last executing test programs: 8.55352874s ago: executing program 2 (id=1094): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b00)="89000000170081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 8.454196586s ago: executing program 1 (id=1095): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x55, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x5, 0x5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0xd120, 0x10000000000, 0xfffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x200336, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000700440002005817d30461bc24eeb556a705251e618214000000003b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040800) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xd5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 8.171220622s ago: executing program 1 (id=1096): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0x6e, &(0x7f0000000400)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r9 = socket$kcm(0x10, 0x400000002, 0x0) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) write$cgroup_subtree(r9, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b", @ANYRESHEX=r9], 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r6, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000ac0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x401, '\x00', 0x0, r1, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x2, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xd6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xb8}, @jmp={0x5, 0x0, 0x5, 0x6, 0xa, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x7, 0x15, &(0x7f00000007c0)=""/21, 0x41100, 0x38, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r12, r7, 0x1, &(0x7f0000000e40)=[r13, r4, r1, 0xffffffffffffffff, r10], &(0x7f0000000e80)=[{0x0, 0x5, 0x8, 0xa}], 0x10, 0x2}, 0x94) r14 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r14}, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 8.170986272s ago: executing program 2 (id=1097): r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013f46bcd9e3fe3dc6e48aa310b6b8703100000001f0300", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.855269011s ago: executing program 2 (id=1099): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, &(0x7f0000000340)={'syzkaller1\x00', @remote}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000feffffff850000002f0000001801000020a0642500000000002020207b1af8ff00000000bf0000000000000007010000f8ffffffb70200000800f9ffb7030000feffffff850000009b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), &(0x7f0000000140)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000180"], 0x0, 0x52}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r4, @sk_reuseport, 0x0, 0x0, 0x0, 0xffffffffffffff1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="39000000140081ae10003c0005000183110042702fdf236f1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b647d", 0x39}], 0x1}, 0x0) 6.679824729s ago: executing program 3 (id=1101): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000001240)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9ff03316844268cb89e14f0080081cd9c4e42b9e3e78197a27674af501ee312b2123114a41ae4948b3dc8f48505aee34563d1094160", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="03000000ddcd9dedcf0000004c18d2ded0eda256", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000f00)="14000000140081026681f782db44cf440aa1fd62", 0x14}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50", 0xc}], 0x1}, 0x20040000) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711061000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x30, 0x61, 0x0, 0x2e]}}, &(0x7f0000001040)=""/76, 0x2d, 0x4c, 0x1, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)='7', 0x1}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.989897138s ago: executing program 1 (id=1102): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6f6e, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x6, 0x7fff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x851) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x10b, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) 4.909695432s ago: executing program 3 (id=1103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdc}, 0x60, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a068, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x7fffffff, 0x0, 0xc, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFINDEX(r6, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x3a, 0x2, 0xa, 0x0, 0xd, 0x1408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x120, 0x4b9, 0x8001, 0x9efbe3f0514b9e9e, 0x1, 0x1, 0x2, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000040)='*:):\xaf}{\x00') r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.748166662s ago: executing program 2 (id=1105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x301040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x1, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x24, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x967e}, {}, {}, [@jmp={0x5, 0x1, 0xd, 0x1, 0x8, 0x30, 0x1}, @alu={0x7, 0x0, 0xb, 0x2, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff0}, @exit, @snprintf, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x2, &(0x7f00000001c0)=""/2, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xd, 0xb9a8, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x1], &(0x7f00000002c0)=[{0x4, 0x1, 0x1, 0x4}, {0x2, 0x3, 0x6, 0x5}, {0x5, 0x4, 0xa430, 0xa}], 0x10, 0x11a}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000003c0)=r3) 4.44897838s ago: executing program 2 (id=1106): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='veth0'], 0x12) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000)=r9, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.44555196s ago: executing program 1 (id=1107): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc806dcabced7ad654fac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580), 0x6e, &(0x7f0000000400)=[{&(0x7f0000002100)=""/4096, 0x1000}], 0x1, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3, 0xffffffffffffffff}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, &(0x7f0000000380), &(0x7f0000000300), 0x2, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000500)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b706000000000000008100", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) write$cgroup_subtree(r8, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b", @ANYRESHEX=r8], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x2, 0x14, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xd6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xb8}, @jmp={0x5, 0x0, 0x5, 0x6, 0xa, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x7, 0x15, &(0x7f00000007c0)=""/21, 0x41100, 0x38, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r6, 0x1, &(0x7f0000000e40)=[0xffffffffffffffff, r4, r1, 0xffffffffffffffff, r9], &(0x7f0000000e80)=[{0x0, 0x5, 0x8, 0xa}], 0x10, 0x2}, 0x94) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r11}, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 4.25720467s ago: executing program 0 (id=1109): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x8, 0xfff, 0x2, 0x50c, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000140)="d64fd5bf33f9c392c5da648479801180e59e7c7d5192b154c0246f37f89bf2c559e55a09dd4fef41ee77f9ac91bc7f8a8ccf1dded6b3cb9f87299a15bc5f3972bc4d1724b3807859e4545421eb4248954585b072057d98d27a70a7e9a4087c6aa8c852b161d8169be821f678c98a0dfd3ad7eea49c9e450717a92244aba061add38b04a918c7bfa156f18da5b0bac1144ba3710150d63e079ec178de9daf95f61ec1c6cc50f805fff10abb51d8cb04d8627c470d2ecd447a8cc887dc52afdca1836faf7e440a0ae4d410cee7eb78", &(0x7f0000000240)=""/117}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x39, 0x6f, &(0x7f00000002c0)="417825ae4cf8ddb8125add430d5ec03f6e0593ab59ca326c7f8a97df7ac51891688adff0a27af607d281a52afc714b706b41f800593ab244e2", &(0x7f0000000300)=""/111, 0x6, 0x0, 0x7d, 0xef, &(0x7f0000000380)="597d972b6c61a9a8e2bec8221d7bb18f354b812cfe15607c45846578c6adf475829c82f4bc32d3c138f613c0c100d5c96869c2dd0b256b9ee514980f79215878a8d9695c109c146e6e70c2a1f08f46a91503c7d4ea9dec3e6980e71058a8ac0a3fa852d82eeebd25c935caa816ca827fa459750a113b3c1f72d245e3b7", &(0x7f0000000400)="8780c5fc3109c0c3005a8417ad601022a645b649f7e42a7b81a4aa98b555535e21276d25c1c944bfc8fd6ffb5f81762382f72661186ec089817ac2adaba3b9c94100819e66c93314aeebe83c1c342ffbb68f57a076ef2daab6328d082d8c25a0464ea1c1444203c2dcfd7283d1a91214855e631ee642879c06c8b2bc9fcf74509253760d7d1ef9260e23dd087cda0fece0c309209bff50644e5b01517d199389855dce48df022a08614a3a379542de14f98f3cf10a417db7e4b7c5e90f96c008c32bfb87b870aae41ff6947eadf69eaa0a5a2d2a8180d30d0961361c864a9824f80444b54be3497efae80a73e07587", 0x0, 0x0, 0x8}, 0x50) 4.056546102s ago: executing program 0 (id=1110): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x34000}], 0x1}, 0xc8d4) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1f, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000060000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x600) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0xb, 0x8000, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x20004800) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00ff050000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffdb2, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x8, 0x0, 0x40}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000008015f4ebb7d394962c18eaef0000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f0000000380)="a19fdd62e21a48e606cd0db17a412fd9474fc2e0db48543eebb5212495c4f2a94f1c3045800e36599d77f1c9ad196f178cbbe09c2f9e0736fde946739a4c3f21fc43a011541b3631e53c9bb77d05240ee802a32bfe787258d9025f814bc0b7de35209098f4dc29440fb8d831a228a998a0076d32bfbf0b414225e25cfe78cbca1c8a1bb16e8b6bf1eb05cc025691f855d7998d09b63ea1364edf", &(0x7f00000000c0)=""/46, &(0x7f0000000540)="8e3e545c816df8426353a245951c855b84c87fd216212dd3a9842e39b96788d60290b6e31d4202bca92695afcd3ee677e22324723d8ffed3f31223abcbc9066fba1225533457da07b0f6aaae74b9c546c91b55d5ebce959f3b8b68b70d28ef2e72faa3795f389737b1b9052af9127c0493bd55d3e2978f10a2f2b0d08b2a7f178117a0e97bcd6911039fc74a192396a28f133aba75f4ae3b62a943fae5419cefb7663422e4d9e928af56cb16e5bce7c8faaface5fbe7cab432fb15ec98be2c7f22bc71879190581de75124d10e2ca5b02ea3f55c247d621a5fd933eb9016f0f017024826c205", &(0x7f00000002c0)="7b8f31", 0x3d, r7, 0x4}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) 3.818306186s ago: executing program 3 (id=1112): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="d800000019008111e00212ba0d810504020a0200ffe6040b067c55a1bc000100b8000699f3ffffff15000500fe808178a800150003000140020024f89a27c8d889cb591401ba86000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbaca8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025cccb262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecba4b1583a1fc5f49af6ee5de6ccd40dd6e4edef3d93452a92387f0000", 0xd8}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) gettid() 3.727272822s ago: executing program 0 (id=1113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x19, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x7, 0x282ba0d1397b44c7, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xb7e9, 0xe9, &(0x7f0000000540)=""/233, 0x40f00, 0x44, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0xfffff086}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[r1, 0x1, r0, r1], &(0x7f0000000700)=[{0x3, 0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2}, {0x2, 0x4, 0x4, 0x1}, {0x0, 0x3, 0x8}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x4, 0x0, 0x2}, {0x3, 0x3, 0xf, 0x8}, {0x2, 0x1, 0xe, 0x9}, {0x2, 0x4, 0xb, 0x3}], 0x10, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x840}, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1a, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800001d0000000000000000ccf01b630435000000000000630a000000000000950000e6000000005777786968db4b7297f3036be46020f5ad76345fbf250992f0c203c07393ac803ebf41b4589c7046521ad4acab2a23805c4e4b51dec1a5ce5774345bd4accc5d0a119f0873609a8cc1f0b142c5800c83d12c7ff2a894821d9cf47d17fdbed7cba9e08d7a"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x19, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000280)}, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x7, 0x282ba0d1397b44c7, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0xb7e9, 0xe9, &(0x7f0000000540)=""/233, 0x40f00, 0x44, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000640)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x5, 0xfffff086}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[r1, 0x1, r0, r1], &(0x7f0000000700)=[{0x3, 0x5, 0x1, 0x1}, {0x4, 0x1, 0x7, 0x2}, {0x2, 0x4, 0x4, 0x1}, {0x0, 0x3, 0x8}, {0x5, 0x5, 0x7, 0x3}, {0x1, 0x4, 0x0, 0x2}, {0x3, 0x3, 0xf, 0x8}, {0x2, 0x1, 0xe, 0x9}, {0x2, 0x4, 0xb, 0x3}], 0x10, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) sendmsg$unix(r6, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x840}, 0x800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1a, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800001d0000000000000000ccf01b630435000000000000630a000000000000950000e6000000005777786968db4b7297f3036be46020f5ad76345fbf250992f0c203c07393ac803ebf41b4589c7046521ad4acab2a23805c4e4b51dec1a5ce5774345bd4accc5d0a119f0873609a8cc1f0b142c5800c83d12c7ff2a894821d9cf47d17fdbed7cba9e08d7a"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) (async) 3.573010681s ago: executing program 3 (id=1114): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 3.566952981s ago: executing program 0 (id=1115): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:23'], 0xa) r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES64=r1, @ANYRESHEX=r2, @ANYBLOB="cb80e5d565c79bf81bd0d9b01c28e2783183e9206c2a8249922f9b9dc069c2ecb1ee78680203ad37dd6da78ee8e700f9339d6fde0097fdce401ba83d10bbc87187bcef4997b3bf0cd4575e15c5f239a939", @ANYRES16=r1], 0x50) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x404100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRESOCT=r1, @ANYBLOB="0300000000000000b702000014006500b7030000000000008500000083020000bf0900000000000055090100000000009500000000000000bf91000000000008b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002880)="5c00000012006bab9e3f0900000000000000a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe460100000400010015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x8000, @mcast1}, 0x80, &(0x7f0000000040)}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair(0x23, 0xa, 0x3, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="c018030084a3dea5a3b75e60cf1b658b0590521d000b8325c0bb0dc08663d25a2835000000000000d8674446a6fc60100c0640010000090593753582c137153e370209b7", 0x44}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r9 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x80, 0x2, 0x5, 0xff, 0x0, 0x0, 0x80004, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0xc5, 0x4}, 0x8002, 0xa29, 0x1, 0x4, 0x507, 0x8, 0x8, 0x0, 0x7eff, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000180)=0x4) 1.209116119s ago: executing program 3 (id=1116): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000dc0)={&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f9", 0x1}], 0x1}, 0x263171b11b81c78f) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r2, 0x8) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'syzkaller1\x00', @remote}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0xfffffffffffffe63, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred]}, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="3ddbe10d7b6a85ba124d97bb237dd7573cf611e886f741d2c851989c14195e6d16ae4bfc007d52dc2e744ef90b9544a9369e7ca8d1e5c94906c6cac76defd67fdc183c7a701fb96b6009187ccb725146cb4c41c975d5022f11ed411a54fd6bc7ef0bf2bdef544405d27f73913032439d511fb245315290b8990915cb36884c6880717bd9b263cc5e24feb9fa9d90c615ee5bd5adbb828e15f9162383f5074dac64ebfd3b46f0d8508a744add9c002ab2cf25029ba795a7de0c76ef99c837eea4262b698f0fd9824453ca77cde42137005238dacebc5587c04e24d958a6388edc6d8e9f31a720745191beeef666", @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f00000002c0)='I95\x8c\xe8\xd8\xe2\xf5i\xc6\xd5t\xfe\x92\xd3\x82\xc4\xf2\x17\xa6`v\xf1c\xc8\xb5\xe5_v\xaf\x80\rz6\x03+\xc28a\xfb\xbei5\tVI\xc9\xb2\xae\xd1\xaeJ\xbf\xd0\n') r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(r9, 0x0, 0x13) 182.001209ms ago: executing program 3 (id=1117): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6f6e, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r2], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80) r3 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x6, 0x7fff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) sendmsg$sock(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x851) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x10b, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) 179.929749ms ago: executing program 0 (id=1125): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400300000000000009500740000000000"], 0x0, 0x19e40bf0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sock_ops=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000000840)=""/4153, 0x1039}, {&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f00000005c0)=""/172, 0xac}, {&(0x7f0000000140)=""/177, 0xb1}], 0x5}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 179.597359ms ago: executing program 1 (id=1118): r0 = socket$kcm(0x10, 0x5, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f0000004940)=""/4005, 0xfa5}, {&(0x7f0000000d40)=""/4102, 0x1006}, {&(0x7f0000000500)=""/219, 0xdb}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000000)=""/13, 0xd}], 0x7}, 0x2100) 179.383269ms ago: executing program 2 (id=1119): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x1300, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x18}, 0x10021) 599.23µs ago: executing program 1 (id=1120): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdc}, 0x60, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a068, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x7fffffff, 0x0, 0xc, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFINDEX(r6, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x3, 0x3a, 0x2, 0xa, 0x0, 0xd, 0x1408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x120, 0x4b9, 0x8001, 0x9efbe3f0514b9e9e, 0x1, 0x1, 0x2, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000040)='*:):\xaf}{\x00') r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=1121): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @random="e70a77fa8f9a", 'veth1_to_hsr\x00'}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="23e4aa237866201c75d6241da3bb62dded060c06e74a2df2101dae8859ae6ee7207a09e6d721222e387fab3f49af81425e3e33f63f0f64da254892011af74d7c8ae80cd1a1b8046aaa9761dfaa31ef62949026dbd7405c5cd5ec8af101869847fa7dcf7caac5badca5583f9a6bf602", 0x6f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001880)="04", 0x1}], 0x1}, 0x8054) close(r0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r3}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f00000004c0)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200000000e4ffff0d1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(r6, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000b40)=""/140, 0x8c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000500)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/94, 0x5e}], 0x10}, 0x2122) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0d, 0x0, @perf_config_ext={0x1, 0x80}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94b4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x12, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r8, r5}) kernel console output (not intermixed with test programs): 007fa6b6de90a0 RDI: 0000000000000004 [ 182.739105][ T7188] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 182.747181][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.755265][ T7188] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 182.763387][ T7188] [ 183.041911][ T7202] netlink: 763 bytes leftover after parsing attributes in process `syz.1.397'. [ 183.622324][ T7211] FAULT_INJECTION: forcing a failure. [ 183.622324][ T7211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.642528][ T7211] CPU: 0 PID: 7211 Comm: syz.1.401 Not tainted syzkaller #0 [ 183.649985][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.660178][ T7211] Call Trace: [ 183.663509][ T7211] [ 183.666521][ T7211] dump_stack_lvl+0x18c/0x250 [ 183.671264][ T7211] ? show_regs_print_info+0x20/0x20 [ 183.676695][ T7211] ? load_image+0x400/0x400 [ 183.681259][ T7211] ? __lock_acquire+0x7d40/0x7d40 [ 183.686336][ T7211] ? __up_read+0x2b6/0x6b0 [ 183.690808][ T7211] ? __lock_acquire+0x7d40/0x7d40 [ 183.695890][ T7211] should_fail_ex+0x39d/0x4d0 [ 183.700638][ T7211] _copy_to_user+0x2f/0xa0 [ 183.705285][ T7211] put_user_ifreq+0x78/0xb0 [ 183.709839][ T7211] sock_do_ioctl+0x268/0x310 [ 183.714577][ T7211] ? sock_show_fdinfo+0xb0/0xb0 [ 183.719580][ T7211] sock_ioctl+0x5ba/0x7e0 [ 183.723969][ T7211] ? sock_poll+0x3e0/0x3e0 [ 183.728430][ T7211] ? bpf_lsm_file_ioctl+0x9/0x10 [ 183.733412][ T7211] ? security_file_ioctl+0x80/0xa0 [ 183.738568][ T7211] ? sock_poll+0x3e0/0x3e0 [ 183.743021][ T7211] __se_sys_ioctl+0xfd/0x170 [ 183.747652][ T7211] do_syscall_64+0x55/0xa0 [ 183.752095][ T7211] ? clear_bhb_loop+0x40/0x90 [ 183.756785][ T7211] ? clear_bhb_loop+0x40/0x90 [ 183.761487][ T7211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.767457][ T7211] RIP: 0033:0x7fc4fcf9aeb9 [ 183.771912][ T7211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.791733][ T7211] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.800174][ T7211] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 183.808259][ T7211] RDX: 0000200000000080 RSI: 0000000000008910 RDI: 0000000000000006 [ 183.816335][ T7211] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 183.824318][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.832302][ T7211] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 183.840307][ T7211] [ 184.178298][ T7225] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 184.739163][ T7231] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 184.867237][ T7235] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 186.348515][ T7250] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 186.534981][ T7257] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.416'. [ 186.552799][ T7254] netlink: 44 bytes leftover after parsing attributes in process `syz.1.415'. [ 187.437348][ T7269] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 187.490170][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.422'. [ 187.611535][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.422'. [ 187.808260][ T7272] netlink: 60 bytes leftover after parsing attributes in process `syz.1.422'. [ 188.113866][ T7278] netlink: 'syz.1.423': attribute type 10 has an invalid length. [ 189.551903][ T7301] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.430'. [ 189.594546][ T7301] syz.2.430 uses obsolete (PF_INET,SOCK_PACKET) [ 189.726577][ T7303] netlink: 'syz.2.430': attribute type 10 has an invalid length. [ 190.776218][ T7311] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 190.796554][ T7306] netlink: 'syz.3.432': attribute type 7 has an invalid length. [ 191.214286][ T7324] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 191.257984][ T7331] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.436'. [ 191.276833][ T7324] netlink: 'syz.2.435': attribute type 8 has an invalid length. [ 191.309791][ T7324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.435'. [ 191.410403][ T7329] syzkaller0: left promiscuous mode [ 191.433349][ T7329] syzkaller0: left allmulticast mode [ 191.793980][ T7338] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 191.996645][ T7343] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.446'. [ 192.291449][ T7344] netlink: 'syz.3.440': attribute type 17 has an invalid length. [ 192.760114][ T7349] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 192.783224][ T7349] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.439'. [ 192.792521][ T7349] netlink: 9 bytes leftover after parsing attributes in process `syz.1.439'. [ 193.097450][ T7357] netlink: 144 bytes leftover after parsing attributes in process `syz.0.443'. [ 193.135710][ T7357] FAULT_INJECTION: forcing a failure. [ 193.135710][ T7357] name failslab, interval 1, probability 0, space 0, times 0 [ 193.148661][ T7357] CPU: 1 PID: 7357 Comm: syz.0.443 Not tainted syzkaller #0 [ 193.156051][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.166510][ T7357] Call Trace: [ 193.169833][ T7357] [ 193.172900][ T7357] dump_stack_lvl+0x18c/0x250 [ 193.177746][ T7357] ? show_regs_print_info+0x20/0x20 [ 193.183019][ T7357] ? load_image+0x400/0x400 [ 193.187691][ T7357] ? verify_lock_unused+0x140/0x140 [ 193.193160][ T7357] should_fail_ex+0x39d/0x4d0 [ 193.198001][ T7357] should_failslab+0x9/0x20 [ 193.202570][ T7357] slab_pre_alloc_hook+0x59/0x310 [ 193.207983][ T7357] ? nsim_fib_event_nb+0x187/0x1080 [ 193.213244][ T7357] __kmem_cache_alloc_node+0x53/0x250 [ 193.218699][ T7357] ? nsim_fib_event_nb+0x187/0x1080 [ 193.223950][ T7357] kmalloc_trace+0x2a/0xe0 [ 193.228419][ T7357] nsim_fib_event_nb+0x187/0x1080 [ 193.233482][ T7357] ? read_lock_is_recursive+0x20/0x20 [ 193.238885][ T7357] notifier_call_chain+0x197/0x380 [ 193.244457][ T7357] ? atomic_notifier_call_chain+0x26/0x180 [ 193.250380][ T7357] atomic_notifier_call_chain+0xda/0x180 [ 193.256063][ T7357] call_fib_notifiers+0x31/0x60 [ 193.260972][ T7357] fib6_del+0xfa4/0x1580 [ 193.265381][ T7357] ? fib6_del+0x661/0x1580 [ 193.269970][ T7357] ? fib6_locate_1+0x6c0/0x6c0 [ 193.275035][ T7357] ? do_raw_spin_lock+0x11f/0x2c0 [ 193.280377][ T7357] ? __ip6_del_rt_siblings+0xa2/0x7c0 [ 193.285864][ T7357] __ip6_del_rt_siblings+0x4ae/0x7c0 [ 193.291220][ T7357] ip6_route_del+0x1435/0x14f0 [ 193.296017][ T7357] ? ip6_route_del+0xe3/0x14f0 [ 193.300833][ T7357] ? ipv6_route_ioctl+0x500/0x500 [ 193.305949][ T7357] ? inet6_rtm_delroute+0x288/0x600 [ 193.311182][ T7357] inet6_rtm_delroute+0x400/0x600 [ 193.316247][ T7357] ? inet6_rtm_newroute+0x1c90/0x1c90 [ 193.322117][ T7357] ? trace_contention_end+0x39/0xe0 [ 193.327354][ T7357] ? __mutex_lock+0x315/0xcc0 [ 193.332121][ T7357] ? inet6_rtm_newroute+0x1c90/0x1c90 [ 193.337518][ T7357] rtnetlink_rcv_msg+0x869/0xfa0 [ 193.342564][ T7357] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 193.347880][ T7357] ? rtnetlink_bind+0x80/0x80 [ 193.352589][ T7357] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 193.358521][ T7357] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 193.364695][ T7357] ? __dev_queue_xmit+0x26b/0x36b0 [ 193.369867][ T7357] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 193.375916][ T7357] ? perf_trace_lock+0x304/0x3b0 [ 193.380967][ T7357] netlink_rcv_skb+0x241/0x4d0 [ 193.385981][ T7357] ? rtnetlink_bind+0x80/0x80 [ 193.390711][ T7357] ? netlink_ack+0x1180/0x1180 [ 193.395568][ T7357] ? __lock_acquire+0x7d40/0x7d40 [ 193.400917][ T7357] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.406185][ T7357] netlink_unicast+0x751/0x8d0 [ 193.411005][ T7357] netlink_sendmsg+0x8d0/0xbf0 [ 193.415845][ T7357] ? perf_trace_lock+0x304/0x3b0 [ 193.420997][ T7357] ? netlink_getsockopt+0x590/0x590 [ 193.426247][ T7357] ? aa_sock_msg_perm+0x94/0x150 [ 193.431227][ T7357] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.436543][ T7357] ? security_socket_sendmsg+0x80/0xa0 [ 193.442113][ T7357] ? netlink_getsockopt+0x590/0x590 [ 193.447467][ T7357] ____sys_sendmsg+0x5ba/0x960 [ 193.452302][ T7357] ? __asan_memset+0x22/0x40 [ 193.456922][ T7357] ? __sys_sendmsg_sock+0x30/0x30 [ 193.461970][ T7357] ? __import_iovec+0x5f2/0x850 [ 193.466894][ T7357] ? import_iovec+0x73/0xa0 [ 193.471531][ T7357] ___sys_sendmsg+0x2a6/0x360 [ 193.476249][ T7357] ? __sys_sendmsg+0x2a0/0x2a0 [ 193.481183][ T7357] ? __lock_acquire+0x7d40/0x7d40 [ 193.486287][ T7357] __se_sys_sendmsg+0x1c2/0x2b0 [ 193.491178][ T7357] ? __x64_sys_sendmsg+0x80/0x80 [ 193.496174][ T7357] ? lockdep_hardirqs_on+0x98/0x150 [ 193.501420][ T7357] do_syscall_64+0x55/0xa0 [ 193.505861][ T7357] ? clear_bhb_loop+0x40/0x90 [ 193.510562][ T7357] ? clear_bhb_loop+0x40/0x90 [ 193.515261][ T7357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.521214][ T7357] RIP: 0033:0x7fe1f2f9aeb9 [ 193.525759][ T7357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.545734][ T7357] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.554179][ T7357] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 193.562190][ T7357] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000004 [ 193.570212][ T7357] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 193.578255][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.586293][ T7357] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 193.594500][ T7357] [ 193.750857][ T7361] netlink: 'syz.3.444': attribute type 10 has an invalid length. [ 193.771061][ T7363] netlink: 'syz.2.447': attribute type 2 has an invalid length. [ 193.800793][ T7363] netlink: 'syz.2.447': attribute type 8 has an invalid length. [ 193.834812][ T7363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 194.042027][ T7369] netlink: 'syz.1.448': attribute type 29 has an invalid length. [ 194.134727][ T7369] netlink: 'syz.1.448': attribute type 29 has an invalid length. [ 194.171643][ T7366] netlink: 'syz.1.448': attribute type 29 has an invalid length. [ 194.371937][ T7365] netlink: 'syz.1.448': attribute type 29 has an invalid length. [ 194.609387][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.616014][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.315375][ T7390] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.453'. [ 196.666530][ T7417] netlink: 1183 bytes leftover after parsing attributes in process `syz.3.457'. [ 196.677681][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 196.684665][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 196.693946][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 196.700297][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 197.584225][ T7396] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 197.676999][ T7455] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.458'. [ 197.820700][ T7457] validate_nla: 2 callbacks suppressed [ 197.820719][ T7457] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 198.717472][ T7460] netlink: 'syz.3.459': attribute type 2 has an invalid length. [ 198.726872][ T7460] netlink: 'syz.3.459': attribute type 8 has an invalid length. [ 198.793413][ T7460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.459'. [ 199.139695][ T7473] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 200.199801][ T2971] wlan1: Trigger new scan to find an IBSS to join [ 201.114085][ T7503] netlink: 'syz.3.473': attribute type 2 has an invalid length. [ 201.179566][ T7503] netlink: 'syz.3.473': attribute type 8 has an invalid length. [ 201.212642][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.473'. [ 201.299954][ T7501] syzkaller0: left promiscuous mode [ 201.321302][ T7501] syzkaller0: left allmulticast mode [ 201.435155][ T7512] netlink: 'syz.0.474': attribute type 29 has an invalid length. [ 201.510011][ T7512] netlink: 'syz.0.474': attribute type 29 has an invalid length. [ 201.571213][ T7515] netlink: 'syz.0.474': attribute type 29 has an invalid length. [ 201.701694][ T7512] netlink: 'syz.0.474': attribute type 29 has an invalid length. [ 201.773446][ T7518] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.476'. [ 201.782835][ T7518] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.476'. [ 201.794210][ T7518] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.476'. [ 204.258530][ T11] wlan1: Trigger new scan to find an IBSS to join [ 205.057096][ T7579] FAULT_INJECTION: forcing a failure. [ 205.057096][ T7579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.096057][ T7579] CPU: 0 PID: 7579 Comm: syz.3.488 Not tainted syzkaller #0 [ 205.103435][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.113525][ T7579] Call Trace: [ 205.116838][ T7579] [ 205.119799][ T7579] dump_stack_lvl+0x18c/0x250 [ 205.124520][ T7579] ? show_regs_print_info+0x20/0x20 [ 205.129775][ T7579] ? load_image+0x400/0x400 [ 205.134338][ T7579] ? __might_fault+0xaa/0x120 [ 205.139168][ T7579] ? __lock_acquire+0x7d40/0x7d40 [ 205.144256][ T7579] should_fail_ex+0x39d/0x4d0 [ 205.148988][ T7579] _copy_from_user+0x2f/0xe0 [ 205.153619][ T7579] ___sys_sendmsg+0x1c7/0x360 [ 205.158372][ T7579] ? __sys_sendmsg+0x2a0/0x2a0 [ 205.163210][ T7579] ? __lock_acquire+0x7d40/0x7d40 [ 205.168406][ T7579] __se_sys_sendmsg+0x1c2/0x2b0 [ 205.173325][ T7579] ? __x64_sys_sendmsg+0x80/0x80 [ 205.178335][ T7579] ? lockdep_hardirqs_on+0x98/0x150 [ 205.183587][ T7579] do_syscall_64+0x55/0xa0 [ 205.188037][ T7579] ? clear_bhb_loop+0x40/0x90 [ 205.192744][ T7579] ? clear_bhb_loop+0x40/0x90 [ 205.197475][ T7579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.203425][ T7579] RIP: 0033:0x7f07f9f9aeb9 [ 205.207901][ T7579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.227730][ T7579] RSP: 002b:00007f07fae5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.236177][ T7579] RAX: ffffffffffffffda RBX: 00007f07fa215fa0 RCX: 00007f07f9f9aeb9 [ 205.244188][ T7579] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 205.252175][ T7579] RBP: 00007f07fae5e090 R08: 0000000000000000 R09: 0000000000000000 [ 205.260270][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.268263][ T7579] R13: 00007f07fa216038 R14: 00007f07fa215fa0 R15: 00007ffe72769798 [ 205.276279][ T7579] [ 205.507812][ T7435] wlan1: Creating new IBSS network, BSSID 86:58:74:03:89:7a [ 205.644791][ T7582] delete_channel: no stack [ 205.649483][ T7582] delete_channel: no stack [ 205.755337][ T7584] validate_nla: 2 callbacks suppressed [ 205.755355][ T7584] netlink: 'syz.2.490': attribute type 10 has an invalid length. [ 207.333310][ T7613] delete_channel: no stack [ 207.387404][ T7609] delete_channel: no stack [ 207.713442][ T7621] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.501'. [ 207.744994][ T7621] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.501'. [ 207.863655][ T7623] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.501'. [ 208.491070][ T7633] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.529993][ T7633] netlink: 1 bytes leftover after parsing attributes in process `syz.0.504'. [ 209.151201][ T7651] FAULT_INJECTION: forcing a failure. [ 209.151201][ T7651] name failslab, interval 1, probability 0, space 0, times 0 [ 209.176899][ T7651] CPU: 1 PID: 7651 Comm: syz.1.511 Not tainted syzkaller #0 [ 209.184266][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.194438][ T7651] Call Trace: [ 209.197793][ T7651] [ 209.200829][ T7651] dump_stack_lvl+0x18c/0x250 [ 209.205539][ T7651] ? show_regs_print_info+0x20/0x20 [ 209.210787][ T7651] ? load_image+0x400/0x400 [ 209.215310][ T7651] ? verify_lock_unused+0x140/0x140 [ 209.220751][ T7651] should_fail_ex+0x39d/0x4d0 [ 209.225468][ T7651] should_failslab+0x9/0x20 [ 209.230001][ T7651] slab_pre_alloc_hook+0x59/0x310 [ 209.235062][ T7651] kmem_cache_alloc+0x5a/0x2d0 [ 209.240064][ T7651] ? skb_clone+0x1eb/0x370 [ 209.244521][ T7651] skb_clone+0x1eb/0x370 [ 209.248828][ T7651] __netlink_deliver_tap+0x41c/0x830 [ 209.254245][ T7651] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.259558][ T7651] netlink_deliver_tap+0x19c/0x1b0 [ 209.264688][ T7651] netlink_unicast+0x72c/0x8d0 [ 209.269486][ T7651] netlink_sendmsg+0x8d0/0xbf0 [ 209.274274][ T7651] ? netlink_getsockopt+0x590/0x590 [ 209.279499][ T7651] ? aa_sock_msg_perm+0x94/0x150 [ 209.284453][ T7651] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.289784][ T7651] ? security_socket_sendmsg+0x80/0xa0 [ 209.295275][ T7651] ? netlink_getsockopt+0x590/0x590 [ 209.300548][ T7651] ____sys_sendmsg+0x5ba/0x960 [ 209.305434][ T7651] ? __asan_memset+0x22/0x40 [ 209.310159][ T7651] ? __sys_sendmsg_sock+0x30/0x30 [ 209.315316][ T7651] ? __import_iovec+0x5f2/0x850 [ 209.320340][ T7651] ? import_iovec+0x73/0xa0 [ 209.324896][ T7651] ___sys_sendmsg+0x2a6/0x360 [ 209.329611][ T7651] ? get_pid_task+0x20/0x1e0 [ 209.334312][ T7651] ? __sys_sendmsg+0x2a0/0x2a0 [ 209.339651][ T7651] ? __lock_acquire+0x7d40/0x7d40 [ 209.344775][ T7651] __se_sys_sendmsg+0x1c2/0x2b0 [ 209.349716][ T7651] ? __x64_sys_sendmsg+0x80/0x80 [ 209.354707][ T7651] ? lockdep_hardirqs_on+0x98/0x150 [ 209.360459][ T7651] do_syscall_64+0x55/0xa0 [ 209.364900][ T7651] ? clear_bhb_loop+0x40/0x90 [ 209.369590][ T7651] ? clear_bhb_loop+0x40/0x90 [ 209.374302][ T7651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.380234][ T7651] RIP: 0033:0x7fc4fcf9aeb9 [ 209.384686][ T7651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.404310][ T7651] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.412825][ T7651] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 209.420873][ T7651] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 209.428944][ T7651] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 209.437016][ T7651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.445009][ T7651] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 209.453445][ T7651] [ 209.463416][ T7651] netlink: 'syz.1.511': attribute type 21 has an invalid length. [ 210.291488][ T7656] syzkaller0: entered promiscuous mode [ 210.323248][ T7656] syzkaller0: entered allmulticast mode [ 210.458844][ T7673] FAULT_INJECTION: forcing a failure. [ 210.458844][ T7673] name failslab, interval 1, probability 0, space 0, times 0 [ 210.476427][ T7673] CPU: 0 PID: 7673 Comm: syz.2.515 Not tainted syzkaller #0 [ 210.483763][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.493934][ T7673] Call Trace: [ 210.497248][ T7673] [ 210.500208][ T7673] dump_stack_lvl+0x18c/0x250 [ 210.504937][ T7673] ? show_regs_print_info+0x20/0x20 [ 210.510257][ T7673] ? load_image+0x400/0x400 [ 210.514810][ T7673] ? perf_trace_lock_acquire+0x104/0x410 [ 210.520483][ T7673] ? verify_lock_unused+0x140/0x140 [ 210.525734][ T7673] ? perf_trace_lock_acquire+0x104/0x410 [ 210.531442][ T7673] should_fail_ex+0x39d/0x4d0 [ 210.536272][ T7673] should_failslab+0x9/0x20 [ 210.540821][ T7673] slab_pre_alloc_hook+0x59/0x310 [ 210.545890][ T7673] kmem_cache_alloc+0x5a/0x2d0 [ 210.550776][ T7673] ? skb_clone+0x1eb/0x370 [ 210.555496][ T7673] skb_clone+0x1eb/0x370 [ 210.559776][ T7673] __netlink_deliver_tap+0x41c/0x830 [ 210.565135][ T7673] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.570466][ T7673] netlink_deliver_tap+0x19c/0x1b0 [ 210.575709][ T7673] netlink_unicast+0x72c/0x8d0 [ 210.580618][ T7673] netlink_sendmsg+0x8d0/0xbf0 [ 210.585610][ T7673] ? netlink_getsockopt+0x590/0x590 [ 210.590883][ T7673] ? aa_sock_msg_perm+0x94/0x150 [ 210.595878][ T7673] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.601210][ T7673] ? security_socket_sendmsg+0x80/0xa0 [ 210.606709][ T7673] ? netlink_getsockopt+0x590/0x590 [ 210.612037][ T7673] ____sys_sendmsg+0x5ba/0x960 [ 210.616960][ T7673] ? __asan_memset+0x22/0x40 [ 210.621588][ T7673] ? __sys_sendmsg_sock+0x30/0x30 [ 210.626655][ T7673] ? __import_iovec+0x5f2/0x850 [ 210.631652][ T7673] ? import_iovec+0x73/0xa0 [ 210.636202][ T7673] ___sys_sendmsg+0x2a6/0x360 [ 210.640927][ T7673] ? __sys_sendmsg+0x2a0/0x2a0 [ 210.645760][ T7673] ? __lock_acquire+0x7d40/0x7d40 [ 210.650914][ T7673] __se_sys_sendmsg+0x1c2/0x2b0 [ 210.655808][ T7673] ? __x64_sys_sendmsg+0x80/0x80 [ 210.660909][ T7673] ? lockdep_hardirqs_on+0x98/0x150 [ 210.666150][ T7673] do_syscall_64+0x55/0xa0 [ 210.670687][ T7673] ? clear_bhb_loop+0x40/0x90 [ 210.675397][ T7673] ? clear_bhb_loop+0x40/0x90 [ 210.680109][ T7673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.686031][ T7673] RIP: 0033:0x7fa6b5f9aeb9 [ 210.690672][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.710662][ T7673] RSP: 002b:00007fa6b6da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.719202][ T7673] RAX: ffffffffffffffda RBX: 00007fa6b6216180 RCX: 00007fa6b5f9aeb9 [ 210.727203][ T7673] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 210.735376][ T7673] RBP: 00007fa6b6da7090 R08: 0000000000000000 R09: 0000000000000000 [ 210.743372][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.751380][ T7673] R13: 00007fa6b6216218 R14: 00007fa6b6216180 R15: 00007fffb8599418 [ 210.759410][ T7673] [ 210.790503][ T7673] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.805041][ T7673] netlink: 1 bytes leftover after parsing attributes in process `syz.2.515'. [ 213.064863][ T7677] netlink: 156 bytes leftover after parsing attributes in process `syz.2.518'. [ 213.230073][ T7687] netlink: 'syz.2.519': attribute type 21 has an invalid length. [ 213.351978][ T7693] FAULT_INJECTION: forcing a failure. [ 213.351978][ T7693] name failslab, interval 1, probability 0, space 0, times 0 [ 213.364839][ T7693] CPU: 1 PID: 7693 Comm: syz.1.521 Not tainted syzkaller #0 [ 213.372170][ T7693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.382375][ T7693] Call Trace: [ 213.385671][ T7693] [ 213.388617][ T7693] dump_stack_lvl+0x18c/0x250 [ 213.393316][ T7693] ? show_regs_print_info+0x20/0x20 [ 213.398533][ T7693] ? load_image+0x400/0x400 [ 213.403058][ T7693] ? skb_network_protocol+0x529/0x780 [ 213.408482][ T7693] should_fail_ex+0x39d/0x4d0 [ 213.413294][ T7693] should_failslab+0x9/0x20 [ 213.417851][ T7693] slab_pre_alloc_hook+0x59/0x310 [ 213.422921][ T7693] kmem_cache_alloc+0x5a/0x2d0 [ 213.427824][ T7693] ? skb_clone+0x1eb/0x370 [ 213.432266][ T7693] skb_clone+0x1eb/0x370 [ 213.436517][ T7693] ? dev_queue_xmit_nit+0x212/0xbb0 [ 213.441994][ T7693] dev_queue_xmit_nit+0x24d/0xbb0 [ 213.447041][ T7693] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 213.452172][ T7693] ? validate_xmit_skb+0x949/0xf60 [ 213.457306][ T7693] dev_hard_start_xmit+0x148/0x740 [ 213.462445][ T7693] __dev_queue_xmit+0x1ac2/0x36b0 [ 213.467767][ T7693] ? __dev_queue_xmit+0x26b/0x36b0 [ 213.472906][ T7693] ? netdev_core_pick_tx+0x340/0x340 [ 213.478216][ T7693] ? __copy_skb_header+0xa3/0x4a0 [ 213.483256][ T7693] ? __asan_memcpy+0x40/0x70 [ 213.487864][ T7693] ? __skb_clone+0x63/0x790 [ 213.492470][ T7693] ? __skb_clone+0x480/0x790 [ 213.497159][ T7693] ? skb_clone+0x21f/0x370 [ 213.501675][ T7693] __netlink_deliver_tap+0x5ab/0x830 [ 213.507006][ T7693] ? netlink_deliver_tap+0x2e/0x1b0 [ 213.512224][ T7693] netlink_deliver_tap+0x19c/0x1b0 [ 213.517376][ T7693] netlink_unicast+0x72c/0x8d0 [ 213.522253][ T7693] netlink_sendmsg+0x8d0/0xbf0 [ 213.527050][ T7693] ? netlink_getsockopt+0x590/0x590 [ 213.532308][ T7693] ? aa_sock_msg_perm+0x94/0x150 [ 213.537301][ T7693] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 213.542616][ T7693] ? security_socket_sendmsg+0x80/0xa0 [ 213.548128][ T7693] ? netlink_getsockopt+0x590/0x590 [ 213.553365][ T7693] ____sys_sendmsg+0x5ba/0x960 [ 213.558245][ T7693] ? __asan_memset+0x22/0x40 [ 213.562852][ T7693] ? __sys_sendmsg_sock+0x30/0x30 [ 213.567894][ T7693] ? __import_iovec+0x5f2/0x850 [ 213.572862][ T7693] ? import_iovec+0x73/0xa0 [ 213.577386][ T7693] ___sys_sendmsg+0x2a6/0x360 [ 213.582085][ T7693] ? get_pid_task+0x20/0x1e0 [ 213.586693][ T7693] ? __sys_sendmsg+0x2a0/0x2a0 [ 213.591496][ T7693] ? __lock_acquire+0x7d40/0x7d40 [ 213.596581][ T7693] __se_sys_sendmsg+0x1c2/0x2b0 [ 213.601487][ T7693] ? __x64_sys_sendmsg+0x80/0x80 [ 213.606477][ T7693] ? lockdep_hardirqs_on+0x98/0x150 [ 213.611726][ T7693] do_syscall_64+0x55/0xa0 [ 213.616165][ T7693] ? clear_bhb_loop+0x40/0x90 [ 213.620855][ T7693] ? clear_bhb_loop+0x40/0x90 [ 213.625682][ T7693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 213.631612][ T7693] RIP: 0033:0x7fc4fcf9aeb9 [ 213.636220][ T7693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.655957][ T7693] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.664482][ T7693] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 213.672724][ T7693] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 213.680709][ T7693] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 213.688691][ T7693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.696675][ T7693] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 213.704674][ T7693] [ 213.757077][ T7696] netlink: 'syz.2.523': attribute type 33 has an invalid length. [ 213.765307][ T7696] netlink: 152 bytes leftover after parsing attributes in process `syz.2.523'. [ 213.788429][ T7696] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 214.448760][ T7710] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 215.540137][ T7719] netlink: zone id is out of range [ 215.580661][ T7719] netlink: set zone limit has 8 unknown bytes [ 215.655098][ T7721] netlink: 60 bytes leftover after parsing attributes in process `syz.1.531'. [ 215.873699][ T7727] FAULT_INJECTION: forcing a failure. [ 215.873699][ T7727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.890565][ T7727] CPU: 0 PID: 7727 Comm: syz.3.534 Not tainted syzkaller #0 [ 215.897926][ T7727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.908133][ T7727] Call Trace: [ 215.911543][ T7727] [ 215.914502][ T7727] dump_stack_lvl+0x18c/0x250 [ 215.919215][ T7727] ? show_regs_print_info+0x20/0x20 [ 215.924438][ T7727] ? load_image+0x400/0x400 [ 215.929062][ T7727] ? __might_fault+0xaa/0x120 [ 215.933760][ T7727] ? __lock_acquire+0x7d40/0x7d40 [ 215.938903][ T7727] should_fail_ex+0x39d/0x4d0 [ 215.943622][ T7727] _copy_from_user+0x2f/0xe0 [ 215.948236][ T7727] ___sys_sendmsg+0x1c7/0x360 [ 215.952956][ T7727] ? __sys_sendmsg+0x2a0/0x2a0 [ 215.957838][ T7727] ? __lock_acquire+0x7d40/0x7d40 [ 215.962931][ T7727] __se_sys_sendmsg+0x1c2/0x2b0 [ 215.967845][ T7727] ? __x64_sys_sendmsg+0x80/0x80 [ 215.972836][ T7727] ? lockdep_hardirqs_on+0x98/0x150 [ 215.978063][ T7727] do_syscall_64+0x55/0xa0 [ 215.982590][ T7727] ? clear_bhb_loop+0x40/0x90 [ 215.987287][ T7727] ? clear_bhb_loop+0x40/0x90 [ 215.991984][ T7727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.997991][ T7727] RIP: 0033:0x7f07f9f9aeb9 [ 216.002521][ T7727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.022330][ T7727] RSP: 002b:00007f07fae5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.030941][ T7727] RAX: ffffffffffffffda RBX: 00007f07fa215fa0 RCX: 00007f07f9f9aeb9 [ 216.039104][ T7727] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 216.047105][ T7727] RBP: 00007f07fae5e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.055095][ T7727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.063094][ T7727] R13: 00007f07fa216038 R14: 00007f07fa215fa0 R15: 00007ffe72769798 [ 216.071114][ T7727] [ 216.108098][ T7730] FAULT_INJECTION: forcing a failure. [ 216.108098][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.123050][ T7730] CPU: 0 PID: 7730 Comm: syz.2.536 Not tainted syzkaller #0 [ 216.130555][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.140844][ T7730] Call Trace: [ 216.144244][ T7730] [ 216.147203][ T7730] dump_stack_lvl+0x18c/0x250 [ 216.151939][ T7730] ? show_regs_print_info+0x20/0x20 [ 216.157287][ T7730] ? load_image+0x400/0x400 [ 216.161880][ T7730] ? __might_fault+0xaa/0x120 [ 216.166612][ T7730] ? __lock_acquire+0x7d40/0x7d40 [ 216.171791][ T7730] should_fail_ex+0x39d/0x4d0 [ 216.176531][ T7730] _copy_from_user+0x2f/0xe0 [ 216.181172][ T7730] ___sys_sendmsg+0x1c7/0x360 [ 216.185965][ T7730] ? __sys_sendmsg+0x2a0/0x2a0 [ 216.190894][ T7730] __se_sys_sendmsg+0x1c2/0x2b0 [ 216.195762][ T7730] ? __x64_sys_sendmsg+0x80/0x80 [ 216.200760][ T7730] ? syscall_enter_from_user_mode+0x2e/0x80 [ 216.206820][ T7730] do_syscall_64+0x55/0xa0 [ 216.211382][ T7730] ? clear_bhb_loop+0x40/0x90 [ 216.216107][ T7730] ? clear_bhb_loop+0x40/0x90 [ 216.220925][ T7730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.226970][ T7730] RIP: 0033:0x7fa6b5f9aeb9 [ 216.231439][ T7730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.251100][ T7730] RSP: 002b:00007fa6b6de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.259556][ T7730] RAX: ffffffffffffffda RBX: 00007fa6b6215fa0 RCX: 00007fa6b5f9aeb9 [ 216.267817][ T7730] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 216.275810][ T7730] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 216.283795][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.291799][ T7730] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 216.299886][ T7730] [ 216.561656][ T7739] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 216.587367][ T7739] netlink: 'syz.1.538': attribute type 8 has an invalid length. [ 216.611003][ T7739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.538'. [ 217.959202][ T7756] netlink: zone id is out of range [ 217.964888][ T7756] netlink: set zone limit has 8 unknown bytes [ 218.017968][ T7760] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 218.324179][ T7762] netlink: zone id is out of range [ 218.342326][ T7762] netlink: set zone limit has 8 unknown bytes [ 218.585399][ T7769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.617660][ T7769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.159217][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.547'. [ 220.359914][ T7786] netlink: 'syz.2.552': attribute type 2 has an invalid length. [ 220.379715][ T7786] netlink: 'syz.2.552': attribute type 8 has an invalid length. [ 220.397120][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.552'. [ 221.854793][ T7809] syz.1.559[7809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.855060][ T7809] syz.1.559[7809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.758000][ T7812] FAULT_INJECTION: forcing a failure. [ 222.758000][ T7812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.789923][ T7812] CPU: 0 PID: 7812 Comm: syz.0.561 Not tainted syzkaller #0 [ 222.797312][ T7812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.807530][ T7812] Call Trace: [ 222.810994][ T7812] [ 222.813949][ T7812] dump_stack_lvl+0x18c/0x250 [ 222.818689][ T7812] ? show_regs_print_info+0x20/0x20 [ 222.824340][ T7812] ? load_image+0x400/0x400 [ 222.828872][ T7812] ? __lock_acquire+0x7d40/0x7d40 [ 222.833913][ T7812] should_fail_ex+0x39d/0x4d0 [ 222.838698][ T7812] _copy_from_user+0x2f/0xe0 [ 222.843306][ T7812] __copy_msghdr+0x3bb/0x580 [ 222.847914][ T7812] ___sys_sendmsg+0x214/0x360 [ 222.852612][ T7812] ? get_pid_task+0x20/0x1e0 [ 222.857396][ T7812] ? __sys_sendmsg+0x2a0/0x2a0 [ 222.862278][ T7812] ? __lock_acquire+0x7d40/0x7d40 [ 222.867438][ T7812] __se_sys_sendmsg+0x1c2/0x2b0 [ 222.872315][ T7812] ? __x64_sys_sendmsg+0x80/0x80 [ 222.877285][ T7812] ? lockdep_hardirqs_on+0x98/0x150 [ 222.882493][ T7812] do_syscall_64+0x55/0xa0 [ 222.886949][ T7812] ? clear_bhb_loop+0x40/0x90 [ 222.891894][ T7812] ? clear_bhb_loop+0x40/0x90 [ 222.896673][ T7812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.902691][ T7812] RIP: 0033:0x7fe1f2f9aeb9 [ 222.907298][ T7812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.926912][ T7812] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.935522][ T7812] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 222.943589][ T7812] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 222.951580][ T7812] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 222.959705][ T7812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.967695][ T7812] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 222.975690][ T7812] [ 224.985733][ T7839] FAULT_INJECTION: forcing a failure. [ 224.985733][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.003637][ T7829] netlink: zone id is out of range [ 225.043592][ T7839] CPU: 1 PID: 7839 Comm: syz.0.569 Not tainted syzkaller #0 [ 225.051151][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.061256][ T7839] Call Trace: [ 225.064668][ T7839] [ 225.067644][ T7839] dump_stack_lvl+0x18c/0x250 [ 225.072387][ T7839] ? show_regs_print_info+0x20/0x20 [ 225.077693][ T7839] ? load_image+0x400/0x400 [ 225.082249][ T7839] ? __might_fault+0xaa/0x120 [ 225.086974][ T7839] ? __lock_acquire+0x7d40/0x7d40 [ 225.092078][ T7839] should_fail_ex+0x39d/0x4d0 [ 225.096829][ T7839] _copy_from_user+0x2f/0xe0 [ 225.101471][ T7839] kstrtouint_from_user+0xde/0x170 [ 225.106721][ T7839] ? kstrtol_from_user+0x190/0x190 [ 225.111940][ T7839] proc_fail_nth_write+0x8f/0x250 [ 225.117029][ T7839] ? proc_fail_nth_read+0x260/0x260 [ 225.122337][ T7839] ? proc_fail_nth_read+0x260/0x260 [ 225.127601][ T7839] vfs_write+0x296/0x990 [ 225.132200][ T7839] ? file_end_write+0x250/0x250 [ 225.137104][ T7839] ? __fget_files+0x28/0x4b0 [ 225.141743][ T7839] ? __fget_files+0x28/0x4b0 [ 225.146380][ T7839] ? __fget_files+0x43d/0x4b0 [ 225.151409][ T7839] ? __fdget_pos+0x2a3/0x330 [ 225.156042][ T7839] ? ksys_write+0x75/0x260 [ 225.160515][ T7839] ksys_write+0x150/0x260 [ 225.164913][ T7839] ? __ia32_sys_read+0x90/0x90 [ 225.169736][ T7839] ? lockdep_hardirqs_on+0x98/0x150 [ 225.173538][ T7829] netlink: set zone limit has 8 unknown bytes [ 225.175053][ T7839] do_syscall_64+0x55/0xa0 [ 225.185775][ T7839] ? clear_bhb_loop+0x40/0x90 [ 225.190527][ T7839] ? clear_bhb_loop+0x40/0x90 [ 225.195262][ T7839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.201204][ T7839] RIP: 0033:0x7fe1f2f5b78e [ 225.205686][ T7839] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.225741][ T7839] RSP: 002b:00007fe1f3d78fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 225.234215][ T7839] RAX: ffffffffffffffda