750'. [ 579.932683][T11966] FAULT_INJECTION: forcing a failure. [ 579.932683][T11966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.973604][T11966] CPU: 1 PID: 11966 Comm: syz.4.1755 Not tainted syzkaller #0 [ 579.981141][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.991254][T11966] Call Trace: [ 579.994572][T11966] [ 579.997541][T11966] dump_stack_lvl+0x18c/0x250 [ 580.002265][T11966] ? show_regs_print_info+0x20/0x20 [ 580.007508][T11966] ? load_image+0x400/0x400 [ 580.012049][T11966] ? __might_fault+0xaa/0x120 [ 580.016768][T11966] ? __lock_acquire+0x7d40/0x7d40 [ 580.021840][T11966] should_fail_ex+0x39d/0x4d0 [ 580.026560][T11966] _copy_from_user+0x2f/0xe0 [ 580.031179][T11966] kstrtouint_from_user+0xde/0x170 [ 580.036319][T11966] ? kstrtol_from_user+0x190/0x190 [ 580.041472][T11966] proc_fail_nth_write+0x8f/0x250 [ 580.046549][T11966] ? proc_fail_nth_read+0x260/0x260 [ 580.051828][T11966] ? proc_fail_nth_read+0x260/0x260 [ 580.057058][T11966] vfs_write+0x296/0x990 [ 580.061350][T11966] ? file_end_write+0x250/0x250 [ 580.066229][T11966] ? __fget_files+0x28/0x4b0 [ 580.070835][T11966] ? __fget_files+0x28/0x4b0 [ 580.075462][T11966] ? __fget_files+0x43d/0x4b0 [ 580.080204][T11966] ? __fdget_pos+0x2a3/0x330 [ 580.084819][T11966] ? ksys_write+0x75/0x260 [ 580.089264][T11966] ksys_write+0x150/0x260 [ 580.093623][T11966] ? __ia32_sys_read+0x90/0x90 [ 580.098421][T11966] ? lockdep_hardirqs_on+0x98/0x150 [ 580.103638][T11966] do_syscall_64+0x55/0xa0 [ 580.108077][T11966] ? clear_bhb_loop+0x40/0x90 [ 580.112769][T11966] ? clear_bhb_loop+0x40/0x90 [ 580.117476][T11966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.123423][T11966] RIP: 0033:0x7f5bcb55b78e [ 580.127860][T11966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 580.147569][T11966] RSP: 002b:00007f5bcc53efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 580.156003][T11966] RAX: ffffffffffffffda RBX: 00007f5bcc53f6c0 RCX: 00007f5bcb55b78e [ 580.163990][T11966] RDX: 0000000000000001 RSI: 00007f5bcc53f0a0 RDI: 0000000000000007 [ 580.171979][T11966] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 580.179967][T11966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.187957][T11966] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 580.195968][T11966] [ 580.479871][T11973] FAULT_INJECTION: forcing a failure. [ 580.479871][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 580.492907][T11973] CPU: 0 PID: 11973 Comm: syz.2.1758 Not tainted syzkaller #0 [ 580.500425][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.510527][T11973] Call Trace: [ 580.513843][T11973] [ 580.516821][T11973] dump_stack_lvl+0x18c/0x250 [ 580.521605][T11973] ? show_regs_print_info+0x20/0x20 [ 580.526857][T11973] ? load_image+0x400/0x400 [ 580.531414][T11973] ? lockdep_hardirqs_on+0x98/0x150 [ 580.536681][T11973] should_fail_ex+0x39d/0x4d0 [ 580.541440][T11973] should_failslab+0x9/0x20 [ 580.546001][T11973] slab_pre_alloc_hook+0x59/0x310 [ 580.551086][T11973] ? tomoyo_encode+0x28b/0x540 [ 580.555901][T11973] ? tomoyo_encode+0x28b/0x540 [ 580.560707][T11973] __kmem_cache_alloc_node+0x53/0x250 [ 580.566137][T11973] ? tomoyo_encode+0x28b/0x540 [ 580.570939][T11973] __kmalloc+0xa4/0x230 [ 580.575152][T11973] tomoyo_encode+0x28b/0x540 [ 580.579795][T11973] tomoyo_realpath_from_path+0x592/0x5d0 [ 580.585487][T11973] tomoyo_path_number_perm+0x248/0x620 [ 580.591002][T11973] ? tomoyo_path_number_perm+0x217/0x620 [ 580.596697][T11973] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 580.602215][T11973] ? ksys_write+0x1c4/0x260 [ 580.606815][T11973] ? __fget_files+0x28/0x4b0 [ 580.611449][T11973] ? __fget_files+0x28/0x4b0 [ 580.616102][T11973] security_file_ioctl+0x70/0xa0 [ 580.621097][T11973] __se_sys_ioctl+0x48/0x170 [ 580.625734][T11973] do_syscall_64+0x55/0xa0 [ 580.630195][T11973] ? clear_bhb_loop+0x40/0x90 [ 580.634918][T11973] ? clear_bhb_loop+0x40/0x90 [ 580.639650][T11973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 580.645597][T11973] RIP: 0033:0x7f7751f9aeb9 [ 580.650056][T11973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.669712][T11973] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.678161][T11973] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 580.686141][T11973] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000008 [ 580.694135][T11973] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 580.702157][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.710168][T11973] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 580.718194][T11973] [ 580.738271][T11973] ERROR: Out of memory at tomoyo_realpath_from_path. [ 580.805314][T11975] netlink: 'syz.3.1759': attribute type 10 has an invalid length. [ 580.813228][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1759'. [ 580.851165][T11975] bridge0: port 3(ipvlan1) entered blocking state [ 580.882016][T11975] bridge0: port 3(ipvlan1) entered disabled state [ 580.893284][T11975] ipvlan1: entered allmulticast mode [ 580.900059][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 580.909179][T11975] veth0_vlan: entered allmulticast mode [ 580.917614][T11975] ipvlan1: left allmulticast mode [ 580.922701][T11975] veth0_vlan: left allmulticast mode [ 580.928696][T11975] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 580.959765][T11980] netlink: 'syz.4.1761': attribute type 2 has an invalid length. [ 580.972003][T11980] netlink: 'syz.4.1761': attribute type 8 has an invalid length. [ 580.980318][T11980] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1761'. [ 580.992793][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 581.018014][T11982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 581.028606][T11979] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 581.258875][T11988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1764'. [ 581.268685][T11988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1764'. [ 581.279578][T11988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1764'. [ 581.304037][T11988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1764'. [ 582.536716][T12004] netlink: 'syz.4.1769': attribute type 3 has an invalid length. [ 582.702267][T12008] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 582.735783][T12008] bridge0: port 3(ipvlan1) entered blocking state [ 582.742899][T12008] bridge0: port 3(ipvlan1) entered disabled state [ 582.752849][T12008] ipvlan1: entered allmulticast mode [ 582.761677][T12008] veth0_vlan: entered allmulticast mode [ 582.779967][T12008] ipvlan1: left allmulticast mode [ 582.786463][T12008] veth0_vlan: left allmulticast mode [ 582.798020][T12008] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 582.822747][T12010] netlink: 'syz.2.1772': attribute type 2 has an invalid length. [ 582.831488][T12010] netlink: 'syz.2.1772': attribute type 8 has an invalid length. [ 582.993187][T12015] netlink: 'syz.4.1776': attribute type 33 has an invalid length. [ 584.221019][T12028] FAULT_INJECTION: forcing a failure. [ 584.221019][T12028] name failslab, interval 