last executing test programs: 18.450687882s ago: executing program 3 (id=11169): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/cgroup\x00') socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x40, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.161669129s ago: executing program 3 (id=11173): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$inet(r0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'pim6reg1\x00', @link_local}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.746666974s ago: executing program 1 (id=11178): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@raw=[@initr0, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.743892103s ago: executing program 3 (id=11179): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000911a74e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x400, 0xb, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x74, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query, @ldst={0x3, 0x1, 0x0, 0x9, 0x2, 0x6, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xfff, 0xbd, &(0x7f0000000440)=""/189, 0x41100, 0x4a, '\x00', r3, 0x1b, r4, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x7, 0x9e61, 0x8000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[r0, r1], &(0x7f0000000d00)=[{0x2, 0x2, 0x2, 0x6}, {0x0, 0x2, 0x800002, 0x9}, {0x3, 0x3, 0x10, 0x8}, {0x0, 0x3, 0x9, 0x5}, {0x3, 0x5, 0xd, 0x2}]}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xd, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10d000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)=r7) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x4, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) 16.742203603s ago: executing program 1 (id=11181): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x3, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000000200)=r5, 0x4) sendmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2000c854) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x23, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'veth1_macvtap\x00', @link_local}) 16.370588375s ago: executing program 3 (id=11185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7247, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x7d, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000180)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x10, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r3], &(0x7f0000000280)=[{0x3, 0x4, 0xa, 0x8}, {0x2, 0x4, 0xd, 0x7}, {0x5, 0x3, 0x6, 0x1}, {0x0, 0x1, 0x3, 0x8}, {0x4, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x8, 0x2}, {0x0, 0x5, 0x6, 0x3}, {0x3, 0x3, 0xf, 0x7}], 0x10, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 16.323565537s ago: executing program 1 (id=11187): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\'pu&\t0\t\t\t') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) close(r2) 16.000357207s ago: executing program 2 (id=11188): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'vlan0\x00', @random="cc632691861a"}) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000ffffffff58feffff"], &(0x7f00000009c0)=""/129, 0x2e, 0x81, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000400)={0x0, &(0x7f0000000300)}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 15.95329003s ago: executing program 0 (id=11189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x14, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) (async) r3 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) (async) close(r5) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x75, &(0x7f0000000000)=r6, 0x8) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r0, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x23, &(0x7f0000000240)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x3, 0x2, 0x2, 0x5, 0x8, 0xffffffffffffffc0, 0x139adf6a3ad7fd4a}, @func={0x85, 0x0, 0x1, 0x0, 0x7274}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x46}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000380)='GPL\x00', 0x26, 0xc0, &(0x7f00000003c0)=""/192, 0x41100, 0x2, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000600)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x687, 0x100}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r0, r0, r0, r0, r0, r0], &(0x7f00000006c0)=[{0x4, 0x1, 0xa, 0x7}, {0x3, 0x2, 0x10, 0xc}], 0x10, 0xf224d6}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xd4, 0x2, 0x3d, 0x2, 0x0, 0x27a, 0x5290a, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x0, 0x9f0a}, 0xc5c0, 0x9, 0x10001, 0x9, 0x9, 0x3d7, 0x310, 0x0, 0x8, 0x0, 0x80}, 0xffffffffffffffff, 0x10, r2, 0x1) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 15.924567471s ago: executing program 3 (id=11190): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) socket$kcm(0x2, 0x1000000000000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SIOCSIFHWADDR(r1, 0x89e1, &(0x7f00000005c0)={'bridge_slave_1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x0, 0x67, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0xfffffffffffffd05, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x2, 0x100}, {0x8, 0x4, 0x2}, {0x5, 0x3, 0x8}, {0x4, 0x3, 0xd}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x0, 0xb889}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x30, 0x2e, 0x5f, 0x61, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000840)=""/132, 0x87, 0x84, 0x1, 0x6}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000c00)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r11) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x31, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x36b6, 0xcb, &(0x7f0000000140)=""/203, 0x9ad88624d97e4d7a, 0x5, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xc, 0xd}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[r1], &(0x7f0000000a00)=[{0x4, 0x2, 0x8, 0x3}, {0x1, 0x1, 0x2, 0xc}, {0x5, 0x3, 0xc, 0x9}, {0x1, 0x1, 0x3, 0x7}, {0x2, 0x4, 0xb, 0xb}, {0x4, 0x4, 0xb, 0x8}, {0x4, 0x3, 0x5, 0xc}], 0x10, 0x800000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x10c002, 0xac5d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8}, 0x0, 0xb, r2, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03000b40000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 15.702128374s ago: executing program 4 (id=11191): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x7, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2cd8", 0x2}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 15.701603894s ago: executing program 1 (id=11192): socket$kcm(0x2, 0x1000000000000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03000b40000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) 15.6025835s ago: executing program 2 (id=11193): socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0a", 0x34}], 0x1}, 0x0) 15.454695649s ago: executing program 0 (id=11194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0xfe33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xabe8420435859593}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1000, '\x00', r4, r5, 0x5, 0x2, 0x3}, 0x50) 15.392053293s ago: executing program 3 (id=11195): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000014000000000001000000", @ANYBLOB], 0x30, 0x20004000}, 0x48044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/175, 0xaf, 0x0, &(0x7f0000000080)=""/13, 0xd}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="68cabf2dfb58fc02010088a8ffff0200258f", 0x12}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) 15.352402645s ago: executing program 2 (id=11196): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001000000000000000580000630140080000000095000000006387ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 15.339949526s ago: executing program 1 (id=11197): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02008125d7e1"}) 15.154544356s ago: executing program 2 (id=11198): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe40400000056bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a05cbee30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c3157f00000000000000a06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630000000002232017810e743bdaf879946547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e6dafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e097585ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb50409fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4d8521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060fd2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3bca426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db00000000000001f915268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde000006c06d4d551e81ee73459cf1c00000000000000000000628a663ed417be6ff5b172cba4a1ec629a39ec253c087b1e9ce84e25b8717ae8581bf28c16a8bbda8d69358e885ddf5387e419c64847b8953070cdefe7d6a35197638e929f8f3c005f9de3fe"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 15.144790357s ago: executing program 4 (id=11199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(0xffffffffffffffff) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000040)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000500)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe", 0x96}, {&(0x7f00000002c0)}, {&(0x7f0000001740)="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", 0x2ea}], 0x4, &(0x7f0000000280)}, 0x200040d4) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000280)={'wlan0\x00', @multicast}) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4005, @multicast2}, 0x10, 0x0, 0x35}, 0x3000c001) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000840)=r8, 0xfffffffffffffee7) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r10, 0x29, 0x19, 0x0, 0xfcd8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r9, 0xffffffffffffffff}, 0x4) r12 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000080)={r12}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r11, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000008b8ed11a32c88d45cc440980b1000000000000000010400005386e0ffe041ffff950000000000000079f02dd57954f49375ec95c566ccdfec87619efd"], &(0x7f0000000440)='GPL\x00', 0x1d6500, 0x1a, &(0x7f0000000700)=""/26, 0x41000, 0x29, '\x00', r13, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x8, &(0x7f0000000400)=[r11, r11, r11, r11], &(0x7f00000007c0)=[{0x0, 0x5, 0x10008, 0x7}, {0x0, 0x1, 0x10, 0x8}, {0x2, 0x5, 0x10, 0x9}, {0x1, 0x5, 0x4}, {0x3, 0x2, 0x5, 0x1}, {0x4, 0x2, 0xf}, {0x5, 0x1, 0xe, 0x3}, {0x3, 0x3, 0xa, 0x4}], 0x10, 0xc5}, 0x94) 15.052421003s ago: executing program 1 (id=11200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010103) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0x280) 14.702571763s ago: executing program 2 (id=11201): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7, 0x1, 0xc, 0x0, 0x9, 0x80031, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa4f, 0x0, @perf_config_ext={0x6, 0x7}, 0x101100, 0x1, 0xff, 0x2, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x9}, r1, 0x3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00\t\x00\x00\x00\b\x00\x00\x00@'], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 12.948286877s ago: executing program 4 (id=11202): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x4, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000081) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8008, r0}, 0x44) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) 12.911649869s ago: executing program 0 (id=11203): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\'pu&\t0\t\t\t') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) close(r3) 12.818523194s ago: executing program 2 (id=11204): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/69, 0x45}], 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x19, 0x12, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=r0, @ANYRESOCT=r2], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', r5, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x6, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x40}, 0x80, 0x0, 0x0, 0x0, 0xbc05}, 0x48004) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000080000000900000000000000", @ANYRES32=0x1, @ANYBLOB="fd10"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r8 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000200)={r8, r3}) sendmsg$kcm(r8, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640a", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18e3ff000000004821da26c0873aaa00bf00000000000000"], 0x18}, 0x8080) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c0401800604", 0x1e}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20044050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}]}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@xdp={0x2c, 0xc, r5, 0x1a}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000440)='b', 0x1}], 0x1}, 0x0) 12.787002336s ago: executing program 4 (id=11205): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x8, r0}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 12.684716532s ago: executing program 0 (id=11206): socket$kcm(0xa, 0x6, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef437000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0a", 0x34}], 0x1}, 0x0) 12.606508367s ago: executing program 4 (id=11207): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp, 0x2111, 0x0, 0xc29a, 0x9, 0x1}, 0x0, 0x3, r2, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@local}]}]}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 12.419931268s ago: executing program 0 (id=11208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 12.241891828s ago: executing program 0 (id=11209): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x7, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="2cd8", 0x2}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 12.089178367s ago: executing program 4 (id=11210): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4, @perf_bp={0x0}, 0x81, 0x3, 0x2, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4, @perf_bp={0x0}, 0x81, 0x3, 0x2, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000016000b63d26a04000000b2e4522408bb", 0x14}], 0x1}, 0x54) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x1a, &(0x7f00000001c0)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06ffa100a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca068e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca200000000", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 0s ago: executing program 32 (id=11195): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x100002e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000014000000000001000000", @ANYBLOB], 0x30, 0x20004000}, 0x48044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/175, 0xaf, 0x0, &(0x7f0000000080)=""/13, 0xd}}, 0x10) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000200)="68cabf2dfb58fc02010088a8ffff0200258f", 0x12}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.9885'. [ 1571.943431][ T1710] netlink: 'syz.4.9894': attribute type 21 has an invalid length. [ 1572.188008][ T1720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1572.210214][ T1720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1572.232238][ T1720] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1573.469700][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 1573.534049][ T1758] netlink: 'syz.2.9911': attribute type 22 has an invalid length. [ 1573.579705][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9911'. [ 1573.604858][ T1759] netlink: 'syz.1.9913': attribute type 4 has an invalid length. [ 1573.618735][ T1759] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9913'. [ 1573.892309][ T1769] netlink: 'syz.1.9917': attribute type 10 has an invalid length. [ 1573.900854][ T1769] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9917'. [ 1574.006756][ T1774] netlink: 'syz.4.9918': attribute type 21 has an invalid length. [ 1574.015941][ T1774] netlink: 'syz.4.9918': attribute type 6 has an invalid length. [ 1574.024382][ T1774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9918'. [ 1574.406108][ T1786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9923'. [ 1574.774626][ T1803] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9928'. [ 1575.009925][ T1811] netlink: 'syz.0.9931': attribute type 10 has an invalid length. [ 1575.025603][ T1811] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9931'. [ 1575.552137][ T1823] FAULT_INJECTION: forcing a failure. [ 1575.552137][ T1823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1575.589737][ T1823] CPU: 1 PID: 1823 Comm: syz.0.9936 Not tainted syzkaller #0 [ 1575.597165][ T1823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1575.607233][ T1823] Call Trace: [ 1575.610511][ T1823] [ 1575.613441][ T1823] dump_stack_lvl+0x188/0x24e [ 1575.618128][ T1823] ? show_regs_print_info+0x12/0x12 [ 1575.623332][ T1823] ? load_image+0x400/0x400 [ 1575.627865][ T1823] ? __might_fault+0xa6/0x120 [ 1575.632557][ T1823] should_fail_ex+0x399/0x4d0 [ 1575.637249][ T1823] copyin+0x1b/0x120 [ 1575.641152][ T1823] _copy_from_iter+0x447/0x1130 [ 1575.646019][ T1823] ? copyout_mc+0x110/0x110 [ 1575.650523][ T1823] ? __virt_addr_valid+0x188/0x540 [ 1575.655639][ T1823] ? __virt_addr_valid+0x188/0x540 [ 1575.660755][ T1823] ? __virt_addr_valid+0x465/0x540 [ 1575.665879][ T1823] ? __check_object_size+0x500/0xa40 [ 1575.671169][ T1823] netlink_sendmsg+0x755/0xbd0 [ 1575.675951][ T1823] ? netlink_getsockopt+0x550/0x550 [ 1575.681159][ T1823] ? aa_sock_msg_perm+0x94/0x150 [ 1575.686097][ T1823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1575.691377][ T1823] ? security_socket_sendmsg+0x7c/0xa0 [ 1575.696844][ T1823] ? netlink_getsockopt+0x550/0x550 [ 1575.702045][ T1823] ____sys_sendmsg+0x5be/0x970 [ 1575.706829][ T1823] ? __sys_sendmsg_sock+0x30/0x30 [ 1575.711852][ T1823] ? __import_iovec+0x315/0x500 [ 1575.716721][ T1823] ? import_iovec+0x6f/0xa0 [ 1575.721242][ T1823] ___sys_sendmsg+0x2a2/0x360 [ 1575.725935][ T1823] ? __sys_sendmsg+0x290/0x290 [ 1575.730737][ T1823] ? __lock_acquire+0x7d10/0x7d10 [ 1575.735813][ T1823] __se_sys_sendmsg+0x1bb/0x2a0 [ 1575.740672][ T1823] ? __x64_sys_sendmsg+0x80/0x80 [ 1575.745645][ T1823] ? lockdep_hardirqs_on+0x94/0x140 [ 1575.750849][ T1823] do_syscall_64+0x4c/0xa0 [ 1575.755262][ T1823] ? clear_bhb_loop+0x60/0xb0 [ 1575.759936][ T1823] ? clear_bhb_loop+0x60/0xb0 [ 1575.764614][ T1823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1575.770503][ T1823] RIP: 0033:0x7f512639aeb9 [ 1575.774917][ T1823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.794521][ T1823] RSP: 002b:00007f51271bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1575.802945][ T1823] RAX: ffffffffffffffda RBX: 00007f5126615fa0 RCX: 00007f512639aeb9 [ 1575.810920][ T1823] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 1575.818892][ T1823] RBP: 00007f51271bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.826865][ T1823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.834841][ T1823] R13: 00007f5126616038 R14: 00007f5126615fa0 R15: 00007ffff5fbf7e8 [ 1575.842850][ T1823] [ 1576.315280][ T1841] netlink: 'syz.0.9941': attribute type 17 has an invalid length. [ 1576.358853][ T1841] netlink: 'syz.0.9941': attribute type 16 has an invalid length. [ 1576.550907][ T1847] FAULT_INJECTION: forcing a failure. [ 1576.550907][ T1847] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.570714][ T1847] CPU: 1 PID: 1847 Comm: syz.1.9942 Not tainted syzkaller #0 [ 1576.578124][ T1847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1576.588184][ T1847] Call Trace: [ 1576.591473][ T1847] [ 1576.594418][ T1847] dump_stack_lvl+0x188/0x24e [ 1576.599117][ T1847] ? show_regs_print_info+0x12/0x12 [ 1576.604094][ T1849] FAULT_INJECTION: forcing a failure. [ 1576.604094][ T1849] name failslab, interval 1, probability 0, space 0, times 0 [ 1576.604318][ T1847] ? load_image+0x400/0x400 [ 1576.621397][ T1847] ? __might_sleep+0xd0/0xd0 [ 1576.626003][ T1847] ? __lock_acquire+0x7d10/0x7d10 [ 1576.631055][ T1847] should_fail_ex+0x399/0x4d0 [ 1576.635758][ T1847] should_failslab+0x5/0x20 [ 1576.640282][ T1847] slab_pre_alloc_hook+0x59/0x310 [ 1576.645323][ T1847] ? perf_trace_lock+0xf8/0x390 [ 1576.650190][ T1847] ? dev_ethtool+0x125/0x12f0 [ 1576.654886][ T1847] __kmem_cache_alloc_node+0x4f/0x260 [ 1576.660277][ T1847] ? dev_ethtool+0x125/0x12f0 [ 1576.664973][ T1847] kmalloc_trace+0x26/0xe0 [ 1576.669415][ T1847] dev_ethtool+0x125/0x12f0 [ 1576.673937][ T1847] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1576.680192][ T1847] ? __lock_acquire+0x7d10/0x7d10 [ 1576.685239][ T1847] ? __kmem_cache_free+0xb6/0x1f0 [ 1576.690279][ T1847] ? full_name_hash+0x8e/0xe0 [ 1576.694963][ T1847] ? dev_load+0x1d/0x1e0 [ 1576.699205][ T1847] ? dev_load+0x1d/0x1e0 [ 1576.703450][ T1847] dev_ioctl+0x474/0xe80 [ 1576.707696][ T1847] sock_do_ioctl+0x245/0x320 [ 1576.712296][ T1847] ? sock_show_fdinfo+0xb0/0xb0 [ 1576.717168][ T1847] sock_ioctl+0x4d2/0x710 [ 1576.721506][ T1847] ? sock_poll+0x410/0x410 [ 1576.725938][ T1847] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1576.730885][ T1847] ? security_file_ioctl+0x7c/0xa0 [ 1576.736016][ T1847] ? sock_poll+0x410/0x410 [ 1576.740456][ T1847] __se_sys_ioctl+0xfa/0x170 [ 1576.745064][ T1847] do_syscall_64+0x4c/0xa0 [ 1576.749488][ T1847] ? clear_bhb_loop+0x60/0xb0 [ 1576.754176][ T1847] ? clear_bhb_loop+0x60/0xb0 [ 1576.758857][ T1847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1576.764755][ T1847] RIP: 0033:0x7f6d9519aeb9 [ 1576.769171][ T1847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1576.788782][ T1847] RSP: 002b:00007f6d96080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1576.797199][ T1847] RAX: ffffffffffffffda RBX: 00007f6d95415fa0 RCX: 00007f6d9519aeb9 [ 1576.805170][ T1847] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 1576.813143][ T1847] RBP: 00007f6d96080090 R08: 0000000000000000 R09: 0000000000000000 [ 1576.821128][ T1847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1576.829108][ T1847] R13: 00007f6d95416038 R14: 00007f6d95415fa0 R15: 00007ffe3da75058 [ 1576.837108][ T1847] [ 1576.840129][ T1849] CPU: 0 PID: 1849 Comm: syz.0.9943 Not tainted syzkaller #0 [ 1576.847520][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1576.857578][ T1849] Call Trace: [ 1576.860848][ T1849] [ 1576.863767][ T1849] dump_stack_lvl+0x188/0x24e [ 1576.868440][ T1849] ? show_regs_print_info+0x12/0x12 [ 1576.873634][ T1849] ? load_image+0x400/0x400 [ 1576.878126][ T1849] ? __might_sleep+0xd0/0xd0 [ 1576.882708][ T1849] ? __lock_acquire+0x7d10/0x7d10 [ 1576.887727][ T1849] should_fail_ex+0x399/0x4d0 [ 1576.892419][ T1849] should_failslab+0x5/0x20 [ 1576.896946][ T1849] slab_pre_alloc_hook+0x59/0x310 [ 1576.901977][ T1849] kmem_cache_alloc+0x56/0x2f0 [ 1576.906736][ T1849] ? __alloc_file+0x25/0x230 [ 1576.911325][ T1849] __alloc_file+0x25/0x230 [ 1576.915736][ T1849] alloc_empty_file+0x90/0x180 [ 1576.920755][ T1849] alloc_file+0x5c/0x5f0 [ 1576.924995][ T1849] alloc_file_pseudo+0x180/0x200 [ 1576.929927][ T1849] ? alloc_empty_file_noaccount+0x80/0x80 [ 1576.935648][ T1849] ? unclone_ctx+0xca/0x120 [ 1576.940152][ T1849] anon_inode_getfile+0xc1/0x1a0 [ 1576.945088][ T1849] __se_sys_perf_event_open+0xc26/0x1ec0 [ 1576.950721][ T1849] ? __fget_files+0x43d/0x4b0 [ 1576.955401][ T1849] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1576.961053][ T1849] ? lockdep_hardirqs_on+0x94/0x140 [ 1576.966243][ T1849] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 1576.971876][ T1849] do_syscall_64+0x4c/0xa0 [ 1576.976292][ T1849] ? clear_bhb_loop+0x60/0xb0 [ 1576.980962][ T1849] ? clear_bhb_loop+0x60/0xb0 [ 1576.985633][ T1849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1576.991522][ T1849] RIP: 0033:0x7f512639aeb9 [ 1576.995936][ T1849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.015534][ T1849] RSP: 002b:00007f51271bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1577.023944][ T1849] RAX: ffffffffffffffda RBX: 00007f5126615fa0 RCX: 00007f512639aeb9 [ 1577.031907][ T1849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1577.039874][ T1849] RBP: 00007f51271bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.047838][ T1849] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1577.055800][ T1849] R13: 00007f5126616038 R14: 00007f5126615fa0 R15: 00007ffff5fbf7e8 [ 1577.063866][ T1849] [ 1577.096578][ T1852] netlink: 'syz.4.9944': attribute type 10 has an invalid length. [ 1577.923763][ T1885] __nla_validate_parse: 3 callbacks suppressed [ 1577.923778][ T1885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1577.944517][ T1885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1577.957488][ T1885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1578.758116][ T1903] netlink: 'syz.1.9962': attribute type 10 has an invalid length. [ 1578.786481][ T1903] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9962'. [ 1580.481326][ T1939] netlink: 'syz.4.9974': attribute type 10 has an invalid length. [ 1580.489183][ T1939] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9974'. [ 1580.910374][ T1949] FAULT_INJECTION: forcing a failure. [ 1580.910374][ T1949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.000825][ T1949] CPU: 0 PID: 1949 Comm: syz.2.9978 Not tainted syzkaller #0 [ 1581.008245][ T1949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1581.018319][ T1949] Call Trace: [ 1581.021608][ T1949] [ 1581.024553][ T1949] dump_stack_lvl+0x188/0x24e [ 1581.029252][ T1949] ? show_regs_print_info+0x12/0x12 [ 1581.034472][ T1949] ? load_image+0x400/0x400 [ 1581.038996][ T1949] ? __lock_acquire+0x7d10/0x7d10 [ 1581.044055][ T1949] should_fail_ex+0x399/0x4d0 [ 1581.048760][ T1949] _copy_from_user+0x2c/0x170 [ 1581.053457][ T1949] __sys_bpf+0x2ea/0x780 [ 1581.057722][ T1949] ? bpf_link_show_fdinfo+0x380/0x380 [ 1581.063129][ T1949] ? lock_chain_count+0x20/0x20 [ 1581.068006][ T1949] __x64_sys_bpf+0x78/0x90 [ 1581.072444][ T1949] do_syscall_64+0x4c/0xa0 [ 1581.076875][ T1949] ? clear_bhb_loop+0x60/0xb0 [ 1581.081564][ T1949] ? clear_bhb_loop+0x60/0xb0 [ 1581.086260][ T1949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.092511][ T1949] RIP: 0033:0x7f1cec19aeb9 [ 1581.096935][ T1949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.116553][ T1949] RSP: 002b:00007f1cecf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1581.124977][ T1949] RAX: ffffffffffffffda RBX: 00007f1cec415fa0 RCX: 00007f1cec19aeb9 [ 1581.132959][ T1949] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1581.140941][ T1949] RBP: 00007f1cecf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.148922][ T1949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.156900][ T1949] R13: 00007f1cec416038 R14: 00007f1cec415fa0 R15: 00007fff70a7a2a8 [ 1581.164894][ T1949] [ 1581.556008][ T1965] FAULT_INJECTION: forcing a failure. [ 1581.556008][ T1965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1581.587775][ T1965] CPU: 1 PID: 1965 Comm: syz.3.9984 Not tainted syzkaller #0 [ 1581.595207][ T1965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1581.605297][ T1965] Call Trace: [ 1581.608612][ T1965] [ 1581.611576][ T1965] dump_stack_lvl+0x188/0x24e [ 1581.616315][ T1965] ? show_regs_print_info+0x12/0x12 [ 1581.621583][ T1965] ? load_image+0x400/0x400 [ 1581.626137][ T1965] ? __lock_acquire+0x7d10/0x7d10 [ 1581.631213][ T1965] should_fail_ex+0x399/0x4d0 [ 1581.635917][ T1965] _copy_from_user+0x2c/0x170 [ 1581.640612][ T1965] ___sys_sendmsg+0x1c3/0x360 [ 1581.645319][ T1965] ? __sys_sendmsg+0x290/0x290 [ 1581.650149][ T1965] ? __lock_acquire+0x7d10/0x7d10 [ 1581.655242][ T1965] __se_sys_sendmsg+0x1bb/0x2a0 [ 1581.660113][ T1965] ? __x64_sys_sendmsg+0x80/0x80 [ 1581.665099][ T1965] ? lockdep_hardirqs_on+0x94/0x140 [ 1581.670313][ T1965] do_syscall_64+0x4c/0xa0 [ 1581.674747][ T1965] ? clear_bhb_loop+0x60/0xb0 [ 1581.679429][ T1965] ? clear_bhb_loop+0x60/0xb0 [ 1581.684127][ T1965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.690026][ T1965] RIP: 0033:0x7f2cf679aeb9 [ 1581.694448][ T1965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.714065][ T1965] RSP: 002b:00007f2cf75c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.722491][ T1965] RAX: ffffffffffffffda RBX: 00007f2cf6a15fa0 RCX: 00007f2cf679aeb9 [ 1581.730467][ T1965] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 1581.738441][ T1965] RBP: 00007f2cf75c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1581.746415][ T1965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1581.754392][ T1965] R13: 00007f2cf6a16038 R14: 00007f2cf6a15fa0 R15: 00007ffd3dfbe458 [ 1581.762409][ T1965] [ 1582.352739][ T1981] netlink: 'syz.2.9989': attribute type 10 has an invalid length. [ 1582.402011][ T1981] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9989'. [ 1588.820011][T21094] Bluetooth: hci4: command 0x0406 tx timeout [ 1589.115197][ T2054] FAULT_INJECTION: forcing a failure. [ 1589.115197][ T2054] name failslab, interval 1, probability 0, space 0, times 0 [ 1589.159529][ T2054] CPU: 1 PID: 2054 Comm: syz.2.10010 Not tainted syzkaller #0 [ 1589.167024][ T2054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1589.177093][ T2054] Call Trace: [ 1589.180378][ T2054] [ 1589.183314][ T2054] dump_stack_lvl+0x188/0x24e [ 1589.188012][ T2054] ? show_regs_print_info+0x12/0x12 [ 1589.193231][ T2054] ? load_image+0x400/0x400 [ 1589.197750][ T2054] ? __might_sleep+0xd0/0xd0 [ 1589.202356][ T2054] ? __lock_acquire+0x7d10/0x7d10 [ 1589.207398][ T2054] should_fail_ex+0x399/0x4d0 [ 1589.212092][ T2054] should_failslab+0x5/0x20 [ 1589.216595][ T2054] slab_pre_alloc_hook+0x59/0x310 [ 1589.221614][ T2054] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1589.227338][ T2054] __kmem_cache_alloc_node+0x4f/0x260 [ 1589.232709][ T2054] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1589.238420][ T2054] __kmalloc+0xa0/0x240 [ 1589.242575][ T2054] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1589.248122][ T2054] ? tomoyo_path_number_perm+0x205/0x650 [ 1589.253746][ T2054] tomoyo_path_number_perm+0x22f/0x650 [ 1589.259212][ T2054] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1589.264663][ T2054] ? ksys_write+0x1c0/0x250 [ 1589.269162][ T2054] ? common_file_perm+0x171/0x1c0 [ 1589.274197][ T2054] ? __fget_files+0x28/0x4b0 [ 1589.278781][ T2054] ? __fget_files+0x28/0x4b0 [ 1589.283377][ T2054] security_file_ioctl+0x6c/0xa0 [ 1589.288315][ T2054] __se_sys_ioctl+0x48/0x170 [ 1589.292899][ T2054] do_syscall_64+0x4c/0xa0 [ 1589.297310][ T2054] ? clear_bhb_loop+0x60/0xb0 [ 1589.301979][ T2054] ? clear_bhb_loop+0x60/0xb0 [ 1589.306650][ T2054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1589.312531][ T2054] RIP: 0033:0x7f1cec19aeb9 [ 1589.316938][ T2054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1589.336533][ T2054] RSP: 002b:00007f1cea3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1589.344934][ T2054] RAX: ffffffffffffffda RBX: 00007f1cec416090 RCX: 00007f1cec19aeb9 [ 1589.352891][ T2054] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 1589.360849][ T2054] RBP: 00007f1cea3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.368806][ T2054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.376768][ T2054] R13: 00007f1cec416128 R14: 00007f1cec416090 R15: 00007fff70a7a2a8 [ 1589.384739][ T2054] [ 1589.410233][ T2054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1591.058707][ T2067] FAULT_INJECTION: forcing a failure. [ 1591.058707][ T2067] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.089566][ T2067] CPU: 0 PID: 2067 Comm: syz.2.10013 Not tainted syzkaller #0 [ 1591.097075][ T2067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1591.107152][ T2067] Call Trace: [ 1591.110446][ T2067] [ 1591.113396][ T2067] dump_stack_lvl+0x188/0x24e [ 1591.118110][ T2067] ? show_regs_print_info+0x12/0x12 [ 1591.123341][ T2067] ? load_image+0x400/0x400 [ 1591.127888][ T2067] ? perf_trace_lock+0x301/0x390 [ 1591.132857][ T2067] should_fail_ex+0x399/0x4d0 [ 1591.137580][ T2067] should_failslab+0x5/0x20 [ 1591.142110][ T2067] slab_pre_alloc_hook+0x59/0x310 [ 1591.147169][ T2067] kmem_cache_alloc_node+0x5a/0x320 [ 1591.152385][ T2067] ? __alloc_skb+0xfc/0x7e0 [ 1591.156912][ T2067] __alloc_skb+0xfc/0x7e0 [ 1591.161255][ T2067] _sctp_make_chunk+0x5e/0x420 [ 1591.166023][ T2067] sctp_make_init+0x565/0x1f80 [ 1591.170811][ T2067] ? sctp_addto_chunk+0x220/0x220 [ 1591.175853][ T2067] sctp_sf_do_prm_asoc+0xce/0x3e0 [ 1591.180888][ T2067] sctp_do_sm+0x245/0x55f0 [ 1591.185311][ T2067] ? __stack_depot_save+0x35/0x460 [ 1591.190441][ T2067] ? __kasan_kmalloc+0x8e/0xa0 [ 1591.195206][ T2067] ? sctp_stream_init_ext+0x53/0x160 [ 1591.200492][ T2067] ? sctp_sendmsg_to_asoc+0x1320/0x1830 [ 1591.206036][ T2067] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 1591.211947][ T2067] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 1591.216979][ T2067] ? do_syscall_64+0x4c/0xa0 [ 1591.221572][ T2067] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.227696][ T2067] ? __sk_mem_raise_allocated+0xa48/0x13d0 [ 1591.233525][ T2067] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 1591.238908][ T2067] sctp_sendmsg_to_asoc+0x10a2/0x1830 [ 1591.244295][ T2067] ? sctp_assoc_add_peer+0xeb7/0x1640 [ 1591.249689][ T2067] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1591.255499][ T2067] ? __sctp_connect+0xd80/0xd80 [ 1591.260349][ T2067] ? __local_bh_enable_ip+0x136/0x1c0 [ 1591.265717][ T2067] ? _local_bh_enable+0xa0/0xa0 [ 1591.270560][ T2067] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1591.276367][ T2067] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1591.282173][ T2067] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1591.287711][ T2067] ? security_sctp_bind_connect+0x85/0xb0 [ 1591.293430][ T2067] sctp_sendmsg+0x1984/0x2940 [ 1591.298107][ T2067] ? trace_event_raw_event_lock+0x250/0x250 [ 1591.304012][ T2067] ? aa_sk_perm+0x721/0x950 [ 1591.308520][ T2067] ? sctp_getsockopt+0x8a0/0x8a0 [ 1591.313455][ T2067] ? __might_fault+0xa6/0x120 [ 1591.318127][ T2067] ? aa_af_perm+0x340/0x340 [ 1591.322632][ T2067] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1591.329059][ T2067] ? inet_sendmsg+0x78/0x2f0 [ 1591.333653][ T2067] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1591.338932][ T2067] ? security_socket_sendmsg+0x7c/0xa0 [ 1591.344392][ T2067] ? inet_send_prepare+0x260/0x260 [ 1591.349500][ T2067] ____sys_sendmsg+0x5be/0x970 [ 1591.354280][ T2067] ? __sys_sendmsg_sock+0x30/0x30 [ 1591.359303][ T2067] ? __import_iovec+0x315/0x500 [ 1591.364158][ T2067] ? import_iovec+0x6f/0xa0 [ 1591.368665][ T2067] ___sys_sendmsg+0x2a2/0x360 [ 1591.373356][ T2067] ? __sys_sendmsg+0x290/0x290 [ 1591.378145][ T2067] ? __lock_acquire+0x7d10/0x7d10 [ 1591.383201][ T2067] __se_sys_sendmsg+0x1bb/0x2a0 [ 1591.388056][ T2067] ? __x64_sys_sendmsg+0x80/0x80 [ 1591.393011][ T2067] ? lockdep_hardirqs_on+0x94/0x140 [ 1591.398211][ T2067] do_syscall_64+0x4c/0xa0 [ 1591.402629][ T2067] ? clear_bhb_loop+0x60/0xb0 [ 1591.407301][ T2067] ? clear_bhb_loop+0x60/0xb0 [ 1591.411979][ T2067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1591.417869][ T2067] RIP: 0033:0x7f1cec19aeb9 [ 1591.422281][ T2067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1591.441881][ T2067] RSP: 002b:00007f1cecf6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1591.450290][ T2067] RAX: ffffffffffffffda RBX: 00007f1cec415fa0 RCX: 00007f1cec19aeb9 [ 1591.458254][ T2067] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000007 [ 1591.466217][ T2067] RBP: 00007f1cecf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1591.474182][ T2067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.482150][ T2067] R13: 00007f1cec416038 R14: 00007f1cec415fa0 R15: 00007fff70a7a2a8 [ 1591.490138][ T2067] [ 1592.123513][ T2096] netlink: 'syz.1.10023': attribute type 1 has an invalid length. [ 1592.148367][ T2096] netlink: 'syz.1.10023': attribute type 1 has an invalid length. [ 1592.174511][ T2096] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.10023'. [ 1593.928158][ T2123] FAULT_INJECTION: forcing a failure. [ 1593.928158][ T2123] name failslab, interval 1, probability 0, space 0, times 0 [ 1593.941267][ T2123] CPU: 0 PID: 2123 Comm: syz.4.10030 Not tainted syzkaller #0 [ 1593.948737][ T2123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1593.958801][ T2123] Call Trace: [ 1593.962090][ T2123] [ 1593.965031][ T2123] dump_stack_lvl+0x188/0x24e [ 1593.969739][ T2123] ? show_regs_print_info+0x12/0x12 [ 1593.974956][ T2123] ? load_image+0x400/0x400 [ 1593.979487][ T2123] should_fail_ex+0x399/0x4d0 [ 1593.984192][ T2123] should_failslab+0x5/0x20 [ 1593.988715][ T2123] slab_pre_alloc_hook+0x59/0x310 [ 1593.993751][ T2123] ? inet_bind2_bucket_find+0x5e/0x610 [ 1593.999231][ T2123] kmem_cache_alloc+0x56/0x2f0 [ 1594.004009][ T2123] ? __inet_hash_connect+0xbe0/0x18e0 [ 1594.009408][ T2123] __inet_hash_connect+0xbe0/0x18e0 [ 1594.014648][ T2123] ? inet_bhash2_reset_saddr+0x80/0x80 [ 1594.020129][ T2123] ? rcu_is_watching+0x11/0xa0 [ 1594.024913][ T2123] ? inet6_hash_connect+0x77/0xd0 [ 1594.029957][ T2123] tcp_v6_connect+0xf4c/0x18c0 [ 1594.034751][ T2123] ? tcp_v6_pre_connect+0xf0/0xf0 [ 1594.039804][ T2123] ? __se_sys_sendmsg+0x1bb/0x2a0 [ 1594.044842][ T2123] ? do_syscall_64+0x4c/0xa0 [ 1594.049443][ T2123] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.055533][ T2123] __inet_stream_connect+0x242/0xe10 [ 1594.060847][ T2123] ? inet_dgram_connect+0x360/0x360 [ 1594.066078][ T2123] tcp_sendmsg_fastopen+0x38f/0x600 [ 1594.071295][ T2123] tcp_sendmsg_locked+0x39dd/0x3f50 [ 1594.076511][ T2123] ? verify_lock_unused+0x140/0x140 [ 1594.081743][ T2123] ? perf_trace_lock+0xf8/0x390 [ 1594.086623][ T2123] ? mark_lock+0x94/0x320 [ 1594.090969][ T2123] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1594.096968][ T2123] ? lock_chain_count+0x20/0x20 [ 1594.101840][ T2123] ? tcp_set_state+0x520/0x520 [ 1594.106630][ T2123] tcp_sendmsg+0x2b/0x40 [ 1594.110882][ T2123] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1594.116090][ T2123] ____sys_sendmsg+0x5be/0x970 [ 1594.120876][ T2123] ? __sys_sendmsg_sock+0x30/0x30 [ 1594.125909][ T2123] ? __import_iovec+0x315/0x500 [ 1594.130774][ T2123] ? import_iovec+0x6f/0xa0 [ 1594.135288][ T2123] ___sys_sendmsg+0x2a2/0x360 [ 1594.139977][ T2123] ? __sys_sendmsg+0x290/0x290 [ 1594.144775][ T2123] ? __lock_acquire+0x7d10/0x7d10 [ 1594.149844][ T2123] __se_sys_sendmsg+0x1bb/0x2a0 [ 1594.154707][ T2123] ? ct_nmi_exit+0x145/0x1c0 [ 1594.159307][ T2123] ? __x64_sys_sendmsg+0x80/0x80 [ 1594.164277][ T2123] ? lockdep_hardirqs_on+0x94/0x140 [ 1594.169484][ T2123] do_syscall_64+0x4c/0xa0 [ 1594.173903][ T2123] ? clear_bhb_loop+0x60/0xb0 [ 1594.178586][ T2123] ? clear_bhb_loop+0x60/0xb0 [ 1594.183272][ T2123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1594.189172][ T2123] RIP: 0033:0x7f0b8e19aeb9 [ 1594.193594][ T2123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.213207][ T2123] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1594.221630][ T2123] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1594.229620][ T2123] RDX: 000000003004c041 RSI: 0000200000000080 RDI: 0000000000000003 [ 1594.237600][ T2123] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.245577][ T2123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.253555][ T2123] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1594.261556][ T2123] [ 1595.016082][ T2146] FAULT_INJECTION: forcing a failure. [ 1595.016082][ T2146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1595.058363][ T2146] CPU: 1 PID: 2146 Comm: syz.4.10034 Not tainted syzkaller #0 [ 1595.065883][ T2146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1595.075975][ T2146] Call Trace: [ 1595.079287][ T2146] [ 1595.082252][ T2146] dump_stack_lvl+0x188/0x24e [ 1595.086994][ T2146] ? show_regs_print_info+0x12/0x12 [ 1595.092236][ T2146] ? load_image+0x400/0x400 [ 1595.096784][ T2146] ? __lock_acquire+0x7d10/0x7d10 [ 1595.101842][ T2146] ? perf_trace_lock_acquire+0x100/0x3e0 [ 1595.107536][ T2146] should_fail_ex+0x399/0x4d0 [ 1595.112276][ T2146] _copy_from_user+0x2c/0x170 [ 1595.116999][ T2146] ___sys_sendmsg+0x1c3/0x360 [ 1595.121738][ T2146] ? __sys_sendmsg+0x290/0x290 [ 1595.126644][ T2146] ? __lock_acquire+0x7d10/0x7d10 [ 1595.131793][ T2146] __se_sys_sendmsg+0x1bb/0x2a0 [ 1595.136697][ T2146] ? __x64_sys_sendmsg+0x80/0x80 [ 1595.141726][ T2146] ? lockdep_hardirqs_on+0x94/0x140 [ 1595.146977][ T2146] do_syscall_64+0x4c/0xa0 [ 1595.151431][ T2146] ? clear_bhb_loop+0x60/0xb0 [ 1595.156142][ T2146] ? clear_bhb_loop+0x60/0xb0 [ 1595.160848][ T2146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.166767][ T2146] RIP: 0033:0x7f0b8e19aeb9 [ 1595.171202][ T2146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.190830][ T2146] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1595.199270][ T2146] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1595.207260][ T2146] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1595.215249][ T2146] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1595.223235][ T2146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1595.231218][ T2146] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1595.239250][ T2146] [ 1597.842929][ T2161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10045'. [ 1597.928150][ T2161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10045'. [ 1597.974155][ T2163] netlink: 'syz.4.10044': attribute type 10 has an invalid length. [ 1598.493117][ T2164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10045'. [ 1598.711297][ T2188] device syzkaller0 entered promiscuous mode [ 1600.373446][ T2214] netlink: 'syz.1.10061': attribute type 29 has an invalid length. [ 1600.381957][ T2214] netlink: 'syz.1.10061': attribute type 29 has an invalid length. [ 1601.921052][ T2227] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1601.944863][ T2227] syzkaller1: group set to 778 [ 1601.956509][ T2233] netlink: 'syz.1.10068': attribute type 29 has an invalid length. [ 1601.979831][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1602.009254][ T2236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1604.179622][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 1604.875709][ T2233] netlink: 'syz.1.10068': attribute type 29 has an invalid length. [ 1604.884402][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1604.911721][ T2236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10068'. [ 1607.222308][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.228792][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.697615][ T2347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10102'. [ 1610.719560][ T2347] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10102'. [ 1614.038545][ T2396] netlink: 'syz.2.10116': attribute type 3 has an invalid length. [ 1614.049549][ T2396] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.10116'. [ 1614.431992][ T2408] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.10119'. [ 1614.482088][ T2408] bridge_slave_1: default FDB implementation only supports local addresses [ 1614.776019][ T2412] netlink: 188 bytes leftover after parsing attributes in process `syz.1.10120'. [ 1615.103067][ T2414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10121'. [ 1615.120306][ T2414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10121'. [ 1615.132944][ T2414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10121'. [ 1615.496495][ T2410] delete_channel: no stack [ 1616.788422][ T2430] netlink: 'syz.3.10125': attribute type 3 has an invalid length. [ 1616.842500][ T2430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10125'. [ 1617.930591][ T2450] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10129'. [ 1618.027956][ T2455] tun0: tun_chr_ioctl cmd 1074025694 [ 1620.908819][ T2478] netlink: 'syz.0.10134': attribute type 10 has an invalid length. [ 1621.048724][ T2478] device veth0_vlan left promiscuous mode [ 1621.097965][ T2478] device veth0_vlan entered promiscuous mode [ 1621.128905][ T2493] delete_channel: no stack [ 1621.132234][ T2478] team0: Device veth0_vlan failed to register rx_handler [ 1621.154025][ T2493] delete_channel: no stack [ 1621.283294][ T2487] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1622.133873][ T2507] netlink: 'syz.3.10142': attribute type 4 has an invalid length. [ 1622.153068][ T2507] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10142'. [ 1622.244504][ T2513] netlink: 'syz.3.10142': attribute type 29 has an invalid length. [ 1622.277329][ T2513] netlink: 'syz.3.10142': attribute type 29 has an invalid length. [ 1625.352852][ T2533] tun0: tun_chr_ioctl cmd 1074025694 [ 1625.434566][ T2539] netlink: 'syz.4.10148': attribute type 10 has an invalid length. [ 1625.657957][ T2548] netlink: 'syz.1.10149': attribute type 7 has an invalid length. [ 1625.698131][ T2548] netlink: 'syz.1.10149': attribute type 1 has an invalid length. [ 1625.723250][ T2542] netlink: 'syz.1.10149': attribute type 2 has an invalid length. [ 1625.764624][ T2548] netlink: 'syz.1.10149': attribute type 1 has an invalid length. [ 1625.793755][ T2548] netlink: 'syz.1.10149': attribute type 2 has an invalid length. [ 1625.801746][ T2548] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.10149'. [ 1626.075239][ T2563] IPv6: NLM_F_CREATE should be specified when creating new route [ 1626.083748][ T2563] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10155'. [ 1626.094327][ T2562] validate_nla: 9 callbacks suppressed [ 1626.094357][ T2562] netlink: 'syz.3.10154': attribute type 10 has an invalid length. [ 1626.148036][ T2563] netlink: 'syz.1.10155': attribute type 10 has an invalid length. [ 1626.181055][ T2563] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.10155'. [ 1626.204577][ T2562] device veth0_vlan left promiscuous mode [ 1626.255362][ T2562] device veth0_vlan entered promiscuous mode [ 1626.302421][ T2562] team0: Device veth0_vlan failed to register rx_handler [ 1626.391583][ T2572] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.10157'. [ 1626.502067][ T2572] sctp: [Deprecated]: syz.2.10157 (pid 2572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1626.502067][ T2572] Use struct sctp_sack_info instead [ 1630.109269][ T4270] Bluetooth: hci5: ISO packet for unknown connection handle 28 [ 1630.835255][ T2636] netlink: 'syz.4.10172': attribute type 10 has an invalid length. [ 1631.223092][ T2636] device veth0_vlan left promiscuous mode [ 1631.295610][ T2636] device veth0_vlan entered promiscuous mode [ 1631.342864][ T2636] team0: Device veth0_vlan failed to register rx_handler [ 1631.796181][ T2636] syz.4.10172 (2636) used greatest stack depth: 17456 bytes left [ 1631.840564][ T2646] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10175'. [ 1631.927016][ T2646] sctp: [Deprecated]: syz.1.10175 (pid 2646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1631.927016][ T2646] Use struct sctp_sack_info instead [ 1641.033080][ T2789] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10215'. [ 1641.809622][ T2808] netlink: 'syz.3.10218': attribute type 10 has an invalid length. [ 1641.817597][ T2808] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10218'. [ 1645.237648][ T2863] netlink: 'syz.4.10231': attribute type 10 has an invalid length. [ 1645.369715][ T2863] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10231'. [ 1646.056490][ T2872] FAULT_INJECTION: forcing a failure. [ 1646.056490][ T2872] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.125416][ T2872] CPU: 0 PID: 2872 Comm: syz.2.10233 Not tainted syzkaller #0 [ 1646.132932][ T2872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1646.143001][ T2872] Call Trace: [ 1646.146293][ T2872] [ 1646.149243][ T2872] dump_stack_lvl+0x188/0x24e [ 1646.153952][ T2872] ? show_regs_print_info+0x12/0x12 [ 1646.159179][ T2872] ? load_image+0x400/0x400 [ 1646.163710][ T2872] ? __might_sleep+0xd0/0xd0 [ 1646.168324][ T2872] ? __lock_acquire+0x7d10/0x7d10 [ 1646.173384][ T2872] should_fail_ex+0x399/0x4d0 [ 1646.178098][ T2872] should_failslab+0x5/0x20 [ 1646.182626][ T2872] slab_pre_alloc_hook+0x59/0x310 [ 1646.187674][ T2872] ? tomoyo_encode+0x27e/0x540 [ 1646.192476][ T2872] __kmem_cache_alloc_node+0x4f/0x260 [ 1646.197893][ T2872] ? tomoyo_encode+0x27e/0x540 [ 1646.202694][ T2872] __kmalloc+0xa0/0x240 [ 1646.206883][ T2872] tomoyo_encode+0x27e/0x540 [ 1646.211507][ T2872] tomoyo_realpath_from_path+0x58e/0x5d0 [ 1646.217193][ T2872] ? tomoyo_path_number_perm+0x205/0x650 [ 1646.222850][ T2872] tomoyo_path_number_perm+0x22f/0x650 [ 1646.228341][ T2872] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1646.233833][ T2872] ? common_file_perm+0x171/0x1c0 [ 1646.238937][ T2872] ? __fget_files+0x28/0x4b0 [ 1646.243545][ T2872] ? __fget_files+0x28/0x4b0 [ 1646.248184][ T2872] security_file_ioctl+0x6c/0xa0 [ 1646.253156][ T2872] __se_sys_ioctl+0x48/0x170 [ 1646.257775][ T2872] do_syscall_64+0x4c/0xa0 [ 1646.262284][ T2872] ? clear_bhb_loop+0x60/0xb0 [ 1646.266983][ T2872] ? clear_bhb_loop+0x60/0xb0 [ 1646.271687][ T2872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1646.277606][ T2872] RIP: 0033:0x7f1cec19aeb9 [ 1646.282649][ T2872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.302279][ T2872] RSP: 002b:00007f1cecf6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.310715][ T2872] RAX: ffffffffffffffda RBX: 00007f1cec415fa0 RCX: 00007f1cec19aeb9 [ 1646.318700][ T2872] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000004 [ 1646.326683][ T2872] RBP: 00007f1cecf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.334670][ T2872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.342655][ T2872] R13: 00007f1cec416038 R14: 00007f1cec415fa0 R15: 00007fff70a7a2a8 [ 1646.350670][ T2872] [ 1646.511758][ T2881] FAULT_INJECTION: forcing a failure. [ 1646.511758][ T2881] name failslab, interval 1, probability 0, space 0, times 0 [ 1646.605108][ T2881] CPU: 0 PID: 2881 Comm: syz.0.10236 Not tainted syzkaller #0 [ 1646.612624][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1646.622687][ T2881] Call Trace: [ 1646.625973][ T2881] [ 1646.628913][ T2881] dump_stack_lvl+0x188/0x24e [ 1646.633611][ T2881] ? show_regs_print_info+0x12/0x12 [ 1646.638823][ T2881] ? load_image+0x400/0x400 [ 1646.643338][ T2881] ? __might_sleep+0xd0/0xd0 [ 1646.647937][ T2881] ? __lock_acquire+0x7d10/0x7d10 [ 1646.652987][ T2881] should_fail_ex+0x399/0x4d0 [ 1646.657687][ T2881] should_failslab+0x5/0x20 [ 1646.662206][ T2881] slab_pre_alloc_hook+0x59/0x310 [ 1646.667248][ T2881] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1646.672985][ T2881] __kmem_cache_alloc_node+0x4f/0x260 [ 1646.678375][ T2881] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1646.684110][ T2881] __kmalloc+0xa0/0x240 [ 1646.688283][ T2881] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1646.693854][ T2881] ? tomoyo_path_number_perm+0x205/0x650 [ 1646.699508][ T2881] tomoyo_path_number_perm+0x22f/0x650 [ 1646.704984][ T2881] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1646.710453][ T2881] ? ksys_write+0x1c0/0x250 [ 1646.714975][ T2881] ? common_file_perm+0x171/0x1c0 [ 1646.720045][ T2881] ? __fget_files+0x28/0x4b0 [ 1646.724652][ T2881] ? __fget_files+0x28/0x4b0 [ 1646.729276][ T2881] security_file_ioctl+0x6c/0xa0 [ 1646.734235][ T2881] __se_sys_ioctl+0x48/0x170 [ 1646.738841][ T2881] do_syscall_64+0x4c/0xa0 [ 1646.743267][ T2881] ? clear_bhb_loop+0x60/0xb0 [ 1646.747956][ T2881] ? clear_bhb_loop+0x60/0xb0 [ 1646.752644][ T2881] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1646.758546][ T2881] RIP: 0033:0x7f512639aeb9 [ 1646.762966][ T2881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1646.782579][ T2881] RSP: 002b:00007f51271bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1646.791007][ T2881] RAX: ffffffffffffffda RBX: 00007f5126615fa0 RCX: 00007f512639aeb9 [ 1646.798987][ T2881] RDX: 0000200000000000 RSI: 0000000000008b0f RDI: 0000000000000004 [ 1646.806964][ T2881] RBP: 00007f51271bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1646.814942][ T2881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1646.822922][ T2881] R13: 00007f5126616038 R14: 00007f5126615fa0 R15: 00007ffff5fbf7e8 [ 1646.830926][ T2881] [ 1646.969661][ T2881] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1646.976699][ T2872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1647.351757][ T2891] netlink: 'syz.1.10239': attribute type 21 has an invalid length. [ 1647.365646][ T2891] netlink: 'syz.1.10239': attribute type 1 has an invalid length. [ 1648.170574][ T2907] netlink: 'syz.3.10244': attribute type 10 has an invalid length. [ 1648.186938][ T2907] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10244'. [ 1650.540846][ T2915] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10247'. [ 1651.786757][ T2915] device hsr_slave_1 left promiscuous mode [ 1651.815378][ T2941] netlink: 'syz.2.10256': attribute type 10 has an invalid length. [ 1651.834652][ T2941] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10256'. [ 1652.313285][ T2960] FAULT_INJECTION: forcing a failure. [ 1652.313285][ T2960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.349490][ T2960] CPU: 1 PID: 2960 Comm: syz.3.10263 Not tainted syzkaller #0 [ 1652.356985][ T2960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1652.367047][ T2960] Call Trace: [ 1652.370322][ T2960] [ 1652.373241][ T2960] dump_stack_lvl+0x188/0x24e [ 1652.377911][ T2960] ? show_regs_print_info+0x12/0x12 [ 1652.383099][ T2960] ? load_image+0x400/0x400 [ 1652.387608][ T2960] ? __lock_acquire+0x7d10/0x7d10 [ 1652.392659][ T2960] ? snprintf+0xe5/0x140 [ 1652.396914][ T2960] should_fail_ex+0x399/0x4d0 [ 1652.401617][ T2960] _copy_to_user+0x2c/0x130 [ 1652.406132][ T2960] simple_read_from_buffer+0xe3/0x150 [ 1652.411508][ T2960] proc_fail_nth_read+0x1a6/0x220 [ 1652.416527][ T2960] ? proc_fault_inject_write+0x310/0x310 [ 1652.422156][ T2960] ? fsnotify_perm+0x248/0x550 [ 1652.426916][ T2960] ? proc_fault_inject_write+0x310/0x310 [ 1652.432542][ T2960] vfs_read+0x2de/0xa00 [ 1652.436699][ T2960] ? kernel_read+0x1e0/0x1e0 [ 1652.441283][ T2960] ? __fget_files+0x28/0x4b0 [ 1652.445872][ T2960] ? __fget_files+0x28/0x4b0 [ 1652.450460][ T2960] ? __fget_files+0x43d/0x4b0 [ 1652.455137][ T2960] ? __fdget_pos+0x2ae/0x360 [ 1652.459723][ T2960] ? ksys_read+0x71/0x250 [ 1652.464049][ T2960] ksys_read+0x14c/0x250 [ 1652.468294][ T2960] ? vfs_write+0xa30/0xa30 [ 1652.472710][ T2960] ? lockdep_hardirqs_on+0x94/0x140 [ 1652.477900][ T2960] do_syscall_64+0x4c/0xa0 [ 1652.482311][ T2960] ? clear_bhb_loop+0x60/0xb0 [ 1652.486983][ T2960] ? clear_bhb_loop+0x60/0xb0 [ 1652.491655][ T2960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1652.497539][ T2960] RIP: 0033:0x7f2cf675b78e [ 1652.501944][ T2960] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1652.521548][ T2960] RSP: 002b:00007f2cf75a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1652.529949][ T2960] RAX: ffffffffffffffda RBX: 00007f2cf75a16c0 RCX: 00007f2cf675b78e [ 1652.537909][ T2960] RDX: 000000000000000f RSI: 00007f2cf75a10a0 RDI: 0000000000000008 [ 1652.545868][ T2960] RBP: 00007f2cf75a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.553827][ T2960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.561787][ T2960] R13: 00007f2cf6a16128 R14: 00007f2cf6a16090 R15: 00007ffd3dfbe458 [ 1652.569760][ T2960] [ 1653.661075][ T2990] netlink: 'syz.1.10271': attribute type 10 has an invalid length. [ 1653.669072][ T2990] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10271'. [ 1653.744603][ T2986] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10270'. [ 1653.945199][ T2986] device hsr_slave_1 left promiscuous mode [ 1654.706133][ T3018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10281'. [ 1655.256060][ T3031] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10285'. [ 1655.299621][ T3031] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1660.221719][ T3095] netlink: 'syz.3.10307': attribute type 16 has an invalid length. [ 1660.237477][ T3095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10307'. [ 1662.145242][ T3137] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10323'. [ 1662.309960][ T3137] device hsr_slave_1 left promiscuous mode [ 1662.729194][ T3158] netlink: 'syz.2.10331': attribute type 3 has an invalid length. [ 1662.750690][ T3158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10331'. [ 1668.000450][ T3254] FAULT_INJECTION: forcing a failure. [ 1668.000450][ T3254] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.014000][ T3254] CPU: 1 PID: 3254 Comm: syz.4.10365 Not tainted syzkaller #0 [ 1668.021491][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1668.031560][ T3254] Call Trace: [ 1668.034847][ T3254] [ 1668.037783][ T3254] dump_stack_lvl+0x188/0x24e [ 1668.042481][ T3254] ? show_regs_print_info+0x12/0x12 [ 1668.047698][ T3254] ? load_image+0x400/0x400 [ 1668.052228][ T3254] ? __lock_acquire+0x7d10/0x7d10 [ 1668.057281][ T3254] should_fail_ex+0x399/0x4d0 [ 1668.061986][ T3254] should_failslab+0x5/0x20 [ 1668.066508][ T3254] slab_pre_alloc_hook+0x59/0x310 [ 1668.071553][ T3254] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 1668.077203][ T3254] __kmem_cache_alloc_node+0x4f/0x260 [ 1668.082593][ T3254] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 1668.088247][ T3254] __kmalloc_node+0xa0/0x240 [ 1668.092863][ T3254] memcg_alloc_slab_cgroups+0x83/0x120 [ 1668.098347][ T3254] slab_post_alloc_hook+0xba/0x480 [ 1668.103481][ T3254] kmem_cache_alloc_node+0x14d/0x320 [ 1668.108777][ T3254] ? __alloc_skb+0xfc/0x7e0 [ 1668.113301][ T3254] __alloc_skb+0xfc/0x7e0 [ 1668.117654][ T3254] alloc_skb_with_frags+0xa7/0x710 [ 1668.122776][ T3254] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1668.128947][ T3254] ? irqentry_enter+0x33/0x50 [ 1668.133638][ T3254] sock_alloc_send_pskb+0x87f/0x9a0 [ 1668.138873][ T3254] ? sock_kzfree_s+0x50/0x50 [ 1668.143489][ T3254] ? apparmor_socket_getpeersec_stream+0x2d0/0x2d0 [ 1668.150016][ T3254] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 1668.156188][ T3254] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 1668.162452][ T3254] unix_dgram_sendmsg+0x539/0x16e0 [ 1668.167594][ T3254] ? aa_sk_perm+0x81f/0x950 [ 1668.172122][ T3254] ? unix_dgram_poll+0x680/0x680 [ 1668.177074][ T3254] ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0 [ 1668.183511][ T3254] ? aa_sock_msg_perm+0x94/0x150 [ 1668.188464][ T3254] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1668.193757][ T3254] ? security_socket_sendmsg+0x7c/0xa0 [ 1668.199238][ T3254] ? unix_dgram_poll+0x680/0x680 [ 1668.204189][ T3254] ____sys_sendmsg+0x5be/0x970 [ 1668.208982][ T3254] ? __sys_sendmsg_sock+0x30/0x30 [ 1668.214020][ T3254] ? __import_iovec+0x315/0x500 [ 1668.218892][ T3254] ? import_iovec+0x6f/0xa0 [ 1668.223414][ T3254] ___sys_sendmsg+0x2a2/0x360 [ 1668.228114][ T3254] ? __sys_sendmsg+0x290/0x290 [ 1668.232895][ T3254] ? perf_trace_preemptirq_template+0xa8/0x320 [ 1668.239083][ T3254] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1668.245092][ T3254] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1668.251265][ T3254] ? lockdep_hardirqs_on+0x94/0x140 [ 1668.256484][ T3254] ? __se_sys_sendmsg+0xf4/0x2a0 [ 1668.261443][ T3254] ? kasan_check_range+0x84/0x290 [ 1668.266493][ T3254] __se_sys_sendmsg+0x1bb/0x2a0 [ 1668.271367][ T3254] ? __x64_sys_sendmsg+0x80/0x80 [ 1668.276340][ T3254] ? lockdep_hardirqs_on+0x94/0x140 [ 1668.281553][ T3254] do_syscall_64+0x4c/0xa0 [ 1668.285989][ T3254] ? clear_bhb_loop+0x60/0xb0 [ 1668.290678][ T3254] ? clear_bhb_loop+0x60/0xb0 [ 1668.295371][ T3254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1668.301275][ T3254] RIP: 0033:0x7f0b8e19aeb9 [ 1668.305701][ T3254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1668.325316][ T3254] RSP: 002b:00007f0b8f10e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1668.333744][ T3254] RAX: ffffffffffffffda RBX: 00007f0b8e416090 RCX: 00007f0b8e19aeb9 [ 1668.341731][ T3254] RDX: 0000000004000088 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1668.349728][ T3254] RBP: 00007f0b8f10e090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.357712][ T3254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.365693][ T3254] R13: 00007f0b8e416128 R14: 00007f0b8e416090 R15: 00007ffd343e6168 [ 1668.373696][ T3254] [ 1668.661763][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.668164][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.885591][ T3281] tun0: tun_chr_ioctl cmd 1074025694 [ 1673.990686][ T3351] tun0: tun_chr_ioctl cmd 1074025694 [ 1677.276256][ T3380] FAULT_INJECTION: forcing a failure. [ 1677.276256][ T3380] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.307690][ T3380] CPU: 1 PID: 3380 Comm: syz.4.10405 Not tainted syzkaller #0 [ 1677.315183][ T3380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1677.325250][ T3380] Call Trace: [ 1677.328538][ T3380] [ 1677.331480][ T3380] dump_stack_lvl+0x188/0x24e [ 1677.336178][ T3380] ? show_regs_print_info+0x12/0x12 [ 1677.341398][ T3380] ? load_image+0x400/0x400 [ 1677.345912][ T3380] ? __might_sleep+0xd0/0xd0 [ 1677.350518][ T3380] ? __lock_acquire+0x7d10/0x7d10 [ 1677.355567][ T3380] should_fail_ex+0x399/0x4d0 [ 1677.360265][ T3380] should_failslab+0x5/0x20 [ 1677.364770][ T3380] slab_pre_alloc_hook+0x59/0x310 [ 1677.369786][ T3380] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1677.376199][ T3380] __kmem_cache_alloc_node+0x4f/0x260 [ 1677.381575][ T3380] ? bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1677.387981][ T3380] __kmalloc+0xa0/0x240 [ 1677.392133][ T3380] bpf_prog_test_run_flow_dissector+0x255/0x640 [ 1677.398369][ T3380] ? xdp_convert_buff_to_md+0x200/0x200 [ 1677.403904][ T3380] ? __fget_files+0x28/0x4b0 [ 1677.408489][ T3380] ? __fget_files+0x28/0x4b0 [ 1677.413076][ T3380] ? __fget_files+0x43d/0x4b0 [ 1677.417755][ T3380] ? xdp_convert_buff_to_md+0x200/0x200 [ 1677.423292][ T3380] bpf_prog_test_run+0x31e/0x390 [ 1677.428228][ T3380] __sys_bpf+0x62b/0x780 [ 1677.432464][ T3380] ? bpf_link_show_fdinfo+0x380/0x380 [ 1677.437842][ T3380] ? lock_chain_count+0x20/0x20 [ 1677.442690][ T3380] __x64_sys_bpf+0x78/0x90 [ 1677.447108][ T3380] do_syscall_64+0x4c/0xa0 [ 1677.451604][ T3380] ? clear_bhb_loop+0x60/0xb0 [ 1677.456272][ T3380] ? clear_bhb_loop+0x60/0xb0 [ 1677.460944][ T3380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.466827][ T3380] RIP: 0033:0x7f0b8e19aeb9 [ 1677.471234][ T3380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.490834][ T3380] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1677.499240][ T3380] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1677.507211][ T3380] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1677.515173][ T3380] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.523141][ T3380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.531100][ T3380] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1677.539071][ T3380] [ 1679.679075][ T3415] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.10418'. [ 1679.702989][ T3415] netlink: zone id is out of range [ 1679.750638][ T3415] netlink: zone id is out of range [ 1679.798733][ T3415] netlink: zone id is out of range [ 1679.830652][ T3415] netlink: zone id is out of range [ 1679.835812][ T3415] netlink: zone id is out of range [ 1679.842321][ T3421] device bridge_slave_1 left promiscuous mode [ 1679.849113][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.859717][ T3415] netlink: zone id is out of range [ 1679.906576][ T3415] netlink: zone id is out of range [ 1679.941868][ T3415] netlink: zone id is out of range [ 1679.947098][ T3415] netlink: zone id is out of range [ 1679.978682][ T3421] device bridge_slave_0 left promiscuous mode [ 1679.999576][ T3415] netlink: zone id is out of range [ 1680.026246][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.093283][ T3433] netlink: 'syz.1.10426': attribute type 29 has an invalid length. [ 1680.348915][ T3433] netlink: 'syz.1.10426': attribute type 29 has an invalid length. [ 1682.602203][ T3475] netlink: 'syz.3.10441': attribute type 29 has an invalid length. [ 1682.610525][ T3475] netlink: 'syz.3.10441': attribute type 29 has an invalid length. [ 1685.603310][ T3507] device syzkaller0 entered promiscuous mode [ 1686.798412][ T3537] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10457'. [ 1686.835255][ T3537] net_ratelimit: 66 callbacks suppressed [ 1686.835273][ T3537] netlink: zone id is out of range [ 1686.876037][ T3537] netlink: zone id is out of range [ 1686.902021][ T3537] netlink: zone id is out of range [ 1686.918872][ T3537] netlink: zone id is out of range [ 1686.941859][ T3537] netlink: zone id is out of range [ 1686.982567][ T3537] netlink: zone id is out of range [ 1687.014911][ T3537] netlink: zone id is out of range [ 1687.044404][ T3537] netlink: zone id is out of range [ 1687.076812][ T3537] netlink: zone id is out of range [ 1687.094668][ T3537] netlink: zone id is out of range [ 1691.516055][ T3559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10465'. [ 1692.323472][ T3525] tun0: tun_chr_ioctl cmd 1074025694 [ 1692.339713][ T3559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10465'. [ 1692.368962][ T3560] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10465'. [ 1692.565829][ T3562] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1692.592295][ T3562] syzkaller1: linktype set to 823 [ 1692.626888][ T3565] netlink: 'syz.0.10468': attribute type 21 has an invalid length. [ 1692.651037][ T3565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1692.662555][ T3565] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10468'. [ 1695.569122][ T3592] netlink: 'syz.3.10476': attribute type 10 has an invalid length. [ 1695.619165][ T3592] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10476'. [ 1695.996136][ T3606] tun0: tun_chr_ioctl cmd 1074025694 [ 1701.558292][ T3642] netlink: 'syz.4.10491': attribute type 10 has an invalid length. [ 1701.591657][ T3642] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10491'. [ 1702.128784][ T3659] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10498'. [ 1702.152794][ T3661] tun0: tun_chr_ioctl cmd 1074025694 [ 1702.383068][ T3665] netlink: 'syz.3.10498': attribute type 1 has an invalid length. [ 1705.186235][ T3677] FAULT_INJECTION: forcing a failure. [ 1705.186235][ T3677] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.240650][ T3677] CPU: 1 PID: 3677 Comm: syz.3.10503 Not tainted syzkaller #0 [ 1705.248158][ T3677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1705.258232][ T3677] Call Trace: [ 1705.261523][ T3677] [ 1705.264467][ T3677] dump_stack_lvl+0x188/0x24e [ 1705.269185][ T3677] ? show_regs_print_info+0x12/0x12 [ 1705.274408][ T3677] ? load_image+0x400/0x400 [ 1705.278914][ T3677] ? __might_sleep+0xd0/0xd0 [ 1705.283508][ T3677] ? __lock_acquire+0x7d10/0x7d10 [ 1705.288540][ T3677] should_fail_ex+0x399/0x4d0 [ 1705.293225][ T3677] should_failslab+0x5/0x20 [ 1705.297748][ T3677] slab_pre_alloc_hook+0x59/0x310 [ 1705.302780][ T3677] ? apparmor_sk_alloc_security+0x74/0x100 [ 1705.308593][ T3677] __kmem_cache_alloc_node+0x4f/0x260 [ 1705.313982][ T3677] ? apparmor_sk_alloc_security+0x74/0x100 [ 1705.319809][ T3677] kmalloc_trace+0x26/0xe0 [ 1705.324249][ T3677] apparmor_sk_alloc_security+0x74/0x100 [ 1705.329891][ T3677] security_sk_alloc+0x6a/0xa0 [ 1705.334658][ T3677] sk_prot_alloc+0x101/0x210 [ 1705.339240][ T3677] ? sk_alloc+0x20/0x340 [ 1705.343481][ T3677] sk_alloc+0x36/0x340 [ 1705.347561][ T3677] ? bpf_ctx_init+0x163/0x1a0 [ 1705.352243][ T3677] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1705.357795][ T3677] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1705.363175][ T3677] ? __fget_files+0x28/0x4b0 [ 1705.367765][ T3677] ? __fget_files+0x43d/0x4b0 [ 1705.372446][ T3677] ? cpu_online+0xa0/0xa0 [ 1705.376767][ T3677] bpf_prog_test_run+0x31e/0x390 [ 1705.381703][ T3677] __sys_bpf+0x62b/0x780 [ 1705.385942][ T3677] ? bpf_link_show_fdinfo+0x380/0x380 [ 1705.391321][ T3677] ? lock_chain_count+0x20/0x20 [ 1705.396186][ T3677] __x64_sys_bpf+0x78/0x90 [ 1705.400601][ T3677] do_syscall_64+0x4c/0xa0 [ 1705.405009][ T3677] ? clear_bhb_loop+0x60/0xb0 [ 1705.409682][ T3677] ? clear_bhb_loop+0x60/0xb0 [ 1705.414364][ T3677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1705.420252][ T3677] RIP: 0033:0x7f2cf679aeb9 [ 1705.424658][ T3677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1705.444254][ T3677] RSP: 002b:00007f2cf75c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1705.452672][ T3677] RAX: ffffffffffffffda RBX: 00007f2cf6a15fa0 RCX: 00007f2cf679aeb9 [ 1705.460643][ T3677] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1705.468610][ T3677] RBP: 00007f2cf75c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.476577][ T3677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.484544][ T3677] R13: 00007f2cf6a16038 R14: 00007f2cf6a15fa0 R15: 00007ffd3dfbe458 [ 1705.492527][ T3677] [ 1706.033478][ T3701] netlink: 'syz.3.10508': attribute type 10 has an invalid length. [ 1706.049625][ T3701] netlink: 55 bytes leftover after parsing attributes in process `syz.3.10508'. [ 1708.444998][ T3704] netlink: 'syz.0.10509': attribute type 29 has an invalid length. [ 1708.490073][ T3704] netlink: 'syz.0.10509': attribute type 29 has an invalid length. [ 1708.530920][ T3712] netlink: 'syz.0.10509': attribute type 29 has an invalid length. [ 1709.336735][ T3740] netlink: 'syz.2.10522': attribute type 10 has an invalid length. [ 1709.369527][ T3740] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10522'. [ 1709.866147][ T3751] tun0: tun_chr_ioctl