RBX: 00007fe1f3d796c0 RCX: 00007fe1f2f5b78e [ 225.242228][ T7839] RDX: 0000000000000001 RSI: 00007fe1f3d790a0 RDI: 0000000000000006 [ 225.250305][ T7839] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 225.258426][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.266545][ T7839] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 225.274601][ T7839] [ 225.728539][ T7845] netlink: 'syz.3.571': attribute type 2 has an invalid length. [ 225.754591][ T7845] netlink: 'syz.3.571': attribute type 8 has an invalid length. [ 225.771121][ T7845] netlink: 132 bytes leftover after parsing attributes in process `syz.3.571'. [ 227.538268][ T7877] FAULT_INJECTION: forcing a failure. [ 227.538268][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.643695][ T7877] CPU: 0 PID: 7877 Comm: syz.1.580 Not tainted syzkaller #0 [ 227.651069][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.661430][ T7877] Call Trace: [ 227.664740][ T7877] [ 227.667701][ T7877] dump_stack_lvl+0x18c/0x250 [ 227.672431][ T7877] ? show_regs_print_info+0x20/0x20 [ 227.677676][ T7877] ? load_image+0x400/0x400 [ 227.682226][ T7877] ? __might_fault+0xaa/0x120 [ 227.686950][ T7877] ? __lock_acquire+0x7d40/0x7d40 [ 227.692204][ T7877] should_fail_ex+0x39d/0x4d0 [ 227.696937][ T7877] _copy_from_user+0x2f/0xe0 [ 227.701563][ T7877] __sys_bpf+0x23e/0x890 [ 227.706120][ T7877] ? bpf_link_show_fdinfo+0x390/0x390 [ 227.710743][ T7866] netlink: 'syz.0.577': attribute type 3 has an invalid length. [ 227.711880][ T7877] ? lock_chain_count+0x20/0x20 [ 227.711918][ T7877] __x64_sys_bpf+0x7c/0x90 [ 227.711942][ T7877] do_syscall_64+0x55/0xa0 [ 227.711966][ T7877] ? clear_bhb_loop+0x40/0x90 [ 227.711988][ T7877] ? clear_bhb_loop+0x40/0x90 [ 227.712010][ T7877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.712030][ T7877] RIP: 0033:0x7fc4fcf9aeb9 [ 227.712048][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.712065][ T7877] RSP: 002b:00007fc4fdd76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.712089][ T7877] RAX: ffffffffffffffda RBX: 00007fc4fd216090 RCX: 00007fc4fcf9aeb9 [ 227.712104][ T7877] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 227.770030][ T7866] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.577'. [ 227.773990][ T7877] RBP: 00007fc4fdd76090 R08: 0000000000000000 R09: 0000000000000000 [ 227.774012][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.774023][ T7877] R13: 00007fc4fd216128 R14: 00007fc4fd216090 R15: 00007ffe9e2ce848 [ 227.774054][ T7877] [ 228.015170][ T7880] netlink: 'syz.0.589': attribute type 4 has an invalid length. [ 228.032138][ T7880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.589'. [ 228.348910][ T7883] netlink: zone id is out of range [ 228.358204][ T7883] netlink: set zone limit has 8 unknown bytes [ 230.209932][ T7897] netlink: 'syz.0.585': attribute type 33 has an invalid length. [ 230.221026][ T7897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.585'. [ 230.231855][ T7910] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 230.243879][ T7912] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 230.280017][ T7912] team0: Device hsr_slave_0 failed to register rx_handler [ 230.556114][ T7924] hsr0: mtu greater than device maximum [ 231.013206][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 231.033082][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 231.055187][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 231.088352][ T7943] netlink: 60 bytes leftover after parsing attributes in process `syz.3.603'. [ 232.145949][ T7967] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 232.787790][ T7982] netlink: 'syz.0.615': attribute type 2 has an invalid length. [ 232.833134][ T7982] netlink: 'syz.0.615': attribute type 8 has an invalid length. [ 232.933969][ T7982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.615'. [ 233.484779][ T7996] FAULT_INJECTION: forcing a failure. [ 233.484779][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 233.531108][ T7996] CPU: 0 PID: 7996 Comm: syz.1.619 Not tainted syzkaller #0 [ 233.538474][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.548566][ T7996] Call Trace: [ 233.551873][ T7996] [ 233.555040][ T7996] dump_stack_lvl+0x18c/0x250 [ 233.559761][ T7996] ? show_regs_print_info+0x20/0x20 [ 233.565016][ T7996] ? load_image+0x400/0x400 [ 233.569598][ T7996] should_fail_ex+0x39d/0x4d0 [ 233.574345][ T7996] should_failslab+0x9/0x20 [ 233.578912][ T7996] slab_pre_alloc_hook+0x59/0x310 [ 233.584102][ T7996] kmem_cache_alloc+0x5a/0x2d0 [ 233.589020][ T7996] ? dst_alloc+0x105/0x170 [ 233.593671][ T7996] dst_alloc+0x105/0x170 [ 233.595121][ T7992] netlink: 'syz.2.626': attribute type 33 has an invalid length. [ 233.597966][ T7996] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 233.598027][ T7996] ? ip_route_output_key_hash_rcu+0x1311/0x2360 [ 233.598060][ T7996] ? ip_route_output_key_hash+0x13d/0x330 [ 233.598084][ T7996] ip_route_output_key_hash+0x1f3/0x330 [ 233.598107][ T7996] ? rxrpc_alloc_peer+0x7e/0x340 [ 233.598129][ T7996] ? rxrpc_lookup_peer+0x3f4/0x850 [ 233.598154][ T7996] ? ip_route_input_rcu+0x30e0/0x30e0 [ 233.598175][ T7996] ? do_syscall_64+0x55/0xa0 [ 233.598208][ T7996] ? make_kuid+0x1df/0x680 [ 233.633422][ T7992] netlink: 36 bytes leftover after parsing attributes in process `syz.2.626'. [ 233.634802][ T7996] ? __put_user_ns+0x50/0x50 [ 233.634841][ T7996] ip_route_output_flow+0x2a/0x150 [ 233.634872][ T7996] rxrpc_init_peer+0x2f0/0x740 [ 233.634906][ T7996] ? rxrpc_new_incoming_peer+0x5a0/0x5a0 [ 233.634940][ T7996] ? rcu_is_watching+0x15/0xb0 [ 233.634967][ T7996] ? trace_rxrpc_peer+0x80/0x1c0 [ 233.634991][ T7996] ? rxrpc_lookup_peer+0x419/0x850 [ 233.635022][ T7996] rxrpc_lookup_peer+0x427/0x850 [ 233.635054][ T7996] rxrpc_new_client_call+0xb99/0x1410 [ 233.635096][ T7996] rxrpc_do_sendmsg+0xc42/0x1280 [ 233.635139][ T7996] ? rxrpc_propose_abort+0x200/0x200 [ 233.635182][ T7996] ? rxrpc_sendmsg+0x391/0x5b0 [ 233.635212][ T7996] ? rxrpc_getsockopt+0x150/0x150 [ 233.635241][ T7996] ____sys_sendmsg+0x5ba/0x960 [ 233.635270][ T7996] ? __lock_acquire+0x7d40/0x7d40 [ 233.635303][ T7996] ? __sys_sendmsg_sock+0x30/0x30 [ 233.635328][ T7996] ? __import_iovec+0x3fa/0x850 [ 233.635368][ T7996] ? import_iovec+0x73/0xa0 [ 233.635402][ T7996] ___sys_sendmsg+0x2a6/0x360 [ 233.635438][ T7996] ? __sys_sendmsg+0x2a0/0x2a0 [ 233.635497][ T7996] ? __lock_acquire+0x7d40/0x7d40 [ 233.635556][ T7996] __se_sys_sendmsg+0x1c2/0x2b0 [ 233.635589][ T7996] ? __x64_sys_sendmsg+0x80/0x80 [ 233.635641][ T7996] ? lockdep_hardirqs_on+0x98/0x150 [ 233.635669][ T7996] do_syscall_64+0x55/0xa0 [ 233.635699][ T7996] ? clear_bhb_loop+0x40/0x90 [ 233.635720][ T7996] ? clear_bhb_loop+0x40/0x90 [ 233.635743][ T7996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.635764][ T7996] RIP: 0033:0x7fc4fcf9aeb9 [ 233.635785][ T7996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.635803][ T7996] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.635826][ T7996] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 233.635840][ T7996] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 233.635854][ T7996] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 233.635866][ T7996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.635878][ T7996] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 233.635912][ T7996] [ 234.403899][ T8014] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 234.524009][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.533211][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.636035][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.643574][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.651630][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.659276][ T8014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.748399][ T8014] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 234.898625][ T8028] netlink: 'syz.3.628': attribute type 9 has an invalid length. [ 234.910276][ T8028] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.628'. [ 235.241825][ T8028] netlink: 'syz.3.628': attribute type 9 has an invalid length. [ 235.282604][ T8028] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.628'. [ 235.401840][ T8031] netlink: 'syz.2.629': attribute type 21 has an invalid length. [ 235.410412][ T8031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.418169][ T8031] IPv6: NLM_F_CREATE should be set when creating new route [ 235.425807][ T8031] IPv6: NLM_F_CREATE should be set when creating new route [ 235.433230][ T8031] IPv6: NLM_F_CREATE should be set when creating new route [ 235.564583][ T7447] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 237.518216][ T8060] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.639'. [ 237.989190][ T8071] ±ÿ: renamed from team_slave_1 (while UP) [ 238.014475][ T8073] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 238.022573][ T8073] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.643'. [ 238.831219][ T8075] delete_channel: no stack [ 239.019792][ T8083] netlink: 'syz.2.643': attribute type 9 has an invalid length. [ 239.065608][ T8083] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.643'. [ 239.137700][ T8092] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 239.156204][ T8092] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 239.304014][ T8086] netlink: 'syz.3.647': attribute type 29 has an invalid length. [ 241.873545][ T8133] netlink: 'syz.2.659': attribute type 2 has an invalid length. [ 241.895337][ T8133] netlink: 'syz.2.659': attribute type 8 has an invalid length. [ 241.905083][ T8133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.659'. [ 242.383745][ T8139] syzkaller0: entered promiscuous mode [ 242.389591][ T8139] syzkaller0: entered allmulticast mode [ 243.453817][ T8143] FAULT_INJECTION: forcing a failure. [ 243.453817][ T8143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.480927][ T8143] CPU: 0 PID: 8143 Comm: syz.3.661 Not tainted syzkaller #0 [ 243.488412][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.498533][ T8143] Call Trace: [ 243.501871][ T8143] [ 243.504865][ T8143] dump_stack_lvl+0x18c/0x250 [ 243.510243][ T8143] ? show_regs_print_info+0x20/0x20 [ 243.515521][ T8143] ? load_image+0x400/0x400 [ 243.520130][ T8143] ? __might_fault+0xaa/0x120 [ 243.524878][ T8143] ? __lock_acquire+0x7d40/0x7d40 [ 243.529989][ T8143] should_fail_ex+0x39d/0x4d0 [ 243.534765][ T8143] _copy_from_user+0x2f/0xe0 [ 243.539454][ T8143] __sys_bpf+0x23e/0x890 [ 243.543770][ T8143] ? bpf_link_show_fdinfo+0x390/0x390 [ 243.549473][ T8143] ? lock_chain_count+0x20/0x20 [ 243.554447][ T8143] __x64_sys_bpf+0x7c/0x90 [ 243.558970][ T8143] do_syscall_64+0x55/0xa0 [ 243.563457][ T8143] ? clear_bhb_loop+0x40/0x90 [ 243.568201][ T8143] ? clear_bhb_loop+0x40/0x90 [ 243.572947][ T8143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.578940][ T8143] RIP: 0033:0x7f07f9f9aeb9 [ 243.583481][ T8143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.603247][ T8143] RSP: 002b:00007f07fae3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.611757][ T8143] RAX: ffffffffffffffda RBX: 00007f07fa216090 RCX: 00007f07f9f9aeb9 [ 243.619794][ T8143] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 000000000000000f [ 243.627914][ T8143] RBP: 00007f07fae3d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.636031][ T8143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.644241][ T8143] R13: 00007f07fa216128 R14: 00007f07fa216090 R15: 00007ffe72769798 [ 243.652433][ T8143] [ 244.988704][ T8146] netlink: 'syz.1.662': attribute type 9 has an invalid length. [ 245.007942][ T8146] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.662'. [ 245.362124][ T8146] netlink: 'syz.1.662': attribute type 9 has an invalid length. [ 245.423212][ T8146] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.662'. [ 245.505244][ T8158] FAULT_INJECTION: forcing a failure. [ 245.505244][ T8158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.531607][ T8158] CPU: 0 PID: 8158 Comm: syz.2.666 Not tainted syzkaller #0 [ 245.538968][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.549055][ T8158] Call Trace: [ 245.552356][ T8158] [ 245.555304][ T8158] dump_stack_lvl+0x18c/0x250 [ 245.560012][ T8158] ? show_regs_print_info+0x20/0x20 [ 245.565234][ T8158] ? load_image+0x400/0x400 [ 245.569758][ T8158] ? __lock_acquire+0x7d40/0x7d40 [ 245.574800][ T8158] ? snprintf+0xe9/0x140 [ 245.579112][ T8158] should_fail_ex+0x39d/0x4d0 [ 245.583816][ T8158] _copy_to_user+0x2f/0xa0 [ 245.588251][ T8158] simple_read_from_buffer+0xe7/0x150 [ 245.593657][ T8158] proc_fail_nth_read+0x1e8/0x260 [ 245.598724][ T8158] ? proc_fault_inject_write+0x360/0x360 [ 245.604415][ T8158] ? fsnotify_perm+0x271/0x5e0 [ 245.609226][ T8158] ? proc_fault_inject_write+0x360/0x360 [ 245.615070][ T8158] vfs_read+0x28b/0x970 [ 245.619455][ T8158] ? kernel_read+0x1e0/0x1e0 [ 245.624073][ T8158] ? __fget_files+0x28/0x4b0 [ 245.628675][ T8158] ? __fget_files+0x28/0x4b0 [ 245.633290][ T8158] ? __fget_files+0x43d/0x4b0 [ 245.638059][ T8158] ? __fdget_pos+0x2a3/0x330 [ 245.642663][ T8158] ? ksys_read+0x75/0x260 [ 245.647101][ T8158] ksys_read+0x150/0x260 [ 245.651447][ T8158] ? vfs_write+0x990/0x990 [ 245.655881][ T8158] ? lockdep_hardirqs_on+0x98/0x150 [ 245.661185][ T8158] do_syscall_64+0x55/0xa0 [ 245.665625][ T8158] ? clear_bhb_loop+0x40/0x90 [ 245.670316][ T8158] ? clear_bhb_loop+0x40/0x90 [ 245.675091][ T8158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.681087][ T8158] RIP: 0033:0x7fa6b5f5b78e [ 245.685521][ T8158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 245.705252][ T8158] RSP: 002b:00007fa6b6de8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.713786][ T8158] RAX: ffffffffffffffda RBX: 00007fa6b6de96c0 RCX: 00007fa6b5f5b78e [ 245.721870][ T8158] RDX: 000000000000000f RSI: 00007fa6b6de90a0 RDI: 0000000000000008 [ 245.729963][ T8158] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 245.737968][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.745955][ T8158] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 245.753957][ T8158] [ 247.031663][ T8185] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 247.104051][ T8185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 247.727059][ T8196] FAULT_INJECTION: forcing a failure. [ 247.727059][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.756604][ T8196] CPU: 0 PID: 8196 Comm: syz.2.679 Not tainted syzkaller #0 [ 247.763971][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.774068][ T8196] Call Trace: [ 247.777367][ T8196] [ 247.780309][ T8196] dump_stack_lvl+0x18c/0x250 [ 247.785020][ T8196] ? show_regs_print_info+0x20/0x20 [ 247.790246][ T8196] ? load_image+0x400/0x400 [ 247.794773][ T8196] ? __might_fault+0xaa/0x120 [ 247.799545][ T8196] ? __lock_acquire+0x7d40/0x7d40 [ 247.804596][ T8196] should_fail_ex+0x39d/0x4d0 [ 247.809468][ T8196] _copy_from_user+0x2f/0xe0 [ 247.814077][ T8196] ___sys_sendmsg+0x1c7/0x360 [ 247.818772][ T8196] ? get_pid_task+0x20/0x1e0 [ 247.823379][ T8196] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.828174][ T8196] ? __lock_acquire+0x7d40/0x7d40 [ 247.833228][ T8196] __se_sys_sendmsg+0x1c2/0x2b0 [ 247.838100][ T8196] ? __x64_sys_sendmsg+0x80/0x80 [ 247.843086][ T8196] ? lockdep_hardirqs_on+0x98/0x150 [ 247.848313][ T8196] do_syscall_64+0x55/0xa0 [ 247.852746][ T8196] ? clear_bhb_loop+0x40/0x90 [ 247.857455][ T8196] ? clear_bhb_loop+0x40/0x90 [ 247.862141][ T8196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.868218][ T8196] RIP: 0033:0x7fa6b5f9aeb9 [ 247.872649][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.892266][ T8196] RSP: 002b:00007fa6b6de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.900782][ T8196] RAX: ffffffffffffffda RBX: 00007fa6b6215fa0 RCX: 00007fa6b5f9aeb9 [ 247.908767][ T8196] RDX: 0000000004008050 RSI: 0000200000001780 RDI: 0000000000000003 [ 247.916922][ T8196] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 247.924908][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.932977][ T8196] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 247.940979][ T8196] [ 248.007552][ T8194] netlink: 'syz.0.678': attribute type 39 has an invalid length. [ 248.510514][ T8205] FAULT_INJECTION: forcing a failure. [ 248.510514][ T8205] name failslab, interval 1, probability 0, space 0, times 0 [ 248.529795][ T8205] CPU: 0 PID: 8205 Comm: syz.0.682 Not tainted syzkaller #0 [ 248.537161][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.547236][ T8205] Call Trace: [ 248.550537][ T8205] [ 248.553486][ T8205] dump_stack_lvl+0x18c/0x250 [ 248.558253][ T8205] ? show_regs_print_info+0x20/0x20 [ 248.563477][ T8205] ? load_image+0x400/0x400 [ 248.568033][ T8205] should_fail_ex+0x39d/0x4d0 [ 248.572919][ T8205] should_failslab+0x9/0x20 [ 248.577447][ T8205] slab_pre_alloc_hook+0x59/0x310 [ 248.582509][ T8205] kmem_cache_alloc+0x5a/0x2d0 [ 248.587302][ T8205] ? dst_alloc+0x105/0x170 [ 248.591834][ T8205] dst_alloc+0x105/0x170 [ 248.596190][ T8205] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 248.602279][ T8205] ? ip_route_output_key_hash_rcu+0x1311/0x2360 [ 248.608594][ T8205] ? ip_route_output_key_hash+0x13d/0x330 [ 248.614359][ T8205] ip_route_output_key_hash+0x1f3/0x330 [ 248.620036][ T8205] ? rxrpc_alloc_peer+0x7e/0x340 [ 248.624996][ T8205] ? rxrpc_lookup_peer+0x3f4/0x850 [ 248.630129][ T8205] ? ip_route_input_rcu+0x30e0/0x30e0 [ 248.635641][ T8205] ? do_syscall_64+0x55/0xa0 [ 248.640266][ T8205] ? make_kuid+0x1df/0x680 [ 248.644711][ T8205] ? __put_user_ns+0x50/0x50 [ 248.649329][ T8205] ip_route_output_flow+0x2a/0x150 [ 248.654555][ T8205] rxrpc_init_peer+0x2f0/0x740 [ 248.659355][ T8205] ? rxrpc_new_incoming_peer+0x5a0/0x5a0 [ 248.665020][ T8205] ? rcu_is_watching+0x15/0xb0 [ 248.669808][ T8205] ? trace_rxrpc_peer+0x80/0x1c0 [ 