1, probability 0, space 0, times 0 [ 584.239894][T12028] CPU: 0 PID: 12028 Comm: syz.3.1782 Not tainted syzkaller #0 [ 584.247532][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.257641][T12028] Call Trace: [ 584.260984][T12028] [ 584.263954][T12028] dump_stack_lvl+0x18c/0x250 [ 584.268687][T12028] ? show_regs_print_info+0x20/0x20 [ 584.273929][T12028] ? load_image+0x400/0x400 [ 584.278470][T12028] ? __lock_acquire+0x7d40/0x7d40 [ 584.283617][T12028] ? __asan_memset+0x22/0x40 [ 584.288239][T12028] should_fail_ex+0x39d/0x4d0 [ 584.292952][T12028] should_failslab+0x9/0x20 [ 584.297503][T12028] slab_pre_alloc_hook+0x59/0x310 [ 584.302569][T12028] kmem_cache_alloc+0x5a/0x2d0 [ 584.307362][T12028] ? security_inode_alloc+0x34/0x110 [ 584.312672][T12028] security_inode_alloc+0x34/0x110 [ 584.317813][T12028] inode_init_always+0x8fc/0xc90 [ 584.322822][T12028] new_inode_pseudo+0x95/0x1d0 [ 584.327621][T12028] __sock_create+0x12d/0x940 [ 584.332262][T12028] __sys_socketpair+0x236/0x550 [ 584.337161][T12028] __x64_sys_socketpair+0x9b/0xb0 [ 584.342224][T12028] do_syscall_64+0x55/0xa0 [ 584.346668][T12028] ? clear_bhb_loop+0x40/0x90 [ 584.351363][T12028] ? clear_bhb_loop+0x40/0x90 [ 584.356059][T12028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.361983][T12028] RIP: 0033:0x7f80b759aeb9 [ 584.366446][T12028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.386084][T12028] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 584.394524][T12028] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 584.402521][T12028] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000025 [ 584.410521][T12028] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 584.418512][T12028] R10: 0000200000001600 R11: 0000000000000246 R12: 0000000000000001 [ 584.426513][T12028] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 584.434536][T12028] [ 584.471988][T12028] socket: no more sockets [ 584.492233][T12031] netlink: 'syz.2.1781': attribute type 29 has an invalid length. [ 584.501297][T12031] netlink: 'syz.2.1781': attribute type 3 has an invalid length. [ 584.616236][T12034] netlink: 'syz.4.1783': attribute type 2 has an invalid length. [ 584.624145][T12034] netlink: 'syz.4.1783': attribute type 8 has an invalid length. [ 584.699441][T12039] FAULT_INJECTION: forcing a failure. [ 584.699441][T12039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.717041][T12039] CPU: 0 PID: 12039 Comm: syz.2.1785 Not tainted syzkaller #0 [ 584.724659][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.734765][T12039] Call Trace: [ 584.738078][T12039] [ 584.741034][T12039] dump_stack_lvl+0x18c/0x250 [ 584.745752][T12039] ? show_regs_print_info+0x20/0x20 [ 584.750984][T12039] ? load_image+0x400/0x400 [ 584.755517][T12039] ? __might_fault+0xaa/0x120 [ 584.760217][T12039] ? __lock_acquire+0x7d40/0x7d40 [ 584.765279][T12039] should_fail_ex+0x39d/0x4d0 [ 584.770028][T12039] _copy_from_user+0x2f/0xe0 [ 584.774667][T12039] bpf_prog_test_run_xdp+0xd77/0x10e0 [ 584.780111][T12039] ? dev_put+0x80/0x80 [ 584.784256][T12039] ? dev_put+0x80/0x80 [ 584.788360][T12039] bpf_prog_test_run+0x321/0x390 [ 584.793332][T12039] __sys_bpf+0x49d/0x890 [ 584.797613][T12039] ? bpf_link_show_fdinfo+0x390/0x390 [ 584.803032][T12039] ? lock_chain_count+0x20/0x20 [ 584.807918][T12039] __x64_sys_bpf+0x7c/0x90 [ 584.812356][T12039] do_syscall_64+0x55/0xa0 [ 584.816799][T12039] ? clear_bhb_loop+0x40/0x90 [ 584.821503][T12039] ? clear_bhb_loop+0x40/0x90 [ 584.826245][T12039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.832168][T12039] RIP: 0033:0x7f7751f9aeb9 [ 584.836605][T12039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.856241][T12039] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.864684][T12039] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 584.872687][T12039] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 584.880695][T12039] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 584.888702][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.896724][T12039] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 584.904761][T12039] [ 588.049533][T12070] netlink: 'syz.4.1797': attribute type 10 has an invalid length. [ 588.998772][T12091] __nla_validate_parse: 15 callbacks suppressed [ 588.998787][T12091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1807'. [ 589.032834][T12091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1807'. [ 589.049305][T12091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1807'. [ 589.166997][T12091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1807'. [ 589.296670][T12098] FAULT_INJECTION: forcing a failure. [ 589.296670][T12098] name failslab, interval 1, probability 0, space 0, times 0 [ 589.356541][T12098] CPU: 0 PID: 12098 Comm: syz.4.1810 Not tainted syzkaller #0 [ 589.364071][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.374175][T12098] Call Trace: [ 589.377517][T12098] [ 589.380491][T12098] dump_stack_lvl+0x18c/0x250 [ 589.385233][T12098] ? show_regs_print_info+0x20/0x20 [ 589.390500][T12098] ? load_image+0x400/0x400 [ 589.395060][T12098] ? __might_sleep+0xe0/0xe0 [ 589.399705][T12098] ? __lock_acquire+0x7d40/0x7d40 [ 589.404788][T12098] should_fail_ex+0x39d/0x4d0 [ 589.409535][T12098] should_failslab+0x9/0x20 [ 589.414107][T12098] slab_pre_alloc_hook+0x59/0x310 [ 589.419198][T12098] kmem_cache_alloc+0x5a/0x2d0 [ 589.424035][T12098] ? security_inode_alloc+0x34/0x110 [ 589.429370][T12098] security_inode_alloc+0x34/0x110 [ 589.434527][T12098] inode_init_always+0x8fc/0xc90 [ 589.439504][T12098] new_inode_pseudo+0x95/0x1d0 [ 589.444304][T12098] __sock_create+0x12d/0x940 [ 589.448936][T12098] ? __asan_memset+0x22/0x40 [ 589.453562][T12098] udp_sock_create4+0xcb/0x480 [ 589.458371][T12098] ? erspan_exit_batch_net+0x30/0x30 [ 589.463727][T12098] rxrpc_lookup_local+0xd1f/0x1610 [ 589.468883][T12098] ? rxrpc_local_dont_fragment+0x70/0x70 [ 589.474558][T12098] ? lockdep_hardirqs_on+0x98/0x150 [ 589.479788][T12098] ? _local_bh_enable+0xa0/0xa0 [ 589.484681][T12098] rxrpc_sendmsg+0x30a/0x5b0 [ 589.489314][T12098] ? rxrpc_getsockopt+0x150/0x150 [ 589.494371][T12098] ____sys_sendmsg+0x5ba/0x960 [ 589.499184][T12098] ? __sys_sendmsg_sock+0x30/0x30 [ 589.504298][T12098] ? __import_iovec+0x3fa/0x850 [ 589.509185][T12098] ? import_iovec+0x73/0xa0 [ 589.513717][T12098] ___sys_sendmsg+0x2a6/0x360 [ 589.518418][T12098] ? get_pid_task+0x20/0x1e0 [ 589.523031][T12098] ? __sys_sendmsg+0x2a0/0x2a0 [ 589.527860][T12098] ? __lock_acquire+0x7d40/0x7d40 [ 589.532938][T12098] __se_sys_sendmsg+0x1c2/0x2b0 [ 589.537817][T12098] ? __x64_sys_sendmsg+0x80/0x80 [ 589.542803][T12098] ? lockdep_hardirqs_on+0x98/0x150 [ 589.548018][T12098] do_syscall_64+0x55/0xa0 [ 589.552461][T12098] ? clear_bhb_loop+0x40/0x90 [ 589.557178][T12098] ? clear_bhb_loop+0x40/0x90 [ 589.561884][T12098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.567820][T12098] RIP: 0033:0x7f5bcb59aeb9 [ 589.572262][T12098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.591974][T12098] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.600415][T12098] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 