cmd 1074025694 [ 1711.698489][ T3753] netlink: 'syz.3.10526': attribute type 29 has an invalid length. [ 1711.985133][ T3753] netlink: 'syz.3.10526': attribute type 29 has an invalid length. [ 1712.066486][ T3759] netlink: 'syz.3.10526': attribute type 29 has an invalid length. [ 1712.175094][ T3765] netlink: 'syz.0.10530': attribute type 6 has an invalid length. [ 1712.704866][ T3786] netlink: 'syz.4.10537': attribute type 10 has an invalid length. [ 1712.726817][ T3786] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10537'. [ 1712.832649][ T3790] netlink: 'syz.0.10539': attribute type 10 has an invalid length. [ 1713.655763][ T3826] validate_nla: 3 callbacks suppressed [ 1713.655780][ T3826] netlink: 'syz.0.10552': attribute type 10 has an invalid length. [ 1713.677151][ T3826] netlink: 55 bytes leftover after parsing attributes in process `syz.0.10552'. [ 1714.571143][ T3829] netlink: 188 bytes leftover after parsing attributes in process `syz.2.10553'. [ 1714.589494][ T3829] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 1714.722094][ T3833] netlink: 'syz.2.10553': attribute type 10 has an invalid length. [ 1715.972907][ T3841] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1716.012529][ T3845] netlink: 'syz.4.10558': attribute type 29 has an invalid length. [ 1716.013758][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10555'. [ 1716.080387][ T3845] netlink: 'syz.4.10558': attribute type 29 has an invalid length. [ 1716.105831][ T3847] netlink: 'syz.4.10558': attribute type 29 has an invalid length. [ 1716.292051][ T3859] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10563'. [ 1716.354329][ T3859] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.10563'. [ 1716.405251][ T3859] net_ratelimit: 66 callbacks suppressed [ 1716.405276][ T3859] netlink: zone id is out of range [ 1716.445663][ T3859] netlink: zone id is out of range [ 1716.459907][ T3859] netlink: zone id is out of range [ 1716.473335][ T3859] netlink: zone id is out of range [ 1716.489041][ T3859] netlink: zone id is out of range [ 1716.499257][ T3859] netlink: zone id is out of range [ 1716.509527][ T3859] netlink: zone id is out of range [ 1716.520068][ T3859] netlink: zone id is out of range [ 1716.539790][ T3859] netlink: zone id is out of range [ 1716.579683][ T3859] netlink: zone id is out of range [ 1717.525754][ T3878] FAULT_INJECTION: forcing a failure. [ 1717.525754][ T3878] name failslab, interval 1, probability 0, space 0, times 0 [ 1717.641056][ T3878] CPU: 1 PID: 3878 Comm: syz.4.10570 Not tainted syzkaller #0 [ 1717.648557][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1717.658614][ T3878] Call Trace: [ 1717.661894][ T3878] [ 1717.664828][ T3878] dump_stack_lvl+0x188/0x24e [ 1717.669547][ T3878] ? verify_lock_unused+0x140/0x140 [ 1717.674756][ T3878] ? show_regs_print_info+0x12/0x12 [ 1717.679966][ T3878] ? load_image+0x400/0x400 [ 1717.684475][ T3878] ? crng_make_state+0x1d1/0xb00 [ 1717.689464][ T3878] should_fail_ex+0x399/0x4d0 [ 1717.694163][ T3878] should_failslab+0x5/0x20 [ 1717.698684][ T3878] slab_pre_alloc_hook+0x59/0x310 [ 1717.703722][ T3878] ? sctp_add_bind_addr+0x89/0x350 [ 1717.708849][ T3878] __kmem_cache_alloc_node+0x4f/0x260 [ 1717.714240][ T3878] ? sctp_add_bind_addr+0x89/0x350 [ 1717.719365][ T3878] kmalloc_trace+0x26/0xe0 [ 1717.723799][ T3878] sctp_add_bind_addr+0x89/0x350 [ 1717.728751][ T3878] sctp_copy_local_addr_list+0x311/0x4e0 [ 1717.734403][ T3878] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1717.740135][ T3878] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1717.746227][ T3878] ? sctp_v4_is_any+0x31/0x50 [ 1717.750917][ T3878] ? sctp_copy_one_addr+0x93/0x660 [ 1717.756041][ T3878] sctp_bind_addr_copy+0xaf/0x3c0 [ 1717.761077][ T3878] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1717.767423][ T3878] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1717.772726][ T3878] ? __sctp_connect+0xd80/0xd80 [ 1717.777593][ T3878] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1717.783142][ T3878] ? security_sctp_bind_connect+0x85/0xb0 [ 1717.788873][ T3878] sctp_sendmsg+0x15b0/0x2940 [ 1717.793560][ T3878] ? ct_nmi_exit+0x145/0x1c0 [ 1717.798175][ T3878] ? sctp_getsockopt+0x8a0/0x8a0 [ 1717.803128][ T3878] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1717.809291][ T3878] ? lockdep_hardirqs_on+0x94/0x140 [ 1717.814498][ T3878] ? inet_send_prepare+0x260/0x260 [ 1717.819629][ T3878] ? inet_sendmsg+0xe5/0x2f0 [ 1717.824239][ T3878] ? inet_send_prepare+0x260/0x260 [ 1717.829362][ T3878] ____sys_sendmsg+0x5be/0x970 [ 1717.834152][ T3878] ? __sys_sendmsg_sock+0x30/0x30 [ 1717.839194][ T3878] ? __import_iovec+0x315/0x500 [ 1717.844064][ T3878] ? import_iovec+0x6f/0xa0 [ 1717.848576][ T3878] ___sys_sendmsg+0x2a2/0x360 [ 1717.853273][ T3878] ? __sys_sendmsg+0x290/0x290 [ 1717.858106][ T3878] __se_sys_sendmsg+0x1bb/0x2a0 [ 1717.862972][ T3878] ? __x64_sys_sendmsg+0x80/0x80 [ 1717.867951][ T3878] do_syscall_64+0x4c/0xa0 [ 1717.872377][ T3878] ? clear_bhb_loop+0x60/0xb0 [ 1717.877059][ T3878] ? clear_bhb_loop+0x60/0xb0 [ 1717.881747][ T3878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1717.887644][ T3878] RIP: 0033:0x7f0b8e19aeb9 [ 1717.892067][ T3878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1717.911857][ T3878] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1717.920280][ T3878] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1717.928256][ T3878] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000007 [ 1717.936231][ T3878] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1717.944209][ T3878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1717.952179][ T3878] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1717.960182][ T3878] [ 1720.335776][ T3890] netlink: 'syz.0.10574': attribute type 29 has an invalid length. [ 1720.379140][ T3890] netlink: 'syz.0.10574': attribute type 29 has an invalid length. [ 1720.392515][ T3892] netlink: 'syz.0.10574': attribute type 29 has an invalid length. [ 1720.634800][ T3907] FAULT_INJECTION: forcing a failure. [ 1720.634800][ T3907] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.681437][ T3907] CPU: 1 PID: 3907 Comm: syz.0.10579 Not tainted syzkaller #0 [ 1720.688927][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1720.698990][ T3907] Call Trace: [ 1720.702282][ T3907] [ 1720.705220][ T3907] dump_stack_lvl+0x188/0x24e [ 1720.709915][ T3907] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1720.716094][ T3907] ? show_regs_print_info+0x12/0x12 [ 1720.721311][ T3907] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1720.727495][ T3907] should_fail_ex+0x399/0x4d0 [ 1720.732196][ T3907] should_failslab+0x5/0x20 [ 1720.736718][ T3907] slab_pre_alloc_hook+0x59/0x310 [ 1720.741757][ T3907] ? apparmor_sk_alloc_security+0x74/0x100 [ 1720.747585][ T3907] __kmem_cache_alloc_node+0x4f/0x260 [ 1720.752979][ T3907] ? apparmor_sk_alloc_security+0x74/0x100 [ 1720.758808][ T3907] kmalloc_trace+0x26/0xe0 [ 1720.763246][ T3907] apparmor_sk_alloc_security+0x74/0x100 [ 1720.768903][ T3907] security_sk_alloc+0x6a/0xa0 [ 1720.773690][ T3907] sk_prot_alloc+0x101/0x210 [ 1720.778297][ T3907] ? sk_alloc+0x20/0x340 [ 1720.782558][ T3907] sk_alloc+0x36/0x340 [ 1720.786639][ T3907] ? bpf_ctx_init+0x163/0x1a0 [ 1720.791329][ T3907] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1720.796891][ T3907] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1720.802272][ T3907] ? __fget_files+0x28/0x4b0 [ 1720.806877][ T3907] ? __fget_files+0x43d/0x4b0 [ 1720.811580][ T3907] ? cpu_online+0xa0/0xa0 [ 1720.815920][ T3907] bpf_prog_test_run+0x31e/0x390 [ 1720.820879][ T3907] __sys_bpf+0x62b/0x780 [ 1720.825142][ T3907] ? bpf_link_show_fdinfo+0x380/0x380 [ 1720.830540][ T3907] ? lock_chain_count+0x20/0x20 [ 1720.835401][ T3907] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1720.841405][ T3907] __x64_sys_bpf+0x78/0x90 [ 1720.845829][ T3907] do_syscall_64+0x4c/0xa0 [ 1720.850256][ T3907] ? clear_bhb_loop+0x60/0xb0 [ 1720.854945][ T3907] ? clear_bhb_loop+0x60/0xb0 [ 1720.859635][ T3907] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1720.865539][ T3907] RIP: 0033:0x7f512639aeb9 [ 1720.869964][ T3907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.889579][ T3907] RSP: 002b:00007f51271bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1720.898007][ T3907] RAX: ffffffffffffffda RBX: 00007f5126615fa0 RCX: 00007f512639aeb9 [ 1720.905993][ T3907] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1720.913969][ T3907] RBP: 00007f51271bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.921939][ T3907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.929908][ T3907] R13: 00007f5126616038 R14: 00007f5126615fa0 R15: 00007ffff5fbf7e8 [ 1720.937900][ T3907] [ 1724.314647][ T3950] netlink: 'syz.3.10590': attribute type 29 has an invalid length. [ 1724.346196][ T3950] netlink: 'syz.3.10590': attribute type 29 has an invalid length. [ 1724.391159][ T3951] netlink: 'syz.3.10590': attribute type 29 has an invalid length. [ 1725.074052][ T3975] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.10599'. [ 1725.476696][ T3987] netlink: 'syz.1.10605': attribute type 29 has an invalid length. [ 1725.517686][ T3987] netlink: 'syz.1.10605': attribute type 29 has an invalid length. [ 1725.570646][ T3990] netlink: 'syz.1.10605': attribute type 29 has an invalid length. [ 1728.265273][ T3999] device lo left promiscuous mode [ 1728.459541][ T4011] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1728.490664][ T4012] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10612'. [ 1729.425407][ T4027] netlink: 'syz.1.10616': attribute type 29 has an invalid length. [ 1729.474126][ T4027] netlink: 'syz.1.10616': attribute type 29 has an invalid length. [ 1729.535082][ T4028] netlink: 'syz.1.10616': attribute type 29 has an invalid length. [ 1729.923818][ T4040] FAULT_INJECTION: forcing a failure. [ 1729.923818][ T4040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1729.991334][ T4040] CPU: 0 PID: 4040 Comm: syz.3.10619 Not tainted syzkaller #0 [ 1729.998843][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1730.008909][ T4040] Call Trace: [ 1730.012194][ T4040] [ 1730.015119][ T4040] dump_stack_lvl+0x188/0x24e [ 1730.019798][ T4040] ? show_regs_print_info+0x12/0x12 [ 1730.024989][ T4040] ? load_image+0x400/0x400 [ 1730.029485][ T4040] ? __lock_acquire+0x7d10/0x7d10 [ 1730.034512][ T4040] should_fail_ex+0x399/0x4d0 [ 1730.039192][ T4040] _copy_from_user+0x2c/0x170 [ 1730.043863][ T4040] ___sys_sendmsg+0x1c3/0x360 [ 1730.048549][ T4040] ? __sys_sendmsg+0x290/0x290 [ 1730.053323][ T4040] ? __lock_acquire+0x7d10/0x7d10 [ 1730.058360][ T4040] __se_sys_sendmsg+0x1bb/0x2a0 [ 1730.063209][ T4040] ? __x64_sys_sendmsg+0x80/0x80 [ 1730.068152][ T4040] ? lockdep_hardirqs_on+0x94/0x140 [ 1730.073346][ T4040] do_syscall_64+0x4c/0xa0 [ 1730.077758][ T4040] ? clear_bhb_loop+0x60/0xb0 [ 1730.082425][ T4040] ? clear_bhb_loop+0x60/0xb0 [ 1730.087095][ T4040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1730.092977][ T4040] RIP: 0033:0x7f2cf679aeb9 [ 1730.097382][ T4040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1730.116984][ T4040] RSP: 002b:00007f2cf75c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1730.125400][ T4040] RAX: ffffffffffffffda RBX: 00007f2cf6a15fa0 RCX: 00007f2cf679aeb9 [ 1730.133360][ T4040] RDX: 0000000004000040 RSI: 00002000000029c0 RDI: 0000000000000008 [ 1730.141324][ T4040] RBP: 00007f2cf75c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.149281][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1730.157256][ T4040] R13: 00007f2cf6a16038 R14: 00007f2cf6a15fa0 R15: 00007ffd3dfbe458 [ 1730.165240][ T4040] [ 1730.229616][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.235952][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.031026][ T4080] netlink: 'syz.4.10630': attribute type 29 has an invalid length. [ 1733.059907][ T4080] netlink: 'syz.4.10630': attribute type 29 has an invalid length. [ 1733.100479][ T4085] netlink: 'syz.4.10630': attribute type 29 has an invalid length. [ 1733.300542][ T4091] FAULT_INJECTION: forcing a failure. [ 1733.300542][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.377562][ T4091] CPU: 1 PID: 4091 Comm: syz.4.10632 Not tainted syzkaller #0 [ 1733.385082][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1733.395148][ T4091] Call Trace: [ 1733.398432][ T4091] [ 1733.401378][ T4091] dump_stack_lvl+0x188/0x24e [ 1733.406085][ T4091] ? show_regs_print_info+0x12/0x12 [ 1733.411298][ T4091] ? load_image+0x400/0x400 [ 1733.415820][ T4091] ? __might_sleep+0xd0/0xd0 [ 1733.420418][ T4091] ? __lock_acquire+0x7d10/0x7d10 [ 1733.425468][ T4091] should_fail_ex+0x399/0x4d0 [ 1733.430171][ T4091] should_failslab+0x5/0x20 [ 1733.434691][ T4091] slab_pre_alloc_hook+0x59/0x310 [ 1733.439731][ T4091] ? sk_prot_alloc+0xe7/0x210 [ 1733.444423][ T4091] __kmem_cache_alloc_node+0x4f/0x260 [ 1733.449810][ T4091] ? sk_prot_alloc+0xe7/0x210 [ 1733.454498][ T4091] __kmalloc+0xa0/0x240 [ 1733.458672][ T4091] sk_prot_alloc+0xe7/0x210 [ 1733.463188][ T4091] ? sk_alloc+0x20/0x340 [ 1733.467443][ T4091] sk_alloc+0x36/0x340 [ 1733.471527][ T4091] ? bpf_ctx_init+0x163/0x1a0 [ 1733.476211][ T4091] ? bpf_prog_test_run_skb+0x26f/0x12a0 [ 1733.481770][ T4091] bpf_prog_test_run_skb+0x35e/0x12a0 [ 1733.487152][ T4091] ? __fget_files+0x28/0x4b0 [ 1733.491759][ T4091] ? __fget_files+0x43d/0x4b0 [ 1733.496460][ T4091] ? cpu_online+0xa0/0xa0 [ 1733.500803][ T4091] bpf_prog_test_run+0x31e/0x390 [ 1733.505765][ T4091] __sys_bpf+0x62b/0x780 [ 1733.510025][ T4091] ? bpf_link_show_fdinfo+0x380/0x380 [ 1733.515427][ T4091] ? lock_chain_count+0x20/0x20 [ 1733.520299][ T4091] __x64_sys_bpf+0x78/0x90 [ 1733.524740][ T4091] do_syscall_64+0x4c/0xa0 [ 1733.529180][ T4091] ? clear_bhb_loop+0x60/0xb0 [ 1733.533867][ T4091] ? clear_bhb_loop+0x60/0xb0 [ 1733.538555][ T4091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1733.544459][ T4091] RIP: 0033:0x7f0b8e19aeb9 [ 1733.548883][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.568503][ T4091] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1733.576940][ T4091] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1733.584927][ T4091] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1733.592919][ T4091] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.600900][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1733.608883][ T4091] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1733.616881][ T4091] [ 1733.622817][ T4065] delete_channel: no stack [ 1733.799839][ T4105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10638'. [ 1734.054131][ T4117] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.10639'. [ 1734.251874][ T4122] netlink: 'syz.4.10642': attribute type 29 has an invalid length. [ 1734.289808][ T4122] netlink: 'syz.4.10642': attribute type 29 has an invalid length. [ 1734.339775][ T4122] netlink: 'syz.4.10642': attribute type 29 has an invalid length. [ 1735.606493][ T4144] FAULT_INJECTION: forcing a failure. [ 1735.606493][ T4144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1735.638373][ T4146] netlink: 'syz.3.10650': attribute type 27 has an invalid length. [ 1735.651284][ T4144] CPU: 1 PID: 4144 Comm: syz.4.10651 Not tainted syzkaller #0 [ 1735.658772][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1735.668837][ T4144] Call Trace: [ 1735.672124][ T4144] [ 1735.675063][ T4144] dump_stack_lvl+0x188/0x24e [ 1735.679765][ T4144] ? show_regs_print_info+0x12/0x12 [ 1735.684982][ T4144] ? load_image+0x400/0x400 [ 1735.689501][ T4144] ? __lock_acquire+0x7d10/0x7d10 [ 1735.694550][ T4144] should_fail_ex+0x399/0x4d0 [ 1735.699254][ T4144] _copy_from_user+0x2c/0x170 [ 1735.703953][ T4144] bpf_prog_test_run_skb+0x262/0x12a0 [ 1735.709336][ T4144] ? __fget_files+0x28/0x4b0 [ 1735.713945][ T4144] ? __fget_files+0x28/0x4b0 [ 1735.718554][ T4144] ? __fget_files+0x43d/0x4b0 [ 1735.723260][ T4144] ? cpu_online+0xa0/0xa0 [ 1735.727603][ T4144] bpf_prog_test_run+0x31e/0x390 [ 1735.732561][ T4144] __sys_bpf+0x62b/0x780 [ 1735.736820][ T4144] ? bpf_link_show_fdinfo+0x380/0x380 [ 1735.742232][ T4144] ? lock_chain_count+0x20/0x20 [ 1735.747099][ T4144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1735.753101][ T4144] __x64_sys_bpf+0x78/0x90 [ 1735.757536][ T4144] do_syscall_64+0x4c/0xa0 [ 1735.761960][ T4144] ? clear_bhb_loop+0x60/0xb0 [ 1735.766638][ T4144] ? clear_bhb_loop+0x60/0xb0 [ 1735.771309][ T4144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1735.777190][ T4144] RIP: 0033:0x7f0b8e19aeb9 [ 1735.781599][ T4144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1735.801195][ T4144] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1735.809604][ T4144] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1735.817565][ T4144] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1735.825524][ T4144] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1735.833485][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1735.841444][ T4144] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1735.849420][ T4144] [ 1738.550048][ T4146] bond0: (slave bond_slave_0): Releasing backup interface [ 1738.578351][ T4158] netlink: 'syz.2.10654': attribute type 29 has an invalid length. [ 1738.693669][ T4148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10650'. [ 1738.718302][ T4148] device caif0 entered promiscuous mode [ 1738.748041][ T4158] netlink: 