248.674777][ T8205] ? rxrpc_lookup_peer+0x419/0x850 [ 248.679922][ T8205] rxrpc_lookup_peer+0x427/0x850 [ 248.684896][ T8205] rxrpc_new_client_call+0xb99/0x1410 [ 248.690309][ T8205] rxrpc_do_sendmsg+0xc42/0x1280 [ 248.695657][ T8205] ? rxrpc_propose_abort+0x200/0x200 [ 248.700995][ T8205] ? rxrpc_sendmsg+0x391/0x5b0 [ 248.705785][ T8205] ? rxrpc_getsockopt+0x150/0x150 [ 248.711008][ T8205] ____sys_sendmsg+0x5ba/0x960 [ 248.715797][ T8205] ? __lock_acquire+0x7d40/0x7d40 [ 248.720848][ T8205] ? __sys_sendmsg_sock+0x30/0x30 [ 248.725895][ T8205] ? __import_iovec+0x3fa/0x850 [ 248.730786][ T8205] ? import_iovec+0x73/0xa0 [ 248.735320][ T8205] ___sys_sendmsg+0x2a6/0x360 [ 248.740028][ T8205] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.744854][ T8205] ? __lock_acquire+0x7d40/0x7d40 [ 248.749946][ T8205] __se_sys_sendmsg+0x1c2/0x2b0 [ 248.754832][ T8205] ? __x64_sys_sendmsg+0x80/0x80 [ 248.759819][ T8205] ? lockdep_hardirqs_on+0x98/0x150 [ 248.765054][ T8205] do_syscall_64+0x55/0xa0 [ 248.769511][ T8205] ? clear_bhb_loop+0x40/0x90 [ 248.774303][ T8205] ? clear_bhb_loop+0x40/0x90 [ 248.779004][ T8205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.784914][ T8205] RIP: 0033:0x7fe1f2f9aeb9 [ 248.789401][ T8205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.809119][ T8205] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.817599][ T8205] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 248.825760][ T8205] RDX: 00000000200008c0 RSI: 0000200000000140 RDI: 0000000000000003 [ 248.833747][ T8205] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 248.841827][ T8205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.849915][ T8205] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 248.858018][ T8205] [ 248.928316][ T8209] FAULT_INJECTION: forcing a failure. [ 248.928316][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 248.963220][ T8209] CPU: 1 PID: 8209 Comm: syz.3.683 Not tainted syzkaller #0 [ 248.970692][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 248.980805][ T8209] Call Trace: [ 248.984213][ T8209] [ 248.987238][ T8209] dump_stack_lvl+0x18c/0x250 [ 248.991974][ T8209] ? sctp_sendmsg+0x1575/0x28c0 [ 248.996952][ T8209] ? ___sys_sendmsg+0x2a6/0x360 [ 249.001853][ T8209] ? show_regs_print_info+0x20/0x20 [ 249.007103][ T8209] ? load_image+0x400/0x400 [ 249.011758][ T8209] should_fail_ex+0x39d/0x4d0 [ 249.016490][ T8209] should_failslab+0x9/0x20 [ 249.021038][ T8209] slab_pre_alloc_hook+0x59/0x310 [ 249.026200][ T8209] ? sctp_add_bind_addr+0x8c/0x360 [ 249.031448][ T8209] __kmem_cache_alloc_node+0x53/0x250 [ 249.036870][ T8209] ? sctp_add_bind_addr+0x8c/0x360 [ 249.042100][ T8209] kmalloc_trace+0x2a/0xe0 [ 249.046566][ T8209] sctp_add_bind_addr+0x8c/0x360 [ 249.051533][ T8209] sctp_copy_local_addr_list+0x315/0x4f0 [ 249.057196][ T8209] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 249.063057][ T8209] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 249.069161][ T8209] ? sctp_v4_is_any+0x35/0x60 [ 249.073862][ T8209] ? sctp_copy_one_addr+0x8c/0x350 [ 249.079118][ T8209] sctp_bind_addr_copy+0xb3/0x3c0 [ 249.084258][ T8209] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 249.090599][ T8209] sctp_connect_new_asoc+0x2f9/0x6a0 [ 249.095899][ T8209] ? __sctp_connect+0xd80/0xd80 [ 249.100758][ T8209] ? __local_bh_enable_ip+0x13a/0x1c0 [ 249.106316][ T8209] ? _local_bh_enable+0xa0/0xa0 [ 249.113221][ T8209] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 249.119777][ T8209] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 249.125700][ T8209] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 249.131274][ T8209] ? security_sctp_bind_connect+0x89/0xb0 [ 249.137028][ T8209] sctp_sendmsg+0x1575/0x28c0 [ 249.141734][ T8209] ? sctp_getsockopt+0xb60/0xb60 [ 249.146686][ T8209] ? aa_sk_perm+0x83c/0x970 [ 249.151215][ T8209] ? aa_af_perm+0x330/0x330 [ 249.155737][ T8209] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 249.162363][ T8209] ? sock_rps_record_flow+0x19/0x3f0 [ 249.167760][ T8209] ? inet_sendmsg+0x7c/0x2f0 [ 249.172466][ T8209] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.177884][ T8209] ? security_socket_sendmsg+0x80/0xa0 [ 249.183441][ T8209] ? inet_send_prepare+0x260/0x260 [ 249.188575][ T8209] ____sys_sendmsg+0x5ba/0x960 [ 249.193444][ T8209] ? __lock_acquire+0x7d40/0x7d40 [ 249.198487][ T8209] ? __asan_memset+0x22/0x40 [ 249.203188][ T8209] ? __sys_sendmsg_sock+0x30/0x30 [ 249.208496][ T8209] ? __import_iovec+0x5f2/0x850 [ 249.213420][ T8209] ? import_iovec+0x73/0xa0 [ 249.217970][ T8209] ___sys_sendmsg+0x2a6/0x360 [ 249.222749][ T8209] ? get_pid_task+0x20/0x1e0 [ 249.227493][ T8209] ? __sys_sendmsg+0x2a0/0x2a0 [ 249.232376][ T8209] ? __lock_acquire+0x7d40/0x7d40 [ 249.237434][ T8209] __se_sys_sendmsg+0x1c2/0x2b0 [ 249.242309][ T8209] ? __x64_sys_sendmsg+0x80/0x80 [ 249.247284][ T8209] ? lockdep_hardirqs_on+0x98/0x150 [ 249.252583][ T8209] do_syscall_64+0x55/0xa0 [ 249.257021][ T8209] ? clear_bhb_loop+0x40/0x90 [ 249.261804][ T8209] ? clear_bhb_loop+0x40/0x90 [ 249.266492][ T8209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.272396][ T8209] RIP: 0033:0x7f07f9f9aeb9 [ 249.276827][ T8209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.296460][ T8209] RSP: 002b:00007f07fae3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.304892][ T8209] RAX: ffffffffffffffda RBX: 00007f07fa216090 RCX: 00007f07f9f9aeb9 [ 249.312871][ T8209] RDX: 0000000000008054 RSI: 0000200000000300 RDI: 0000000000000003 [ 249.320847][ T8209] RBP: 00007f07fae3d090 R08: 0000000000000000 R09: 0000000000000000 [ 249.328823][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.336801][ T8209] R13: 00007f07fa216128 R14: 00007f07fa216090 R15: 00007ffe72769798 [ 249.344799][ T8209] [ 249.392349][ T8214] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x32 [ 249.571283][ T8217] netlink: 763 bytes leftover after parsing attributes in process `syz.2.686'. [ 249.640114][ T8218] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.686'. [ 250.801150][ T8245] FAULT_INJECTION: forcing a failure. [ 250.801150][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 250.813973][ T8245] CPU: 0 PID: 8245 Comm: syz.2.696 Not tainted syzkaller #0 [ 250.821305][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.831491][ T8245] Call Trace: [ 250.834808][ T8245] [ 250.837772][ T8245] dump_stack_lvl+0x18c/0x250 [ 250.842492][ T8245] ? show_regs_print_info+0x20/0x20 [ 250.847715][ T8245] ? load_image+0x400/0x400 [ 250.852313][ T8245] ? mod_objcg_state+0x511/0x8a0 [ 250.857782][ T8245] ? lockdep_hardirqs_on+0x98/0x150 [ 250.862993][ T8245] should_fail_ex+0x39d/0x4d0 [ 250.867779][ T8245] should_failslab+0x9/0x20 [ 250.872474][ T8245] slab_pre_alloc_hook+0x59/0x310 [ 250.877526][ T8245] kmem_cache_alloc+0x5a/0x2d0 [ 250.882387][ T8245] ? fib6_add_1+0x714/0x1450 [ 250.887017][ T8245] fib6_add_1+0x714/0x1450 [ 250.891461][ T8245] ? fib6_add+0x3b8/0x46b0 [ 250.895894][ T8245] fib6_add+0x5b9/0x46b0 [ 250.900191][ T8245] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 250.905932][ T8245] ? do_raw_spin_lock+0x11f/0x2c0 [ 250.910970][ T8245] ? __rwlock_init+0x150/0x150 [ 250.915752][ T8245] ? ip6_route_add+0x75/0x160 [ 250.920585][ T8245] ip6_route_add+0x8a/0x160 [ 250.925107][ T8245] ipv6_route_ioctl+0x3b4/0x500 [ 250.929979][ T8245] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 250.935553][ T8245] ? __might_fault+0xaa/0x120 [ 250.940355][ T8245] ? __might_fault+0xc6/0x120 [ 250.945046][ T8245] ? __might_fault+0xaa/0x120 [ 250.949761][ T8245] inet6_ioctl+0x247/0x2d0 [ 250.954361][ T8245] ? inet6_getname+0x650/0x650 [ 250.959149][ T8245] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 250.964721][ T8245] sock_do_ioctl+0xfc/0x310 [ 250.969242][ T8245] ? sock_show_fdinfo+0xb0/0xb0 [ 250.974118][ T8245] sock_ioctl+0x5ba/0x7e0 [ 250.978472][ T8245] ? sock_poll+0x3e0/0x3e0 [ 250.982918][ T8245] ? bpf_lsm_file_ioctl+0x9/0x10 [ 250.987958][ T8245] ? security_file_ioctl+0x80/0xa0 [ 250.993085][ T8245] ? sock_poll+0x3e0/0x3e0 [ 250.997607][ T8245] __se_sys_ioctl+0xfd/0x170 [ 251.002216][ T8245] do_syscall_64+0x55/0xa0 [ 251.006649][ T8245] ? clear_bhb_loop+0x40/0x90 [ 251.011425][ T8245] ? clear_bhb_loop+0x40/0x90 [ 251.016115][ T8245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.022193][ T8245] RIP: 0033:0x7fa6b5f9aeb9 [ 251.026796][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.046503][ T8245] RSP: 002b:00007fa6b6de9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.055370][ T8245] RAX: ffffffffffffffda RBX: 00007fa6b6215fa0 RCX: 00007fa6b5f9aeb9 [ 251.063451][ T8245] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 251.071433][ T8245] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 251.079538][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.087631][ T8245] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 251.095662][ T8245] [ 251.387630][ T8250] netlink: 'syz.2.698': attribute type 3 has an invalid length. [ 251.413066][ T8250] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.698'. [ 252.821465][ T8269] netlink: 'syz.1.704': attribute type 39 has an invalid length. [ 255.339570][ T8297] FAULT_INJECTION: forcing a failure. [ 255.339570][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.377901][ T8297] CPU: 0 PID: 8297 Comm: syz.2.713 Not tainted syzkaller #0 [ 255.385267][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 255.395439][ T8297] Call Trace: [ 255.398747][ T8297] [ 255.401705][ T8297] dump_stack_lvl+0x18c/0x250 [ 255.406518][ T8297] ? show_regs_print_info+0x20/0x20 [ 255.411935][ T8297] ? load_image+0x400/0x400 [ 255.416476][ T8297] ? __might_fault+0xaa/0x120 [ 255.421194][ T8297] ? __lock_acquire+0x7d40/0x7d40 [ 255.426270][ T8297] should_fail_ex+0x39d/0x4d0 [ 255.430993][ T8297] _copy_from_iter+0x1d9/0x12e0 [ 255.435893][ T8297] ? slab_post_alloc_hook+0x8a/0x4b0 [ 255.441225][ T8297] ? __virt_addr_valid+0x18c/0x540 [ 255.446385][ T8297] ? __lock_acquire+0x7d40/0x7d40 [ 255.451439][ T8297] ? rcu_is_watching+0x15/0xb0 [ 255.456246][ T8297] ? copyout_mc+0x70/0x70 [ 255.460606][ T8297] ? __virt_addr_valid+0x18c/0x540 [ 255.465761][ T8297] ? __virt_addr_valid+0x18c/0x540 [ 255.470907][ T8297] ? __virt_addr_valid+0x469/0x540 [ 255.476052][ T8297] ? __check_object_size+0x506/0xa20 [ 255.481381][ T8297] netlink_sendmsg+0x76b/0xbf0 [ 255.486324][ T8297] ? netlink_getsockopt+0x590/0x590 [ 255.491564][ T8297] ? aa_sock_msg_perm+0x94/0x150 [ 255.496624][ T8297] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 255.501924][ T8297] ? security_socket_sendmsg+0x80/0xa0 [ 255.507441][ T8297] ? netlink_getsockopt+0x590/0x590 [ 255.512656][ T8297] ____sys_sendmsg+0x5ba/0x960 [ 255.517442][ T8297] ? __asan_memset+0x22/0x40 [ 255.522144][ T8297] ? __sys_sendmsg_sock+0x30/0x30 [ 255.527212][ T8297] ? __import_iovec+0x5f2/0x850 [ 255.532093][ T8297] ? import_iovec+0x73/0xa0 [ 255.536615][ T8297] ___sys_sendmsg+0x2a6/0x360 [ 255.541307][ T8297] ? get_pid_task+0x20/0x1e0 [ 255.545916][ T8297] ? __sys_sendmsg+0x2a0/0x2a0 [ 255.550713][ T8297] ? __lock_acquire+0x7d40/0x7d40 [ 255.555779][ T8297] __se_sys_sendmsg+0x1c2/0x2b0 [ 255.560654][ T8297] ? __x64_sys_sendmsg+0x80/0x80 [ 255.565624][ T8297] ? lockdep_hardirqs_on+0x98/0x150 [ 255.570837][ T8297] do_syscall_64+0x55/0xa0 [ 255.575364][ T8297] ? clear_bhb_loop+0x40/0x90 [ 255.580085][ T8297] ? clear_bhb_loop+0x40/0x90 [ 255.584808][ T8297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.590813][ T8297] RIP: 0033:0x7fa6b5f9aeb9 [ 255.595254][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.614897][ T8297] RSP: 002b:00007fa6b6dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.623326][ T8297] RAX: ffffffffffffffda RBX: 00007fa6b6216090 RCX: 00007fa6b5f9aeb9 [ 255.631313][ T8297] RDX: 0000000000008010 RSI: 0000200000000080 RDI: 0000000000000007 [ 255.639299][ T8297] RBP: 00007fa6b6dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 255.647285][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.655263][ T8297] R13: 00007fa6b6216128 R14: 00007fa6b6216090 R15: 00007fffb8599418 [ 255.663434][ T8297] [ 256.203681][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.210103][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.722682][ T8313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.717'. [ 260.516005][ T8348] netlink: 'syz.2.726': attribute type 2 has an invalid length. [ 260.526681][ T8348] netlink: 'syz.2.726': attribute type 8 has an invalid length. [ 260.537910][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.726'. [ 261.507206][ T8359] netlink: 'syz.2.730': attribute type 10 has an invalid length. [ 261.549625][ T8359] team0: Device hsr_slave_0 failed to register rx_handler [ 261.780855][ T8364] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.731'. [ 265.287966][ T8406] netlink: 'syz.0.742': attribute type 29 has an invalid length. [ 265.309899][ T8406] netlink: 'syz.0.742': attribute type 29 has an invalid length. [ 265.358897][ T8403] netlink: 'syz.3.741': attribute type 10 has an invalid length. [ 265.367694][ T8403] team0: Device hsr_slave_0 failed to register rx_handler [ 265.917750][ T8419] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.748'. [ 266.241157][ T8428] netlink: 'syz.3.750': attribute type 2 has an invalid length. [ 266.343679][ T8428] netlink: 'syz.3.750': attribute type 8 has an invalid length. [ 266.363519][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.750'. [ 266.894673][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.908257][ T8438] netlink: 'syz.0.753': attribute type 39 has an invalid length. [ 267.017201][ T8439] FAULT_INJECTION: forcing a failure. [ 267.017201][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 267.061410][ T8439] CPU: 0 PID: 8439 Comm: syz.0.753 Not tainted syzkaller #0 [ 267.068771][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.078955][ T8439] Call Trace: [ 267.082266][ T8439] [ 267.085235][ T8439] dump_stack_lvl+0x18c/0x250 [ 267.089970][ T8439] ? show_regs_print_info+0x20/0x20 [ 267.095217][ T8439] ? load_image+0x400/0x400 [ 267.099768][ T8439] ? __might_sleep+0xe0/0xe0 [ 267.104400][ T8439] ? __lock_acquire+0x7d40/0x7d40 [ 267.109462][ T8439] ? prepend_path+0x4b/0x960 [ 267.114102][ T8439] should_fail_ex+0x39d/0x4d0 [ 267.118840][ T8439] should_failslab+0x9/0x20 [ 267.123393][ T8439] slab_pre_alloc_hook+0x59/0x310 [ 267.128460][ T8439] ? __asan_memcpy+0x40/0x70 [ 267.133092][ T8439] ? tomoyo_encode+0x28b/0x540 [ 267.137893][ T8439] ? tomoyo_encode+0x28b/0x540 [ 267.142760][ T8439] __kmem_cache_alloc_node+0x53/0x250 [ 267.148176][ T8439] ? prepend_path+0x4b/0x960 [ 267.152814][ T8439] ? tomoyo_encode+0x28b/0x540 [ 267.157626][ T8439] __kmalloc+0xa4/0x230 [ 267.161837][ T8439] tomoyo_encode+0x28b/0x540 [ 267.166461][ T8439] tomoyo_realpath_from_path+0x592/0x5d0 [ 267.172125][ T8439] tomoyo_path_number_perm+0x248/0x620 [ 267.177604][ T8439] ? tomoyo_path_number_perm+0x217/0x620 [ 267.183353][ T8439] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 267.188831][ T8439] ? ksys_write+0x1c4/0x260 [ 267.193381][ T8439] ? __fget_files+0x28/0x4b0 [ 267.197987][ T8439] ? __fget_files+0x28/0x4b0 [ 267.202602][ T8439] security_file_ioctl+0x70/0xa0 [ 267.207576][ T8439] __se_sys_ioctl+0x48/0x170 [ 267.212276][ T8439] do_syscall_64+0x55/0xa0 [ 267.216719][ T8439] ? clear_bhb_loop+0x40/0x90 [ 267.221405][ T8439] ? clear_bhb_loop+0x40/0x90 [ 267.226094][ T8439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.231998][ T8439] RIP: 0033:0x7fe1f2f9aeb9 [ 267.236428][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.256050][ T8439] RSP: 002b:00007fe1f11d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.264479][ T8439] RAX: ffffffffffffffda RBX: 00007fe1f3216180 RCX: 00007fe1f2f9aeb9 [ 267.272550][ T8439] RDX: 00002000000000c0 RSI: 00000000400454d9 RDI: 0000000000000006 [ 267.280553][ T8439] RBP: 00007fe1f11d5090 R08: 0000000000000000 R09: 0000000000000000 [ 267.288561][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.296756][ T8439] R13: 00007fe1f3216218 R14: 00007fe1f3216180 R15: 00007ffe7275e798 [ 267.304783][ T8439] [ 267.374670][ T8439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.217814][ T8456] netlink: 'syz.2.757': attribute type 39 has an invalid length. [ 268.491647][ T8453] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 268.543552][ T8453] team0: Device hsr_slave_0 failed to register rx_handler [ 272.772580][ T8490] netlink: 'syz.2.776': attribute type 2 has an invalid length. [ 272.805173][ T8490] netlink: 'syz.2.776': attribute type 8 has an invalid length. [ 272.815211][ T8490] netlink: 132 bytes leftover after parsing attributes in process `syz.2.776'. [ 272.854690][ T8492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.768'. [ 273.194010][ T8496] netlink: 'syz.1.769': attribute type 2 has an invalid length. [ 273.233663][ T8496] netlink: 'syz.1.769': attribute type 8 has an invalid length. [ 273.273168][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.769'. [ 275.769165][ T8532] netlink: 'syz.1.781': attribute type 2 has an invalid length. [ 275.789564][ T8532] netlink: 'syz.1.781': attribute type 8 has an invalid length. [ 275.829308][ T8532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.781'. [ 276.277676][ T8534] netlink: 132 bytes leftover after parsing attributes in process `syz.3.782'. [ 276.340329][ T8538] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 276.350299][ T8538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.782'. [ 276.361295][ T8538] batadv0: entered promiscuous mode [ 276.369760][ T8538] batadv0: entered allmulticast mode [ 276.376646][ T8538] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 276.386654][ T8543] syz.1.784[8543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.552645][ T8544] netlink: 'syz.1.784': attribute type 21 