589.608414][T12098] RDX: 0000000000000000 RSI: 0000200000002780 RDI: 0000000000000003 [ 589.616406][T12098] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 589.624401][T12098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.632394][T12098] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 589.640439][T12098] [ 589.663587][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1811'. [ 589.685590][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1811'. [ 589.711695][T12098] socket: no more sockets [ 589.722822][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1811'. [ 589.757930][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1811'. [ 592.136279][T12122] netlink: 'syz.2.1819': attribute type 23 has an invalid length. [ 592.148786][T12131] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1823'. [ 592.347399][T12138] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1826'. [ 592.385859][T12136] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.428265][T12141] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 592.561471][T12138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.652511][T12138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.723836][T12138] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 592.752534][T12138] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 592.773978][T12138] bond0 (unregistering): Released all slaves [ 592.813954][T12141] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 592.829461][T12134] netlink: 'syz.4.1824': attribute type 10 has an invalid length. [ 592.848364][T12145] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 592.873422][T12148] netlink: 'syz.3.1826': attribute type 29 has an invalid length. [ 593.216369][T12168] FAULT_INJECTION: forcing a failure. [ 593.216369][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 593.232926][T12168] CPU: 0 PID: 12168 Comm: syz.2.1833 Not tainted syzkaller #0 [ 593.240436][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.250516][T12168] Call Trace: [ 593.253816][T12168] [ 593.256755][T12168] dump_stack_lvl+0x18c/0x250 [ 593.261449][T12168] ? show_regs_print_info+0x20/0x20 [ 593.266668][T12168] ? load_image+0x400/0x400 [ 593.271199][T12168] ? __might_fault+0xaa/0x120 [ 593.275906][T12168] ? __lock_acquire+0x7d40/0x7d40 [ 593.281212][T12168] should_fail_ex+0x39d/0x4d0 [ 593.285925][T12168] _copy_from_iter+0x1d9/0x12e0 [ 593.290826][T12168] ? slab_post_alloc_hook+0x8a/0x4b0 [ 593.296162][T12168] ? __virt_addr_valid+0x18c/0x540 [ 593.301332][T12168] ? __lock_acquire+0x7d40/0x7d40 [ 593.306394][T12168] ? rcu_is_watching+0x15/0xb0 [ 593.311185][T12168] ? copyout_mc+0x70/0x70 [ 593.315541][T12168] ? __virt_addr_valid+0x18c/0x540 [ 593.320680][T12168] ? __virt_addr_valid+0x18c/0x540 [ 593.325820][T12168] ? __virt_addr_valid+0x469/0x540 [ 593.330964][T12168] ? __check_object_size+0x506/0xa20 [ 593.336282][T12168] netlink_sendmsg+0x76b/0xbf0 [ 593.341182][T12168] ? netlink_getsockopt+0x590/0x590 [ 593.346437][T12168] ? aa_sock_msg_perm+0x94/0x150 [ 593.351401][T12168] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 593.356715][T12168] ? security_socket_sendmsg+0x80/0xa0 [ 593.362194][T12168] ? netlink_getsockopt+0x590/0x590 [ 593.367422][T12168] ____sys_sendmsg+0x5ba/0x960 [ 593.372226][T12168] ? __asan_memset+0x22/0x40 [ 593.376841][T12168] ? __sys_sendmsg_sock+0x30/0x30 [ 593.381897][T12168] ? __import_iovec+0x5f2/0x850 [ 593.386794][T12168] ? import_iovec+0x73/0xa0 [ 593.391331][T12168] ___sys_sendmsg+0x2a6/0x360 [ 593.396038][T12168] ? get_pid_task+0x20/0x1e0 [ 593.400656][T12168] ? __sys_sendmsg+0x2a0/0x2a0 [ 593.405479][T12168] ? __lock_acquire+0x7d40/0x7d40 [ 593.410547][T12168] __se_sys_sendmsg+0x1c2/0x2b0 [ 593.415432][T12168] ? __x64_sys_sendmsg+0x80/0x80 [ 593.420434][T12168] ? lockdep_hardirqs_on+0x98/0x150 [ 593.425660][T12168] do_syscall_64+0x55/0xa0 [ 593.430126][T12168] ? clear_bhb_loop+0x40/0x90 [ 593.434834][T12168] ? clear_bhb_loop+0x40/0x90 [ 593.439540][T12168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 593.445476][T12168] RIP: 0033:0x7f7751f9aeb9 [ 593.449923][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.469571][T12168] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 593.478008][T12168] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 593.486005][T12168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 593.494006][T12168] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 593.502005][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.509994][T12168] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 593.518004][T12168] [ 593.555306][T12167] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 593.607882][T12167] geneve0: entered promiscuous mode [ 593.866908][T12167] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 594.695795][T12183] __nla_validate_parse: 4 callbacks suppressed [ 594.695812][T12183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 594.725434][T12183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 594.782793][T12184] syzkaller0: entered promiscuous mode [ 594.788703][T12184] syzkaller0: entered allmulticast mode [ 594.801005][T12183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 595.209678][T12199] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1843'. [ 596.692741][T12183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1839'. [ 596.711618][T12188] netlink: 'syz.2.1841': attribute type 10 has an invalid length. [ 596.816008][T12201] netlink: 'syz.2.1845': attribute type 2 has an invalid length. [ 596.834601][T12201] netlink: 'syz.2.1845': attribute type 8 has an invalid length. [ 596.842481][T12201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1845'. [ 596.952924][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1847'. [ 596.962615][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1847'. [ 596.973340][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1847'. [ 596.983605][T12208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1847'. [ 597.614795][T12228] netlink: 'syz.3.1855': attribute type 10 has an invalid length. [ 597.642258][T12228] geneve0: entered promiscuous mode [ 597.937649][T12234] netlink: 'syz.1.1857': attribute type 2 has an invalid length. [ 597.949663][T12234] netlink: 'syz.1.1857': attribute type 8 has an invalid length. [ 598.353104][T12242] IPv6: WEäŒê>¾…: Disabled Multicast RS [ 598.662104][T12250] netlink: 'syz.2.1864': attribute type 3 has an invalid length. [ 598.670460][T12250] netlink: 'syz.2.1864': attribute type 8 has an invalid length. [ 598.801676][T12257] netlink: 'syz.3.1868': attribute type 2 has an invalid length. [ 598.819922][T12257] netlink: 'syz.3.1868': attribute type 8 has an invalid length. [ 598.925086][T12260] netlink: 'syz.2.1867': attribute type 10 has an invalid length. [ 598.959375][T12260] geneve0: entered promiscuous mode [ 599.193303][T12260] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 