'syz.2.10654': attribute type 29 has an invalid length. [ 1738.765807][ T4163] netlink: 'syz.2.10654': attribute type 29 has an invalid length. [ 1739.088666][ T4171] netlink: 'syz.3.10658': attribute type 4 has an invalid length. [ 1739.106649][ T4171] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10658'. [ 1739.569085][ T4182] netlink: 'syz.4.10661': attribute type 29 has an invalid length. [ 1739.588430][ T4182] netlink: 'syz.4.10661': attribute type 29 has an invalid length. [ 1739.635257][ T4182] netlink: 'syz.4.10661': attribute type 29 has an invalid length. [ 1740.072294][ T4189] netlink: 'syz.4.10665': attribute type 10 has an invalid length. [ 1740.125241][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.132764][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.217354][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1740.224584][ T4189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1740.232064][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1740.239197][ T4189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1740.397633][ T4189] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1740.514971][ T4204] netlink: 'syz.3.10668': attribute type 21 has an invalid length. [ 1740.528884][ T4206] netlink: 'syz.1.10669': attribute type 6 has an invalid length. [ 1740.544290][ T4206] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.10669'. [ 1740.753346][ T4212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10672'. [ 1743.693314][ T4212] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.721142][ T4212] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.739439][ T4212] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.748359][ T4212] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.806587][ T4212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.839561][ T4212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.848297][ T4212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.867385][ T4212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.881616][ T4212] team0: Port device geneve0 added [ 1743.893018][ T4218] validate_nla: 4 callbacks suppressed [ 1743.893032][ T4218] netlink: 'syz.4.10674': attribute type 21 has an invalid length. [ 1743.917537][ T4218] netlink: 'syz.4.10674': attribute type 3 has an invalid length. [ 1743.958083][ T4218] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10674'. [ 1744.045007][ T4225] netlink: 'syz.1.10676': attribute type 1 has an invalid length. [ 1744.061630][ T4225] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10676'. [ 1744.975713][ T4247] netlink: 'syz.1.10681': attribute type 29 has an invalid length. [ 1745.007719][ T4247] netlink: 'syz.1.10681': attribute type 29 has an invalid length. [ 1745.068331][ T4251] netlink: 'syz.1.10681': attribute type 29 has an invalid length. [ 1745.661068][ T4271] netlink: 'syz.0.10689': attribute type 6 has an invalid length. [ 1745.685184][ T4271] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.10689'. [ 1748.272957][ T4281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10694'. [ 1748.759068][ T4297] netlink: 'syz.1.10698': attribute type 29 has an invalid length. [ 1748.828366][ T4297] netlink: 'syz.1.10698': attribute type 29 has an invalid length. [ 1748.886691][ T4300] netlink: 'syz.1.10698': attribute type 29 has an invalid length. [ 1751.553496][ T4329] netlink: 'syz.4.10707': attribute type 6 has an invalid length. [ 1751.591435][ T4329] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.10707'. [ 1754.327730][ T4342] netlink: 'syz.4.10711': attribute type 29 has an invalid length. [ 1754.350500][ T4342] netlink: 'syz.4.10711': attribute type 29 has an invalid length. [ 1754.396550][ T4347] netlink: 'syz.4.10711': attribute type 29 has an invalid length. [ 1754.565333][ T4356] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.10710'. [ 1754.622194][ T4360] netlink: 'syz.4.10716': attribute type 29 has an invalid length. [ 1754.654234][ T4360] netlink: 'syz.4.10716': attribute type 29 has an invalid length. [ 1754.790727][ T4362] netlink: 'syz.4.10716': attribute type 29 has an invalid length. [ 1754.936734][ T4360] netlink: 'syz.4.10716': attribute type 29 has an invalid length. [ 1754.975702][ T4360] netlink: 'syz.4.10716': attribute type 29 has an invalid length. [ 1755.477012][ T4368] netlink: 'syz.3.10717': attribute type 10 has an invalid length. [ 1755.489544][ T4368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10717'. [ 1756.730713][ T4368] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.740453][ T4368] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.752936][ T4368] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.764489][ T4368] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.846647][ T4374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1756.922967][ T4374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1756.964668][ T4375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10729'. [ 1757.711163][ T4394] netlink: 'syz.2.10726': attribute type 29 has an invalid length. [ 1757.775239][ T4394] netlink: 'syz.2.10726': attribute type 29 has an invalid length. [ 1757.808089][ T4395] netlink: 'syz.2.10726': attribute type 29 has an invalid length. [ 1758.350295][ T4405] netlink: 'syz.4.10728': attribute type 10 has an invalid length. [ 1758.380667][ T4405] netlink: 55 bytes leftover after parsing attributes in process `syz.4.10728'. [ 1760.608434][ T4414] syz.2.10733[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.608535][ T4414] syz.2.10733[4414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1763.717912][ T4427] FAULT_INJECTION: forcing a failure. [ 1763.717912][ T4427] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.756858][ T4427] CPU: 0 PID: 4427 Comm: syz.1.10735 Not tainted syzkaller #0 [ 1763.764358][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1763.774427][ T4427] Call Trace: [ 1763.777708][ T4427] [ 1763.780643][ T4427] dump_stack_lvl+0x188/0x24e [ 1763.785327][ T4427] ? sctp_sendmsg+0x15b0/0x2940 [ 1763.790181][ T4427] ? ___sys_sendmsg+0x2a2/0x360 [ 1763.795034][ T4427] ? show_regs_print_info+0x12/0x12 [ 1763.800236][ T4427] ? load_image+0x400/0x400 [ 1763.804755][ T4427] should_fail_ex+0x399/0x4d0 [ 1763.809449][ T4427] should_failslab+0x5/0x20 [ 1763.813956][ T4427] slab_pre_alloc_hook+0x59/0x310 [ 1763.818982][ T4427] ? sctp_add_bind_addr+0x89/0x350 [ 1763.824097][ T4427] __kmem_cache_alloc_node+0x4f/0x260 [ 1763.829471][ T4427] ? sctp_add_bind_addr+0x89/0x350 [ 1763.834585][ T4427] kmalloc_trace+0x26/0xe0 [ 1763.839005][ T4427] sctp_add_bind_addr+0x89/0x350 [ 1763.843975][ T4427] sctp_copy_local_addr_list+0x311/0x4e0 [ 1763.849624][ T4427] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 1763.855349][ T4427] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1763.861428][ T4427] ? sctp_v4_is_any+0x31/0x50 [ 1763.866110][ T4427] ? sctp_copy_one_addr+0x93/0x660 [ 1763.871231][ T4427] sctp_bind_addr_copy+0xaf/0x3c0 [ 1763.876261][ T4427] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 1763.882599][ T4427] sctp_connect_new_asoc+0x2f5/0x6a0 [ 1763.887894][ T4427] ? __sctp_connect+0xd80/0xd80 [ 1763.892755][ T4427] ? __local_bh_enable_ip+0x136/0x1c0 [ 1763.898133][ T4427] ? _local_bh_enable+0xa0/0xa0 [ 1763.903595][ T4427] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1763.909413][ T4427] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 1763.915224][ T4427] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 1763.920769][ T4427] ? security_sctp_bind_connect+0x85/0xb0 [ 1763.926495][ T4427] sctp_sendmsg+0x15b0/0x2940 [ 1763.931178][ T4427] ? trace_event_raw_event_lock+0x250/0x250 [ 1763.937082][ T4427] ? aa_sk_perm+0x721/0x950 [ 1763.941591][ T4427] ? sctp_getsockopt+0x8a0/0x8a0 [ 1763.946530][ T4427] ? __might_fault+0xa6/0x120 [ 1763.951209][ T4427] ? aa_af_perm+0x340/0x340 [ 1763.955706][ T4427] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1763.962133][ T4427] ? inet_sendmsg+0x78/0x2f0 [ 1763.966723][ T4427] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1763.972005][ T4427] ? security_socket_sendmsg+0x7c/0xa0 [ 1763.977468][ T4427] ? inet_send_prepare+0x260/0x260 [ 1763.982581][ T4427] ____sys_sendmsg+0x5be/0x970 [ 1763.987359][ T4427] ? __sys_sendmsg_sock+0x30/0x30 [ 1763.992381][ T4427] ? __import_iovec+0x315/0x500 [ 1763.997239][ T4427] ? import_iovec+0x6f/0xa0 [ 1764.001744][ T4427] ___sys_sendmsg+0x2a2/0x360 [ 1764.006444][ T4427] ? __sys_sendmsg+0x290/0x290 [ 1764.011239][ T4427] ? __lock_acquire+0x7d10/0x7d10 [ 1764.016299][ T4427] __se_sys_sendmsg+0x1bb/0x2a0 [ 1764.021156][ T4427] ? __x64_sys_sendmsg+0x80/0x80 [ 1764.026120][ T4427] ? lockdep_hardirqs_on+0x94/0x140 [ 1764.031319][ T4427] do_syscall_64+0x4c/0xa0 [ 1764.035738][ T4427] ? clear_bhb_loop+0x60/0xb0 [ 1764.040416][ T4427] ? clear_bhb_loop+0x60/0xb0 [ 1764.045099][ T4427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1764.050990][ T4427] RIP: 0033:0x7f6d9519aeb9 [ 1764.055406][ T4427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.075011][ T4427] RSP: 002b:00007f6d96080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1764.083427][ T4427] RAX: ffffffffffffffda RBX: 00007f6d95415fa0 RCX: 00007f6d9519aeb9 [ 1764.091396][ T4427] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1764.099368][ T4427] RBP: 00007f6d96080090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.107342][ T4427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1764.115309][ T4427] R13: 00007f6d95416038 R14: 00007f6d95415fa0 R15: 00007ffe3da75058 [ 1764.123299][ T4427] [ 1764.175667][ T4419] netlink: 'syz.2.10733': attribute type 21 has an invalid length. [ 1764.199516][ T4419] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10733'. [ 1764.733422][ T4435] netlink: 'syz.3.10738': attribute type 29 has an invalid length. [ 1764.756904][ T4435] netlink: 'syz.3.10738': attribute type 29 has an invalid length. [ 1764.771538][ T4435] netlink: 'syz.3.10738': attribute type 29 has an invalid length. [ 1765.772958][ T4458] netlink: 'syz.2.10751': attribute type 29 has an invalid length. [ 1765.815551][ T4458] netlink: 'syz.2.10751': attribute type 29 has an invalid length. [ 1765.873698][ T4458] netlink: 'syz.2.10751': attribute type 29 has an invalid length. [ 1767.892481][ T4475] netlink: 'syz.2.10750': attribute type 27 has an invalid length. [ 1767.909426][ T4479] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.10752'. [ 1768.193611][ T4486] netlink: 'syz.4.10753': attribute type 4 has an invalid length. [ 1768.218353][ T4486] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10753'. [ 1768.353009][ T4496] netlink: 'syz.3.10759': attribute type 3 has an invalid length. [ 1768.370435][ T4496] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1768.442876][ T4496] device pim6reg1 entered promiscuous mode [ 1769.846980][ T4536] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.10771'. [ 1769.900088][ T4541] validate_nla: 3 callbacks suppressed [ 1769.900104][ T4541] netlink: 'syz.1.10774': attribute type 29 has an invalid length. [ 1769.969013][ T4541] netlink: 'syz.1.10774': attribute type 29 has an invalid length. [ 1770.028826][ T4543] netlink: 'syz.1.10774': attribute type 29 has an invalid length. [ 1771.234960][ T4581] netlink: 'syz.2.10789': attribute type 29 has an invalid length. [ 1771.284405][ T4581] netlink: 'syz.2.10789': attribute type 29 has an invalid length. [ 1771.336719][ T4581] netlink: 'syz.2.10789': attribute type 29 has an invalid length. [ 1774.963044][ T4600] device lo entered promiscuous mode [ 1774.977662][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1775.220789][ T4613] FAULT_INJECTION: forcing a failure. [ 1775.220789][ T4613] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.244152][ T4614] netlink: 'syz.2.10800': attribute type 29 has an invalid length. [ 1775.287877][ T4613] CPU: 1 PID: 4613 Comm: syz.1.10797 Not tainted syzkaller #0 [ 1775.295381][ T4613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1775.305437][ T4613] Call Trace: [ 1775.308702][ T4613] [ 1775.311627][ T4613] dump_stack_lvl+0x188/0x24e [ 1775.316304][ T4613] ? show_regs_print_info+0x12/0x12 [ 1775.321513][ T4613] ? load_image+0x400/0x400 [ 1775.326004][ T4613] ? __might_sleep+0xd0/0xd0 [ 1775.330592][ T4613] ? __lock_acquire+0x7d10/0x7d10 [ 1775.335637][ T4613] should_fail_ex+0x399/0x4d0 [ 1775.340325][ T4613] should_failslab+0x5/0x20 [ 1775.344818][ T4613] slab_pre_alloc_hook+0x59/0x310 [ 1775.349833][ T4613] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1775.355543][ T4613] __kmem_cache_alloc_node+0x4f/0x260 [ 1775.360903][ T4613] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 1775.366608][ T4613] __kmalloc+0xa0/0x240 [ 1775.370755][ T4613] tomoyo_realpath_from_path+0xdf/0x5d0 [ 1775.376295][ T4613] ? tomoyo_path_number_perm+0x205/0x650 [ 1775.381929][ T4613] tomoyo_path_number_perm+0x22f/0x650 [ 1775.387388][ T4613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1775.392840][ T4613] ? ksys_write+0x1c0/0x250 [ 1775.397337][ T4613] ? common_file_perm+0x171/0x1c0 [ 1775.402375][ T4613] ? __fget_files+0x28/0x4b0 [ 1775.406957][ T4613] ? __fget_files+0x28/0x4b0 [ 1775.411549][ T4613] security_file_ioctl+0x6c/0xa0 [ 1775.416484][ T4613] __se_sys_ioctl+0x48/0x170 [ 1775.421070][ T4613] do_syscall_64+0x4c/0xa0 [ 1775.425478][ T4613] ? clear_bhb_loop+0x60/0xb0 [ 1775.430149][ T4613] ? clear_bhb_loop+0x60/0xb0 [ 1775.434825][ T4613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1775.440705][ T4613] RIP: 0033:0x7f6d9519aeb9 [ 1775.445110][ T4613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.464706][ T4613] RSP: 002b:00007f6d96080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1775.473113][ T4613] RAX: ffffffffffffffda RBX: 00007f6d95415fa0 RCX: 00007f6d9519aeb9 [ 1775.481077][ T4613] RDX: 0000200000001000 RSI: 0000000000008914 RDI: 0000000000000007 [ 1775.489055][ T4613] RBP: 00007f6d96080090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.497019][ T4613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.504987][ T4613] R13: 00007f6d95416038 R14: 00007f6d95415fa0 R15: 00007ffe3da75058 [ 1775.512966][ T4613] [ 1775.517944][ T4613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1775.531637][ T4614] netlink: 'syz.2.10800': attribute type 29 has an invalid length. [ 1775.543934][ T4617] device lo entered promiscuous mode [ 1775.557426][ T4613] device lo entered promiscuous mode [ 1775.564111][ T4616] netlink: 'syz.2.10800': attribute type 29 has an invalid length. [ 1775.628002][ T4621] netlink: 'syz.4.10802': attribute type 29 has an invalid length. [ 1775.645310][ T4621] netlink: 'syz.4.10802': attribute type 29 has an invalid length. [ 1775.691463][ T4624] netlink: 'syz.4.10802': attribute type 29 has an invalid length. [ 1775.791686][ T4630] netlink: 'syz.2.10804': attribute type 1 has an invalid length. [ 1776.085401][ T4642] netlink: 'syz.3.10809': attribute type 21 has an invalid length. [ 1776.356965][ T4652] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10813'. [ 1776.715687][ T4666] netlink: 'syz.2.10817': attribute type 29 has an invalid length. [ 1776.750009][ T4666] netlink: 'syz.2.10817': attribute type 29 has an invalid length. [ 1776.966848][ T4678] FAULT_INJECTION: forcing a failure. [ 1776.966848][ T4678] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.011507][ T4678] CPU: 0 PID: 4678 Comm: syz.3.10823 Not tainted syzkaller #0 [ 1777.018993][ T4678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1777.029039][ T4678] Call Trace: [ 1777.032312][ T4678] [ 1777.035234][ T4678] dump_stack_lvl+0x188/0x24e [ 1777.039909][ T4678] ? show_regs_print_info+0x12/0x12 [ 1777.045101][ T4678] ? load_image+0x400/0x400 [ 1777.049595][ T4678] ? __might_sleep+0xd0/0xd0 [ 1777.054173][ T4678] ? __lock_acquire+0x7d10/0x7d10 [ 1777.059194][ T4678] should_fail_ex+0x399/0x4d0 [ 1777.063873][ T4678] should_failslab+0x5/0x20 [ 1777.068371][ T4678] slab_pre_alloc_hook+0x59/0x310 [ 1777.073397][ T4678] ? do_syscall_64+0x4c/0xa0 [ 1777.077988][ T4678] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.084054][ T4678] kmem_cache_alloc_node+0x5a/0x320 [ 1777.089246][ T4678] ? __alloc_skb+0xfc/0x7e0 [ 1777.093748][ T4678] __alloc_skb+0xfc/0x7e0 [ 1777.098081][ T4678] netlink_dump+0x1ee/0xd00 [ 1777.102587][ T4678] ? apparmor_capable+0x12c/0x190 [ 1777.107611][ T4678] ? bpf_lsm_capable+0x5/0x10 [ 1777.112288][ T4678] ? netlink_lookup+0x200/0x200 [ 1777.117143][ T4678] ? __inet_diag_dump_start+0x805/0x970 [ 1777.122692][ T4678] __netlink_dump_start+0x537/0x6f0 [ 1777.127894][ T4678] inet_diag_rcv_msg_compat+0x207/0x420 [ 1777.133437][ T4678] ? __inet_diag_dump+0x380/0x380 [ 1777.138457][ T4678] ? sock_diag_rcv_msg+0x142/0x5f0 [ 1777.143560][ T4678] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1777.149272][ T4678] ? inet_diag_dump_start_compat+0x20/0x20 [ 1777.155067][ T4678] ? inet_diag_dump+0x50/0x50 [ 1777.159744][ T4678] ? __inet_diag_dump+0x380/0x380 [ 1777.164758][ T4678] sock_diag_rcv_msg+0x3cc/0x5f0 [ 1777.169694][ T4678] netlink_rcv_skb+0x1fb/0x450 [ 1777.174452][ T4678] ? sock_diag_bind+0xa0/0xa0 [ 1777.179119][ T4678] ? netlink_ack+0x1170/0x1170 [ 1777.183883][ T4678] ? netlink_deliver_tap+0x2e/0x1b0 [ 1777.189166][ T4678] sock_diag_rcv+0x26/0x40 [ 1777.193580][ T4678] netlink_unicast+0x74d/0x8d0 [ 1777.198345][ T4678] netlink_sendmsg+0x8ad/0xbd0 [ 1777.203111][ T4678] ? netlink_getsockopt+0x550/0x550 [ 1777.208309][ T4678] ? aa_sock_msg_perm+0x94/0x150 [ 1777.213239][ T4678] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1777.218519][ T4678] ? security_socket_sendmsg+0x7c/0xa0 [ 1777.223976][ T4678] ? netlink_getsockopt+0x550/0x550 [ 1777.229171][ T4678] ____sys_sendmsg+0x5be/0x970 [ 1777.233938][ T4678] ? __sys_sendmsg_sock+0x30/0x30 [ 1777.238959][ T4678] ? __import_iovec+0x315/0x500 [ 1777.243811][ T4678] ? import_iovec+0x6f/0xa0 [ 1777.248311][ T4678] ___sys_sendmsg+0x2a2/0x360 [ 1777.252985][ T4678] ? __sys_sendmsg+0x290/0x290 [ 1777.257760][ T4678] ? __lock_acquire+0x7d10/0x7d10 [ 1777.262798][ T4678] __se_sys_sendmsg+0x1bb/0x2a0 [ 1777.267649][ T4678] ? __x64_sys_sendmsg+0x80/0x80 [ 1777.272591][ T4678] ? lockdep_hardirqs_on+0x94/0x140 [ 1777.277779][ T4678] do_syscall_64+0x4c/0xa0 [ 1777.282189][ T4678] ? clear_bhb_loop+0x60/0xb0 [ 1777.286858][ T4678] ? clear_bhb_loop+0x60/0xb0 [ 1777.291526][ T4678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.297410][ T4678] RIP: 0033:0x7f2cf679aeb9 [ 1777.301815][ T4678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.321409][ T4678] RSP: 002b:00007f2cf75c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1777.329813][ T4678] RAX: ffffffffffffffda RBX: 00007f2cf6a15fa0 RCX: 00007f2cf679aeb9 [ 1777.337770][ T4678] RDX: 0000000004004000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1777.345731][ T4678] RBP: 00007f2cf75c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.353687][ T4678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.361644][ T4678] R13: 00007f2cf6a16038 R14: 00007f2cf6a15fa0 R15: 00007ffd3dfbe458 [ 1777.369616][ T4678] [ 1780.216495][ T4700] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10829'. [ 1780.478521][ T4702] device pim6reg1 entered promiscuous mode [ 1781.023029][ T4710] validate_nla: 2 callbacks suppressed [ 1781.023057][ T4710] netlink: 'syz.4.10833': attribute type 12 has an invalid length. [ 1781.035445][ T4712] netlink: 'syz.0.10832': attribute type 29 has an invalid length. [ 1781.087923][ T4710] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10833'. [ 1781.120873][ T4712] netlink: 'syz.0.10832': attribute type 29 has an invalid length. [ 1781.142496][ T4713] netlink: 'syz.0.10832': attribute type 29 has an invalid length. [ 1781.379193][ T4724] netlink: 'syz.4.10838': attribute type 10 has an invalid length. [ 1781.454955][ T4724] team0: Device vxcan1 is of different type [ 1781.756760][ T4732] netlink: 763 bytes leftover after parsing attributes in process `syz.4.10840'. [ 1782.470359][ T4750] netlink: 'syz.2.10847': attribute type 29 has an invalid length. [ 1782.478558][ T4750] netlink: 'syz.2.10847': attribute type 29 has an invalid length. [ 1782.528725][ T4758] netlink: 'syz.2.10847': attribute type 29 has an invalid length. [ 1782.698129][ T4762] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1783.022320][ T4762] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.10851'. [ 1784.347301][ T4790] netlink: 'syz.0.10860': attribute type 3 has an invalid length. [ 1784.386973][ T4793] netlink: 'syz.4.10863': attribute type 21 has an invalid length. [ 1784.397967][ T4790] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10860'. [ 1784.477700][ T4796] device pim6reg1 entered promiscuous mode [ 1784.684934][ T4807] FAULT_INJECTION: forcing a failure. [ 1784.684934][ T4807] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.731701][ T4807] CPU: 1 PID: 4807 Comm: syz.1.10868 Not tainted syzkaller #0 [ 1784.739209][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1784.749282][ T4807] Call Trace: [ 1784.752573][ T4807] [ 1784.755515][ T4807] dump_stack_lvl+0x188/0x24e [ 1784.760217][ T4807] ? show_regs_print_info+0x12/0x12 [ 1784.765436][ T4807] ? load_image+0x400/0x400 [ 1784.769955][ T4807] ? __might_sleep+0xd0/0xd0 [ 1784.774551][ T4807] ? __lock_acquire+0x7d10/0x7d10 [ 1784.779592][ T4807] should_fail_ex+0x399/0x4d0 [ 1784.784292][ T4807] should_failslab+0x5/0x20 [ 1784.788815][ T4807] slab_pre_alloc_hook+0x59/0x310 [ 1784.793859][ T4807] kmem_cache_alloc_node+0x5a/0x320 [ 1784.799075][ T4807] ? __alloc_skb+0xfc/0x7e0 [ 1784.803598][ T4807] __alloc_skb+0xfc/0x7e0 [ 1784.807938][ T4807] ? netlink_autobind+0xda/0x300 [ 1784.812896][ T4807] netlink_sendmsg+0x654/0xbd0 [ 1784.817685][ T4807] ? netlink_getsockopt+0x550/0x550 [ 1784.822899][ T4807] ? aa_sock_msg_perm+0x94/0x150 [ 1784.827851][ T4807] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1784.833155][ T4807] ? security_socket_sendmsg+0x7c/0xa0 [ 1784.838640][ T4807] ? netlink_getsockopt+0x550/0x550 [ 1784.843855][ T4807] ____sys_sendmsg+0x5be/0x970 [ 1784.848651][ T4807] ? __sys_sendmsg_sock+0x30/0x30 [ 1784.853693][ T4807] ? __import_iovec+0x315/0x500 [ 1784.858566][ T4807] ? import_iovec+0x6f/0xa0 [ 1784.863081][ T4807] ___sys_sendmsg+0x2a2/0x360 [ 1784.867777][ T4807] ? __sys_sendmsg+0x290/0x290 [ 1784.872572][ T4807] ? __lock_acquire+0x7d10/0x7d10 [ 1784.877633][ T4807] __se_sys_sendmsg+0x1bb/0x2a0 [ 1784.882497][ T4807] ? __x64_sys_sendmsg+0x80/0x80 [ 1784.887469][ T4807] ? lockdep_hardirqs_on+0x94/0x140 [ 1784.892678][ T4807] do_syscall_64+0x4c/0xa0 [ 1784.897104][ T4807] ? clear_bhb_loop+0x60/0xb0 [ 1784.901786][ T4807] ? clear_bhb_loop+0x60/0xb0 [ 1784.906473][ T4807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1784.912372][ T4807] RIP: 0033:0x7f6d9519aeb9 [ 1784.916795][ T4807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.936411][ T4807] RSP: 002b:00007f6d96080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1784.944836][ T4807] RAX: ffffffffffffffda RBX: 00007f6d95415fa0 RCX: 00007f6d9519aeb9 [ 1784.952817][ T4807] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1784.960794][ T4807] RBP: 00007f6d96080090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.968772][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.976747][ T4807] R13: 00007f6d95416038 R14: 00007f6d95415fa0 R15: 00007ffe3da75058 [ 1784.984742][ T4807] [ 1785.682001][ T4821] device 0 entered promiscuous mode [ 1787.267310][ T4860] validate_nla: 7 callbacks suppressed [ 1787.267327][ T4860] netlink: 'syz.4.10888': attribute type 29 has an invalid length. [ 1787.289969][ T4860] netlink: 'syz.4.10888': attribute type 29 has an invalid length. [ 1787.302304][ T4860] netlink: 'syz.4.10888': attribute type 29 has an invalid length. [ 1788.992158][ T4896] netlink: 'syz.1.10900': attribute type 29 has an invalid length. [ 1789.033469][ T4896] netlink: 'syz.1.10900': attribute type 29 has an invalid length. [ 1789.082224][ T4897] netlink: 'syz.1.10900': attribute type 29 has an invalid length. [ 1789.598919][ T4903] device syzkaller0 entered promiscuous mode [ 1791.552238][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.558924][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.054549][ T4935] netlink: 'syz.1.10914': attribute type 29 has an invalid length. [ 1792.068815][ T4935] netlink: 'syz.1.10914': attribute type 29 has an invalid length. [ 1792.078659][ T4935] netlink: 'syz.1.10914': attribute type 29 has an invalid length. [ 1792.904309][ T4950] netlink: 'syz.3.10918': attribute type 7 has an invalid length. [ 1793.077553][ T4950] netlink: 'syz.3.10918': attribute type 2 has an invalid length. [ 1793.142726][ T4950] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10918'. [ 1793.418844][ T4959] FAULT_INJECTION: forcing a failure. [ 1793.418844][ T4959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1793.474526][ T4959] CPU: 0 PID: 4959 Comm: syz.0.10921 Not tainted syzkaller #0 [ 1793.482058][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1793.492143][ T4959] Call Trace: [ 1793.495443][ T4959] [ 1793.498401][ T4959] dump_stack_lvl+0x188/0x24e [ 1793.503130][ T4959] ? show_regs_print_info+0x12/0x12 [ 1793.508367][ T4959] ? load_image+0x400/0x400 [ 1793.512912][ T4959] ? __lock_acquire+0x7d10/0x7d10 [ 1793.517997][ T4959] should_fail_ex+0x399/0x4d0 [ 1793.522733][ T4959] _copy_from_user+0x2c/0x170 [ 1793.527448][ T4959] __sys_bpf+0x2ea/0x780 [ 1793.531743][ T4959] ? bpf_link_show_fdinfo+0x380/0x380 [ 1793.537193][ T4959] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1793.543432][ T4959] __x64_sys_bpf+0x78/0x90 [ 1793.547891][ T4959] do_syscall_64+0x4c/0xa0 [ 1793.552340][ T4959] ? clear_bhb_loop+0x60/0xb0 [ 1793.557041][ T4959] ? clear_bhb_loop+0x60/0xb0 [ 1793.561758][ T4959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1793.567686][ T4959] RIP: 0033:0x7f512639aeb9 [ 1793.572228][ T4959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.591870][ T4959] RSP: 002b:00007f51271bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1793.600328][ T4959] RAX: ffffffffffffffda RBX: 00007f5126615fa0 RCX: 00007f512639aeb9 [ 1793.608333][ T4959] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000f [ 1793.616341][ T4959] RBP: 00007f51271bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.624348][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.632349][ T4959] R13: 00007f5126616038 R14: 00007f5126615fa0 R15: 00007ffff5fbf7e8 [ 1793.640400][ T4959] [ 1793.919144][ T4980] netlink: 'syz.1.10928': attribute type 29 has an invalid length. [ 1793.958895][ T4980] netlink: 'syz.1.10928': attribute type 29 has an invalid length. [ 1794.020131][ T4981] netlink: 'syz.1.10928': attribute type 29 has an invalid length. [ 1794.069252][ T4983] tun0: tun_chr_ioctl cmd 1074025694 [ 1795.745350][ T4998] FAULT_INJECTION: forcing a failure. [ 1795.745350][ T4998] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.809818][ T4998] CPU: 0 PID: 4998 Comm: syz.4.10937 Not tainted syzkaller #0 [ 1795.817362][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1795.827471][ T4998] Call Trace: [ 1795.830784][ T4998] [ 1795.833750][ T4998] dump_stack_lvl+0x188/0x24e [ 1795.838483][ T4998] ? show_regs_print_info+0x12/0x12 [ 1795.843720][ T4998] ? load_image+0x400/0x400 [ 1795.848273][ T4998] ? __might_sleep+0xd0/0xd0 [ 1795.852901][ T4998] ? __lock_acquire+0x7d10/0x7d10 [ 1795.857987][ T4998] should_fail_ex+0x399/0x4d0 [ 1795.862730][ T4998] should_failslab+0x5/0x20 [ 1795.867271][ T4998] slab_pre_alloc_hook+0x59/0x310 [ 1795.872355][ T4998] kmem_cache_alloc_node+0x5a/0x320 [ 1795.877596][ T4998] ? __alloc_skb+0xfc/0x7e0 [ 1795.882155][ T4998] __alloc_skb+0xfc/0x7e0 [ 1795.886516][ T4998] ? netlink_autobind+0xda/0x300 [ 1795.891513][ T4998] netlink_sendmsg+0x654/0xbd0 [ 1795.896343][ T4998] ? netlink_getsockopt+0x550/0x550 [ 1795.901591][ T4998] ? aa_sock_msg_perm+0x94/0x150 [ 1795.906574][ T4998] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1795.911892][ T4998] ? security_socket_sendmsg+0x7c/0xa0 [ 1795.917399][ T4998] ? netlink_getsockopt+0x550/0x550 [ 1795.922646][ T4998] ____sys_sendmsg+0x5be/0x970 [ 1795.927477][ T4998] ? __sys_sendmsg_sock+0x30/0x30 [ 1795.932539][ T4998] ? __import_iovec+0x315/0x500 [ 1795.937459][ T4998] ? import_iovec+0x6f/0xa0 [ 1795.942011][ T4998] ___sys_sendmsg+0x2a2/0x360 [ 1795.946751][ T4998] ? __sys_sendmsg+0x290/0x290 [ 1795.951579][ T4998] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1795.957631][ T4998] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1795.963826][ T4998] ? lockdep_hardirqs_on+0x94/0x140 [ 1795.969091][ T4998] ? __se_sys_sendmsg+0xf4/0x2a0 [ 1795.974075][ T4998] ? kasan_check_range+0x8a/0x290 [ 1795.979160][ T4998] __se_sys_sendmsg+0x1bb/0x2a0 [ 1795.984061][ T4998] ? __x64_sys_sendmsg+0x80/0x80 [ 1795.989093][ T4998] ? lockdep_hardirqs_on+0x94/0x140 [ 1795.994336][ T4998] do_syscall_64+0x4c/0xa0 [ 1795.998785][ T4998] ? clear_bhb_loop+0x60/0xb0 [ 1796.003516][ T4998] ? clear_bhb_loop+0x60/0xb0 [ 1796.008240][ T4998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1796.014170][ T4998] RIP: 0033:0x7f0b8e19aeb9 [ 1796.018623][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1796.038270][ T4998] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1796.046731][ T4998] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1796.054742][ T4998] RDX: 0000000000044010 RSI: 0000200000000180 RDI: 0000000000000007 [ 1796.062753][ T4998] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.070764][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.078767][ T4998] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1796.086824][ T4998] [ 1796.471050][ T5008] device syzkaller0 entered promiscuous mode [ 1796.696848][ T5015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10942'. [ 1796.782380][ T5015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10942'. [ 1796.815623][ T5018] netlink: 'syz.0.10943': attribute type 29 has an invalid length. [ 1796.836690][ T5018] netlink: 'syz.0.10943': attribute type 29 has an invalid length. [ 1796.851709][ T5018] netlink: 'syz.0.10943': attribute type 29 has an invalid length. [ 1800.345793][ T5040] tun0: tun_chr_ioctl cmd 1074025694 [ 1800.461999][ T5059] netlink: 'syz.1.10957': attribute type 29 has an invalid length. [ 1800.484426][ T5059] netlink: 'syz.1.10957': attribute type 29 has an invalid length. [ 1800.522610][ T4270] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 1800.530255][ T5063] netlink: 'syz.1.10957': attribute type 29 has an invalid length. [ 1800.615453][ T5065] netlink: 'syz.4.10959': attribute type 11 has an invalid length. [ 1800.644148][ T5065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10959'. [ 1800.756272][ T5075] netlink: 'syz.3.10958': attribute type 29 has an invalid length. [ 1800.780081][ T5075] netlink: 'syz.3.10958': attribute type 29 has an invalid length. [ 1801.022203][ T5079] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10963'. [ 1804.486883][ T5109] netlink: 'syz.3.10972': attribute type 29 has an invalid length. [ 1804.509107][ T5111] netlink: 'syz.1.10971': attribute type 29 has an invalid length. [ 1805.154519][ T5109] netlink: 'syz.3.10972': attribute type 29 has an invalid length. [ 1805.191331][ T5111] netlink: 'syz.1.10971': attribute type 29 has an invalid length. [ 1805.262981][ T5118] tun0: tun_chr_ioctl cmd 1074025694 [ 1806.085195][ T5115] netlink: 'syz.3.10972': attribute type 29 has an invalid length. [ 1806.096565][ T5117] netlink: 'syz.1.10971': attribute type 29 has an invalid length. [ 1806.322326][ T5127] netlink: 'syz.1.10975': attribute type 6 has an invalid length. [ 1806.358572][ T5127] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.10975'. [ 1806.405169][ T5135] netlink: 'syz.1.10975': attribute type 1 has an invalid length. [ 1806.423147][ T5138] FAULT_INJECTION: forcing a failure. [ 1806.423147][ T5138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1806.429514][ T5135] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.10975'. [ 1806.465987][ T5138] CPU: 0 PID: 5138 Comm: syz.3.10979 Not tainted syzkaller #0 [ 1806.473555][ T5138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1806.483609][ T5138] Call Trace: [ 1806.486895][ T5138] [ 1806.489817][ T5138] dump_stack_lvl+0x188/0x24e [ 1806.494505][ T5138] ? show_regs_print_info+0x12/0x12 [ 1806.499707][ T5138] ? load_image+0x400/0x400 [ 1806.504204][ T5138] ? __lock_acquire+0x7d10/0x7d10 [ 1806.509226][ T5138] should_fail_ex+0x399/0x4d0 [ 1806.513908][ T5138] _copy_from_user+0x2c/0x170 [ 1806.518579][ T5138] iovec_from_user+0x143/0x360 [ 1806.523430][ T5138] __import_iovec+0x6d/0x500 [ 1806.528020][ T5138] import_iovec+0x6f/0xa0 [ 1806.532345][ T5138] ___sys_sendmsg+0x252/0x360 [ 1806.537022][ T5138] ? __sys_sendmsg+0x290/0x290 [ 1806.541798][ T5138] ? ktime_get_real_ts64+0x440/0x440 [ 1806.547099][ T5138] __se_sys_sendmsg+0x1bb/0x2a0 [ 1806.551946][ T5138] ? __x64_sys_sendmsg+0x80/0x80 [ 1806.556894][ T5138] ? lockdep_hardirqs_on+0x94/0x140 [ 1806.562084][ T5138] do_syscall_64+0x4c/0xa0 [ 1806.566496][ T5138] ? clear_bhb_loop+0x60/0xb0 [ 1806.571165][ T5138] ? clear_bhb_loop+0x60/0xb0 [ 1806.575837][ T5138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1806.581726][ T5138] RIP: 0033:0x7f2cf679aeb9 [ 1806.586133][ T5138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.605728][ T5138] RSP: 002b:00007f2cf75c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1806.614138][ T5138] RAX: ffffffffffffffda RBX: 00007f2cf6a15fa0 RCX: 00007f2cf679aeb9 [ 1806.622104][ T5138] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1806.630064][ T5138] RBP: 00007f2cf75c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.638025][ T5138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.646073][ T5138] R13: 00007f2cf6a16038 R14: 00007f2cf6a15fa0 R15: 00007ffd3dfbe458 [ 1806.654047][ T5138] [ 1807.474938][ T5159] netlink: 'syz.3.10985': attribute type 29 has an invalid length. [ 1807.505200][ T5159] netlink: 'syz.3.10985': attribute type 29 has an invalid length. [ 1807.577158][ T5163] netlink: 'syz.3.10985': attribute type 29 has an invalid length. [ 1807.715244][ T5168] tun0: tun_chr_ioctl cmd 1074025694 [ 1810.035504][ T5184] netlink: 'syz.0.10992': attribute type 1 has an invalid length. [ 1810.074549][ T5184] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.10992'. [ 1810.524696][ T5195] netlink: 'syz.0.10996': attribute type 10 has an invalid length. [ 1810.545348][ T5195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10996'. [ 1810.583732][ T5195] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 1810.631369][ T5198] netlink: 'syz.0.10996': attribute type 29 has an invalid length. [ 1810.665395][ T5195] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.693664][ T5195] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 1811.526464][ T5218] device syzkaller0 entered promiscuous mode [ 1811.566950][T21285] syzkaller0: tun_net_xmit 48 [ 1815.208148][ T5253] tun0: tun_chr_ioctl cmd 1074025694 [ 1815.296900][ T5246] device syzkaller0 entered promiscuous mode [ 1819.716808][ T5283] device syzkaller0 entered promiscuous mode [ 1820.106543][ T5302] validate_nla: 5 callbacks suppressed [ 1820.106560][ T5302] netlink: 'syz.0.11029': attribute type 6 has an invalid length. [ 1820.173159][ T5302] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1820.205025][ T5309] netlink: 'syz.0.11029': attribute type 1 has an invalid length. [ 1820.214527][ T5309] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1822.998957][ T5317] netlink: 'syz.0.11032': attribute type 29 has an invalid length. [ 1824.645946][ T5304] tun0: tun_chr_ioctl cmd 1074025694 [ 1824.659670][ T5317] netlink: 'syz.0.11032': attribute type 29 has an invalid length. [ 1825.687853][ T5328] netlink: 'syz.3.11037': attribute type 3 has an invalid length. [ 1825.704750][ T5328] netlink: 'syz.3.11037': attribute type 1 has an invalid length. [ 1825.718724][ T5328] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.11037'. [ 1825.822915][ T5339] FAULT_INJECTION: forcing a failure. [ 1825.822915][ T5339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.838160][ T5339] CPU: 0 PID: 5339 Comm: syz.1.11041 Not tainted syzkaller #0 [ 1825.845674][ T5339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1825.855743][ T5339] Call Trace: [ 1825.859031][ T5339] [ 1825.861975][ T5339] dump_stack_lvl+0x188/0x24e [ 1825.867024][ T5339] ? show_regs_print_info+0x12/0x12 [ 1825.872239][ T5339] ? load_image+0x400/0x400 [ 1825.876758][ T5339] ? __lock_acquire+0x7d10/0x7d10 [ 1825.881812][ T5339] should_fail_ex+0x399/0x4d0 [ 1825.886517][ T5339] _copy_from_user+0x2c/0x170 [ 1825.891215][ T5339] __sys_bpf+0x2ea/0x780 [ 1825.895479][ T5339] ? bpf_link_show_fdinfo+0x380/0x380 [ 1825.900891][ T5339] ? lock_chain_count+0x20/0x20 [ 1825.905767][ T5339] __x64_sys_bpf+0x78/0x90 [ 1825.910188][ T5339] do_syscall_64+0x4c/0xa0 [ 1825.914599][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 1825.919270][ T5339] ? clear_bhb_loop+0x60/0xb0 [ 1825.923944][ T5339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1825.929831][ T5339] RIP: 0033:0x7f6d9519aeb9 [ 1825.934237][ T5339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.953846][ T5339] RSP: 002b:00007f6d96080028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.962258][ T5339] RAX: ffffffffffffffda RBX: 00007f6d95415fa0 RCX: 00007f6d9519aeb9 [ 1825.970221][ T5339] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 1825.978195][ T5339] RBP: 00007f6d96080090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.986156][ T5339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.994120][ T5339] R13: 00007f6d95416038 R14: 00007f6d95415fa0 R15: 00007ffe3da75058 [ 1826.002095][ T5339] [ 1826.428497][ T5349] netlink: 'syz.1.11043': attribute type 2 has an invalid length. [ 1826.476448][ T5354] netlink: 'syz.4.11046': attribute type 29 has an invalid length. [ 1826.556415][ T5354] netlink: 'syz.4.11046': attribute type 29 has an invalid length. [ 1826.616288][ T5356] netlink: 'syz.4.11046': attribute type 29 has an invalid length. [ 1827.031637][ T5365] netlink: 'syz.3.11050': attribute type 29 has an invalid length. [ 1827.127040][ T5365] netlink: 'syz.3.11050': attribute type 29 has an invalid length. [ 1827.162418][ T5368] netlink: 'syz.3.11050': attribute type 29 has an invalid length. [ 1827.220673][ T5365] netlink: 'syz.3.11050': attribute type 29 has an invalid length. [ 1827.472728][ T5381] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1828.941909][ T5416] delete_channel: no stack [ 1829.482707][ T5431] FAULT_INJECTION: forcing a failure. [ 1829.482707][ T5431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1829.514604][ T5431] CPU: 0 PID: 5431 Comm: syz.2.11069 Not tainted syzkaller #0 [ 1829.522120][ T5431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1829.532205][ T5431] Call Trace: [ 1829.535498][ T5431] [ 1829.538451][ T5431] dump_stack_lvl+0x188/0x24e [ 1829.543176][ T5431] ? show_regs_print_info+0x12/0x12 [ 1829.548409][ T5431] ? load_image+0x400/0x400 [ 1829.552948][ T5431] ? __lock_acquire+0x7d10/0x7d10 [ 1829.557999][ T5431] ? snprintf+0xe5/0x140 [ 1829.562263][ T5431] should_fail_ex+0x399/0x4d0 [ 1829.566978][ T5431] _copy_to_user+0x2c/0x130 [ 1829.571510][ T5431] simple_read_from_buffer+0xe3/0x150 [ 1829.576928][ T5431] proc_fail_nth_read+0x1a6/0x220 [ 1829.581986][ T5431] ? proc_fault_inject_write+0x310/0x310 [ 1829.587651][ T5431] ? fsnotify_perm+0x248/0x550 [ 1829.592437][ T5431] ? proc_fault_inject_write+0x310/0x310 [ 1829.598092][ T5431] vfs_read+0x2de/0xa00 [ 1829.602287][ T5431] ? kernel_read+0x1e0/0x1e0 [ 1829.606913][ T5431] ? __fget_files+0x28/0x4b0 [ 1829.611521][ T5431] ? __fget_files+0x28/0x4b0 [ 1829.616133][ T5431] ? __fget_files+0x43d/0x4b0 [ 1829.620849][ T5431] ? __fdget_pos+0x2ae/0x360 [ 1829.625470][ T5431] ? ksys_read+0x71/0x250 [ 1829.629826][ T5431] ksys_read+0x14c/0x250 [ 1829.634094][ T5431] ? vfs_write+0xa30/0xa30 [ 1829.638549][ T5431] ? lockdep_hardirqs_on+0x94/0x140 [ 1829.643772][ T5431] do_syscall_64+0x4c/0xa0 [ 1829.648210][ T5431] ? clear_bhb_loop+0x60/0xb0 [ 1829.652905][ T5431] ? clear_bhb_loop+0x60/0xb0 [ 1829.657610][ T5431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1829.663528][ T5431] RIP: 0033:0x7f1cec15b78e [ 1829.667968][ T5431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1829.687596][ T5431] RSP: 002b:00007f1cecf6dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1829.696032][ T5431] RAX: ffffffffffffffda RBX: 00007f1cecf6e6c0 RCX: 00007f1cec15b78e [ 1829.704022][ T5431] RDX: 000000000000000f RSI: 00007f1cecf6e0a0 RDI: 0000000000000004 [ 1829.712010][ T5431] RBP: 00007f1cecf6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1829.719998][ T5431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1829.727994][ T5431] R13: 00007f1cec416038 R14: 00007f1cec415fa0 R15: 00007fff70a7a2a8 [ 1829.736023][ T5431] [ 1834.764476][ T5484] validate_nla: 11 callbacks suppressed [ 1834.764495][ T5484] netlink: 'syz.1.11085': attribute type 29 has an invalid length. [ 1834.847984][ T5484] netlink: 'syz.1.11085': attribute type 29 has an invalid length. [ 1834.869684][ T5487] netlink: 'syz.1.11085': attribute type 29 has an invalid length. [ 1838.454372][ T5514] netlink: 'syz.4.11097': attribute type 3 has an invalid length. [ 1838.551105][ T5514] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11097'. [ 1838.675321][ T5526] netlink: 'syz.2.11100': attribute type 29 has an invalid length. [ 1838.807715][ T5526] netlink: 'syz.2.11100': attribute type 29 has an invalid length. [ 1838.958721][ T5528] netlink: 'syz.2.11100': attribute type 29 has an invalid length. [ 1839.705833][ T5536] mac80211_hwsim hwsim46 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1839.954190][ T5541] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.11103'. [ 1840.656554][ T5555] tun0: tun_chr_ioctl cmd 1074025694 [ 1840.742036][ T5556] tun0: tun_chr_ioctl cmd 1074025694 [ 1840.938762][ T5559] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11111'. [ 1841.188567][ T5562] netlink: 'syz.2.11112': attribute type 29 has an invalid length. [ 1841.256372][ T5562] netlink: 'syz.2.11112': attribute type 29 has an invalid length. [ 1843.637174][ T5566] netlink: 'syz.2.11112': attribute type 29 has an invalid length. [ 1843.918937][ T5575] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1844.962679][ T5587] netlink: 'syz.1.11120': attribute type 10 has an invalid length. [ 1845.080800][ T5587] bond0: (slave bond_slave_0): Releasing backup interface [ 1846.325676][ T5612] netlink: 'syz.1.11127': attribute type 29 has an invalid length. [ 1847.804857][ T5612] netlink: 'syz.1.11127': attribute type 29 has an invalid length. [ 1848.047665][ T5618] tun0: tun_chr_ioctl cmd 1074025694 [ 1848.065739][ T5624] netlink: 'syz.2.11140': attribute type 29 has an invalid length. [ 1848.119111][ T5624] netlink: 'syz.2.11140': attribute type 29 has an invalid length. [ 1848.134604][ T5627] netlink: 'syz.2.11140': attribute type 29 has an invalid length. [ 1848.487207][ T5631] tun0: tun_chr_ioctl cmd 1074025694 [ 1849.938632][ T5634] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1851.904895][ T5672] tun0: tun_chr_ioctl cmd 1074025694 [ 1852.015131][ T5680] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1852.989167][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.995668][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.907351][ T5703] tun0: tun_chr_ioctl cmd 1074025694 [ 1856.217432][ T5720] netlink: 'syz.0.11158': attribute type 21 has an invalid length. [ 1856.428500][ T5720] netlink: 'syz.0.11158': attribute type 4 has an invalid length. [ 1856.513705][ T5720] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11158'. [ 1856.760409][ T5733] netlink: 'syz.4.11159': attribute type 21 has an invalid length. [ 1856.813868][ T5733] netlink: 'syz.4.11159': attribute type 2 has an invalid length. [ 1856.883377][ T5733] netlink: 'syz.4.11159': attribute type 1 has an invalid length. [ 1856.968825][ T5733] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11159'. [ 1858.279952][ T5751] netlink: 'syz.4.11167': attribute type 10 has an invalid length. [ 1858.402253][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.962010][ T5776] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.11175'. [ 1860.269259][ T5798] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11181'. [ 1860.593338][ T5806] FAULT_INJECTION: forcing a failure. [ 1860.593338][ T5806] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.619776][ T5806] CPU: 1 PID: 5806 Comm: syz.4.11186 Not tainted syzkaller #0 [ 1860.627281][ T5806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1860.637352][ T5806] Call Trace: [ 1860.640643][ T5806] [ 1860.643588][ T5806] dump_stack_lvl+0x188/0x24e [ 1860.648278][ T5806] ? lock_chain_count+0x20/0x20 [ 1860.653131][ T5806] ? show_regs_print_info+0x12/0x12 [ 1860.658335][ T5806] ? load_image+0x400/0x400 [ 1860.662836][ T5806] ? lockdep_hardirqs_on+0x94/0x140 [ 1860.668030][ T5806] should_fail_ex+0x399/0x4d0 [ 1860.672710][ T5806] should_failslab+0x5/0x20 [ 1860.677211][ T5806] slab_pre_alloc_hook+0x59/0x310 [ 1860.682235][ T5806] kmem_cache_alloc_node+0x5a/0x320 [ 1860.687425][ T5806] ? __alloc_skb+0xfc/0x7e0 [ 1860.691927][ T5806] __alloc_skb+0xfc/0x7e0 [ 1860.696249][ T5806] ? netlink_autobind+0xda/0x300 [ 1860.701191][ T5806] netlink_sendmsg+0x654/0xbd0 [ 1860.705957][ T5806] ? netlink_getsockopt+0x550/0x550 [ 1860.711152][ T5806] ? aa_sock_msg_perm+0x94/0x150 [ 1860.716080][ T5806] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1860.721357][ T5806] ? security_socket_sendmsg+0x7c/0xa0 [ 1860.726815][ T5806] ? netlink_getsockopt+0x550/0x550 [ 1860.732008][ T5806] ____sys_sendmsg+0x5be/0x970 [ 1860.736777][ T5806] ? __sys_sendmsg_sock+0x30/0x30 [ 1860.741797][ T5806] ? __import_iovec+0x315/0x500 [ 1860.746643][ T5806] ? import_iovec+0x6f/0xa0 [ 1860.751142][ T5806] ___sys_sendmsg+0x2a2/0x360 [ 1860.755820][ T5806] ? __sys_sendmsg+0x290/0x290 [ 1860.760593][ T5806] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1860.766324][ T5806] __se_sys_sendmsg+0x1bb/0x2a0 [ 1860.771171][ T5806] ? __x64_sys_sendmsg+0x80/0x80 [ 1860.776115][ T5806] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1860.782008][ T5806] do_syscall_64+0x4c/0xa0 [ 1860.786419][ T5806] ? clear_bhb_loop+0x60/0xb0 [ 1860.791089][ T5806] ? clear_bhb_loop+0x60/0xb0 [ 1860.795761][ T5806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1860.801648][ T5806] RIP: 0033:0x7f0b8e19aeb9 [ 1860.806059][ T5806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.825663][ T5806] RSP: 002b:00007f0b8f12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1860.834073][ T5806] RAX: ffffffffffffffda RBX: 00007f0b8e415fa0 RCX: 00007f0b8e19aeb9 [ 1860.842036][ T5806] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1860.849998][ T5806] RBP: 00007f0b8f12f090 R08: 0000000000000000 R09: 0000000000000000 [ 1860.857960][ T5806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1860.865920][ T5806] R13: 00007f0b8e416038 R14: 00007f0b8e415fa0 R15: 00007ffd343e6168 [ 1860.873893][ T5806] [ 1865.024385][ T5883] netlink: 'syz.4.11210': attribute type 29 has an invalid length. [ 1892.049900][T21285] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2680 jiffies s: 165485 root: 0x2/. [ 1892.066140][T21285] rcu: blocking rcu_node structures (internal RCU debug): [ 1892.073594][T21285] Sending NMI from CPU 0 to CPUs 1: [ 1892.078820][ C1] NMI backtrace for cpu 1 [ 1892.078830][ C1] CPU: 1 PID: 5877 Comm: syz.0.11209 Not tainted syzkaller #0 [ 1892.078845][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1892.078853][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x58/0x60 [ 1892.078874][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 80 00 00 00 00 48 8b 04 24 65 48 8b 15 24 fb 7f 7e 65 8b [ 1892.078887][ C1] RSP: 0018:ffffc900001e0ee0 EFLAGS: 00000006 [ 1892.078901][ C1] RAX: ffffffff818ecec5 RBX: ffff8880b8f3b9f0 RCX: ffff88802b1c0000 [ 1892.078913][ C1] RDX: 0000000000010000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1892.078923][ C1] RBP: 0000000000000022 R08: ffff8880b8f3b9fb R09: 1ffff110171e773f [ 1892.078934][ C1] R10: dffffc0000000000 R11: ffffed10171e7740 R12: dffffc0000000000 [ 1892.078945][ C1] R13: 0000000000000020 R14: 0000000000000200 R15: 1ffff11005638159 [ 1892.078956][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1892.078969][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1892.078980][ C1] CR2: 000000110c383a00 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1892.078993][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1892.079003][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1892.079013][ C1] Call Trace: [ 1892.079019][ C1] [ 1892.079023][ C1] irq_work_single+0x195/0x230 [ 1892.079048][ C1] irq_work_run+0x159/0x2f0 [ 1892.079067][ C1] ? irq_work_single+0x230/0x230 [ 1892.079086][ C1] ? __irq_exit_rcu+0x147/0x230 [ 1892.079100][ C1] ? irq_exit_rcu+0x20/0x20 [ 1892.079119][ C1] __sysvec_irq_work+0xba/0x350 [ 1892.079135][ C1] sysvec_irq_work+0x98/0xc0 [ 1892.079154][ C1] [ 1892.079158][ C1] [ 1892.079164][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1892.079180][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1892.079196][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1892.079207][ C1] RSP: 0018:ffffc9000db9f680 EFLAGS: 00000206 [ 1892.079219][ C1] RAX: c1fbd8e3901f1900 RBX: 1ffff92001b73ed8 RCX: c1fbd8e3901f1900 [ 1892.079230][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 1892.079241][ C1] RBP: ffffc9000db9f770 R08: ffffffff90af4247 R09: 1ffffffff215e848 [ 1892.079253][ C1] R10: dffffc0000000000 R11: fffffbfff215e849 R12: 0000000000000246 [ 1892.079263][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 1892.079289][ C1] ? asm_sysvec_error_interrupt+0x10/0x20 [ 1892.079306][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1892.079321][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1892.079343][ C1] __rcu_read_unlock+0x78/0xd0 [ 1892.079358][ C1] page_ext_put+0x91/0xb0 [ 1892.079376][ C1] unmap_page_range+0x192d/0x2500 [ 1892.079417][ C1] unmap_vmas+0x260/0x390 [ 1892.079436][ C1] ? unmap_vmas+0x1bd/0x390 [ 1892.079455][ C1] ? unmap_page_range+0x2500/0x2500 [ 1892.079477][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1892.079494][ C1] ? mas_next_entry+0xe27/0xed0 [ 1892.079521][ C1] exit_mmap+0x20d/0x960 [ 1892.079540][ C1] ? vm_brk+0x20/0x20 [ 1892.079556][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1892.079582][ C1] ? exit_mm+0x1ee/0x2d0 [ 1892.079605][ C1] ? uprobe_clear_state+0x274/0x290 [ 1892.079625][ C1] ? mm_update_next_owner+0x525/0x650 [ 1892.079646][ C1] __mmput+0x118/0x3c0 [ 1892.079661][ C1] exit_mm+0x1fe/0x2d0 [ 1892.079681][ C1] ? do_exit+0x2480/0x2480 [ 1892.079699][ C1] ? taskstats_exit+0x35a/0x9d0 [ 1892.079723][ C1] do_exit+0x905/0x2480 [ 1892.079747][ C1] ? preempt_schedule+0xbc/0xd0 [ 1892.079763][ C1] ? put_task_struct+0x80/0x80 [ 1892.079780][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1892.079801][ C1] ? lock_chain_count+0x20/0x20 [ 1892.079821][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1892.079845][ C1] do_group_exit+0x217/0x2d0 [ 1892.079867][ C1] __x64_sys_exit_group+0x3b/0x40 [ 1892.079886][ C1] do_syscall_64+0x4c/0xa0 [ 1892.079902][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1892.079918][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1892.079934][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1892.079950][ C1] RIP: 0033:0x7f512639aeb9 [ 1892.079962][ C1] Code: Unable to access opcode bytes at 0x7f512639ae8f. [ 1892.079969][ C1] RSP: 002b:00007ffff5fbfb28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1892.079984][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f512639aeb9 [ 1892.079994][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1892.080003][ C1] RBP: 00007ffff5fbfb8c R08: 0000000000000000 R09: 00000000000927c0 [ 1892.080013][ C1] R10: 0000000000000006 R11: 0000000000000246 R12: 000000000000015d [ 1892.080022][ C1] R13: 00000000000927c0 R14: 00000000001c734b R15: 00007ffff5fbfbe0 [ 1892.080042][ C1]