has an invalid length. [ 276.746241][ T8548] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.786'. [ 276.821898][ T8548] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 276.879267][ T8548] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 278.322085][ T8570] FAULT_INJECTION: forcing a failure. [ 278.322085][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.349276][ T8570] CPU: 0 PID: 8570 Comm: syz.2.790 Not tainted syzkaller #0 [ 278.356639][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.366769][ T8570] Call Trace: [ 278.370171][ T8570] [ 278.373176][ T8570] dump_stack_lvl+0x18c/0x250 [ 278.377927][ T8570] ? show_regs_print_info+0x20/0x20 [ 278.383182][ T8570] ? load_image+0x400/0x400 [ 278.387740][ T8570] ? __might_fault+0xaa/0x120 [ 278.392459][ T8570] ? __lock_acquire+0x7d40/0x7d40 [ 278.397556][ T8570] should_fail_ex+0x39d/0x4d0 [ 278.402277][ T8570] _copy_from_user+0x2f/0xe0 [ 278.406899][ T8570] __sys_bpf+0x23e/0x890 [ 278.411171][ T8570] ? bpf_link_show_fdinfo+0x390/0x390 [ 278.416589][ T8570] ? lock_chain_count+0x20/0x20 [ 278.421674][ T8570] __x64_sys_bpf+0x7c/0x90 [ 278.426144][ T8570] do_syscall_64+0x55/0xa0 [ 278.430612][ T8570] ? clear_bhb_loop+0x40/0x90 [ 278.435323][ T8570] ? clear_bhb_loop+0x40/0x90 [ 278.440037][ T8570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.445970][ T8570] RIP: 0033:0x7fa6b5f9aeb9 [ 278.450411][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.470053][ T8570] RSP: 002b:00007fa6b6dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.478530][ T8570] RAX: ffffffffffffffda RBX: 00007fa6b6216090 RCX: 00007fa6b5f9aeb9 [ 278.486537][ T8570] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000001d [ 278.494554][ T8570] RBP: 00007fa6b6dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.502647][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.510641][ T8570] R13: 00007fa6b6216128 R14: 00007fa6b6216090 R15: 00007fffb8599418 [ 278.518657][ T8570] [ 278.548025][ T8569] netlink: 'syz.0.793': attribute type 2 has an invalid length. [ 278.556976][ T8569] netlink: 'syz.0.793': attribute type 8 has an invalid length. [ 278.571757][ T8569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.793'. [ 278.611961][ T8573] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.794'. [ 281.052006][ T8578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.795'. [ 281.066861][ T8578] netlink: 'syz.2.795': attribute type 10 has an invalid length. [ 281.076440][ T8578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.795'. [ 281.515269][ T8609] FAULT_INJECTION: forcing a failure. [ 281.515269][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 281.570078][ T8609] CPU: 0 PID: 8609 Comm: syz.1.805 Not tainted syzkaller #0 [ 281.577456][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.587566][ T8609] Call Trace: [ 281.590890][ T8609] [ 281.593863][ T8609] dump_stack_lvl+0x18c/0x250 [ 281.598685][ T8609] ? show_regs_print_info+0x20/0x20 [ 281.604009][ T8609] ? load_image+0x400/0x400 [ 281.608546][ T8609] ? __might_sleep+0xe0/0xe0 [ 281.613158][ T8609] ? __lock_acquire+0x7d40/0x7d40 [ 281.618202][ T8609] ? mark_lock+0x94/0x320 [ 281.624205][ T8609] should_fail_ex+0x39d/0x4d0 [ 281.628910][ T8609] should_failslab+0x9/0x20 [ 281.633434][ T8609] slab_pre_alloc_hook+0x59/0x310 [ 281.638569][ T8609] ? ip_options_get+0x52/0x4a0 [ 281.643443][ T8609] ? ip_options_get+0x52/0x4a0 [ 281.648223][ T8609] __kmem_cache_alloc_node+0x53/0x250 [ 281.653618][ T8609] ? ip_options_get+0x52/0x4a0 [ 281.658397][ T8609] __kmalloc+0xa4/0x230 [ 281.662570][ T8609] ip_options_get+0x52/0x4a0 [ 281.667188][ T8609] ip_cmsg_send+0x591/0xa70 [ 281.671777][ T8609] udp_sendmsg+0xc1f/0x23b0 [ 281.676313][ T8609] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 281.681181][ T8609] ? trace_event_raw_event_lock+0x250/0x250 [ 281.687184][ T8609] ? udp_cmsg_send+0x350/0x350 [ 281.692008][ T8609] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 281.698046][ T8609] ? lock_chain_count+0x20/0x20 [ 281.702935][ T8609] ? inet_sendmsg+0x14b/0x2f0 [ 281.707667][ T8609] ? __local_bh_enable_ip+0x13a/0x1c0 [ 281.713074][ T8609] ? _local_bh_enable+0xa0/0xa0 [ 281.717945][ T8609] ? do_raw_spin_unlock+0x121/0x230 [ 281.723169][ T8609] ? inet_sendmsg+0x14b/0x2f0 [ 281.727870][ T8609] ? inet_sendmsg+0x14b/0x2f0 [ 281.732560][ T8609] ? inet_send_prepare+0x260/0x260 [ 281.737694][ T8609] ____sys_sendmsg+0x5ba/0x960 [ 281.742477][ T8609] ? __lock_acquire+0x7d40/0x7d40 [ 281.747520][ T8609] ? __sys_sendmsg_sock+0x30/0x30 [ 281.752556][ T8609] ? __import_iovec+0x5f2/0x850 [ 281.757432][ T8609] ? import_iovec+0x73/0xa0 [ 281.761962][ T8609] ___sys_sendmsg+0x2a6/0x360 [ 281.766749][ T8609] ? __sys_sendmsg+0x2a0/0x2a0 [ 281.771553][ T8609] ? __lock_acquire+0x7d40/0x7d40 [ 281.776619][ T8609] __se_sys_sendmsg+0x1c2/0x2b0 [ 281.781501][ T8609] ? __x64_sys_sendmsg+0x80/0x80 [ 281.786483][ T8609] ? lockdep_hardirqs_on+0x98/0x150 [ 281.791702][ T8609] do_syscall_64+0x55/0xa0 [ 281.796139][ T8609] ? clear_bhb_loop+0x40/0x90 [ 281.800839][ T8609] ? clear_bhb_loop+0x40/0x90 [ 281.805526][ T8609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.811466][ T8609] RIP: 0033:0x7fc4fcf9aeb9 [ 281.816004][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.835638][ T8609] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.844079][ T8609] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 281.852069][ T8609] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 281.860064][ T8609] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 281.868135][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.876150][ T8609] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 281.884257][ T8609] [ 282.076265][ T8616] TCP: TCP_TX_DELAY enabled [ 282.322070][ T8622] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.809'. [ 283.208260][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.809'. [ 283.224804][ T8622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 283.243241][ T8621] netlink: 'syz.1.808': attribute type 2 has an invalid length. [ 283.260359][ T8621] netlink: 'syz.1.808': attribute type 8 has an invalid length. [ 283.270335][ T8621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.808'. [ 284.878804][ T8654] veth0_macvtap: entered allmulticast mode [ 284.955562][ T8658] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.819'. [ 285.228631][ T8662] netlink: 830 bytes leftover after parsing attributes in process `syz.3.821'. [ 285.358539][ T8663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.812'. [ 285.388705][ T8660] netlink: 'syz.2.820': attribute type 2 has an invalid length. [ 285.464437][ T8660] netlink: 'syz.2.820': attribute type 8 has an invalid length. [ 285.488320][ T8660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.820'. [ 285.524106][ T8666] netlink: 164 bytes leftover after parsing attributes in process `syz.3.821'. [ 285.786384][ T8663] netlink: 'syz.1.812': attribute type 10 has an invalid length. [ 285.830650][ T8663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.812'. [ 285.882502][ T8674] sctp: [Deprecated]: syz.0.823 (pid 8674) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.882502][ T8674] Use struct sctp_sack_info instead [ 285.924136][ T8663] batadv0: entered promiscuous mode [ 285.965911][ T8663] batadv0: entered allmulticast mode [ 285.981975][ T8663] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 287.704593][ T8696] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 287.717906][ T8696] netlink: 'syz.3.831': attribute type 16 has an invalid length. [ 287.733076][ T8696] netlink: 156 bytes leftover after parsing attributes in process `syz.3.831'. [ 287.904484][ T8704] FAULT_INJECTION: forcing a failure. [ 287.904484][ T8704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.953049][ T8704] CPU: 0 PID: 8704 Comm: syz.3.833 Not tainted syzkaller #0 [ 287.960409][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.970581][ T8704] Call Trace: [ 287.973884][ T8704] [ 287.976845][ T8704] dump_stack_lvl+0x18c/0x250 [ 287.981563][ T8704] ? show_regs_print_info+0x20/0x20 [ 287.986798][ T8704] ? load_image+0x400/0x400 [ 287.991333][ T8704] ? __might_fault+0xaa/0x120 [ 287.996071][ T8704] ? __lock_acquire+0x7d40/0x7d40 [ 288.001125][ T8704] should_fail_ex+0x39d/0x4d0 [ 288.005844][ T8704] _copy_from_user+0x2f/0xe0 [ 288.010463][ T8704] ___sys_sendmsg+0x1c7/0x360 [ 288.015178][ T8704] ? get_pid_task+0x20/0x1e0 [ 288.019803][ T8704] ? __sys_sendmsg+0x2a0/0x2a0 [ 288.024621][ T8704] ? __lock_acquire+0x7d40/0x7d40 [ 288.029753][ T8704] __se_sys_sendmsg+0x1c2/0x2b0 [ 288.034642][ T8704] ? __x64_sys_sendmsg+0x80/0x80 [ 288.039641][ T8704] ? lockdep_hardirqs_on+0x98/0x150 [ 288.044873][ T8704] do_syscall_64+0x55/0xa0 [ 288.049324][ T8704] ? clear_bhb_loop+0x40/0x90 [ 288.054030][ T8704] ? clear_bhb_loop+0x40/0x90 [ 288.058800][ T8704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.064811][ T8704] RIP: 0033:0x7f07f9f9aeb9 [ 288.069250][ T8704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.088889][ T8704] RSP: 002b:00007f07fae5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.097333][ T8704] RAX: ffffffffffffffda RBX: 00007f07fa215fa0 RCX: 00007f07f9f9aeb9 [ 288.105323][ T8704] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 288.113306][ T8704] RBP: 00007f07fae5e090 R08: 0000000000000000 R09: 0000000000000000 [ 288.121287][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.129265][ T8704] R13: 00007f07fa216038 R14: 00007f07fa215fa0 R15: 00007ffe72769798 [ 288.137263][ T8704] [ 288.456599][ T8711] netlink: 'syz.3.835': attribute type 2 has an invalid length. [ 288.489362][ T8711] netlink: 'syz.3.835': attribute type 8 has an invalid length. [ 288.696039][ T8711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.835'. [ 288.793720][ T8717] netlink: 'syz.2.834': attribute type 2 has an invalid length. [ 288.801457][ T8717] netlink: 164 bytes leftover after parsing attributes in process `syz.2.834'. [ 289.194121][ T8708] netlink: 830 bytes leftover after parsing attributes in process `syz.2.834'. [ 290.597216][ T8726] __nla_validate_parse: 1 callbacks suppressed [ 290.597237][ T8726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.838'. [ 290.638157][ T8733] netlink: 'syz.1.840': attribute type 39 has an invalid length. [ 292.413972][ T8756] syz.3.845[8756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.414152][ T8756] syz.3.845[8756] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.838360][ T8765] netlink: 60 bytes leftover after parsing attributes in process `syz.0.847'. [ 295.788411][ T8752] netlink: 180 bytes leftover after parsing attributes in process `syz.3.845'. [ 295.853758][ T8753] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 295.882356][ T8753] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 295.974541][ T8763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.849'. [ 296.033059][ T8765] netlink: 60 bytes leftover after parsing attributes in process `syz.0.847'. [ 296.066683][ T8768] netlink: 'syz.2.850': attribute type 2 has an invalid length. [ 296.093967][ T8768] netlink: 'syz.2.850': attribute type 8 has an invalid length. [ 296.158376][ T8768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.850'. [ 296.409604][ T8780] netlink: 'syz.0.853': attribute type 11 has an invalid length. [ 296.418162][ T8780] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.853'. [ 296.656824][ T8788] FAULT_INJECTION: forcing a failure. [ 296.656824][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 296.673124][ T8788] CPU: 0 PID: 8788 Comm: syz.2.855 Not tainted syzkaller #0 [ 296.681006][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.691111][ T8788] Call Trace: [ 296.694439][ T8788] [ 296.697410][ T8788] dump_stack_lvl+0x18c/0x250 [ 296.702180][ T8788] ? show_regs_print_info+0x20/0x20 [ 296.707434][ T8788] ? load_image+0x400/0x400 [ 296.711983][ T8788] ? __might_sleep+0xe0/0xe0 [ 296.716613][ T8788] ? __lock_acquire+0x7d40/0x7d40 [ 296.721696][ T8788] should_fail_ex+0x39d/0x4d0 [ 296.726429][ T8788] should_failslab+0x9/0x20 [ 296.731106][ T8788] slab_pre_alloc_hook+0x59/0x310 [ 296.736205][ T8788] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.741974][ T8788] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.747742][ T8788] __kmem_cache_alloc_node+0x53/0x250 [ 296.753151][ T8788] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.758889][ T8788] __kmalloc+0xa4/0x230 [ 296.763078][ T8788] tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.768650][ T8788] tomoyo_path_number_perm+0x248/0x620 [ 296.774129][ T8788] ? tomoyo_path_number_perm+0x217/0x620 [ 296.779869][ T8788] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 296.785352][ T8788] ? ksys_write+0x1c4/0x260 [ 296.789902][ T8788] ? __fget_files+0x28/0x4b0 [ 296.794518][ T8788] ? __fget_files+0x28/0x4b0 [ 296.799131][ T8788] security_file_ioctl+0x70/0xa0 [ 296.804089][ T8788] __se_sys_ioctl+0x48/0x170 [ 296.808695][ T8788] do_syscall_64+0x55/0xa0 [ 296.813125][ T8788] ? clear_bhb_loop+0x40/0x90 [ 296.817814][ T8788] ? clear_bhb_loop+0x40/0x90 [ 296.822504][ T8788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.828406][ T8788] RIP: 0033:0x7fa6b5f9aeb9 [ 296.833106][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.852812][ T8788] RSP: 002b:00007fa6b6de9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.861241][ T8788] RAX: ffffffffffffffda RBX: 00007fa6b6215fa0 RCX: 00007fa6b5f9aeb9 [ 296.869223][ T8788] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003 [ 296.877214][ T8788] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 296.885221][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.893322][ T8788] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 296.901341][ T8788] [ 296.918791][ T8788] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.342291][ T3486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 299.254459][ T8813] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.862'. [ 300.227939][ T8836] syz.1.867[8836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.228125][ T8836] syz.1.867[8836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.360637][ T8831] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 300.386443][ T8831] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 300.407643][ T8827] netlink: 180 bytes leftover after parsing attributes in process `syz.1.867'. [ 300.428821][ T8834] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 300.453297][ T8834] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 301.519680][ T8851] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 301.571262][ T8851] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 301.651777][ T8854] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 301.687247][ T8855] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 301.722736][ T8851] netlink: 'syz.0.874': attribute type 29 has an invalid length. [ 302.533936][ T8863] netlink: 'syz.2.877': attribute type 2 has an invalid length. [ 302.599469][ T8863] netlink: 'syz.2.877': attribute type 8 has an invalid length. [ 302.635622][ T8863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.877'. [ 302.940633][ T8872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.880'. [ 304.572698][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 304.600670][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 304.639188][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 304.671661][ T8888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.885'. [ 305.125410][ T8896] FAULT_INJECTION: forcing a failure. [ 305.125410][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 305.158638][ T8896] CPU: 1 PID: 8896 Comm: syz.0.888 Not tainted syzkaller #0 [ 305.166018][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 305.176197][ T8896] Call Trace: [ 305.179559][ T8896] [ 305.182522][ T8896] dump_stack_lvl+0x18c/0x250 [ 305.187252][ T8896] ? show_regs_print_info+0x20/0x20 [ 305.192581][ T8896] ? load_image+0x400/0x400 [ 305.197109][ T8896] ? __lock_acquire+0x7d40/0x7d40 [ 305.202158][ T8896] should_fail_ex+0x39d/0x4d0 [ 305.206868][ T8896] should_failslab+0x9/0x20 [ 305.211405][ T8896] slab_pre_alloc_hook+0x59/0x310 [ 305.216459][ T8896] ? apparmor_sk_alloc_security+0x77/0x100 [ 305.222280][ T8896] __kmem_cache_alloc_node+0x53/0x250 [ 305.227765][ T8896] ? apparmor_sk_alloc_security+0x77/0x100 [ 305.233594][ T8896] kmalloc_trace+0x2a/0xe0 [ 305.238029][ T8896] apparmor_sk_alloc_security+0x77/0x100 [ 305.243681][ T8896] security_sk_alloc+0x6e/0xa0 [ 305.248463][ T8896] sk_prot_alloc+0x101/0x210 [ 305.253067][ T8896] ? sk_alloc+0x24/0x360 [ 305.257338][ T8896] sk_alloc+0x3a/0x360 [ 305.261422][ T8896] ? _raw_read_unlock+0x40/0x40 [ 305.266381][ T8896] __netlink_create+0x6c/0x290 [ 305.271689][ T8896] ? cn_bind+0x110/0x110 [ 305.275975][ T8896] netlink_create+0x3ee/0x5c0 [ 305.280691][ T8896] ? cn_rx_skb+0x3d0/0x3d0 [ 305.285161][ T8896] __sock_create+0x4a6/0x940 [ 305.289802][ T8896] __sys_socketpair+0x236/0x550 [ 305.294706][ T8896] __x64_sys_socketpair+0x9b/0xb0 [ 305.299765][ T8896] do_syscall_64+0x55/0xa0 [ 305.304301][ T8896] ? clear_bhb_loop+0x40/0x90 [ 305.309010][ T8896] ? clear_bhb_loop+0x40/0x90 [ 305.313818][ T8896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.319847][ T8896] RIP: 0033:0x7fe1f2f9aeb9 [ 305.324289][ T8896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.343932][ T8896] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 305.352375][ T8896] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 305.360362][ T8896] RDX: 000000000000000b RSI: 0000000000000002 RDI: 0000000000000010 [ 305.368344][ T8896] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 305.376349][ T8896] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.384436][ T8896] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 305.392440][ T8896] [ 309.388386][ T8924] batadv0: left allmulticast mode [ 309.732497][ T8927] netlink: 'syz.3.895': attribute type 2 has an invalid length. [ 309.782072][ T8927] netlink: 'syz.3.895': attribute type 8 has an invalid length. [ 309.863359][ T8927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.895'. [ 309.893176][ T8937] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 311.085252][ T8958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.903'. [ 315.263694][ T8968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.731455][ T8993] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 315.798103][ T8993] netlink: 'syz.1.911': attribute type 8 has an invalid length. [ 315.832543][ T8993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.911'. [ 317.130483][ T9019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.915'. [ 317.195055][ T9021] netlink: 132 bytes leftover after parsing attributes in process `syz.1.916'. [ 317.536435][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.549259][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.743402][ T9045] netlink: 'syz.2.923': attribute type 39 has an invalid length. [ 321.096673][ T9052] netlink: 'syz.0.924': attribute type 10 has an invalid length. [ 321.111358][ T9052] netlink: 168 bytes leftover after parsing attributes in process `syz.0.924'. [ 321.566424][ T9052] netlink: 156 bytes leftover after parsing attributes in process `syz.0.924'. [ 321.935270][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.930'. [ 325.548950][ T9083] netlink: 'syz.3.935': attribute type 39 has an invalid length. [ 325.682188][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.943'. [ 329.820611][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 330.393438][ T9118] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 330.430081][ T9120] bond0: entered promiscuous mode [ 330.469592][ T9120] bond_slave_0: entered promiscuous mode [ 330.483746][ T9120] bond_slave_1: entered promiscuous mode [ 330.489714][ T9120] batadv_slave_0: entered promiscuous mode [ 330.516541][ T9120] bridge0: entered promiscuous mode [ 330.538529][ T9124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.944'. [ 330.585584][ T9126] veth1_macvtap: left promiscuous mode [ 330.619591][ T9126] macsec0: entered allmulticast mode [ 331.031819][ T9129] veth1_macvtap: entered promiscuous mode [ 331.140542][ T9129] veth1_macvtap: entered allmulticast mode [ 331.174666][ T9129] macsec0: entered promiscuous mode [ 332.004050][ T9140] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.947'. [ 333.437481][ T9144] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 333.504983][ T9145] IPv6: pim6reg1: Disabled Multicast RS [ 334.053052][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.3.951'. [ 335.838356][ T9174] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 335.853407][ T9179] netlink: 'syz.0.958': attribute type 2 has an invalid length. [ 335.861335][ T9179] netlink: 'syz.0.958': attribute type 8 has an invalid length. [ 335.891899][ T9174] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.958'. [ 335.943094][ T9179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.958'. [ 337.477077][ T9193] netlink: 'syz.2.963': attribute type 2 has an invalid length. [ 337.501798][ T9192] netlink: 'syz.3.962': attribute type 9 has an invalid length. [ 337.507244][ T9193] IPv6: pim6reg1: Disabled Multicast RS [ 337.523264][ T9192] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.962'. [ 337.562704][ T9194] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.962'. [ 337.614111][ T9194] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.962'. [ 337.931863][ T9194] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.962'. [ 338.401574][ T9211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.968'. [ 339.369342][ T9217] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.969'. [ 342.317115][ T9251] netlink: 132 bytes leftover after parsing attributes in process `syz.1.979'. [ 342.630542][ T9254] veth1_macvtap: left allmulticast mode [ 342.670064][ T9254] veth1_macvtap: left promiscuous mode [ 342.739547][ T9254] macsec0: left promiscuous mode [ 342.830314][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.980'. [ 343.473197][ T9258] veth1_macvtap: entered promiscuous mode [ 343.479053][ T9258] veth1_macvtap: entered allmulticast mode [ 343.523324][ T9258] macsec0: entered promiscuous mode [ 346.209783][ T9273] sit0: entered allmulticast mode [ 346.815181][ T9290] netlink: 132 bytes leftover after parsing attributes in process `syz.2.990'. [ 346.972522][ T9292] FAULT_INJECTION: forcing a failure. [ 346.972522][ T9292] name failslab, interval 1, probability 0, space 0, times 0 [ 346.989748][ T9292] CPU: 1 PID: 9292 Comm: syz.0.991 Not tainted syzkaller #0 [ 346.997097][ T9292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.007275][ T9292] Call Trace: [ 347.010666][ T9292] [ 347.013773][ T9292] dump_stack_lvl+0x18c/0x250 [ 347.018581][ T9292] ? sctp_sendmsg+0x1575/0x28c0 [ 347.023466][ T9292] ? ___sys_sendmsg+0x2a6/0x360 [ 347.028356][ T9292] ? show_regs_print_info+0x20/0x20 [ 347.033683][ T9292] ? load_image+0x400/0x400 [ 347.038233][ T9292] should_fail_ex+0x39d/0x4d0 [ 347.042972][ T9292] should_failslab+0x9/0x20 [ 347.047532][ T9292] slab_pre_alloc_hook+0x59/0x310 [ 347.052617][ T9292] ? sctp_add_bind_addr+0x8c/0x360 [ 347.057774][ T9292] __kmem_cache_alloc_node+0x53/0x250 [ 347.063192][ T9292] ? sctp_add_bind_addr+0x8c/0x360 [ 347.068438][ T9292] kmalloc_trace+0x2a/0xe0 [ 347.072909][ T9292] sctp_add_bind_addr+0x8c/0x360 [ 347.077900][ T9292] sctp_copy_local_addr_list+0x315/0x4f0 [ 347.083599][ T9292] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 347.089358][ T9292] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 347.095475][ T9292] ? sctp_v4_is_any+0x35/0x60 [ 347.100192][ T9292] ? sctp_copy_one_addr+0x8c/0x350 [ 347.105350][ T9292] sctp_bind_addr_copy+0xb3/0x3c0 [ 347.110426][ T9292] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 347.116805][ T9292] sctp_connect_new_asoc+0x2f9/0x6a0 [ 347.122136][ T9292] ? __sctp_connect+0xd80/0xd80 [ 347.127036][ T9292] ? __local_bh_enable_ip+0x13a/0x1c0 [ 347.132453][ T9292] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 347.138132][ T9292] ? security_sctp_bind_connect+0x89/0xb0 [ 347.143970][ T9292] sctp_sendmsg+0x1575/0x28c0 [ 347.148709][ T9292] ? sctp_getsockopt+0xb60/0xb60 [ 347.153687][ T9292] ? aa_sk_perm+0x83c/0x970 [ 347.158331][ T9292] ? aa_af_perm+0x330/0x330 [ 347.162864][ T9292] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 347.169318][ T9292] ? sock_rps_record_flow+0x19/0x3f0 [ 347.174639][ T9292] ? inet_sendmsg+0xe9/0x2f0 [ 347.179269][ T9292] ? inet_send_prepare+0x260/0x260 [ 347.184419][ T9292] ____sys_sendmsg+0x5ba/0x960 [ 347.189231][ T9292] ? __lock_acquire+0x7d40/0x7d40 [ 347.194296][ T9292] ? __asan_memset+0x22/0x40 [ 347.199005][ T9292] ? __sys_sendmsg_sock+0x30/0x30 [ 347.204062][ T9292] ? __import_iovec+0x5f2/0x850 [ 347.208976][ T9292] ? import_iovec+0x73/0xa0 [ 347.213606][ T9292] ___sys_sendmsg+0x2a6/0x360 [ 347.218323][ T9292] ? get_pid_task+0x20/0x1e0 [ 347.222955][ T9292] ? __sys_sendmsg+0x2a0/0x2a0 [ 347.227783][ T9292] ? __lock_acquire+0x7d40/0x7d40 [ 347.232876][ T9292] __se_sys_sendmsg+0x1c2/0x2b0 [ 347.237768][ T9292] ? __x64_sys_sendmsg+0x80/0x80 [ 347.242759][ T9292] ? lockdep_hardirqs_on+0x98/0x150 [ 347.247988][ T9292] do_syscall_64+0x55/0xa0 [ 347.252442][ T9292] ? clear_bhb_loop+0x40/0x90 [ 347.257154][ T9292] ? clear_bhb_loop+0x40/0x90 [ 347.261871][ T9292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.267798][ T9292] RIP: 0033:0x7fe1f2f9aeb9 [ 347.272247][ T9292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.291895][ T9292] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.300351][ T9292] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 347.308351][ T9292] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 347.316353][ T9292] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 347.324459][ T9292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.332468][ T9292] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 347.340587][ T9292] [ 350.095950][ T9304] veth1_macvtap: left promiscuous mode [ 350.110418][ T9304] macsec0: entered allmulticast mode [ 350.251485][ T9309] FAULT_INJECTION: forcing a failure. [ 350.251485][ T9309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 350.293334][ T9309] CPU: 1 PID: 9309 Comm: syz.1.995 Not tainted syzkaller #0 [ 350.300703][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.310790][ T9309] Call Trace: [ 350.314120][ T9309] [ 350.317089][ T9309] dump_stack_lvl+0x18c/0x250 [ 350.321844][ T9309] ? show_regs_print_info+0x20/0x20 [ 350.327091][ T9309] ? load_image+0x400/0x400 [ 350.331638][ T9309] ? __lock_acquire+0x7d40/0x7d40 [ 350.336715][ T9309] ? mark_lock+0x94/0x320 [ 350.341101][ T9309] should_fail_ex+0x39d/0x4d0 [ 350.345836][ T9309] prepare_alloc_pages+0x1e2/0x5f0 [ 350.351010][ T9309] __alloc_pages+0x134/0x460 [ 350.355657][ T9309] ? zone_statistics+0x170/0x170 [ 350.360652][ T9309] ? do_wp_page+0x7ca/0x35f0 [ 350.365294][ T9309] ? do_wp_page+0xfc5/0x35f0 [ 350.369950][ T9309] __folio_alloc+0x10/0x20 [ 350.374418][ T9309] vma_alloc_folio+0x47a/0x8f0 [ 350.379238][ T9309] do_wp_page+0x1243/0x35f0 [ 350.383809][ T9309] ? folio_put+0xd0/0xd0 [ 350.388222][ T9309] ? do_raw_spin_lock+0x11f/0x2c0 [ 350.388994][ T9313] netlink: 3787 bytes leftover after parsing attributes in process `syz.0.1001'. [ 350.393374][ T9309] ? __rwlock_init+0x150/0x150 [ 350.393486][ T9309] handle_mm_fault+0x135d/0x4c00 [ 350.393512][ T9309] ? handle_mm_fault+0xe7/0x4c00 [ 350.393548][ T9309] ? numa_migrate_prep+0x350/0x350 [ 350.393590][ T9309] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 350.427814][ T9309] do_user_addr_fault+0x730/0x12c0 [ 350.432996][ T9309] exc_page_fault+0x64/0x100 [ 350.437631][ T9309] asm_exc_page_fault+0x26/0x30 [ 350.444617][ T9309] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 350.450495][ T9309] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 350.470237][ T9309] RSP: 0018:ffffc90018f87af0 EFLAGS: 00050206 [ 350.476447][ T9309] RAX: ffffffff84294f01 RBX: 0000000000002800 RCX: 00000000000001c0 [ 350.484465][ T9309] RDX: 0000000000000000 RSI: ffff888059eaa640 RDI: 0000200000009000 [ 350.492480][ T9309] RBP: ffffc90018f87d20 R08: ffff888059eaa7ff R09: 1ffff1100b3d54ff [ 350.500491][ T9309] R10: dffffc0000000000 R11: ffffed100b3d5500 R12: 00002000000091c0 [ 350.508493][ T9309] R13: 0000000000002800 R14: 00002000000069c0 R15: ffff888059ea8000 [ 350.516533][ T9309] ? _copy_from_user+0x91/0xe0 [ 350.521361][ T9309] _copy_to_user+0x85/0xa0 [ 350.525829][ T9309] __htab_map_lookup_and_delete_batch+0x1034/0x1360 [ 350.532501][ T9309] ? jhash+0x740/0x740 [ 350.536621][ T9309] ? __fdget+0x180/0x210 [ 350.540911][ T9309] ? htab_percpu_map_lookup_and_delete_elem+0x40/0x40 [ 350.547721][ T9309] bpf_map_do_batch+0x477/0x610 [ 350.552646][ T9309] __sys_bpf+0x78c/0x890 [ 350.557041][ T9309] ? bpf_link_show_fdinfo+0x390/0x390 [ 350.562513][ T9309] ? lock_chain_count+0x20/0x20 [ 350.567421][ T9309] __x64_sys_bpf+0x7c/0x90 [ 350.571898][ T9309] do_syscall_64+0x55/0xa0 [ 350.576377][ T9309] ? clear_bhb_loop+0x40/0x90 [ 350.581080][ T9309] ? clear_bhb_loop+0x40/0x90 [ 350.585984][ T9309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.591906][ T9309] RIP: 0033:0x7fc4fcf9aeb9 [ 350.596337][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.615984][ T9309] RSP: 002b:00007fc4fdd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.624494][ T9309] RAX: ffffffffffffffda RBX: 00007fc4fd215fa0 RCX: 00007fc4fcf9aeb9 [ 350.632474][ T9309] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 350.640453][ T9309] RBP: 00007fc4fdd97090 R08: 0000000000000000 R09: 0000000000000000 [ 350.648439][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.656422][ T9309] R13: 00007fc4fd216038 R14: 00007fc4fd215fa0 R15: 00007ffe9e2ce848 [ 350.664440][ T9309] [ 350.714108][ T9314] veth1_macvtap: entered promiscuous mode [ 350.733131][ T9314] veth1_macvtap: entered allmulticast mode [ 350.739098][ T9314] macsec0: entered promiscuous mode [ 350.966132][ T9323] netlink: 132 bytes leftover after parsing attributes in process `syz.0.996'. [ 351.379913][ T9326] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.998'. [ 353.981264][ T9331] netlink: 'syz.2.999': attribute type 2 has an invalid length. [ 354.002994][ T9331] netlink: 'syz.2.999': attribute type 8 has an invalid length. [ 354.010713][ T9331] netlink: 132 bytes leftover after parsing attributes in process `syz.2.999'. [ 355.394866][ T9354] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1014'. [ 356.931143][ T9376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1011'. [ 357.241967][ T9380] netlink: 'syz.3.1012': attribute type 2 has an invalid length. [ 357.295868][ T9380] netlink: 'syz.3.1012': attribute type 8 has an invalid length. [ 357.354051][ T9380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1012'. [ 358.161792][ T9392] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1015'. [ 361.318963][ T7435] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.381732][ T9408] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1019'. [ 362.585332][ T9414] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1022'. [ 363.837581][ T9429] netlink: 'syz.1.1027': attribute type 2 has an invalid length. [ 363.853063][ T9429] netlink: 'syz.1.1027': attribute type 8 has an invalid length. [ 363.909547][ T9429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1027'. [ 364.068276][ T9437] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1030'. [ 365.481516][ T9458] netlink: 'syz.0.1036': attribute type 2 has an invalid length. [ 365.500973][ T9458] netlink: 'syz.0.1036': attribute type 8 has an invalid length. [ 365.523697][ T9458] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1036'. [ 366.772417][ T9484] FAULT_INJECTION: forcing a failure. [ 366.772417][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 366.846369][ T9484] CPU: 0 PID: 9484 Comm: syz.3.1044 Not tainted syzkaller #0 [ 366.853827][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.863926][ T9484] Call Trace: [ 366.867757][ T9484] [ 366.870721][ T9484] dump_stack_lvl+0x18c/0x250 [ 366.875536][ T9484] ? show_regs_print_info+0x20/0x20 [ 366.880869][ T9484] ? load_image+0x400/0x400 [ 366.885427][ T9484] should_fail_ex+0x39d/0x4d0 [ 366.890152][ T9484] should_failslab+0x9/0x20 [ 366.894701][ T9484] slab_pre_alloc_hook+0x59/0x310 [ 366.900498][ T9484] kmem_cache_alloc+0x5a/0x2d0 [ 366.905589][ T9484] ? dst_alloc+0x105/0x170 [ 366.910068][ T9484] dst_alloc+0x105/0x170 [ 366.914362][ T9484] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 366.920569][ T9484] ? ip_route_output_key_hash_rcu+0x1311/0x2360 [ 366.926862][ T9484] ? ip_route_output_key_hash+0x13d/0x330 [ 366.932626][ T9484] ip_route_output_key_hash+0x1f3/0x330 [ 366.938216][ T9484] ? rxrpc_alloc_peer+0x7e/0x340 [ 366.943192][ T9484] ? rxrpc_lookup_peer+0x3f4/0x850 [ 366.948358][ T9484] ? ip_route_input_rcu+0x30e0/0x30e0 [ 366.953848][ T9484] ? do_syscall_64+0x55/0xa0 [ 366.958486][ T9484] ? make_kuid+0x1df/0x680 [ 366.962954][ T9484] ? __put_user_ns+0x50/0x50 [ 366.967585][ T9484] ip_route_output_flow+0x2a/0x150 [ 366.972736][ T9484] rxrpc_init_peer+0x2f0/0x740 [ 366.977543][ T9484] ? rxrpc_new_incoming_peer+0x5a0/0x5a0 [ 366.983225][ T9484] ? rcu_is_watching+0x15/0xb0 [ 366.988026][ T9484] ? trace_rxrpc_peer+0x80/0x1c0 [ 366.993005][ T9484] ? rxrpc_lookup_peer+0x419/0x850 [ 366.998173][ T9484] rxrpc_lookup_peer+0x427/0x850 [ 367.003157][ T9484] rxrpc_new_client_call+0xb99/0x1410 [ 367.008583][ T9484] rxrpc_do_sendmsg+0xc42/0x1280 [ 367.013582][ T9484] ? rxrpc_propose_abort+0x200/0x200 [ 367.018936][ T9484] ? rxrpc_sendmsg+0x391/0x5b0 [ 367.023755][ T9484] ? rxrpc_getsockopt+0x150/0x150 [ 367.028824][ T9484] ____sys_sendmsg+0x5ba/0x960 [ 367.033638][ T9484] ? __lock_acquire+0x7d40/0x7d40 [ 367.038711][ T9484] ? __sys_sendmsg_sock+0x30/0x30 [ 367.043780][ T9484] ? __import_iovec+0x5f2/0x850 [ 367.048683][ T9484] ? import_iovec+0x73/0xa0 [ 367.053320][ T9484] ___sys_sendmsg+0x2a6/0x360 [ 367.058042][ T9484] ? get_pid_task+0x20/0x1e0 [ 367.062732][ T9484] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.067561][ T9484] ? __lock_acquire+0x7d40/0x7d40 [ 367.072648][ T9484] __se_sys_sendmsg+0x1c2/0x2b0 [ 367.077636][ T9484] ? __x64_sys_sendmsg+0x80/0x80 [ 367.082636][ T9484] ? lockdep_hardirqs_on+0x98/0x150 [ 367.087868][ T9484] do_syscall_64+0x55/0xa0 [ 367.092324][ T9484] ? clear_bhb_loop+0x40/0x90 [ 367.097212][ T9484] ? clear_bhb_loop+0x40/0x90 [ 367.101928][ T9484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.107873][ T9484] RIP: 0033:0x7f07f9f9aeb9 [ 367.112327][ T9484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.132233][ T9484] RSP: 002b:00007f07fae5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.140685][ T9484] RAX: ffffffffffffffda RBX: 00007f07fa215fa0 RCX: 00007f07f9f9aeb9 [ 367.148693][ T9484] RDX: 000000000000ff4c RSI: 0000200000000000 RDI: 0000000000000003 [ 367.156702][ T9484] RBP: 00007f07fae5e090 R08: 0000000000000000 R09: 0000000000000000 [ 367.164795][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.172798][ T9484] R13: 00007f07fa216038 R14: 00007f07fa215fa0 R15: 00007ffe72769798 [ 367.180907][ T9484] [ 367.420642][ T9491] netlink: 'syz.1.1045': attribute type 5 has an invalid length. [ 367.619738][ T9491] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1045'. [ 368.224870][ T9500] netlink: 'syz.1.1049': attribute type 9 has an invalid length. [ 368.232698][ T9500] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1049'. [ 368.357322][ T9504] syzkaller0: entered promiscuous mode [ 368.364276][ T9504] syzkaller0: entered allmulticast mode [ 368.504579][ T9502] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1049'. [ 368.638798][ T9509] FAULT_INJECTION: forcing a failure. [ 368.638798][ T9509] name failslab, interval 1, probability 0, space 0, times 0 [ 368.654438][ T9509] CPU: 1 PID: 9509 Comm: syz.2.1051 Not tainted syzkaller #0 [ 368.661888][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.672003][ T9509] Call Trace: [ 368.675338][ T9509] [ 368.678310][ T9509] dump_stack_lvl+0x18c/0x250 [ 368.683042][ T9509] ? sctp_sendmsg+0x1575/0x28c0 [ 368.687940][ T9509] ? ___sys_sendmsg+0x2a6/0x360 [ 368.692853][ T9509] ? show_regs_print_info+0x20/0x20 [ 368.698100][ T9509] ? load_image+0x400/0x400 [ 368.702671][ T9509] should_fail_ex+0x39d/0x4d0 [ 368.707454][ T9509] should_failslab+0x9/0x20 [ 368.712097][ T9509] slab_pre_alloc_hook+0x59/0x310 [ 368.717261][ T9509] ? sctp_add_bind_addr+0x8c/0x360 [ 368.722594][ T9509] __kmem_cache_alloc_node+0x53/0x250 [ 368.728015][ T9509] ? sctp_add_bind_addr+0x8c/0x360 [ 368.733176][ T9509] kmalloc_trace+0x2a/0xe0 [ 368.737644][ T9509] sctp_add_bind_addr+0x8c/0x360 [ 368.742709][ T9509] sctp_copy_local_addr_list+0x315/0x4f0 [ 368.748405][ T9509] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 368.754448][ T9509] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 368.760574][ T9509] ? sctp_v6_is_any+0x64/0x70 [ 368.765306][ T9509] ? sctp_copy_one_addr+0x8c/0x350 [ 368.770481][ T9509] sctp_bind_addr_copy+0xb3/0x3c0 [ 368.775538][ T9509] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 368.781894][ T9509] sctp_connect_new_asoc+0x2f9/0x6a0 [ 368.787292][ T9509] ? __sctp_connect+0xd80/0xd80 [ 368.792167][ T9509] ? __local_bh_enable_ip+0x13a/0x1c0 [ 368.797566][ T9509] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 368.803131][ T9509] ? security_sctp_bind_connect+0x89/0xb0 [ 368.808874][ T9509] sctp_sendmsg+0x1575/0x28c0 [ 368.813849][ T9509] ? sctp_getsockopt+0xb60/0xb60 [ 368.818818][ T9509] ? aa_sk_perm+0x83c/0x970 [ 368.823378][ T9509] ? aa_af_perm+0x330/0x330 [ 368.827989][ T9509] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 368.834431][ T9509] ? sock_rps_record_flow+0x19/0x3f0 [ 368.839744][ T9509] ? inet_sendmsg+0xe9/0x2f0 [ 368.844370][ T9509] ? inet_send_prepare+0x260/0x260 [ 368.849510][ T9509] ____sys_sendmsg+0x5ba/0x960 [ 368.854302][ T9509] ? __lock_acquire+0x7d40/0x7d40 [ 368.859352][ T9509] ? __sys_sendmsg_sock+0x30/0x30 [ 368.864495][ T9509] ? __import_iovec+0x5f2/0x850 [ 368.869403][ T9509] ? import_iovec+0x73/0xa0 [ 368.873933][ T9509] ___sys_sendmsg+0x2a6/0x360 [ 368.878674][ T9509] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.883518][ T9509] ? __lock_acquire+0x7d40/0x7d40 [ 368.888669][ T9509] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.893571][ T9509] ? __x64_sys_sendmsg+0x80/0x80 [ 368.898613][ T9509] ? lockdep_hardirqs_on+0x98/0x150 [ 368.903852][ T9509] do_syscall_64+0x55/0xa0 [ 368.908392][ T9509] ? clear_bhb_loop+0x40/0x90 [ 368.913108][ T9509] ? clear_bhb_loop+0x40/0x90 [ 368.917811][ T9509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.923752][ T9509] RIP: 0033:0x7fa6b5f9aeb9 [ 368.928187][ T9509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.947837][ T9509] RSP: 002b:00007fa6b6de9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.956358][ T9509] RAX: ffffffffffffffda RBX: 00007fa6b6215fa0 RCX: 00007fa6b5f9aeb9 [ 368.964454][ T9509] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 368.972438][ T9509] RBP: 00007fa6b6de9090 R08: 0000000000000000 R09: 0000000000000000 [ 368.980461][ T9509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.988533][ T9509] R13: 00007fa6b6216038 R14: 00007fa6b6215fa0 R15: 00007fffb8599418 [ 368.996548][ T9509] [ 372.915295][ T9505] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1050'. [ 373.071470][ T9522] netlink: 'syz.3.1054': attribute type 2 has an invalid length. [ 373.095926][ T9522] netlink: 'syz.3.1054': attribute type 8 has an invalid length. [ 373.106252][ T9522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1054'. [ 375.136506][ T9552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1061'. [ 375.528467][ T9565] netlink: 'syz.0.1066': attribute type 2 has an invalid length. [ 375.556657][ T9565] netlink: 'syz.0.1066': attribute type 8 has an invalid length. [ 375.573326][ T9565] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1066'. [ 378.923977][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.930360][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.686304][ T9587] netlink: 'syz.1.1070': attribute type 21 has an invalid length. [ 379.720479][ T9587] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 379.740902][ T9587] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1070'. [ 380.039243][ T9596] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 380.064632][ T9596] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1073'. [ 380.514570][ T9604] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 380.779821][ T9608] netlink: 'syz.1.1078': attribute type 2 has an invalid length. [ 380.811718][ T9608] netlink: 'syz.1.1078': attribute type 8 has an invalid length. [ 380.830656][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1078'. [ 381.343818][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1079'. [ 385.086576][ T9645] netlink: 'syz.2.1087': attribute type 10 has an invalid length. [ 385.102054][ T9645] bond0: left promiscuous mode [ 385.117994][ T9645] bond_slave_0: left promiscuous mode [ 385.125029][ T9645] bond_slave_1: left promiscuous mode [ 385.131786][ T9645] batadv_slave_0: left promiscuous mode [ 385.143641][ T9645] bridge0: left promiscuous mode [ 386.717390][ T9671] netlink: 'syz.1.1095': attribute type 2 has an invalid length. [ 387.008651][ T9678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1096'. [ 387.545745][ T9684] netlink: 'syz.0.1098': attribute type 10 has an invalid length. [ 387.877978][ T9690] FAULT_INJECTION: forcing a failure. [ 387.877978][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 387.893100][ T9690] CPU: 1 PID: 9690 Comm: syz.0.1100 Not tainted syzkaller #0 [ 387.900971][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.911073][ T9690] Call Trace: [ 387.914387][ T9690] [ 387.917356][ T9690] dump_stack_lvl+0x18c/0x250 [ 387.922078][ T9690] ? sctp_sendmsg+0x1575/0x28c0 [ 387.926972][ T9690] ? ___sys_sendmsg+0x2a6/0x360 [ 387.931879][ T9690] ? show_regs_print_info+0x20/0x20 [ 387.937562][ T9690] ? load_image+0x400/0x400 [ 387.942126][ T9690] should_fail_ex+0x39d/0x4d0 [ 387.946866][ T9690] should_failslab+0x9/0x20 [ 387.951423][ T9690] slab_pre_alloc_hook+0x59/0x310 [ 387.956507][ T9690] ? sctp_add_bind_addr+0x8c/0x360 [ 387.961674][ T9690] __kmem_cache_alloc_node+0x53/0x250 [ 387.967095][ T9690] ? sctp_add_bind_addr+0x8c/0x360 [ 387.972343][ T9690] kmalloc_trace+0x2a/0xe0 [ 387.976810][ T9690] sctp_add_bind_addr+0x8c/0x360 [ 387.982234][ T9690] sctp_copy_local_addr_list+0x315/0x4f0 [ 387.987912][ T9690] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 387.993680][ T9690] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 387.999884][ T9690] ? sctp_v4_is_any+0x35/0x60 [ 388.004602][ T9690] ? sctp_copy_one_addr+0x8c/0x350 [ 388.009735][ T9690] sctp_bind_addr_copy+0xb3/0x3c0 [ 388.014777][ T9690] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 388.021120][ T9690] sctp_connect_new_asoc+0x2f9/0x6a0 [ 388.026424][ T9690] ? __sctp_connect+0xd80/0xd80 [ 388.031281][ T9690] ? __local_bh_enable_ip+0x13a/0x1c0 [ 388.036666][ T9690] ? _local_bh_enable+0xa0/0xa0 [ 388.041556][ T9690] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 388.047412][ T9690] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 388.053256][ T9690] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 388.058824][ T9690] ? security_sctp_bind_connect+0x89/0xb0 [ 388.064575][ T9690] sctp_sendmsg+0x1575/0x28c0 [ 388.069284][ T9690] ? sctp_getsockopt+0xb60/0xb60 [ 388.074264][ T9690] ? aa_sk_perm+0x83c/0x970 [ 388.078905][ T9690] ? aa_af_perm+0x330/0x330 [ 388.083450][ T9690] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 388.089897][ T9690] ? sock_rps_record_flow+0x19/0x3f0 [ 388.095209][ T9690] ? inet_sendmsg+0x7c/0x2f0 [ 388.099823][ T9690] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 388.105176][ T9690] ? security_socket_sendmsg+0x80/0xa0 [ 388.110761][ T9690] ? inet_send_prepare+0x260/0x260 [ 388.115894][ T9690] ____sys_sendmsg+0x5ba/0x960 [ 388.120680][ T9690] ? __lock_acquire+0x7d40/0x7d40 [ 388.125914][ T9690] ? __asan_memset+0x22/0x40 [ 388.130517][ T9690] ? __sys_sendmsg_sock+0x30/0x30 [ 388.135556][ T9690] ? __import_iovec+0x5f2/0x850 [ 388.140452][ T9690] ? import_iovec+0x73/0xa0 [ 388.144982][ T9690] ___sys_sendmsg+0x2a6/0x360 [ 388.149765][ T9690] ? get_pid_task+0x20/0x1e0 [ 388.154463][ T9690] ? __sys_sendmsg+0x2a0/0x2a0 [ 388.159274][ T9690] ? __lock_acquire+0x7d40/0x7d40 [ 388.164456][ T9690] __se_sys_sendmsg+0x1c2/0x2b0 [ 388.169337][ T9690] ? __x64_sys_sendmsg+0x80/0x80 [ 388.174414][ T9690] ? lockdep_hardirqs_on+0x98/0x150 [ 388.179632][ T9690] do_syscall_64+0x55/0xa0 [ 388.184149][ T9690] ? clear_bhb_loop+0x40/0x90 [ 388.188853][ T9690] ? clear_bhb_loop+0x40/0x90 [ 388.193627][ T9690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.199537][ T9690] RIP: 0033:0x7fe1f2f9aeb9 [ 388.203970][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.224023][ T9690] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.232456][ T9690] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 388.240443][ T9690] RDX: 0000000000004000 RSI: 0000200000000e40 RDI: 0000000000000003 [ 388.248530][ T9690] RBP: 00007fe1f3d79090 R08: 0000000000000000 R09: 0000000000000000 [ 388.256511][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.264492][ T9690] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 388.272487][ T9690] [ 388.497993][ T9693] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 388.510243][ T9693] netlink: 'syz.3.1101': attribute type 8 has an invalid length. [ 388.528396][ T9693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1101'. [ 390.669305][ T9710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1107'. [ 390.970301][ T9722] netlink: 'syz.0.1110': attribute type 11 has an invalid length. [ 390.993107][ T9722] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1110'. [ 391.317812][ T9725] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 392.432101][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.036692][ T9742] sctp: [Deprecated]: syz.3.1116 (pid 9742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.036692][ T9742] Use struct sctp_sack_info instead [ 394.918200][ T9747] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1125'. [ 395.124696][ C1] [ 395.124705][ C1] ================================ [ 395.124712][ C1] WARNING: inconsistent lock state [ 395.124717][ C1] syzkaller #0 Not tainted [ 395.124727][ C1] -------------------------------- [ 395.124731][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 395.124739][ C1] syz.0.1121/9756 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 395.124759][ C1] ffff8880611c3da0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 395.124810][ C1] {INITIAL USE} state was registered at: [ 395.124817][ C1] lock_acquire+0x19e/0x420 [ 395.124836][ C1] _raw_spin_lock+0x2e/0x40 [ 395.124852][ C1] htab_lock_bucket+0x17d/0x300 [ 395.124867][ C1] htab_lru_map_update_elem+0x2c6/0x990 [ 395.124883][ C1] bpf_map_update_value+0x660/0x720 [ 395.124897][ C1] map_update_elem+0x57b/0x700 [ 395.124912][ C1] __sys_bpf+0x6b5/0x890 [ 395.124927][ C1] __x64_sys_bpf+0x7c/0x90 [ 395.124941][ C1] do_syscall_64+0x55/0xa0 [ 395.124962][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.124979][ C1] irq event stamp: 2178 [ 395.124985][ C1] hardirqs last enabled at (2177): [] __local_bh_enable_ip+0x13a/0x1c0 [ 395.125008][ C1] hardirqs last disabled at (2178): [] exc_debug+0x73/0x140 [ 395.125034][ C1] softirqs last enabled at (2176): [] netlink_insert+0x109f/0x13a0 [ 395.125060][ C1] softirqs last disabled at (2174): [] release_sock+0x2f/0x1c0 [ 395.125081][ C1] [ 395.125081][ C1] other info that might help us debug this: [ 395.125086][ C1] Possible unsafe locking scenario: [ 395.125086][ C1] [ 395.125090][ C1] CPU0 [ 395.125094][ C1] ---- [ 395.125096][ C1] lock(&htab->lockdep_key); [ 395.125108][ C1] [ 395.125111][ C1] lock(&htab->lockdep_key); [ 395.125121][ C1] [ 395.125121][ C1] *** DEADLOCK *** [ 395.125121][ C1] [ 395.125125][ C1] no locks held by syz.0.1121/9756. [ 395.125132][ C1] [ 395.125132][ C1] stack backtrace: [ 395.125137][ C1] CPU: 1 PID: 9756 Comm: syz.0.1121 Not tainted syzkaller #0 [ 395.125153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.125163][ C1] Call Trace: [ 395.125170][ C1] <#DB> [ 395.125177][ C1] dump_stack_lvl+0x18c/0x250 [ 395.125201][ C1] ? show_regs_print_info+0x20/0x20 [ 395.125225][ C1] ? print_usage_bug+0x475/0x690 [ 395.125244][ C1] ? verify_lock_unused+0x18/0x140 [ 395.125265][ C1] lock_acquire+0x2c2/0x420 [ 395.125286][ C1] ? htab_lock_bucket+0x17d/0x300 [ 395.125305][ C1] ? read_lock_is_recursive+0x20/0x20 [ 395.125331][ C1] _raw_spin_lock+0x2e/0x40 [ 395.125347][ C1] ? htab_lock_bucket+0x17d/0x300 [ 395.125364][ C1] htab_lock_bucket+0x17d/0x300 [ 395.125384][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 395.125405][ C1] ? verify_lock_unused+0x18/0x140 [ 395.125424][ C1] ? jhash+0x34e/0x740 [ 395.125443][ C1] htab_lru_map_delete_elem+0x1a4/0x650 [ 395.125464][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 395.125491][ C1] ? perf_callchain+0x1f0/0x1f0 [ 395.125512][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 395.125532][ C1] bpf_overflow_handler+0x1fc/0x510 [ 395.125558][ C1] ? bpf_overflow_handler+0xde/0x510 [ 395.125580][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 395.125605][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 395.125627][ C1] __perf_event_overflow+0x447/0x630 [ 395.125654][ C1] perf_swevent_event+0x324/0x630 [ 395.125676][ C1] ? perf_tp_event+0x1450/0x1450 [ 395.125699][ C1] perf_bp_event+0x2a7/0x380 [ 395.125722][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 395.125755][ C1] ? lock_acquire+0x2c2/0x420 [ 395.125777][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 395.125801][ C1] notifier_call_chain+0x197/0x380 [ 395.125823][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 395.125845][ C1] atomic_notifier_call_chain+0xda/0x180 [ 395.125867][ C1] notify_die+0x145/0x1a0 [ 395.125889][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 395.125913][ C1] ? rcu_is_watching+0x15/0xb0 [ 395.125936][ C1] notify_debug+0x2e/0x50 [ 395.125953][ C1] exc_debug+0xde/0x140 [ 395.125977][ C1] asm_exc_debug+0x1e/0x40 [ 395.125994][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 395.126020][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 395.126035][ C1] RSP: 0018:ffffc90004f87798 EFLAGS: 00050202 [ 395.126050][ C1] RAX: ffffffff84271301 RBX: 00000000000008c0 RCX: 00000000000005c0 [ 395.126063][ C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88807f29a300 [ 395.126075][ C1] RBP: ffffc90004f878f0 R08: ffff88807f29a8bf R09: 1ffff1100fe53517 [ 395.126088][ C1] R10: dffffc0000000000 R11: ffffed100fe53518 R12: ffff88807f29a000 [ 395.126100][ C1] R13: 0000200000000040 R14: ffffc90004f87e38 R15: 1ffff920009f0fc7 [ 395.126116][ C1] ? _copy_from_iter+0x201/0x12e0 [ 395.126145][ C1] [ 395.126150][ C1] [ 395.126155][ C1] _copy_from_iter+0x24e/0x12e0 [ 395.126178][ C1] ? __virt_addr_valid+0x18c/0x540 [ 395.126200][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 395.126220][ C1] ? copyout_mc+0x70/0x70 [ 395.126241][ C1] ? __virt_addr_valid+0x18c/0x540 [ 395.126261][ C1] ? __virt_addr_valid+0x18c/0x540 [ 395.126282][ C1] ? __virt_addr_valid+0x469/0x540 [ 395.126302][ C1] ? __check_object_size+0x506/0xa20 [ 395.126329][ C1] netlink_sendmsg+0x76b/0xbf0 [ 395.126354][ C1] ? netlink_getsockopt+0x590/0x590 [ 395.126378][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 395.126399][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 395.126418][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 395.126435][ C1] ? netlink_getsockopt+0x590/0x590 [ 395.126457][ C1] ____sys_sendmsg+0x5ba/0x960 [ 395.126492][ C1] ? __asan_memset+0x22/0x40 [ 395.126513][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 395.126536][ C1] ? __import_iovec+0x5f2/0x850 [ 395.126563][ C1] ? import_iovec+0x73/0xa0 [ 395.126587][ C1] ___sys_sendmsg+0x2a6/0x360 [ 395.126614][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 395.126648][ C1] ? debug_mutex_init+0x38/0x70 [ 395.126676][ C1] __se_sys_sendmsg+0x1c2/0x2b0 [ 395.126702][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 395.126732][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 395.126751][ C1] do_syscall_64+0x55/0xa0 [ 395.126772][ C1] ? clear_bhb_loop+0x40/0x90 [ 395.126789][ C1] ? clear_bhb_loop+0x40/0x90 [ 395.126807][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.126824][ C1] RIP: 0033:0x7fe1f2f9aeb9 [ 395.126837][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.126851][ C1] RSP: 002b:00007fe1f3d79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.126868][ C1] RAX: ffffffffffffffda RBX: 00007fe1f3215fa0 RCX: 00007fe1f2f9aeb9 [ 395.126880][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 395.126891][ C1] RBP: 00007fe1f3008c1f R08: 0000000000000000 R09: 0000000000000000 [ 395.126902][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.126913][ C1] R13: 00007fe1f3216038 R14: 00007fe1f3215fa0 R15: 00007ffe7275e798 [ 395.126932][ C1] [ 395.127814][ T9756] netlink: 'syz.0.1121': attribute type 2 has an invalid length. [ 395.853944][ T9756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1121'.