599.262231][T12270] netlink: 'syz.4.1870': attribute type 29 has an invalid length. [ 599.353583][T12267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.431480][T12267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.492834][T12267] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 599.532382][T12267] bond0 (unregistering): (slave team0): Releasing backup interface [ 599.700611][T12267] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 599.771482][T12285] __nla_validate_parse: 16 callbacks suppressed [ 599.771501][T12285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 599.788065][T12267] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 599.801019][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.809201][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.841796][T12267] bond0 (unregistering): Released all slaves [ 599.871895][T12270] netlink: 'syz.4.1870': attribute type 29 has an invalid length. [ 599.892651][T12268] netlink: 'syz.3.1869': attribute type 10 has an invalid length. [ 599.931202][T12285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 599.953228][T12272] netlink: 'syz.4.1870': attribute type 29 has an invalid length. [ 599.965585][T12286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 599.976887][T12274] netlink: 'syz.4.1870': attribute type 29 has an invalid length. [ 599.986979][T12287] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 600.030973][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1876'. [ 600.047766][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1876'. [ 600.116422][T12290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1876'. [ 600.140110][T12294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1878'. [ 600.169661][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1876'. [ 600.302193][T12298] bond0: entered promiscuous mode [ 600.324494][T12298] bond_slave_0: entered promiscuous mode [ 600.330402][T12298] bond_slave_1: entered promiscuous mode [ 600.362097][T12298] batadv_slave_0: entered promiscuous mode [ 600.383888][T12298] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 600.393975][T12298] bridge_slave_1: entered promiscuous mode [ 600.620291][T12311] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1886'. [ 600.887760][T12313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.901391][T12313] bond_slave_0: left promiscuous mode [ 600.960990][T12313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.975450][T12313] bond_slave_1: left promiscuous mode [ 601.053693][T12313] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 601.066998][T12313] batadv_slave_0: left promiscuous mode [ 601.082103][T12313] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 601.092655][T12313] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 601.148223][T12313] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 601.167044][T12313] bridge_slave_1: left promiscuous mode [ 601.201557][T12313] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 601.232703][T12313] bond0 (unregistering): Released all slaves [ 601.713417][T12343] bond0: entered promiscuous mode [ 601.724386][T12343] bond_slave_0: entered promiscuous mode [ 601.730282][T12343] bond_slave_1: entered promiscuous mode [ 601.736704][T12343] batadv_slave_0: entered promiscuous mode [ 604.576448][T12407] validate_nla: 22 callbacks suppressed [ 604.576464][T12407] netlink: 'syz.4.1920': attribute type 2 has an invalid length. [ 604.614375][T12407] netlink: 'syz.4.1920': attribute type 8 has an invalid length. [ 605.012621][T12422] netlink: 'syz.4.1924': attribute type 3 has an invalid length. [ 605.021895][T12422] netlink: 'syz.4.1924': attribute type 8 has an invalid length. [ 605.032005][T12422] __nla_validate_parse: 44 callbacks suppressed [ 605.032041][T12422] netlink: 197324 bytes leftover after parsing attributes in process `syz.4.1924'. [ 605.064552][T12424] netlink: 'syz.2.1927': attribute type 21 has an invalid length. [ 605.076528][T12424] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.1927'. [ 605.235335][T12431] netlink: 'syz.4.1929': attribute type 10 has an invalid length. [ 605.251738][T12431] team0: Device veth1_macvtap failed to register rx_handler [ 605.390848][T12434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1930'. [ 605.544095][T12436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1931'. [ 605.574489][T12436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1931'. [ 605.614982][T12438] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1931'. [ 605.658835][T12436] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1931'. [ 605.704862][T12442] netlink: 'syz.2.1932': attribute type 2 has an invalid length. [ 605.722965][T12442] netlink: 'syz.2.1932': attribute type 8 has an invalid length. [ 605.923612][T12442] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1932'. [ 606.348882][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.392963][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.400291][ T5068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.569983][T12458] netlink: 'syz.3.1938': attribute type 3 has an invalid length. [ 606.578853][T12458] netlink: 'syz.3.1938': attribute type 8 has an invalid length. [ 606.588902][T12458] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.1938'. [ 606.766482][T12465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1941'. [ 607.313978][T12480] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 607.454697][T12483] FAULT_INJECTION: forcing a failure. [ 607.454697][T12483] name failslab, interval 1, probability 0, space 0, times 0 [ 607.498094][T12483] CPU: 0 PID: 12483 Comm: syz.2.1948 Not tainted syzkaller #0 [ 607.505639][T12483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.515737][T12483] Call Trace: [ 607.519069][T12483] [ 607.522031][T12483] dump_stack_lvl+0x18c/0x250 [ 607.526765][T12483] ? stack_trace_snprint+0xf0/0xf0 [ 607.531934][T12483] ? show_regs_print_info+0x20/0x20 [ 607.537182][T12483] ? load_image+0x400/0x400 [ 607.541805][T12483] should_fail_ex+0x39d/0x4d0 [ 607.546525][T12483] should_failslab+0x9/0x20 [ 607.551062][T12483] slab_pre_alloc_hook+0x59/0x310 [ 607.556135][T12483] ? __hw_addr_add_ex+0x202/0x710 [ 607.561183][T12483] __kmem_cache_alloc_node+0x53/0x250 [ 607.566585][T12483] ? __hw_addr_add_ex+0x202/0x710 [ 607.571630][T12483] kmalloc_trace+0x2a/0xe0 [ 607.576093][T12483] __hw_addr_add_ex+0x202/0x710 [ 607.580981][T12483] dev_addr_init+0x15f/0x240 [ 607.585599][T12483] ? dev_addr_flush+0x210/0x210 [ 607.590499][T12483] alloc_netdev_mqs+0x2e4/0x1040 [ 607.595474][T12483] ? ppp_ccp_closed+0x270/0x270 [ 607.600351][T12483] ppp_ioctl+0x66c/0x1a90 [ 607.604712][T12483] ? ppp_poll+0x250/0x250 [ 607.609069][T12483] ? __fget_files+0x28/0x4b0 [ 607.613700][T12483] ? bpf_lsm_file_ioctl+0x9/0x10 [ 607.618667][T12483] ? security_file_ioctl+0x80/0xa0 [ 607.623826][T12483] ? ppp_poll+0x250/0x250 [ 607.628185][T12483] __se_sys_ioctl+0xfd/0x170 [ 607.632835][T12483] do_syscall_64+0x55/0xa0 [ 607.637285][T12483] ? clear_bhb_loop+0x40/0x90 [ 607.641982][T12483] ? clear_bhb_loop+0x40/0x90 [ 607.646681][T12483] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.652603][T12483] RIP: 0033:0x7f7751f9aeb9 [ 607.657046][T12483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.676669][T12483] RSP: 002b:00007f7752ed0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.685111][T12483] RAX: ffffffffffffffda RBX: 00007f7752216090 RCX: 00007f7751f9aeb9 [ 607.693106][T12483] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 607.701092][T12483] RBP: 00007f7752ed0090 R08: 0000000000000000 R09: 0000000000000000 [ 607.709082][T12483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.717068][T12483] R13: 00007f7752216128 R14: 00007f7752216090 R15: 00007fffee64aa08 [ 607.725074][T12483] [ 609.905288][T12517] validate_nla: 4 callbacks suppressed [ 609.905386][T12517] netlink: 'syz.4.1962': attribute type 10 has an invalid length. [ 610.219779][T12537] netlink: 'syz.4.1968': attribute type 2 has an invalid length. [ 610.244435][T12537] netlink: 'syz.4.1968': attribute type 8 has an invalid length. [ 610.252256][T12537] __nla_validate_parse: 15 callbacks suppressed [ 610.252270][T12537] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1968'. [ 610.679487][T12548] netlink: 'syz.1.1974': attribute type 21 has an invalid length. [ 610.708447][T12550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1975'. [ 610.908267][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1977'. [ 610.994586][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1977'. [ 611.037343][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1977'. [ 611.082565][T12558] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1977'. [ 611.620307][T12553] netlink: 'syz.3.1976': attribute type 10 has an invalid length. [ 611.630344][T12569] netlink: 'syz.2.1981': attribute type 2 has an invalid length. [ 611.649328][T12569] netlink: 'syz.2.1981': attribute type 8 has an invalid length. [ 611.660023][T12569] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1981'. [ 611.806980][T12572] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1983'. [ 611.948173][T12581] netlink: 'syz.2.1984': attribute type 2 has an invalid length. [ 611.984586][T12581] netlink: 'syz.2.1984': attribute type 8 has an invalid length. [ 612.007132][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1984'. [ 612.137652][T12586] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1987'. [ 612.694845][T12600] netlink: 'syz.3.1992': attribute type 2 has an invalid length. [ 615.313303][T12658] validate_nla: 8 callbacks suppressed [ 615.313322][T12658] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 615.384385][T12658] netlink: 'syz.4.2016': attribute type 8 has an invalid length. [ 615.419028][T12658] __nla_validate_parse: 19 callbacks suppressed [ 615.419044][T12658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2016'. [ 615.635180][T12664] syzkaller0: entered promiscuous mode [ 615.659993][T12664] syzkaller0: entered allmulticast mode [ 615.854069][T12669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2020'. [ 616.530694][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'. [ 616.855004][T12693] netlink: 'syz.2.2027': attribute type 3 has an invalid length. [ 616.871685][T12693] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2027'. [ 618.612586][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2026'. [ 618.627759][T12691] netlink: 'syz.2.2027': attribute type 7 has an invalid length. [ 618.645182][T12693] netlink: 'syz.2.2027': attribute type 10 has an invalid length. [ 618.653069][T12693] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2027'. [ 618.698485][T12693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.715644][T12693] bridge0: port 3(bond0) entered blocking state [ 618.722251][T12693] bridge0: port 3(bond0) entered disabled state [ 618.736909][T12693] bond0: entered allmulticast mode [ 618.742175][T12693] bond_slave_0: entered allmulticast mode [ 618.751656][T12693] bond_slave_1: entered allmulticast mode [ 618.762606][T12693] batadv_slave_0: entered allmulticast mode [ 618.792770][T12693] geneve0: entered allmulticast mode [ 618.810627][T12693] bridge0: port 3(bond0) entered blocking state [ 618.817160][T12693] bridge0: port 3(bond0) entered forwarding state [ 618.838447][T12696] netlink: 'syz.3.2028': attribute type 2 has an invalid length. [ 618.864624][T12696] netlink: 'syz.3.2028': attribute type 8 has an invalid length. [ 618.877452][T12696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2028'. [ 619.056264][T12703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2031'. [ 619.277003][T12709] FAULT_INJECTION: forcing a failure. [ 619.277003][T12709] name failslab, interval 1, probability 0, space 0, times 0 [ 619.312401][T12709] CPU: 0 PID: 12709 Comm: syz.4.2032 Not tainted syzkaller #0 [ 619.319991][T12709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.330123][T12709] Call Trace: [ 619.333482][T12709] [ 619.336494][T12709] dump_stack_lvl+0x18c/0x250 [ 619.341265][T12709] ? show_regs_print_info+0x20/0x20 [ 619.346563][T12709] ? load_image+0x400/0x400 [ 619.351161][T12709] ? __might_sleep+0xe0/0xe0 [ 619.355849][T12709] ? __lock_acquire+0x7d40/0x7d40 [ 619.360963][T12709] should_fail_ex+0x39d/0x4d0 [ 619.365740][T12709] should_failslab+0x9/0x20 [ 619.370313][T12709] slab_pre_alloc_hook+0x59/0x310 [ 619.375425][T12709] ? __lock_acquire+0x7d40/0x7d40 [ 619.380554][T12709] kmem_cache_alloc_node+0x60/0x320 [ 619.385842][T12709] ? __alloc_skb+0x103/0x2c0 [ 619.390536][T12709] __alloc_skb+0x103/0x2c0 [ 619.395060][T12709] netlink_sendmsg+0x66a/0xbf0 [ 619.399903][T12709] ? perf_trace_lock+0x304/0x3b0 [ 619.404966][T12709] ? netlink_getsockopt+0x590/0x590 [ 619.410254][T12709] ? aa_sock_msg_perm+0x94/0x150 [ 619.415273][T12709] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 619.420647][T12709] ? security_socket_sendmsg+0x80/0xa0 [ 619.426172][T12709] ? netlink_getsockopt+0x590/0x590 [ 619.431480][T12709] ____sys_sendmsg+0x5ba/0x960 [ 619.436347][T12709] ? __asan_memset+0x22/0x40 [ 619.441058][T12709] ? __sys_sendmsg_sock+0x30/0x30 [ 619.446162][T12709] ? __import_iovec+0x3fa/0x850 [ 619.451124][T12709] ? import_iovec+0x73/0xa0 [ 619.455738][T12709] ___sys_sendmsg+0x2a6/0x360 [ 619.460535][T12709] ? __sys_sendmsg+0x2a0/0x2a0 [ 619.465493][T12709] ? __lock_acquire+0x7d40/0x7d40 [ 619.470673][T12709] __se_sys_sendmsg+0x1c2/0x2b0 [ 619.475621][T12709] ? __x64_sys_sendmsg+0x80/0x80 [ 619.480704][T12709] ? lockdep_hardirqs_on+0x98/0x150 [ 619.486000][T12709] do_syscall_64+0x55/0xa0 [ 619.490494][T12709] ? clear_bhb_loop+0x40/0x90 [ 619.495239][T12709] ? clear_bhb_loop+0x40/0x90 [ 619.499991][T12709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.505956][T12709] RIP: 0033:0x7f5bcb59aeb9 [ 619.510450][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.530136][T12709] RSP: 002b:00007f5bcc51e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.538640][T12709] RAX: ffffffffffffffda RBX: 00007f5bcb816090 RCX: 00007f5bcb59aeb9 [ 619.546682][T12709] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 619.554736][T12709] RBP: 00007f5bcc51e090 R08: 0000000000000000 R09: 0000000000000000 [ 619.562776][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.570818][T12709] R13: 00007f5bcb816128 R14: 00007f5bcb816090 R15: 00007ffe671de698 [ 619.578917][T12709] [ 620.256075][T12719] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2034'. [ 620.461068][T12721] netlink: 'syz.4.2036': attribute type 30 has an invalid length. [ 620.819073][T12725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2037'. [ 620.834543][T12725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2037'. [ 620.856616][T12725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2037'. [ 620.897030][T12725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2037'. [ 621.005450][T12727] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2038'. [ 621.449093][T12737] netlink: 'syz.3.2042': attribute type 7 has an invalid length. [ 621.464900][T12736] netlink: 'syz.2.2041': attribute type 2 has an invalid length. [ 621.477902][T12736] netlink: 'syz.2.2041': attribute type 8 has an invalid length. [ 621.486026][T12736] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2041'. [ 621.495713][T12740] netlink: 'syz.3.2042': attribute type 10 has an invalid length. [ 621.505791][T12740] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2042'. [ 621.971650][T12753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2047'. [ 622.030610][T12756] netlink: 'syz.3.2048': attribute type 9 has an invalid length. [ 622.038801][T12756] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2048'. [ 622.230378][T12761] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2049'. [ 622.254852][T12761] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 623.409278][ T5780] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 624.542886][T12769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.555329][T12769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.687298][T12763] netlink: 'syz.3.2048': attribute type 9 has an invalid length. [ 624.700635][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.700735][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.748858][T12773] netlink: 'syz.1.2053': attribute type 2 has an invalid length. [ 624.765031][T12773] netlink: 'syz.1.2053': attribute type 8 has an invalid length. [ 624.903166][T12775] netlink: 'syz.2.2054': attribute type 21 has an invalid length. [ 626.033832][T12797] __nla_validate_parse: 12 callbacks suppressed [ 626.033852][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 626.072930][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 626.105721][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 626.117894][T12797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2062'. [ 626.184751][T12789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2058'. [ 626.193850][T12789] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2058'. [ 626.309468][T12800] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2058'. [ 626.384825][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 626.552049][T12802] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2065'. [ 626.923849][T12806] validate_nla: 1 callbacks suppressed [ 626.923866][T12806] netlink: 'syz.1.2066': attribute type 2 has an invalid length. [ 626.943286][T12806] netlink: 'syz.1.2066': attribute type 8 has an invalid length. [ 626.951814][T12806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2066'. [ 627.174942][T12796] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 627.345885][T12814] netlink: 'syz.3.2068': attribute type 21 has an invalid length. [ 628.656119][T12832] netlink: 'syz.1.2075': attribute type 2 has an invalid length. [ 628.663953][T12832] netlink: 'syz.1.2075': attribute type 8 has an invalid length. [ 628.729678][T12836] netlink: 'syz.3.2076': attribute type 30 has an invalid length. [ 629.400968][T12842] syzkaller0: entered promiscuous mode [ 629.409726][T12842] syzkaller0: entered allmulticast mode [ 629.420189][T12846] netlink: 'syz.4.2079': attribute type 21 has an invalid length. [ 631.382011][T12838] netlink: 'syz.2.2077': attribute type 10 has an invalid length. [ 631.473073][T12858] __nla_validate_parse: 8 callbacks suppressed [ 631.473092][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2083'. [ 631.490819][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2083'. [ 631.515064][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2083'. [ 631.538779][T12858] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2083'. [ 631.594098][T12864] netlink: 'syz.1.2086': attribute type 2 has an invalid length. [ 631.605693][T12864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2086'. [ 632.319379][T12890] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2095'. [ 632.335303][T12885] syzkaller0: entered promiscuous mode [ 632.344466][T12885] syzkaller0: entered allmulticast mode [ 633.220619][T12897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 634.270056][T12876] validate_nla: 1 callbacks suppressed [ 634.270074][T12876] netlink: 'syz.3.2091': attribute type 10 has an invalid length. [ 634.283979][T12892] netlink: 'syz.4.2096': attribute type 2 has an invalid length. [ 634.292096][T12892] netlink: 'syz.4.2096': attribute type 8 has an invalid length. [ 634.303389][T12892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2096'. [ 634.318825][T12897] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2097'. [ 634.721921][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 634.746902][T12919] netlink: 'syz.1.2105': attribute type 9 has an invalid length. [ 635.705981][T12924] netlink: 'syz.1.2105': attribute type 9 has an invalid length. [ 635.706558][T12920] netlink: 'syz.4.2106': attribute type 10 has an invalid length. [ 635.839366][T12935] syzkaller0: entered promiscuous mode [ 635.845028][T12935] syzkaller0: entered allmulticast mode [ 635.862812][T12942] netlink: 'syz.3.2109': attribute type 2 has an invalid length. [ 635.885128][T12942] netlink: 'syz.3.2109': attribute type 8 has an invalid length. [ 638.225263][T12960] delete_channel: no stack [ 638.229963][T12960] delete_channel: no stack [ 638.336058][T12964] __nla_validate_parse: 7 callbacks suppressed [ 638.336074][T12964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2117'. [ 638.352485][T12964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2117'. [ 638.380036][T12964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2117'. [ 638.437434][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 638.530682][T12969] netlink: 'syz.4.2119': attribute type 9 has an invalid length. [ 638.538996][T12969] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2119'. [ 638.568039][T12968] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2118'. [ 638.694706][T12969] netlink: 'syz.4.2119': attribute type 9 has an invalid length. [ 638.702826][T12969] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2119'. [ 639.305578][T12973] netlink: 'syz.3.2120': attribute type 10 has an invalid length. [ 639.614491][T12980] syzkaller0: entered promiscuous mode [ 639.620159][T12980] syzkaller0: entered allmulticast mode [ 640.060016][T12996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2127'. [ 642.041611][T12996] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2127'. [ 642.061367][T13008] tap0: tun_chr_ioctl cmd 1074025677 [ 642.066977][T13008] tap0: linktype set to 778 [ 642.192694][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 642.509519][T13022] batman_adv: batadv0: Interface deactivated: €Â0 [ 642.534567][T13022] batman_adv: batadv0: Removing interface: €Â0 [ 643.369605][T13038] __nla_validate_parse: 1 callbacks suppressed [ 643.369623][T13038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 643.410740][T13038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 643.425807][T13038] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2138'. [ 643.437264][T13039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2139'. [ 643.447289][T13039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2139'. [ 643.480687][T13039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2139'. [ 643.703164][T13044] syzkaller0: entered promiscuous mode [ 643.708853][T13044] syzkaller0: entered allmulticast mode [ 644.336042][T13047] syz.1.2142[13047] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 646.160687][T13065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2149'. [ 646.232854][T13065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2149'. [ 646.392692][T13066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2149'. [ 646.703594][T13074] syzkaller0: entered promiscuous mode [ 646.709337][T13074] syzkaller0: entered allmulticast mode [ 648.427281][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2154'. [ 648.580341][T13084] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2157'. [ 648.616577][T13084] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2157'. [ 648.840285][T13095] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 649.027932][T13095] team0: Port device dummy0 added [ 649.046715][T13096] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 649.243935][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 649.484168][T13104] delete_channel: no stack [ 649.490776][T13104] delete_channel: no stack [ 649.710111][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 650.927669][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 651.341681][T13139] syzkaller0: entered promiscuous mode [ 651.352436][T13139] syzkaller0: entered allmulticast mode [ 651.876455][T13147] FAULT_INJECTION: forcing a failure. [ 651.876455][T13147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.891167][T13147] CPU: 0 PID: 13147 Comm: syz.3.2182 Not tainted syzkaller #0 [ 651.898717][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.908852][T13147] Call Trace: [ 651.912153][T13147] [ 651.915111][T13147] dump_stack_lvl+0x18c/0x250 [ 651.919846][T13147] ? show_regs_print_info+0x20/0x20 [ 651.925090][T13147] ? load_image+0x400/0x400 [ 651.929640][T13147] ? __lock_acquire+0x7d40/0x7d40 [ 651.934765][T13147] should_fail_ex+0x39d/0x4d0 [ 651.939517][T13147] _copy_from_user+0x2f/0xe0 [ 651.944144][T13147] __copy_msghdr+0x3bb/0x580 [ 651.948785][T13147] ___sys_sendmsg+0x214/0x360 [ 651.953522][T13147] ? __sys_sendmsg+0x2a0/0x2a0 [ 651.958363][T13147] ? __lock_acquire+0x7d40/0x7d40 [ 651.963603][T13147] __se_sys_sendmsg+0x1c2/0x2b0 [ 651.968549][T13147] ? __x64_sys_sendmsg+0x80/0x80 [ 651.973543][T13147] ? lockdep_hardirqs_on+0x98/0x150 [ 651.978806][T13147] ? __x64_sys_sendmsg+0x34/0x80 [ 651.983786][T13147] do_syscall_64+0x55/0xa0 [ 651.988244][T13147] ? clear_bhb_loop+0x40/0x90 [ 651.992950][T13147] ? clear_bhb_loop+0x40/0x90 [ 651.997666][T13147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.003652][T13147] RIP: 0033:0x7f80b759aeb9 [ 652.008102][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 652.027763][T13147] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.036236][T13147] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 652.044267][T13147] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 652.052268][T13147] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 652.060286][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.068287][T13147] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 652.076308][T13147] [ 653.651071][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2184'. [ 654.201498][T13168] netlink: 'syz.1.2191': attribute type 10 has an invalid length. [ 654.278514][T13168] bridge0: port 3(dummy0) entered disabled state [ 654.303051][T13168] dummy0: left allmulticast mode [ 654.312483][T13168] dummy0: left promiscuous mode [ 654.322590][T13168] bridge0: port 3(dummy0) entered disabled state [ 654.434072][T13168] team0: Port device dummy0 added [ 654.508799][T13168] netlink: 'syz.1.2191': attribute type 10 has an invalid length. [ 654.621519][T13168] syz.1.2191 (13168) used greatest stack depth: 17832 bytes left [ 655.548634][T13180] syzkaller0: entered promiscuous mode [ 655.554571][T13180] syzkaller0: entered allmulticast mode [ 658.939033][T13215] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2208'. [ 659.748433][T13224] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 659.780580][T13224] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2210'. [ 659.821964][T13228] FAULT_INJECTION: forcing a failure. [ 659.821964][T13228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.842818][T13228] CPU: 0 PID: 13228 Comm: syz.4.2212 Not tainted syzkaller #0 [ 659.850382][T13228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 659.860482][T13228] Call Trace: [ 659.863794][T13228] [ 659.866773][T13228] dump_stack_lvl+0x18c/0x250 [ 659.871491][T13228] ? show_regs_print_info+0x20/0x20 [ 659.876718][T13228] ? load_image+0x400/0x400 [ 659.881258][T13228] ? __might_fault+0xaa/0x120 [ 659.885956][T13228] ? __lock_acquire+0x7d40/0x7d40 [ 659.891006][T13228] should_fail_ex+0x39d/0x4d0 [ 659.895729][T13228] _copy_from_user+0x2f/0xe0 [ 659.900352][T13228] ___sys_sendmsg+0x1c7/0x360 [ 659.905068][T13228] ? get_pid_task+0x20/0x1e0 [ 659.909720][T13228] ? __sys_sendmsg+0x2a0/0x2a0 [ 659.914544][T13228] ? __lock_acquire+0x7d40/0x7d40 [ 659.919618][T13228] __se_sys_sendmsg+0x1c2/0x2b0 [ 659.924512][T13228] ? __x64_sys_sendmsg+0x80/0x80 [ 659.929492][T13228] ? lockdep_hardirqs_on+0x98/0x150 [ 659.934724][T13228] do_syscall_64+0x55/0xa0 [ 659.939176][T13228] ? clear_bhb_loop+0x40/0x90 [ 659.943886][T13228] ? clear_bhb_loop+0x40/0x90 [ 659.948600][T13228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.954523][T13228] RIP: 0033:0x7f5bcb59aeb9 [ 659.958972][T13228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.978714][T13228] RSP: 002b:00007f5bcc53f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.987174][T13228] RAX: ffffffffffffffda RBX: 00007f5bcb815fa0 RCX: 00007f5bcb59aeb9 [ 659.995201][T13228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 660.003194][T13228] RBP: 00007f5bcc53f090 R08: 0000000000000000 R09: 0000000000000000 [ 660.011200][T13228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.019197][T13228] R13: 00007f5bcb816038 R14: 00007f5bcb815fa0 R15: 00007ffe671de698 [ 660.027297][T13228] [ 660.317917][T13238] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2218'. [ 660.452382][T13242] netlink: 'syz.2.2219': attribute type 10 has an invalid length. [ 660.502558][T13242] team0: Port device dummy0 added [ 660.677141][T13251] netlink: 'syz.1.2224': attribute type 27 has an invalid length. [ 660.758297][ T5780] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 660.833672][T13242] netlink: 'syz.2.2219': attribute type 10 has an invalid length. [ 660.969726][T13242] bond0: (slave bond_slave_0): Releasing backup interface [ 661.043053][T13242] bond_slave_0: left promiscuous mode [ 661.066419][T13242] bond_slave_0: left allmulticast mode [ 661.132757][T13253] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2223'. [ 661.817828][ T5780] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 661.872710][T13274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2231'. [ 661.910270][T13274] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2231'. [ 662.270851][T13279] netlink: 'syz.2.2234': attribute type 7 has an invalid length. [ 662.305618][T13279] netlink: 'syz.2.2234': attribute type 10 has an invalid length. [ 662.313538][T13279] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2234'. [ 662.659912][T13287] : renamed from veth0_to_bond (while UP) [ 662.986080][T13295] FAULT_INJECTION: forcing a failure. [ 662.986080][T13295] name failslab, interval 1, probability 0, space 0, times 0 [ 663.008304][T13295] CPU: 0 PID: 13295 Comm: syz.2.2241 Not tainted syzkaller #0 [ 663.015856][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.025942][T13295] Call Trace: [ 663.029240][T13295] [ 663.032189][T13295] dump_stack_lvl+0x18c/0x250 [ 663.036906][T13295] ? show_regs_print_info+0x20/0x20 [ 663.042137][T13295] ? load_image+0x400/0x400 [ 663.046686][T13295] ? __might_sleep+0xe0/0xe0 [ 663.051297][T13295] ? __lock_acquire+0x7d40/0x7d40 [ 663.056344][T13295] should_fail_ex+0x39d/0x4d0 [ 663.061048][T13295] should_failslab+0x9/0x20 [ 663.065575][T13295] slab_pre_alloc_hook+0x59/0x310 [ 663.070636][T13295] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 663.076213][T13295] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 663.081782][T13295] __kmem_cache_alloc_node+0x53/0x250 [ 663.087190][T13295] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 663.092755][T13295] __kmalloc+0xa4/0x230 [ 663.096947][T13295] bpf_prog_test_run_skb+0x238/0x12b0 [ 663.102353][T13295] ? __fget_files+0x28/0x4b0 [ 663.106986][T13295] ? __fget_files+0x28/0x4b0 [ 663.111616][T13295] ? __fget_files+0x43d/0x4b0 [ 663.116328][T13295] ? cpu_online+0x60/0x60 [ 663.120684][T13295] bpf_prog_test_run+0x321/0x390 [ 663.125681][T13295] __sys_bpf+0x49d/0x890 [ 663.129956][T13295] ? bpf_link_show_fdinfo+0x390/0x390 [ 663.135362][T13295] ? lock_chain_count+0x20/0x20 [ 663.140258][T13295] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 663.146262][T13295] __x64_sys_bpf+0x7c/0x90 [ 663.150698][T13295] do_syscall_64+0x55/0xa0 [ 663.155139][T13295] ? clear_bhb_loop+0x40/0x90 [ 663.159926][T13295] ? clear_bhb_loop+0x40/0x90 [ 663.164630][T13295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.170549][T13295] RIP: 0033:0x7f7751f9aeb9 [ 663.175000][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.194638][T13295] RSP: 002b:00007f7752ef1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 663.203079][T13295] RAX: ffffffffffffffda RBX: 00007f7752215fa0 RCX: 00007f7751f9aeb9 [ 663.211072][T13295] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 663.219071][T13295] RBP: 00007f7752ef1090 R08: 0000000000000000 R09: 0000000000000000 [ 663.227067][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.235058][T13295] R13: 00007f7752216038 R14: 00007f7752215fa0 R15: 00007fffee64aa08 [ 663.243067][T13295] [ 663.894587][T13275] Bluetooth: hci2: command 0x0406 tx timeout [ 664.553906][T13308] FAULT_INJECTION: forcing a failure. [ 664.553906][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 664.596835][T13308] CPU: 1 PID: 13308 Comm: syz.3.2245 Not tainted syzkaller #0 [ 664.604570][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.614689][T13308] Call Trace: [ 664.618017][T13308] [ 664.621009][T13308] dump_stack_lvl+0x18c/0x250 [ 664.625768][T13308] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 664.631981][T13308] ? show_regs_print_info+0x20/0x20 [ 664.637245][T13308] ? load_image+0x400/0x400 [ 664.641839][T13308] should_fail_ex+0x39d/0x4d0 [ 664.646584][T13308] should_failslab+0x9/0x20 [ 664.651145][T13308] slab_pre_alloc_hook+0x59/0x310 [ 664.656248][T13308] ? lockdep_hardirqs_on+0x98/0x150 [ 664.661498][T13308] ? kernfs_fop_write_iter+0x159/0x520 [ 664.667015][T13308] ? kernfs_fop_write_iter+0x159/0x520 [ 664.672539][T13308] __kmem_cache_alloc_node+0x53/0x250 [ 664.677375][T13319] netlink: 'syz.1.2248': attribute type 21 has an invalid length. [ 664.677956][T13308] ? kernfs_fop_write_iter+0x159/0x520 [ 664.691310][T13308] __kmalloc+0xa4/0x230 [ 664.694822][T13319] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2248'. [ 664.695506][T13308] kernfs_fop_write_iter+0x159/0x520 [ 664.709892][T13308] vfs_write+0x46c/0x990 [ 664.714200][T13308] ? file_end_write+0x250/0x250 [ 664.719126][T13308] ? __fget_files+0x43d/0x4b0 [ 664.723860][T13308] ? __fdget_pos+0x2a3/0x330 [ 664.728493][T13308] ? ksys_write+0x75/0x260 [ 664.732963][T13308] ksys_write+0x150/0x260 [ 664.737343][T13308] ? __ia32_sys_read+0x90/0x90 [ 664.742167][T13308] ? lockdep_hardirqs_on+0x98/0x150 [ 664.747423][T13308] do_syscall_64+0x55/0xa0 [ 664.751910][T13308] ? clear_bhb_loop+0x40/0x90 [ 664.756635][T13308] ? clear_bhb_loop+0x40/0x90 [ 664.761362][T13308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 664.767300][T13308] RIP: 0033:0x7f80b759aeb9 [ 664.771754][T13308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.791409][T13308] RSP: 002b:00007f80b83c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.799877][T13308] RAX: ffffffffffffffda RBX: 00007f80b7815fa0 RCX: 00007f80b759aeb9 [ 664.807894][T13308] RDX: 0000000000000006 RSI: 0000200000000100 RDI: 000000000000000a [ 664.815910][T13308] RBP: 00007f80b83c6090 R08: 0000000000000000 R09: 0000000000000000 [ 664.823913][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.832105][T13308] R13: 00007f80b7816038 R14: 00007f80b7815fa0 R15: 00007ffde49d2728 [ 664.840162][T13308] [ 665.413113][T13327] syzkaller0: entered promiscuous mode [ 665.483773][T13327] syzkaller0: entered allmulticast mode [ 666.898393][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2256'. [ 668.471983][T13347] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2256'. [ 668.486808][T13349] netlink: 'syz.2.2258': attribute type 27 has an invalid length. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.